Everything the messy bit of emergency care needs.
Designed around how clinicians actually work — and around what patients have always deserved: visibility into who reads their records.
iMessage native
Blue bubbles. Group threads. Read receipts. The interface clinicians already use 200 times a day.
Patient consent loop
Cross-border requests pause. Patient gets a same-thread prompt. YES, NO, or silence — agent honours all three.
Break-glass aware
If the patient can't consent, only the critical fields needed to keep someone alive are released.
On-chain audit
Every request, decision, and grant logged on Solana via our Anchor program — patient-auditable forever.
Time-limited tokens
Access tokens auto-expire. 30 minutes for emergency, 5 minutes for break-glass. Defaults safe.
No PHI on chain
Solana stores only hashed metadata: requester, patient hash, jurisdiction, decision, slot. Nothing identifying.
Plain-English denials
When policy denies access, the response is human-readable. Clinicians know why and what to do next.
Patient revoke
Reply STOP at any time to terminate an active session. Tokens invalidated. Audit row updated.