Health record custody · infrastructure

The record belongs to the person. Everything else is arrangement.

We build the identity, the keys, the consent and the exchange a health record needs in order to outlive any single clinic, device or country.

What the platform provides

A   Identity and profilesOne account holds the person and the family members they look after, each profile with its own key.
B   Keys held by the personRecord contents are sealed on the device before they synchronise.
C   Consent and grantsAccess is given by wrapping the person's key for a named recipient; withdrawing it rotates the key.
D   Exchange between partiesA relay that carries sealed material without being able to read what passes through it.
E   Audit without contentEvery action is recorded; the log deliberately carries no medical content.
F   Organisations and rolesClinics, staff, seats and their own domains, with patients linked only by their own consent.

One account does not mean one pool of data. Sign-in and the plan are shared. Anything crossing between applications is a separate permission, per category, off by default.

Applications on the platform

01   Private Health JournalA personal and family health record kept on the person's own device.Open
02   Clinic WorkspaceA scheduling, queue and communication workspace for a clinic and the patients who chose it.In preparation
03   RehabilitationDelivery of a recovery programme written and signed by a named clinician.In preparation
04   NutritionA record of food, hydration and appetite kept alongside everything else.In preparation
05   Sex and relationshipsA private space for intimate health, held apart from the rest of the record.In preparation
06   Healthy cosmetologyA record of procedures, products and aftercare, with batch provenance.In preparation

No analytics and no trackers: every file this page loads comes from this server. Signing in sets a session cookie — the one thing a login cannot work without.