The four pillars of patient data control
Every access request flows through these layers before any information is shared.
Consent Requests
When a healthcare provider needs access to your records, they submit a structured consent request showing who is asking, why they need the information, exactly what they want to see, and how long the access will last.
Scoped Access
Providers receive only the specific information needed for their role and purpose. A pharmacy does not automatically see your full diagnosis history. A lab receives only what is required to process the order.
Access Logs
Every time your record is accessed, you can see which facility or role made the request, the timestamp, the stated purpose, and which specific data was retrieved.
Revocation
You can revoke access for any approved provider where policy allows. Once revoked, that facility can no longer pull your records without submitting a new consent request.