Commonly asked questions from practices
Does Surely share the entire patient file?
No. Any files or notes marked as confidential or not to be shared in the patient portal will not be shared.
Can I still review each file before it's released and retract or redact anything I don't want shared to the patient?
Patients can ask GPs to comment on or review files before they're released. Practices are also able to ensure confidential information is not released, based on the settings within your PMS. If your practice specifically wants to review every request prior to release, this is something we can cover with you during your onboarding to Surely.
How secure is Surely?
Stored health data is deleted from our live systems automatically, on a set schedule, after a request is complete. Data is encrypted in transit and at rest, and hosted on Amazon Web Services (AWS) within the Australia/New Zealand region. Records are delivered via time-limited links rather than email attachments, access expires automatically after delivery, and key request events are logged with timestamps for an audit trail.
Which general practice systems does Surely integrate with?
Surely connects to the Practice Management Systems used by NZ general practices. We're actively expanding our integration coverage and can work with your team on specific practice requirements.
Is Surely a patient portal?
No, Surely is the secure channel through which patients exercise their right to access their health records. We keep health data only as long as a request needs it; we automate patient requests and reduce general practice administration.
Is Surely's consent legally sufficient?
Surely's consent is digital, logged, timestamped, and designed to meet the New Zealand Privacy Act 2020 and the Health Information Privacy Code 2020.
Does Surely require general practices to do anything differently?
Practices need to consent to Surely's data sharing agreement to become part of the Surely network. Surely then connects to the practice's existing Practice Management System. There's no new software for the practice to install or learn.
Can a patient withdraw consent later?
Yes, patients can request consent withdrawal at any time by contacting the Surely support team via our helpdesk or emailing hello@surely.nz.
What does Surely do with the data once a request is fulfilled?
Health data is deleted from our live systems automatically, on a set schedule, once a request is complete or can't be completed. Some encrypted backup copies are kept for longer. We keep a minimal audit record of each request for compliance purposes.
How much does it cost my practice to use Surely?
Nothing. Practices are never billed for integration, usage, or individual requests.
Does my practice get paid?
Surely is funded by the recipients of records. If a patient chooses to pass their records on, practices will receive an administration fee per completed request to ensure practice revenue is not impacted.
