How do you handle patient data?
As the constraint the whole design is built around rather than a checklist at the end. Access is by role and by relationship to the patient, every read and write is logged in a form that can be produced later, data is encrypted in transit and at rest, and test environments never carry real records. Where a requirement makes a feature impossible, that is said during design rather than discovered during an audit.
Can it talk to the clinical systems we already run?
That is usually the bulk of the work. Practice management systems, laboratory systems and scheduling all tend to have an integration route, whether a modern API or an older HL7 or file-based one. We build the interface layer so those connections sit in one place, which is what keeps a supplier’s upgrade from becoming your outage.
Who is responsible if the system is down during a clinic?
It is agreed in writing before it matters, along with what happens in the meantime. Clinical software needs a defined degraded mode: what staff do, what is captured on paper, and how it is reconciled afterwards. Systems designed as though downtime cannot happen are the ones that cause the most harm when it does.
Do you work with smaller practices or only hospitals?
Both, and the work differs more in scale than in kind. A single practice has the same obligations around records and consent as a large provider, with less staff time to spend on them, which usually means the right answer is simpler software and more automation of the routine parts rather than a smaller version of an enterprise system.
Our record supplier charges for an interface. Is that normal?
It is common, and it is the item that most often breaks a budget late. Plenty of clinical suppliers treat the interface as a licensed product with its own fee, its own lead time and its own queue, and the quote tends to arrive after your project already has a date. So we ask in the first fortnight: what does the supplier charge, what will they support, how long is their queue, and who at the supplier has to approve it. If the answer is that they will not open the system at all, you need to know that before design starts rather than after. Occasionally the honest conclusion is that the interface is not worth its price and a different route serves the same clinical need.
Do you use real patient data to test?
No. Test and development environments carry manufactured or de-identified data, and there is no route by which a live record reaches a laptop. The cost of that is worth naming, because manufactured data does not contain the strange records that break software, so the awkward cases have to be described by clinical staff and built deliberately rather than found by accident. Where a fault can genuinely only be reproduced against live data, that happens in the live environment, by a named person, with the access logged and time limited. Anyone who offers to take a copy of the database home to work on is telling you something important about how they work everywhere else.
Can you build something that suggests a diagnosis or a dose?
Not casually. Software that makes or supports a clinical decision sits in a different category with its own regulatory expectations, and it needs clinical ownership, a documented safety case, a hazard assessment and a named clinician accountable for what it outputs. We are glad to build in that setting, working with whoever holds clinical governance for your organisation. What we will not do is add a suggestion feature to a general system because it demonstrates well, since the risk of that lands on a clinician who assumes somebody checked the number. If what you actually want is a prompt that surfaces information the clinician already relies on, that is usually a safer and cheaper answer to the same problem.
Where is the data kept, and what happens if we stop working with you?
Hosting is decided before the build rather than migrated afterwards, and for most providers here that means records staying in country. The question worth asking any supplier, though, is the exit one. The data is yours and comes out in a documented format rather than a proprietary export, the schema is written down, the code sits in a repository your organisation owns, and the hosting and third-party accounts are in your name rather than ours. We would rather set that out at the start than have you find it during a handover. A clinical supplier who cannot describe a clean exit is relying on the exit being difficult, and that shows up in every other conversation you have with them.