surely.nz

What It Is

Surely is a New Zealand healthtech company offering a patient-led health record request platform. It lets patients or applicants review a request first, confirm who the data will be shared with and for what purpose, and provide digitally signed authorization. The platform then retrieves records from a general practice’s Practice Management System and securely delivers them to the patient or their designated third party, such as an insurance company.

Core Capabilities

The platform workflow covers patient-defined requests, scoped digital consent, clinic review, secure release, and delivery. For clinics, the main value is reducing the manual burden of verifying authorizations and handling record requests, while still retaining visibility and control over what is shared. For insurance underwriting teams, Surely provides role-based dashboards, bulk case processing, and a complete audit trail for each case. It claims that, once applicant consent is obtained, a manual follow-up process that previously took 2–6 weeks can be shortened to under 24 hours; some FAQ materials also mention automated retrieval within minutes.

Integrations, Compliance, and Security

Surely’s technical foundation is standardized FHIR integration with New Zealand general practice PMS systems. It also provides APIs and webhooks for service providers, enabling connections to CRMs, policy administration systems, or underwriting engines. On compliance, it explicitly aligns with the NZ Privacy Act 2020 and the Health Information Privacy Code 2020, and is marked as SOC 2 Type II Certified. Its security design includes encryption in transit, time-limited access links, tamper-proof timestamped audit records, and automatic permanent deletion of relevant data within a defined number of days after a request is completed.

Pricing and Service

The website does not disclose standard plans, service provider pricing, or payment methods, offering only Book a demo and email contact options. Notably, it states zero cost for general practices, which should help reduce adoption friction for clinics. For support, the site says it typically responds within one business day and can answer questions about pricing, integrations, and compliance.

Pros, Cons, and Who It’s For

Its strengths are a focused use case, a clear patient consent chain, solid compliance signals, and support for API, webhook, and FHIR integrations. The drawbacks are opaque pricing, no specific list of supported PMS products, and no public deployment model or developer documentation. It is best suited to New Zealand insurance underwriting teams, brokers, general practices, and service providers that need to quickly obtain health records with patient authorization.

Access from China and Alternatives

Availability from mainland China is unknown, and the product is clearly designed around New Zealand law, clinic systems, and health data workflows. Even if accessible, it may not be suitable for China’s medical data compliance environment. Domestic alternatives to watch include Winning Health Technology, B-Soft, and Yidu Tech in the medical IT or healthcare data platform space, though their business models are not exactly the same as Surely’s patient-authorized record request workflow.