For screening clinics
Automated release layer for clinical reports.
Health-screening reports in your clinic’s template — complete set, named doctor.
Your template assembles when the result set is complete. A named doctor signs. Patients get the signed report; employers see aggregates only.
Not a medical device. It copies laboratory flags and doctor decisions. It does not diagnose, triage, or compute a clinical status.
Sign in
Sign-in opens after onboarding. Before that: Talk to Riverr — or an invitation your clinic already sent.
Opens the selected door after onboarding. Only clinic-named accounts sign in. Or walk the flow first.
The clinic stays in charge.
Assemble it automatically
When the set is complete, Riverr Flow composes the clinic’s template — cover, wording and cut-offs from the clinic library. No re-keying of the laboratory printout.
Prove what you released
A named doctor signs before release. The source locks. Unsigned pages carry SPECIMEN. Incomplete test, invalid range, mismatched code, or critical result — hold.
Protect the people in the data
Critical results leave the automatic path. Employers see aggregates only; groups under ten are suppressed. Messages go under the clinic’s name.
AI drafts. A named doctor releases.
Scribe drafts commentary. The doctor accepts, edits, or refuses before release — see For clinics and the FAQ.
Who signs in. What employers never see.
Singapore hosting, separate portals, named-doctor release — Non-SaMD and residency on this page.
Who can sign in?
Only accounts the clinic named at onboarding. Anyone else is turned away. Staff use Google; patients use the invitation link.
How do patients get their report?
Released copy lives in My Health — opened from the invitation link. Email and SMS follow the clinic’s release path; invitation lifetime is set in the pilot.
Can an employer see one employee’s results?
No. Workforce Health shows aggregates only. Any group smaller than ten people is hidden (k≥10), enforced so a small cell cannot describe an individual.
Is a released report sealed?
The source is locked before release. A later change surfaces for separate review — never a silent rewrite of a released document.
Where does data sit, and what about PDPA?
Hosted in Singapore; named exceptions go to the clinic’s DPO. Clinic owns patient records and clinical content; Riverr processes that data under a Singapore PDPA posture agreed with the DPO.
Is Riverr Flow a medical device?
No. It does not diagnose, triage, or compute a clinical status. It copies laboratory flags and doctor decisions into the clinic’s own report.
Who sets up a clinic?
Riverr configures packages and sign-in with the clinic at onboarding. Clinic Console is admin above Care Studio. Until that host publishes, onboarding runs with Riverr.
Walkthrough below uses a demonstration clinic — example people and results only.
Walk the flow first
Fictional demo data — Tembusu Health
Patient or corporate track on a demonstration clinic. People and results are fictional (Tembusu Health).