Ambient consult scribing, speaker-checked transcripts and FHIR AU Core records for Australian clinics. A clinician confirms who said what, patients consent first, and records are kept only as long as the law requires. Built to run alongside your existing EHR, not replace it. Pre-pilot: we are onboarding our first clinics now.
Compliance and clinical utility, without asking a clinic to hand over raw patient data to a third party.
Hash-verified API-key auth, Fernet-encrypted secrets, an immutable Postgres audit trigger — not just a policy statement. A patient's record doesn't depend on a clinic trusting a policy PDF.
Aligned to HL7's AU Core Implementation Guide v2.0.0 — so a GP's system and a specialist's system can exchange structured patient data, not another fax.
De-identified and coded audit records for every clinical operation, written to durable storage — not an in-memory list lost on restart.
MCP tool exposure for agents, a REST API for EHR systems — a clinic keeps the system its staff already know.
Record a consultation, get a transcript labelled as an unverified draft, and keep it as a clinical record. A clinician confirms who said what.
Recording needs the patient's consent for that purpose, checked by exact consent type before any audio is processed. Each clinic switches the feature on only after its own readiness checks pass.
Staff record on a phone. Audio goes to a transcription service under a signed identity, with a receipt written before the send. Live and tested with synthetic speech in production.
Speakers are separated into anonymous labels per recording, and the clinician confirms which is the patient, clinician or specialist. No voice is ever matched to a person. Built; going live next.
Confirmed transcripts are retained for the regional minimum (Australia: seven years, longer for minors), encrypted, and purged on a schedule unless a legal hold applies. The clinic can extend retention, never shorten it.
Transcripts file to the clinic's FHIR records (Medplum). Live in production, tested with a synthetic document.
Invite-only. A clinic redeems its invite, reviews the consent wording, sets retention, and sees exactly what is still missing before it can turn scribing on.
Where we are: pre-pilot, tested on synthetic data only. No real patient audio has been processed. Clinic staff sign-in is still being connected, so no clinic can switch scribing on yet. Draft notes generated from transcripts and sending to specialists come after the pilot. The patient consent wording is with privacy counsel.
No clinic is live yet and no real patient audio has been processed. Everything marked live has been tested with synthetic data only. Last reviewed 2026-10-19.
FHIR validation, clinical language processing, drug-interaction checks and consent checks behind one secure API. Tested with synthetic Australian patient data.
Staff sign in once; clinic pipeline, patients, consents, retention and onboarding readiness in one place.
Consent-checked recording, signed transcription requests and a receipt written before any audio leaves. Verified with synthetic speech.
Speakers are separated into anonymous labels and a clinician confirms who is who. Built and tested; going live next.
Confirmed transcripts file to the clinic's FHIR records (DanMed, built on Medplum). Verified with a synthetic document.
Invite-only. Each clinic reviews consent wording, sets retention and sees exactly what is still missing before it can switch scribing on.
A hosted OpenEMR environment for invited clinics, alongside the clinic's existing system.
Needs a signed agreement, the consent wording reviewed by privacy counsel, and clinic staff sign-in connected. Until then no clinic can switch scribing on.
Clinician-reviewed draft notes, and sending to specialists, after the first clinic has used transcripts safely.
My Health Record and Healthcare Identifiers need government registrations. Not connected today.
Fee quotes are built. Lodging claims is not, and needs registration first.
Australia comes first. A region marked pilot is being prepared; it does not mean clinics are live there.
Pilot. Being prepared for a first pilot. First market. Preparing the first pilot clinic. Clinics live: 0.
Pilot. Being prepared for a first pilot. Research and provincial registries. No launch plan yet. Clinics live: 0.
Discovery. Research and simulation only. No clinics and no real patient data. Research only. Clinics live: 0.
Pilot. Being prepared for a first pilot. Research and country registries. No launch plan yet. Clinics live: 0.
Discovery. Research and simulation only. No clinics and no real patient data. Research only. Clinics live: 0.
Pilot. Being prepared for a first pilot. Launch plan written. Not started. Clinics live: 0.
Pilot. Being prepared for a first pilot. Playbook outline only. Targeting 2027. Clinics live: 0.
Full machine-readable version: /api/v1/medical/roadmap.
Every row below runs through one API today (POST /api/v1/capabilities/{capability}/invoke) in a demo-safe simulation tier — zero external partner credentials required, synthetic Australian patient data only. No real clinic has real patient data in this system yet. Turning a simulation into a live vendor integration is a configuration change (credentials), not a rebuild.
Built & real today. Live FHIR Appointment calls against the hosted OpenEMR instance — the only capability below with a working real-vendor tier already.
Demoable now (simulation). A real Infermedica integration is built and credential-gated — flip an env var, no redeploy — pending activation. Gated behind a clinician-approval check before any recommendation can be acted on.
Demoable now (simulation). A real HealthLink secure-messaging integration exists as a stub, pending a business partnership.
Demoable now (simulation). Modeled on the RubiconMD pattern. No real tier yet by design — that requires recruiting a licensed AU specialist network, not writing more software.
Demoable now (simulation), shaped as an Annalise.ai stand-in. A real Annalise.ai integration is a stub pending commercial/TGA verification. Same clinician-approval gate as AI triage.
Demoable now (simulation). A real integration against the AU eRequesting IG (Magentus/Telstra Health rails) exists as a stub, pending that vendor partnership.
Demoable now (simulation) — the real HL7 CDS Hooks order-dispatch request/response contract, with rule-based candidate ranking standing in for CQL. Real CQL execution needs a JVM-based execution service we haven't stood up yet.
The dashboard gives clinical staff a full view into every tool — audit trail included.