← index / flows c — edge & lifecycle
Flows C — Prior-auth · Newborn · Incident
Edge-case + lifecycle flows that make or break trust: appeals, new life, breach response.
① Prior-authorization appeal — denied → resolved
Cross-surface flow: doctor, CIE, insurer, patient. Transparency end-to-end.
01
Order → denial
insurer rejects
MRI lumbar · #PA-8472
DENIED · Daman
Reason: <6wk conservative tx
CIE: guideline concordance · borderline
Denial surfaces in doctor's inbox within 4h. Reason is structured (ICD + policy code), not free-text.
→
02
Auto-draft appeal
CIE assists
Appeal · draft
Pt failed 8wk PT, has red-flag (saddle anaesthesia). Citing MOHAP §4.3 emergency imaging criteria…
Attach · PT notes, neuro exam
◉ Send · Daman clinical
CIE drafts with patient's actual twin data + guideline citations. Doctor edits, signs, sends — 90 seconds.
→
03
Insurer review
medical director
Daman · MD review
Case #PA-8472 · appeal
CIE twin: pre-shared · read-only
SLA · 48h
◉ APPROVED · 14:22
Insurer MD sees the same twin the doctor saw — no re-fax, no re-upload. Decision written back in under SLA.
→
04
Patient · told clearly
one message
Your MRI is approved
Aisha — Daman reconsidered and approved your MRI. Book below; we'll handle the billing directly.
Book · today
Patient never sees the appeal mechanics. Just a clear outcome, in plain language, with a next step.
② Newborn enrolment — MOHAP newborn screening
A new member begins at birth. Consent by parent, scoped to guardianship.
01
Birth notification
from hospital ADT
Baby Al Mansouri · M
Born · 14 Apr · 03:12
Mediclinic City · NICU: no
Mother: Aisha (member)
ADT feed triggers enrolment offer. Nothing happens without parental action; the record exists but is gated.
→
02
Parent consent
guardianship
Add your son to Averra?
◉ Under my guardianship
○ Under father's
○ Joint · both parents
Emirates ID (baby) · auto-linked
Guardianship model matches UAE personal-status law. Joint guardianship requires both parents to sign.
→
03
MOHAP screening
mandatory panel
Newborn screening · status
◉ Heel prick · done 15 Apr
◉ Hearing · pass
◐ Pulse-ox · pending
◉ Hemoglobinopathy · normal
MOHAP newborn panel · auto-reconciled
Screening results stream in from NABIDH. MOHAP mandatory panel tracked and surfaced — missing items escalated to paeds GP.
→
04
Baby's first twin
concierge warmth
Welcome, little one.
baby twin · soft ring
Next · 6-week vaccination · 26 May
Paeds · Dr. N. Qureshi · booked
Tone shift: this is the only moment we use warmth near-emotional. A real welcome — once.
③ Incident response — potential breach
PDPL §13 clock starts on detection. Every step is logged and visible to the DPO.
01
Detection
SIEM alert
INC-2042 · SEV-1
Anomalous export · svc.etl-prod
Volume · 240k rows · 02:14 UTC
72h PDPL clock · started
◉ Page DPO · on-call SRE
Detection is machine-triggered. PDPL 72-hour regulatory-notification clock visible from second one.
→
02
Contain
break-glass
Containment
◉ Service acct · rotated
◉ Egress · blocked
◉ Forensic snapshot · taken
2-of-2 · SRE + DPO
Elapsed · 14m
Every action requires 2-person approval. "Break-glass" ticket documents the why. Nothing happens unlogged.
→
03
Assess · decide
is it a breach?
Impact
Records touched · 240k (de-id)
Re-ID risk · low · k≥20 scrub
DPO determination
Notifiable · yes · PDPL art. 13
DPO makes the call. If notifiable: regulator + affected individuals within 72h. If not: internal RCA only. Decision is logged.
→
04
Notify · remediate
public + RCA
Notifications
◉ UAE Data Office · filed 58h
◉ Affected members · 42
◉ Status page · banner
RCA · 14 day commitment
◉ Postmortem · public
Public status banner + RCA posted within 14 days. Commitment = what we'll do differently. Named author, not PR-speak.