About NoriClinic

The decisions the product is built on.

This page isn’t a company story. It’s the hard decisions we made while building, and the reason behind each — because that’s what you can judge a system that will hold your patients’ data by.

We decided from the start that this isn’t booking software.

A clinic has appointments, records, a team and money. What’s missing is something that ties them together and moves the day along by itself. That decision shaped everything after it — including things we said no to, knowing they would sell faster.

Four decisions, and why

WhatsApp from the clinic’s number, not a Meta business account

The official route is for the clinic to open a verified business account with Meta. We tried to picture a doctor doing that before even seeing the product — and knew we’d lose them at that step. So we built a bridge that links to the clinic’s own number, scanned once, with no verification and no business account.

Research dates by month, not by day

In research cohort exports, dates are cut to the month. The exact day of a visit — alongside age and diagnosis — can identify one person, even in a clinic with thousands. The full date appears only in an identifiable export, which is a separate decision behind a separate permission.

Four roles, not a permissions screen

It would have been easier to build a screen where each clinic assembles its own permissions. We refused: it would mean every clinic designing its own security, and most would design it wrong. Four fixed roles, and on top of them a grant or a block for one named person when you need it — and the admin role itself can’t be handed out piecemeal.

“Sees patients?” is recorded, not guessed

At first we inferred whether the admin sees patients from the appointment data. That inference turned out wrong on a real clinic, because all its appointments were recorded without a doctor set on them. It’s now a field recorded explicitly — because an inference that decides what someone sees in a patient’s record isn’t an acceptable one.

And one standard we hold to

We don’t say anything you can’t check. No certifications we don’t hold, no unsourced numbers, no customer reviews we wrote ourselves. And if a question’s answer hasn’t been settled yet — like the cancellation and data-retention policy — we say it hasn’t, instead of writing something comforting in its place.

What we can say about security, and what we won’t

Want to try it on your clinic?

Accounts are opened one at a time. Leave your details and we’ll get back to you to set the clinic up with you.