September 2026: Share a result with any doctor, by link
The headline this month is shareable result links: a patient can now show their results to any doctor, whether or not that doctor has ever heard of us.
Share a result with any doctor, by link
Sharing a result used to require the recipient to already be an organisation on the platform. That works for a clinic you found through us, and not at all for the GP you have seen for fifteen years.
From Shared results, Share now offers two paths: share with a clinic (the existing flow, unchanged) or create a link. A link gives the recipient a clean, read-only page with no account and no sign-up.
- Pick exactly what to share, biomarker by biomarker.
- A link plus a 6-character access code, so the two can travel separately.
- Any expiry from 1 to 30 days. There is no "forever" option.
- Revoke whenever you like, including for someone who has the page open.
- Decide what identifies you. Name, date of birth and sex are three separate choices.
- Email it, with the access code included only if you tick the box.
Your Shared results page keeps the history: every link, its access code, who it was emailed to, and every attempt to open it. If somebody guesses repeatedly at a code, the link locks itself and then disables itself permanently, and we email you when it happens.
Deleting a result you uploaded also kills any links to it.
Add and edit clients
You can now add a client and correct their details from the Clients section, instead of waiting for them to arrive through an order. Both sit behind the existing Edit clients permission, which you manage through Roles & Permissions.
For developers
A busy month for integrations. The full detail, field by field, is in the API changelog.
Manage webhooks over the API
You can now create, list, update and delete webhooks with /v1/webhooks,
and list the events you can subscribe to with GET /v1/webhook-events, so an
integration no longer needs someone to set its webhooks up in the portal. Webhooks
created either way are the same webhooks. Saving one is also checked now, in the
portal and over the API: the URL must use https and must not point at a private
address, and an event can be sent to a given URL by only one of your webhooks, so
nothing is delivered twice. And when a webhook is created, re-pointed or deleted
over the API, your owners and webhook managers get an email saying so. See
Webhooks.