MyHealthVault Health Records SaaS

Patients collect results from GPs, specialists, laboratories and hospital systems, and nothing joins them up. That is true in Colombia and in Australia. We wanted a consumer product that people would trust with the most sensitive data they own. It is our product, so the constraints are ours to set and to live with.

Security and privacy could not be traded away for ease of use, and ease of use could not be traded away either, because the audience is consumers rather than clinicians. In Colombia the product has to meet Law 1581 on personal data protection. And many users would be managing their own health records for the first time, often on a phone in a waiting room.

We built the product as a SaaS on React and Node.js with PostgreSQL, and it now runs on our own infrastructure. Users upload documents and file them by category: pathology, imaging, prescriptions, referrals, hospital summaries.

Sharing with a provider works through a time-limited link with controlled permissions. The provider does not need an account. Stripe handles the subscription billing and OAuth 2.0 handles sign-in, so we store no passwords. The interface was designed for people who are not technical and have never organised their own records before.

The product is live at myhealthvault.io with expiring share links for providers and Stripe subscriptions, running on our own infrastructure. Colombia is the first market and Australia the second. Usage figures are not published.