Named physician sign-off
Every Smart Report is reviewed and signed off by a named physician before release.
Run for 5,000 people - identically.
Measured longevity at workforce scale demands more than science. It demands an operating engine: wave delivery, hard-stop consent, physician governance, enterprise security and 100%-certified people.
~1,250
Per weekly wave
~280
Draws / day
100%
Certified operators
0
Red threshold · data incidents
Delivery at scale · the Wave Model
A repeatable engine, city to city.
Run by professionals, engineered for scale - a 50–100-person pilot, then weekly waves of ~1,250 at ~280 draws a day.
1
Pilot
A fully managed 50–100-person cohort proves fit, experience and delivery before you scale.
2
The camp & quality control
10–14 phlebotomy stations, a barcode double-scan on every draw, and a validated cold-chain. Any mismatch is a red threshold - work stops.
3
Weekly waves
Repeatable waves of ~1,250 people at ~280 draws/day, run identically across sites and shifts.
4
Fulfilment & reconciliation
Up to 5,000 personalised dispatches to the door, tracked on a reconciliation dashboard. Automate the repeatable; a human on every clinical decision.
Data, privacy & consent
Privacy isn't fine print. It's the architecture.
Consent first
No consent, no draw - a hard stop
- Informed consent precedes every single draw
- Special-category health data handled under DPDPA
- Least-access, encrypted, with defined retention
The boundary
Single-channel, aggregate-only to employers
- Results go to the individual on a single channel
- Result-suppression enforced contractually and technically
- Minimum-cohort suppression - no re-identification
Clinical governance & safety
Physician-reviewed - never "AI-diagnosed."
Completeness gate
Reports release only when the panel is complete and quality-checked - no partial results.
Same-day critical-value pathway
Critical findings trigger a defined, same-day escalation and triage pathway.
Technology organises and personalises; a clinician makes every clinical decision. Claims discipline: outcomes are measured trajectories, never guarantees.
Security & compliance · trust centre
Enterprise-grade, audited and accountable.
Health data is treated as the most sensitive category there is - protected end to end.
Encryption
Data encrypted in transit (TLS) and at rest, with managed keys.
Access controls
Least-privilege, role-based access with audit logging on sensitive data.
DPDPA alignment
Special-category handling, consent records and defined retention.
ISO 27001 · roadmap
Information-security management aligned to ISO 27001 (on roadmap).
SOC-2 · roadmap
Trust-services controls (security, availability, confidentiality) on roadmap.
Responsible disclosure
A clear path for researchers to report vulnerabilities, with a sub-processor register maintained.
DPDPA-aligned
ISO 27001 · roadmap
SOC-2 · roadmap
Sub-processor register
People & certification
No uncertified operator works a live wave.
Single-threaded ownership
Clear org and roles, with one accountable owner per wave - competence felt as calm.
100% certification gate
Every operator is certified before a live wave - 100%, every time, no exceptions.
The Academy
Ongoing training and recertification keep the standard high as the programme scales.
Start here
See the engine run - on your own people.
A managed pilot shows you the camp, the quality control and the privacy architecture in weeks.