SmileSiri for Epic
An Epic-connected app that records what was used on a patient and who walked through the door — scanning products, supplies and implants by barcode and RFID, and running check-in by QR code or, with consent, facial recognition.
Three jobs, one Epic connection
Features depend on how each healthcare organization configures the app — nothing is switched on by default.
Products, supplies and implants
Scan barcodes and RFID tags to capture GTIN, UDI, lot, serial and expiry, then record what was used against the right patient and procedure.
Patient check-in
Our check-in assistant — a humanoid robot or kiosk — identifies the patient by QR code, or by facial recognition only where the patient has given consent.
Write-back to Epic
Usage records flow back into the organization’s Epic system, so implant and supply documentation lands in the patient record rather than a side database.
Standard authorization, scoped access
SmileSiri authorizes through SMART on FHIR using OAuth 2.0. We receive only the data the organization grants, and we never see or store an Epic or patient-portal password.
| FHIR resource | Why the app reads it |
|---|---|
| Patient | Match a scan or check-in to the correct patient record. |
| Appointment / Encounter | Find the visit in progress and attach products to the right procedure. |
| Device / DeviceRequest | Match scanned implants and devices to the patient record. |
| Procedure | Associate recorded supply usage with the documented procedure. |
Access can be revoked at any time by the organization or the patient. Revoking stops further access; it does not remove records already written to the medical record.
Written down, not implied
- We do not sell data. No patient data, product usage data or biometric data is sold, rented, traded or shared with data brokers.
- Facial recognition is optional. It runs only on written consent, stores an encrypted template rather than photos, and QR or staff check-in is always available instead.
- Audit logs are kept for six years and biometric data is deleted within 30 days of a withdrawal request.
The rules that apply, market by market
Epic runs health systems across North America, Europe and Asia. SmileSiri is offered to organizations in these markets, each with its own data-protection framework. Specific commitments are agreed per organization in the governing agreement.
United States
HIPAA / HITECH
We act as a Business Associate and sign a Business Associate Agreement with each healthcare organization before handling protected health information.
Canada
PIPEDA and provincial health privacy law
Provincial regimes such as Ontario’s PHIPA govern personal health information; the organization remains the custodian and we act on its instructions.
Spain
GDPR and LOPDGDD
We act as processor under an Article 28 data processing agreement, with EU data residency available where the organization requires it.
India
DPDP Act 2023
We process personal data as a Data Processor on behalf of the healthcare organization acting as Data Fiduciary.
Singapore
PDPA
Our home jurisdiction. Verve Automation Singapore Pte. Ltd. is the contracting entity, and these Terms are governed by Singapore law.
Connecting SmileSiri to your Epic environment?
Tell us which workflows you want enabled and which market you operate in, and we will send the integration and data-processing paperwork.
Reach us