CH · Grant tokens

Hand someone a record. Take it back when you're done.

Per-record. Time-bound. Revocable. The first time medical records have ever worked the way you'd build them today.

Granularity

Per record

Not per vault

Default expiry

90 days

Override per grant

Revocation

Instant

Logged on chain

Audit log

Append-only

Tamper-evident

How a grant works

Three taps. One record. One reader. One window.

Pick the record

A specific lab. A specific imaging study. A specific visit summary. Not your whole vault — just what's needed.

Pick the recipient

A new specialist. A clinical study. A second opinion. The recipient gets a one-time decryption key — not a password to your vault.

Set the window

30 days, 90 days, or until you revoke. Time-bound by default. After expiry, the recipient's key stops working.

What grants don't do

Not a sale

A grant is a temporary key, not a transfer. Recipients cannot copy your record into their own permanent storage. Grants encrypt to ephemeral keys.

Not aggregable

A recipient holding ten grants from ten patients holds ten separate keys. They cannot pool data without each patient's consent.

Revoked means gone

After revocation, the recipient's decryption key fails. They may have cached a view — they cannot decrypt new pulls. The chain logs every attempt.

The mathematical foundation of Conceptual Health®

CH = (S × Sp)^C × (T + E)^p × (ER × RS)^(C/3)

U.S. Patent Pending 63/921,717

The Ecosystem