How this demo treats information

01 · What is real

A contract on NEAR testnet records share ids, hashes, and revoke. Support shows that contract id and a link to the testnet explorer.

NEAR AI TEETEEA locked NEAR AI server that writes the summary. In this demo, our server still sees the chart text when it asks for that summary. summaries come back with a receiptreceiptThe signed record of a sealed summary or a de-identification pass. It carries hashes, not the chart.. The signature kind on that receipt is provider_teeprovider_teeThe signature kind on a NEAR AI summary receipt. It means the TEE provider signed the summary..

Revoke is an on-chain call. The next open is refused by the contract.

02 · What is the demo

Every person, clinic, hospital, and chart in this demo is fictional.

The demo server account uses a fictional testnet key held by the demo server on testnet. The live contract includes self_register_patient, so a connected wallet can register itself as a patient.

This build is testnet only. It is not mainnet, not a payment, and not a live clinic system.

In this demo the server sees the plaintext chart for the TEE call. The receipt still shows that the summary was signed in the TEE.

Removing identifiers is best effort, with a preview. Revoke cannot erase a copy someone already downloaded.

03 · What is stored on NEAR

The contract stores ids and hashes, plus timestamps: who shared what, with whom, and when. It does not store health data, names, or the text of a chart.

04 · Sealed summaries

A short summary is written by NEAR AI inside a TEE, and it comes back with a receipt. In this demo the server sees the plaintext chart for the TEE call. Maya can read the summary before she approves a share. The summary is not medical advice.

05 · De-identification is best effort

Removing identifiers is best effort, with a preview. A stripped copy removes common identifiers and shows that preview first. This may miss something. It is not a promise that the copy cannot be re-identified.

06 · Revoking access

Revoke is an on-chain call. It stops the next open. Revoke cannot erase a copy someone already downloaded or saved.

07 · Keys

The demo server account uses a fictional testnet key held by the demo server on testnet. The live contract includes self_register_patient, so a connected wallet can register itself as a patient.

08 · This support form

The note form on Support is local. Nothing is sent, and the words are not stored. Do not type a real name, a real contact detail, or a real patient record.

Designed around HIPAA principles.

Back to Support