Health Passport, built on consent

The health record that crosses borders

Patient-carried health infrastructure that lets people take their history to any clinic, in any country, and decide who sees it.

Reserve your Health Passport See it in the app

Apple Wallet with a Consentra Health Passport card, 4 sources connected, one pending access request.

Works with the standards your hospital already runs

Epic MyChart Oracle Health SMART on FHIR HL7 FHIR R4 Apple Wallet SMART Health Links International Patient Summary TEFCA

Platform and standard names are used to describe compatibility only. Health systems shown in product screens are illustrative.

Your history should arrive before you do, at any clinic, in any country

One record the patient carries, built on consent and the standards hospitals already run

Carry

Give patients their whole record before the next visit, in any country

Consentra pulls from the portals a person already has, keeps every entry with its source, and puts a Health Passport in Apple Wallet. A new clinic reads it on visit one.

Riverside Medical CenterMyChart · 412 records

Eastbrook HealthMyChart · 356 records

Lakeview HealthMyChart · 298 records

Clearwater LabsLab results · 182 records

Northpoint LabsLab results · tap to connect

Every entry keeps its source

Nothing leaves without a yes

Consent

Every request names itself. Nothing moves until you say yes.

A request names the clinic, the purpose and the duration. The patient unticks what stays private and confirms with Face ID. The grant is recorded before anything is shared.

Lakeview Health requests access to the Health Passport: requested by Dr. Sarah Chen, purpose treatment, 30 days, 5 of 7 categories selected.

Delivery

No faxes, no release forms, no records requests

Sign in to each system once. Approved records reach the clinic on a secure Health Link or QR, every entry still naming where it came from. Delivery straight into a clinic’s EHR comes with each integration.

RiversideEHR · FHIR R4

EastbrookEHR · FHIR R4

Clearwater LabsLabs · FHIR R4

Northpoint LabsNot connected

Consent check

Clinic EHRSMART on FHIR

Health LinkTime-limited, with passcode

QR at the deskAny phone camera

Audit

Keep a record of every share, and take access back whenever you choose

Every grant is kept as a FHIR Consent: who asked, what was allowed, for how long. Activity shows every sync and every access. Revoking ends access through Consentra the moment you tap.

Activity: Lakeview access granted 2 minutes ago, Riverside medications synchronized, Clearwater lab results synchronized, Eastbrook Health records synchronized, and an expired access from yesterday.

Lakeview HealthConsent · TreatmentActive

Oct 1 · 9:02Request receivedDr. Sarah Chen · 30 days
Oct 1 · 9:04Approved with Face ID5 of 7 categories
Oct 1 · 9:04Records deliveredHealth Link · each entry keeps its source
Oct 3 · 14:10Opened by LakeviewDr. Sarah Chen
Oct 3 · 16:18Revoked by youAccess through Consentra ended
Oct 31Access ends on its ownNo renewal without a new request

Day 3 of 30

01 / 04

Connect

02 / 04

Carry

The Health Passport lives in Apple Wallet and updates by push. Any clinician scans it with the camera they already have.

03 / 04

Approve

A request names who, why and for how long. Untick anything private, confirm with Face ID, and only that is delivered.

04 / 04

Revoke

End access through Consentra in one tap. Copies a clinic already saved stay under its own rules, and your record shows exactly what they were.

In the app

Same record. Only what you allow leaves it.

A request arrives on the lock screen. You see who is asking, why and for how long, untick anything private, confirm with Face ID, and keep the detail of every grant. Screens are from the Consentra iOS prototype; patients and health systems shown are illustrative.

HOW A REQUEST MOVESThree parties. Nothing moves without your yes.Every step between the clinic and your record passes through a consent check you control.

Lock screen notification: Consentra, Lakeview Health, health record access requested, review request. — 01A request arrivesWho is asking, on the lock screen. Nothing has moved.

Modify access: medications, allergies, conditions, recent labs and imaging on; procedures and behavioral health notes off; duration one time, 24 hours, 7 days or 30 days. — 02Untick what stays privateCategory by category, with a duration you choose.

The network

Sources on one side. Clinics on the other. The patient in between, holding the keys.

Health systems and labs connect once. Receiving clinics and apps request what they need. Every exchange runs through the patient's approval, and every approval has a receipt.

Talk to us about a clinic pilot

1 tapto revoke access, from the pass or the app

30ddefault access window, revocable any time

0records released without a patient's yes

FHIR R4standards in, standards out; nothing proprietary in the middle

Connected sources

Health systems and labs that already serve patient-access APIs

Epic and Oracle Health patient-access APIs first, then labs and national networks. Nothing retyped, nothing merged blind.

Epic MyChart

Oracle Health

Hospital systems

Labs

Pharmacies

Urgent care

Apple Wallet

SMART on FHIR

Health Links

Receiving clinics & apps

A complete, consented history on the first visit

The clinic gets exactly what the patient approved, already structured, before the visit starts. Patients never pay, and are never the product.

01Request names who, what, why, how long scoped

02Approve on the Wallet pass with Face ID signed

03Deliver by secure Health Link; EHR delivery per integration receipt

04Revoke in one tap; the receipt stays logged

Networks & borders

Designed to plug into the rails each country is building

One connection to a national network replaces site-by-site work. The same consent object travels with the record.

United StatesTEFCA · SMART on FHIR · US CorePatient-access APIs every certified EHR must serve.

European UnionEHDS · IHE profilesThe European Health Data Space sets cross-border patient summaries.

StandardSMART Health Links · IPSInternational Patient Summary, readable by any clinician with a camera.

EverywhereApple Wallet passWorks offline at the desk, in any language the record carries.

What Consentra adds

Patient-access APIs and exchange networks move data. Consentra decides, with the patient, where it may go.

59% of U.S. adults had more than one patient portal in 2024. Only 7% used an app to bring them together.¹ The standards to move records exist. What is missing is a patient-held layer that says yes, to whom, and for how long.

In the prototype

Portable identity

A Health Passport in Apple Wallet that travels with the person, not with the institution that issued the record.

In the prototype

Patient-mediated authorization

Every request names who, why and for how long. Access is scoped by category, time-limited and revocable.

Partly built

Standardized delivery

FHIR R4 records by SMART Health Link or QR today. Direct EHR delivery is added clinic by clinic as integrations go live.

In the prototype

Verifiable consent history

Each grant is kept as a FHIR Consent record: who asked, what was allowed, until when, and when it ended.

1. ASTP/ONC Data Brief No. 77, Individuals’ Access and Use of Patient Portals and Smartphone Health Apps, 2024.

Records went digital. Patients still cannot move them, and the problem gets worse at every border.

Built as the global layer from day one

Stage 1 · New York

Patients moving between two health systems

We start where records are most scattered: people moving between two of the city’s health systems. Security is independently reviewed before the first patient.

Washington Heights to Downtown BrooklynHer history is already there when she checks in.

Health system AHealth system BLocations are illustrative

Stage 2 · National

Reach patients anywhere through national data networks

Through national exchange networks, one connection reaches patients anywhere in the country instead of one hospital at a time.

Connect Records: Riverside, Eastbrook Health, Lakeview and Clearwater connected; Northpoint Labs, Corner Pharmacy, Pacific Health, Hudson General, Eastside Orthopedics and Summit Cancer Center available.

Stage 3 · Borders and research

Records that cross borders. Research access only with consent, study by study.

A consent ledger and country-by-country compliance. The international student, the ER two states away, the second opinion abroad: the same pass, the same receipt.

Emergency Health card: blood type, allergies, medications, conditions, organ donor and primary care, readable without unlocking.

Health Link: a time-limited consentra.health link with a separate passcode, including medications, allergies, conditions and recent labs.

Present to Provider: a single-use QR code the clinic scans to request access.

How your record is handled

Plain answers, including the limits

How we connect

Through the patient-access APIs your providers already offer, signed in with your own portal account over SMART on FHIR. Your portal password is never shared with Consentra.

In the prototype

What is shared

Nothing, until you approve a named request. You choose the categories and the duration; sensitive classes stay off unless you turn them on.

In the prototype

What revoking does

Ends access through Consentra immediately. Copies a clinic has already saved into its own record stay under that clinic’s rules and retention law. Your history shows exactly what they received.

In the prototype

What we never do

Sell, pool or train on patient records. Patients never pay, and are never the product.

Policy

Before the first patient

An independent security review, and a published note on where records are stored, how encryption keys are managed, and who, if anyone, at Consentra can ever see them.

Planned

The founders