Before a pilot
Who holds release, who signs, what the clinic can show — answers for owners, medical directors, and procurement. Pricing, connections, and questionnaires settle with the clinic.
Private pilot with a Singapore health-screening provider.
Hosted in Singapore; named exceptions go to the clinic’s DPO. Clinic owns patient records and clinical content; Riverr processes that data under a Singapore PDPA posture agreed with the DPO.
Clinic owns patient records and clinical content. Riverr owns the platform, software, and related IP. Using Riverr does not transfer clinic or patient data ownership.
Release layer, named-doctor sign-off, and what Riverr Flow never invents.
Automated release layer for health-screening reports. When the set is complete, the clinic template assembles; a named doctor signs — patients get the signed report; employers see aggregates only.
Admin above Care Studio — packages and sign-in; never review or release. Continue opens Talk to Riverr. No public host yet.
Care Studio runs queue, hold, review, and release. Clinic Console sits above it for packages and sign-in — it never releases.
No public host yet. Continue opens Talk to Riverr.
No. It copies laboratory flags and doctor decisions. It does not diagnose, triage, or compute a clinical status.
Complete set in — Care Studio assembles the clinic’s template. Named doctor reads and signs; SPECIMEN until then. Source locks before release; critical leaves the automatic path.
SPECIMEN on every page until a named doctor signs. An unsigned copy cannot pass as signed. After sign-off, the signature binds to the reviewed document.
Source locks before release. If a result changes afterwards, the signed document stays; the change surfaces for separate review — never merged silently into what already left.
Assembles when the set is complete. Held cases stay visible — they are not hidden.
Reports ship in the clinic’s own template. Patient and employer surfaces follow that identity. White-labelling and custom domains settle under contract.
Employers see aggregates only. Under-ten suppresses (k≥10). Employer-group membership never authorises an individual’s clinical result.
Only a named, registered doctor releases. Source locks; critical leaves the automatic path. No clinical status computed. FDA, CE, SaMD, “clinically validated” — not claimed; see Trust.
The clinic. Holds and risk tiers are clinic-configured and signed — not Riverr clinical rules. Critical leaves the automatic path under the clinic’s protocol.
Care Studio: queue, review, release. My Health: patient copy. Workforce Health: aggregates. Clinic Console: packages and sign-in — not review, not release. Each door has its own sign-in.
It marks an unsigned page. After a named doctor signs, the watermark leaves and the signature binds to that reviewed copy.
Reports issue in English. Simplified Chinese stays off until the medical director signs a Chinese content set — not a toggle.
Release evidence binds reviewed copy, signature, and signed copy — append-only audit posture. Ask for the trust answer sheet in questionnaires.
Inside Care Studio: templates, packages, and content sign-off bound to a named responsible doctor. Released documents use the clinic’s layout and wording.
Composer builds a workforce report — sections, theme within guardrails, privacy check, publish. Numbers stay signed from the screening pipeline — not edited in the studio.
Scribe drafts commentary on the screening report. A named doctor accepts, edits, or refuses before release. Laboratory flags and doctor decisions stay the clinical source.
Singapore hosting, certs refused, portability of what was released.
Hosted in Singapore; named exceptions go to the clinic’s DPO. Clinic owns patient records; Riverr processes that data. Roles and the DPA settle in contracting.
No — not “PDPA certified,” not SOC 2 or HITRUST. Security evidence is in questionnaires and contracting. Sub-processors are named there — not on this page.
FHIR R4 export of released reports is in the product — consent and release checks at download. Not “certified FHIR.” Receiving systems and export acceptance are named in the pilot.
Private pilot path — connections named in the checklist.
Private pilot is the path. Scope and terms settle before go-live — Talk to Riverr.
Connections are named in the pilot checklist. No public supplier catalogue.
Pricing and pilot terms settle with the clinic.
Pricing settles with the clinic. Private pilot with guided go-live is the path to first use. Sold by Riverr Pte Ltd.
Four-month sponsored path for Singapore organisations — detail confirmed in writing per organisation.
Four-month sponsored pilot with credits for the pilot period. Commercial detail confirms in writing per organisation.
One to two months is the go-live window. The pilot plan sets the calendar — not a public SLA.
Credits cover the four-month sponsored pilot. What they apply to, and options after, are set in writing per organisation.