Features
The whole work of a mental health clinic.
Every feature came out of a real clinical workflow. None of them is decorative.
Therapy methods
A client arrives with trauma, months later obsessions come to the front, and in between the picture shifts toward depression. All five methods run in the same file; when the method changes, the record, the measurement and the portal stay exactly where they are.
EMDR — eight phases and the target map
From history taking to re-evaluation, the eight phases live above the runner and never block the engine. The past–present–future triple protocol, the touchstone marker, negative→positive cognition and baseline/current SUD-VOC are carried across sessions.
EMDR — Flash, R-TEP and resourcing
In the Flash technique, a positive engaging focus and a blink cue; in R-TEP the points of disturbance of a recent traumatic episode are scanned, processed and cleared. The Safe Place / Container / Light Stream / RDI resourcing library slows the engine down inside the session and consumes no EMDR session credit.
CBT — cognitive tools
Theory A/B (Salkovskis), the behavioural experiment and the responsibility pie; in every tool belief is measured before and after. The cognition bank offers standard negative→positive pairs and an interweave library for blocked processing.
OCD / ERP — expectancy violation
An exposure hierarchy across eleven dimensions: the feared prediction, the response prevention plan, the anticipated SUD, the baseline belief. Following the Craske model: predicted probability → resistance → peak SUD → outcome → belief afterwards; improvement is measured not by anxiety declining, but by the feared outcome failing to occur.
Anxiety and depression
A maintenance-cycle reference and the matching exposure method for panic/interoceptive, social evaluation, generalised worry, situational phobia, health anxiety and agoraphobia. For depression, behavioural activation: an activity schedule with mastery and pleasure rated 0–10 for every activity.
Stimulation engine
Only one of the five methods needs an engine of its own: EMDR. The visual, auditory and tactile channels are driven from a single audio clock; no hardware is required.
Three channels, one audio clock
The visual channel on screen, the auditory channel through stereo headphones, the tactile channel through game-controller vibration — all three locked to the same clock, with no drift. The channels switch on independently; a child can be given tactile only.
Three trajectories, configurable parameters
Horizontal, diagonal and infinity trajectories; speed, ball size and colour, background, tone frequency and waveform are set per session. The butterfly-hug pace works with no hardware at all in the child protocol.
A fidelity record per set
Sync error, dropped frames, audio latency and missed tactile pulses are measured and recorded for every set. A delivery trail remains that can be reviewed afterwards — something a device cannot give you.
Second screen and remote screen
The client sees the stimulus on their own monitor or on their own device. The clinician runs their video call on their own tool; Remnema drives only the stimulus screen alongside that call — the channel carries stimulus commands only, and there is no call, video or messaging, and there never will be.
Safety rails
Esc stops everything at any moment. Photosensitivity screening is recorded with the clinician's attestation at session start, there is a fixed ceiling on audio, the set pauses when the tab moves to the background, and the screen is kept from sleeping throughout the session.
Clinical record
No record is ever overwritten. Every change stays as a dated, authored version — in an audit or a complaint, that is what you actually stand on.
An intake history with three lifespans
Seventeen structured fields with three separate lifespans: a durable baseline history (personal, family, trauma, medical, social, substance use), mental state and risk frozen at the first assessment, and a formulation and plan that stay alive as the work develops. Each part has its own save button.
Every visit is a record
Every visit is recorded, EMDR or not: eight visit types, intervention tags and a dated risk assessment for that day. It is unlimited and consumes no EMDR session credit — clinical documentation is always free.
Version history and a field-level diff
Every time a history or a visit note is saved, a new immutable version is added; old content cannot be deleted. Which field was added, changed or removed is visible as a before→after comparison.
Signature and lock
A completed visit is signed and locked. Every correction after signing requires a stated reason, is written as a new version and preserves the original; an “amended after signing” warning appears on the row.
Diagnosis lifecycle and the discharge summary
A diagnosis is not deleted, its status changes: active, resolved, ruled out. The onset and resolution dates, the visit at which it was made and its primary ordering are on record; 502 ICD-10 codes are ready in the catalogue. The discharge summary PDF brings together identity, history, the baseline→latest values of every measure and the clinical course; it is generated on the server, streamed, and never written to disk.
Measurement and follow-up
Measurement feeds the clinical decision; it does not replace it. Scoring runs on the server and the result freezes at the moment of recording.
13 clinical measures
International measures across 8 domains — trauma and dissociation, depression, anxiety, OCD, somatic symptoms, attention, self-esteem and general/transdiagnostic monitoring — are ready in the code catalogue. Category chips and search find them in seconds.
Scored on the server, frozen in the record
The browser sends only the raw responses. The raw response, score, band and clinical flag freeze at the moment of recording; no later catalogue update can change a past record. Subscales, reverse-scored items and per-item option lists are all handled correctly.
Self-report from the client's phone
The clinician issues a single-use link per measure; the client completes it without signing in, the server scores it, the result lands straight in the file and the link is marked as used.
Flags warn, they never block
No warning stops the action, including self-harm items; it appears with its reason and is written to the record. The clinical decision always belongs to the clinician.
Trends, cohort and reports
Within-set and between-session SUD/VOC, the mood the client shares from the portal and the ERP belief-change curve. Clinic-wide change and ERP effect are calculated without decrypting a single piece of identifying data; session, OCD/CBT and discharge summary reports stream as PDF.
Scheduling and the front desk
The daily running of the clinic sits on the same foundation as the clinical record; you never enter the same information twice.
Calendar and availability board
Month and agenda views, status tracking (scheduled, attended, no-show, cancelled), rescheduling and a therapist filter. Pick the time and the duration, and the whole team is instantly ranked as free, busy or outside working hours — without a single round trip to the server.
Double booking blocked, the exception explicit
An overlapping appointment for the same therapist is blocked on the server side; if the clinician deliberately wants to book over it, the exception is marked explicitly. This is not a clinical warning but an operational error, which is why it blocks.
Pre-registration and duplicate control
A first-time caller is booked with a first name, surname and phone number; it uses no client slot, and when they arrive they become a client with one click and their appointments move across. The national ID number is never stored in plaintext — a keyed blind index specific to the clinic prevents the same person being opened twice.
Automatic attendance and the external calendar
When the clinician writes a visit or starts a session, that day's appointment turns to “attended” by itself; “no-show” is always an explicit clinical decision. Busy time in Google Calendar and Outlook is read and no appointment is offered at that hour; a Remnema appointment is written back to the external calendar as a neutral block that carries no client information.
A public clinic directory
In a directory filtered by city and session type, and on city and profession pages, your card shows open hours taken from the real calendar; the client leaves an appointment request directly and the clinic approves it. Appearing in the directory is the clinic's own choice. Remnema is not a healthcare provider; requests are delivered directly to the clinic.
Cash ledger and earnings
The money ledger between the client and the clinic. A correction is a void plus a new line; money fields are never overwritten.
Accrual and collection are separate
A fee is charged for a visit or a session; collection is a separate event, and one accrual can take several partial collections. Cash, bank transfer, card, POS, refund and other methods are tracked separately.
The balance is derived, not stored
The balance is not a column: it is re-derived every time by subtracting net collections from accruals that have not been voided, with refunds counted as negative. An inconsistent balance is mathematically impossible.
The fee chain and the discount
A client-specific fee, the therapist default and the clinic default are resolved in that order; a standing per-client discount is applied on top. The operator can always change the amount.
The therapist's share freezes at accrual
The share percentage and the share amount are frozen at the moment the fee is charged; the earnings report only sums a column, it never multiplies again. That way the report and the ledger cannot drift apart. Charging the same visit twice is impossible at the database level.
Day-end cash desk and financial analysis
A breakdown by method and by day, the total of open accruals, receivables ageing. Over any date range: revenue, collection rate, therapist earnings and the clinic's share; change against the previous equal period, a month-end projection and CSV export.
Client surface
The client opens no account and remembers no password. The single link the clinician issues is their credential, and it is revoked the moment you want it gone.
One link, no sign-in
The clinician issues a single durable, renewable and revocable link; the link itself is the only credential. There is one active link per client, and issuing a new one invalidates the old.
Homework, mood and journal
The homework the clinician assigned sits in front of the client; when they tick it off, the clinician sees it. A one-touch 1–5 mood entry and the between-session journal — triggers, dreams, body sensations. Every submission is encrypted and there is an hourly submission limit.
Pending measures and resources
Self-report measures waiting to be completed open on the phone with a single touch. A reminder of the safe place and cue word established with the clinician, plus grounding and breathing guides; a crisis card at the bottom of every page.
Extensions tied to the method layer
When the clinician activates an exposure step, the client performs and records that practice from their own phone; the ritual and urge log, the mastery-and-pleasure entry and a shared imaginal script all sit in the same place.
A firm boundary and a single switch
The client never runs any exercise alone in the portal; the diagnosis, the clinical history and visit notes never reach the portal at all. The therapist's name does not appear, because a client may show their homework to someone else. If the clinic wants, it closes the entire client surface and existing links become invalid at that moment.
Security, roles and privacy
Privacy is not a setting you switch on later — it is the architecture itself. The strongest protection is not encrypting data harder, but never collecting it at all.
Pseudonymous client records
If the clinic chooses, the client's real name, national ID number, date of birth and email address are never collected at all; the file runs solely on the alias the clinician gives and an internal code. The front desk takes the appointment under the real name while the clinical file is pseudonymous; the link between the two lives only inside the encrypted record and can be severed entirely if you wish.
Envelope encryption and tenant isolation
AES-256-GCM envelope encryption; each envelope is bound to the identity of its own record and cannot be moved to another, and the key version is open to rotation. Isolation between clinics is enforced at the database layer. Two-factor authentication is available.
An immutable audit trail
One hundred and forty-six defined audit actions; update and delete rights on the audit log are revoked at the database level and blocked by a trigger. Not even an application bug can change history.
KVKK: erasure, retention, de-identification
Soft delete, a retention window and permanent erasure are in place; erasure clears every linked record in the correct order. The identifying details of an existing full-identity file can be erased irreversibly while all clinical content is preserved.
Four roles and the discipline gate
Clinic administrator, therapist, secretary and a read-only supervisor view. The secretary runs scheduling and the cash desk but cannot see the clinical file — it is not hidden in the interface, it is never sent at the data layer. A non-mental-health practitioner uses the same scheduling and cash desk while the clinical surfaces are never opened to them; the clinic administrator decides who passes that gate.
Let's plan a detailed walkthrough for your clinic.
In thirty minutes we first listen to your clinical flow, then show you the whole system.
Request a demo →