Patients share,approve, andrevoke theirown records
Records move between clinics, hospitals and apps only after the patient approves. Every step is written to a chain-of-custody log on NEAR. You play each person, and it takes about 3 minutes.
Designed around HIPAA principles. Every name and number on this page is fictional example data. Built for NEAR HACKATHON, privacy and security tracks. Contract on testnet · GitHub · Proof on NEAR
TendAI Custody moves medical records between clinics, hospitals and apps only after the patient approves each share. The patient sees who has what and can revoke access at any time.
Before approving, the patient reads a summary made in a NEAR AI Cloud TEE. Every approval, open and revoke lands in a custody log on NEAR.
Records shouldn'ttravel by fax orby guesswork
Referrals still run on faxes, portals and phone calls. Patients cannot see who received what, and clinics cannot tell which copy is current.
Revoking is the hard part. TendAI Custody stops new access right away. It cannot erase a copy someone already downloaded, and it says so up front.
A relay between the patient and every place a record has to go
The patient picks the sections and a recipient. The recipient gets an expiring, ticketed link, and the approval is logged on NEAR.
App copies are de-identified on a best-effort basis. The patient sees a preview before anything is sent.
This is an example flow, and each hop is logged on NEAR with fictional data.
Patient-approved
transfers
Pick sections and a recipient. Nothing leaves without a yes, and a second-opinion share works the same way.
A private summary,
read first
A NEAR AI Cloud TEE writes the summary. Apps get de-identified copies, best effort, with a preview before sending.
A custody log
on NEAR
Approve, open, expire and revoke events are recorded. Revoking stops new access but cannot erase downloaded copies.
A referral to a specialist
The front desk asks, and the patient approves on a phone. The specialist then opens the record for a short window. The record does not travel by fax, and it does not travel on a disc.
A second-opinion share
Send imaging and notes to another doctor. The patient chooses what goes, reads the private summary first, and can stop it later.
Changing your mind
Revoke blocks later opens. A copy that was already downloaded stays with its holder, and the log shows that too.
Built for clinic staff first. TendAI Custody handles the sharing layer so front desks and care teams stay on care, not paperwork.
Proof you
can check
Built for NEAR HACKATHON, privacy and security tracks. These three calls are from the guided demo reference run on testnet, not example labels.
Maya approved a share with St. Aster Hospital.
St. Aster Hospital opened the record. The ticket was valid for a short window.
Maya revoked access. Later opens are refused, and a downloaded copy can remain.