Community tier
Some of the most demanding clinical work happens with the least funding behind it. Street medicine teams, small voluntary organisations, registered charities and unfunded community services deliver care to people no commissioned service reaches, usually with no IT budget at all.
For those services we provide a hosted, clinically configured OpenEMR instance at cost and, in specified situations, at no cost.
Community
For street medicine teams, charities, and small or unfunded voluntary services.
What it is
A hosted OpenEMR instance configured with you to your clinical workflows, clinical implementation advice from people who have run these systems in the field, and the same open-source guarantee as every other tier. Your data, your schema, fully portable, no lock-in.
What we ask in return
This is a working relationship, not a donation. Tell us what breaks, what is missing and what your service needs that the platform does not yet do, so that it goes back into the code base and reaches every other service using it. Where you can contribute directly, we will help you get your changes upstream.
How to access it
There is no application form and no online sign-up. Our directors agree access to the Community tier case by case, by direct discussion. Availability depends on our capacity at the time and on the specifics of your service, so we cannot guarantee it in advance. We would always rather have the conversation than not.
Tell us who you serve, where you work and what you are managing your records with today.
Goes directly to Maxine Radcliffe, our chief clinical officer.
The stack
OpenEMR: the clinical record layer
Patient records, coding, templates and interoperability, configured to your workflows.
Zulip for new deployments. We support Slack for existing healthcare customers where role-based access control integration is already in place.
Nextcloud for document, image and file storage within your governance boundary.
We contribute every improvement we build back to the open-source projects.
A system that keeps changing
Clinical and social care work does not hold still, and neither should the record that supports it. A form collecting the wrong thing, a pathway that has moved, a cohort nobody planned for: for us these are the normal business of running the system, not exceptions to it.
We treat configuration and workflow modification as ordinary, ongoing maintenance, and carry it out as we patch and upgrade the platform, and as your teams tell us something needs to be different. Where a change calls for substantial new engineering, we scope it with you and are straight about what it takes and what it costs. What we will not do is make you wait on a release cycle to fix something that is getting in the way of care.
What every tier includes
- OpenEMR deployment and configuration, clinically led
- Ongoing configuration and workflow modification as clinical needs change, as standard
- Clinical safety governance under DCB0129, with clinical risk assessment and sign-off by a named clinical safety officer
- Cyber Essentials certified, the UK government-backed security baseline
- Annual independent penetration testing by a CREST-accredited provider, across every system we operate
- UK or EU cloud hosting, with data residency in your jurisdiction
- SNOMED CT and LOINC coding, HL7 FHIR R4 API
- GDPR-compliant data processing, with a data processing agreement included
- Automated patch management and web application firewall
- Role-based access control with full audit trail
- Multi-factor authentication, encryption at rest and in transit (AES-256, TLS 1.3)
- Regular backups with tested restoration
- Onboarding and go-live support
We set support coverage, recovery objectives and assurance testing scope against your service, and confirm them in the service agreement.
Tiers
Each tier describes how we deliver and the kind of service it is designed for. Tell us about yours and we will advise on the right scope.
We work across the United Kingdom and the European Union. We consider other jurisdictions case by case, most often through the Community tier.
Community
For street medicine teams, charities, and small or unfunded voluntary services.
- Hosted, clinically configured OpenEMR instance
- At cost, or at no cost in specified situations
- Clinical implementation advice
- Our directors agree access case by case, by direct discussion
Essential
For inclusion health providers, individual practitioners, community health teams and third-sector organisations.
- Single OpenEMR instance, fully managed
- Business hours support
- Business continuity and disaster recovery plan with a defined recovery objective
Professional
For primary care practices and networks in the UK and Ireland.
- Everything in Essential
- Extended support hours, including weekends
- Security information and event management (SIEM) infrastructure
- Patient index alignment to national identifiers
- Shortened recovery objective
Enterprise
For regionally and nationally commissioned providers operating across multiple sites or commissioning boundaries.
- Everything in Professional
- Up to eight OpenEMR instances under one agreement
- 24/7 Priority 1 support
- Named technical account manager
- Priority recovery objective
Sovereign
For humanitarian response, national programmes and sovereign deployments.
- Everything in Enterprise
- Unlimited instances
- 24/7/365 Priority 1 incident response under the shortest service level we offer
- Embedded technical and clinical delivery team
- Offline and air-gapped deployment options
In development
We are building privacy-focused AI capability into the platform across several areas of clinical workflow, including voice-to-text documentation, and developing integrations alongside it. This work is in progress rather than generally available, and we are straight with clients about what is shipped and what is coming.
Our position on how it is built is settled. AI in clinical settings must be local, private and auditable. No data leaves your infrastructure. No proprietary black boxes in clinical decision support. We are developing this in partnership with vendors who share our commitment to open source and digital sovereignty. Open source is not optional when public health is at stake.
Trust and compliance
Cyber Essentials certified
Clinical risk assessment and sign-off by a named clinical safety officer.
Annual testing by a CREST-accredited provider across every system we operate. Results available under non-disclosure agreement for due diligence purposes.
data processing agreement included in every service contract. Data residency within the contracted jurisdiction.
Conducting a due diligence review? Tell us what you need.