Norvya DevelopersHealth intelligence for the software you already run
One engine serves every audience: a trainer gets training actions, a clinician gets a pre-visit brief and a ranked worklist, a health plan gets population insight. Every answer is limited to what each person chose to share with your organisation.
# 1. Exchange your client credentials for a token (about 15 minutes)
curl -s https://norvya.fly.dev/v1/oauth/token \
-d grant_type=client_credentials \
-d client_id=$NORVYA_CLIENT_ID \
-d client_secret=$NORVYA_CLIENT_SECRET \
-d scope="members.read"
# 2. List your members, then call your market's endpoints
curl -s https://norvya.fly.dev/v1/members \
-H "Authorization: Bearer $TOKEN"Where to start
Built for your market
A solution page answers “what can I build, and what do I need first?”. The reference answers “how does this call work?”.
Concierge doctors
Between-visit monitoring and a two-minute pre-visit brief for a small, high-touch panel.
Independent practices
Import the panel, get a ranked list of who needs attention and why, close care gaps.
Fitness chains
Trainer actions per member inside your own app, limited to what each member shares with you.
EMR vendors
One integration across all your practices: each practice approves you in Norvya and chooses what you may use, then you embed Norvya's clinical intelligence by API, as native cards, or as documents filed in the chart.
Federal (via primes)
CMS, VA, DoD and NIH programmes, delivered through a prime contractor's authorized environment: import the programme's panel, then report measures and pull FHIR Bulk exports (identified or Safe Harbor) into the prime's own environment.
State & local government
Medicaid population health, public-health reporting and state health-information-exchange feeds.
Insurers (incl. Medicaid managed care)
Care-gap identification and rising-risk members across covered lives.
Hospitals and health systems
Post-discharge follow-up run from your own care-management system: send your ADT feed, work the 30-day worklist, write back calls and visits, and read operational outcomes. Run hospital-at-home episodes with NEWS2 and escalation webhooks.
Practice management & billing
Appointments both ways so the brief is ready before each visit, billable care-management events for the biller to confirm, and Good Faith Estimates, inside the practice-management system the practice already uses.
Medical travel desks
Run international patients' journeys from your own coordination system: phases, flights, the care team, partner hospitals, home nursing under the letter of guarantee, and the documents the patient carries home, in the sponsor's language.
Pharmacies
Adherence, medication reviews, discharge follow-up, packing and delivery for your patients, and the admissions, family access, MAR, rounds and incident reporting for the assisted-living, group-home and nursing-home sites your pharmacy runs or serves.
Nursing homes & assisted living
For SNF / NF, assisted living and group home operators that run their own sites in Norvya: the census with each nursing-home resident's short or long stay, the MAR, rounds, medication incidents, incident and change-of-condition reports, care plans, admissions and family access, from your own EHR, eMAR or family portal.
Employers & occupational health
Run the GLP-1 benefit and wellness challenges from your benefits platform with no person in the report, and keep workers' occupational exams due and done with the practice that examines them.
Behavioral health practices
Measurement-based care and the collaborative-care registry inside your own practice system: scores, homework and CoCM month evidence, with psychotherapy notes never leaving Norvya.
Rehab & nutrition practices
PT, OT, speech therapy and dietitian practices: episodes, home programs, goals, IDDSI levels and outcome measures, or a dietitian's caseload, targets, meal rules, ADIME notes and MNT hours.
Older adults & caregiving programmes
Falls, function, medication burden, sleep apnoea and caregiver dyads for geriatric practices and dementia care programmes, plus child and pregnancy summaries for family practices.
Hospice agencies
Your census, each patient's benefit-period dates, the IDG reviews coming due and the visit schedule by discipline, inside your hospice EMR or scheduling tool, without Norvya ever estimating prognosis.
Med spas
Clearances before treatment, treatments and adverse events recorded from your booking system, re-treatment due dates, the aftercare photos members choose to share and the medical director's GLP-1 oversight roster.
Specialty care
For specialty practices and the EMR vendors that serve them: each specialty hub's results, the direct specialty checks and the stateless checks, under the patient's sharing switches, plus the questionnaires your practice may request.
Product families
Status comes from the catalog: Live is callable in production today; Built — gated is built and callable in your sandbox, and switched off in production until a key, agreement or vendor step (no production partner credential has been issued yet); Planned is not built yet.
Foundation
Clinical
Specialty practices
Life stages & aging
Data in
Population & programmes
Operations
Employers & fitness
Built for health data
What the platform does today, and what it does not hold. The full trust page
Consent decides what you see
Members choose section by section what your organisation may use. What they have not shared is never computed, and responses say what was held back.
Pseudonymous references
You never see Norvya's internal ids. A member_ref is stable for you and different for every other partner.
Hash-chained audit log
Every read of member data is written to a hash-chained audit log. If the log is unavailable, the read is refused rather than left unrecorded.
No health data in webhooks
Events are signed (HMAC-SHA256) and carry only a reference to fetch with your token.
BAA before PHI
A business associate agreement is required before protected health information is exchanged.
What we don't claim
Norvya holds no FedRAMP authorization and no ATO of its own. Federal work runs inside a prime contractor's authorized environment.
What changed
v1 only gets additive changes; breaking changes ship as /v2 with notice. Behaviour changes are flagged.
- 17 October 2026 Behaviour change
Care-site calls from an organisation that runs no sites: /v1/care-sites/* called by an organisation that is neither a pharmacy nor a care-facility operator now answers 409 not_a_care_site_operator (it answered not_a_pharmacy). /v1/pharmacy/* still answers not_a_pharmacy. The c… - 17 October 2026 Added
Care facilities run their own sites through the API: A care-facility operator (a nursing home, assisted living or group home organisation that runs its own sites in Norvya) can now hold every care_sites.* scope: GET /v1/care-sites and the census with each nursing-home resi… - 17 October 2026 Added
Hospice agencies: A hospice agency can read its census, one patient's hospice record (levels of care, the benefit period and the recertification and face-to-face dates computed from the dates its staff recorded), the IDG plan-of-care revi… - 17 October 2026 Added
Nursing homes as a care-site type: A pharmacy's sites can now be nursing homes: GET /v1/care-sites returns site_type nursing_home alongside assisted_living and group_home (site_types lists all three) and, for a nursing home, licensure_kind (snf | nf | snf…