Employers & occupational health

Families you'll use

Family	Fit	Status
Employers & occupational health	Core	Built — gated
Events (webhooks)	Core	Built — gated
Enrolment & messaging	Useful	Built — gated

Scopes to request

Ask only for what your product uses.

Scope	Allows
`members.read`	List the organisation's linked members as opaque member references.
`employer.programs.read`	Read your GLP-1 programme set-up (enrolment code, the enrolled count) and its aggregate report: persistence, weight and HbA1c change, engagement, your own drug-cost arithmetic and recognition counts, every number suppressed below the minimum group size; never a person (employers only).
`employer.programs.write`	Create or update your GLP-1 programme (name, start date, your drug cost per member month, active) and regenerate its enrolment code; employees join only in the app, with their own consent (employers only).
`employer.challenges.read`	Read your sponsor recognition challenges, the allow-listed catalog and each challenge's suppressed group counts (joined, completed, completions per week) (employers only).
`employer.challenges.write`	Create or update a recognition challenge for your programme's members: a participation or activity item from the allow-listed catalog, a 7 to 92 day window, a badge only (no cash, no health-outcome targets) (employers only).
`occupational.read`	Read your occupational-health roster, the exam programmes, each worker's released exam conclusions (determination, restrictions, follow-up, due dates; never findings or the worker's answers), next-due dates and injury reports for your own log (employers only).
`occupational.write`	Add workers to your occupational-health roster and request an exam from a practice you hold a service agreement with (employers only).
`occupational.injuries.write`	Record a work injury report for an employer you examine for under an active service agreement; the employer sees only the classification inputs, never the description (treating practices only).
`staff_wellbeing.read`	Read your own staff's combined burnout check-in results: participation, bands and scores, only once enough people answered; never who answered or who did not (employers and treating practices).
`members.invite`	Invite people to join your organisation on Norvya (Norvya emails its own invitation in the person's language; never a pre-granted consent: the person chooses what to share in the app) and create printable join codes; follow each invitation to joined. Daily cap, de-duplicated per address, and the answer never says whether an address has an account.
`messages.write`	Send a member a secure in-app message from your organisation (the conversation your staff use in Norvya); Norvya notifies them with its own generic wording, never your text. Members who turned messages off are refused.
`messages.read`	Read your organisation's in-app conversation with a member, including their replies (audited as a disclosure).
`webhooks.manage`	Register HTTPS webhook endpoints (payloads carry no PHI). Each event also needs its own scope: worklist / attention events clinical.panel.read, import events panel.import.write, population.export_completed population.export (medical practices only), member.at_risk fitness.roster.read, public_health.iis_ack_received public_health.immunizations.read, public_health.case_report_response public_health.case_reports.read. claims.import_completed needs claims.import.write (medical practices only). member.account_claimed needs members.claim_invite (medical practices only). hospital_at_home.escalation needs hospital_at_home.read (hospitals only). hospice.idg_review_due needs hospice.read (hospice agencies only). pharmacy.refill_due and pharmacy.discharge_episode_opened need pharmacy.patients.read; care_site.change_of_condition, care_site.incident_recorded and care_site.mar_exception need care_sites.read (pharmacies and care-facility operators, their own sites). travel.journey_updated and travel.leg_status_changed need travel.journeys.read, travel.nursing_visit_recorded travel.nursing.read, travel.invoice_issued travel.billing.read (medical-travel desks only). travel.inquiry_updated needs travel.inquiries.read, travel.journey_message_posted travel.messages.read (medical-travel desks only). instrument.batch_dispatched needs instruments.request (medical practices only). roster.enrolment_summary needs members.roster.read (medical practices only). older_adults.falls_tier_raised needs older_adults.read (medical practices only). employer.challenge_completed needs employer.challenges.read and occupational.exam_due occupational.read (employers only); medspa.adverse_event_reported needs medspa.aftercare.read (treating practices only). rehab.goal_met needs rehab.read; nutrition.caseload_flagged needs nutrition.read (medical practices only). cocm.review_due needs behavioral.read (medical practices only). derm.lesion_recheck_due and derm.patch_test_read_recorded need derm.read (medical practices only).

Before production

Gate: Group figures are small-cell suppressed; the examining practice signs its own agreement and holds occupational.injuries.write.

Sandbox

Build and test against synthetic members before you touch real data. A employer sandbox. What a sandbox holds, its credentials, limits, resets and expiry are in the Sandbox guide. To request one, write to [email protected] with your organisation and market.

Every endpoint for this market

The families this solution uses, filtered to the scopes it requests. Each link opens the endpoint on its family page.

Platform Built — gated3

Enrolment & messaging Built — gated12

Events (webhooks) Built — gated5

GET/v1/webhooks
POST/v1/webhooks
DELETE/v1/webhooks/{webhook_id}
GET/v1/webhooks/{webhook_id}/deliveries
POST/v1/webhooks/{webhook_id}/enable

Families you'll use

Scopes to request

Before production

Sandbox

Every endpoint for this market

Platform Built — gated3

Enrolment & messaging Built — gated12

Events (webhooks) Built — gated5

Employers & occupational health Built — gated21