Norvya Developers
Get a sandbox
Solution

Older adults & caregiving programmes

Built, gated: callable in your sandbox; production once your agreement is signed. 40 endpoints across 7 families

Falls, function, medication burden, sleep apnoea and caregiver dyads for geriatric practices and dementia care programmes, plus child and pregnancy summaries for family practices.

Credential model
OAuth 2.0 client credentials for your organisation. Authentication
Before production
Treating practices with a BAA; Katz / Lawton only where the deployment holds the licence.
Sandbox
A practice sandbox.

Families you'll use

FamilyFitStatus
Enrolment & messagingCoreBuilt — gated
Events (webhooks)CoreBuilt — gated
Older adultsCoreBuilt — gated
Clinical intelligenceUsefulBuilt — gated
Hospital at home, days at home & woundsUsefulBuilt — gated
Life stagesUsefulBuilt — gated

Scopes to request

Ask only for what your product uses.

ScopeAllows
members.readList the organisation's linked members as opaque member references.
older_adults.readRead an older patient's falls risk tier (CDC STEADI) and falls-prevention programmes, physical function (Katz ADL / Lawton IADL only where this deployment holds the licence and the patient completed them), medication burden for medication review (count, anticholinergic burden, sedatives; never advice), your care dyads (caregiver link and consent status, never the caregiver's contact details), the sleep-apnoea pathway and CPAP adherence (an unlogged night is unknown, not missed), the status of the five fillable dementia risk factors (never a risk score) and the hospice review status (never an eligibility answer); each under the patient's sharing choices (treating practices only).
older_adults.writeLog a contact with one of your care dyads (navigator check-in, care-plan review, education, support line, respite arranged, referral), attributed to a named member of your staff; no free text (treating practices only).
life_stages.readRead what a parent or guardian shared with your practice about their child (the well-child and vaccine schedule, growth measurements with WHO / CDC percentiles, EPSDT screening status, never adolescent screening answers) and a patient's own pregnancy or postpartum summary; the newborn record and milestone checklists are never shared with an organisation (treating practices only).
instruments.requestAsk a patient to complete a validated questionnaire from Norvya's instrument library; Norvya sends its own generic notification (treating practices only).
instruments.readRead questionnaire scores (total, severity band, subscales) with the instrument version and completion time, never item-level answers; mental-health instruments only when the patient shares mental health with you (treating practices only).
hospital.days_at_home.readRead a patient's observed days at home from recorded care events, only inside a recorded ascertainment period (no period, no number) (hospitals only, with a BAA on file; the patient must share their medical history with you).
members.inviteInvite people to join your organisation on Norvya (Norvya emails its own invitation in the person's language; never a pre-granted consent: the person chooses what to share in the app) and create printable join codes; follow each invitation to joined. Daily cap, de-duplicated per address, and the answer never says whether an address has an account.
messages.writeSend a member a secure in-app message from your organisation (the conversation your staff use in Norvya); Norvya notifies them with its own generic wording, never your text. Members who turned messages off are refused.
messages.readRead your organisation's in-app conversation with a member, including their replies (audited as a disclosure).
members.roster.writeUpload a roster of your eligible members (CSV / NDJSON, or a CMS eligibility / attribution file), review its dry run, then have Norvya invite them in bulk (its own email in each person's language; daily cap, queued not dropped), send reminders and collect phone-only join links. MBIs never stored raw (medical practices / programmes with a BAA only).
members.roster.readRead your rosters and their enrolment report: invited, opened, joined, expired, revoked and declined as small-cell-suppressed counts by cohort, plus the status of each of your roster rows (medical practices / programmes only).
webhooks.manageRegister HTTPS webhook endpoints (payloads carry no PHI). Each event also needs its own scope: worklist / attention events clinical.panel.read, import events panel.import.write, population.export_completed population.export (medical practices only), member.at_risk fitness.roster.read, public_health.iis_ack_received public_health.immunizations.read, public_health.case_report_response public_health.case_reports.read. claims.import_completed needs claims.import.write (medical practices only). member.account_claimed needs members.claim_invite (medical practices only). hospital_at_home.escalation needs hospital_at_home.read (hospitals only). hospice.idg_review_due needs hospice.read (hospice agencies only). pharmacy.refill_due and pharmacy.discharge_episode_opened need pharmacy.patients.read; care_site.change_of_condition, care_site.incident_recorded and care_site.mar_exception need care_sites.read (pharmacies and care-facility operators, their own sites). travel.journey_updated and travel.leg_status_changed need travel.journeys.read, travel.nursing_visit_recorded travel.nursing.read, travel.invoice_issued travel.billing.read (medical-travel desks only). travel.inquiry_updated needs travel.inquiries.read, travel.journey_message_posted travel.messages.read (medical-travel desks only). instrument.batch_dispatched needs instruments.request (medical practices only). roster.enrolment_summary needs members.roster.read (medical practices only). older_adults.falls_tier_raised needs older_adults.read (medical practices only). employer.challenge_completed needs employer.challenges.read and occupational.exam_due occupational.read (employers only); medspa.adverse_event_reported needs medspa.aftercare.read (treating practices only). rehab.goal_met needs rehab.read; nutrition.caseload_flagged needs nutrition.read (medical practices only). cocm.review_due needs behavioral.read (medical practices only). derm.lesion_recheck_due and derm.patch_test_read_recorded need derm.read (medical practices only).

Before production

Gate: Treating practices with a BAA; Katz / Lawton only where the deployment holds the licence.

Sandbox

Build and test against synthetic members before you touch real data. A practice sandbox. What a sandbox holds, its credentials, limits, resets and expiry are in the Sandbox guide. To request one, write to [email protected] with your organisation and market.

Every endpoint for this market

The families this solution uses, filtered to the scopes it requests. Each link opens the endpoint on its family page.

Platform Built — gated3

Enrolment & messaging Built — gated12

Events (webhooks) Built — gated5

Clinical intelligence Built — gated7

Hospital at home, days at home & wounds Built — gated1

Older adults Built — gated8

Life stages Built — gated4

↑ ↓ to moveEnter to open