xRecord: EHR Interoperability

The Problem

Electronic health records are locked in vendor silos. Sharing across providers requires full record exposure. HIPAA compliance adds friction to every data exchange.

Patients who see specialists across multiple health systems have their records fragmented. When records need to be shared for care coordination, the current model requires transmitting the complete patient record to the receiving provider. This creates copies of sensitive data at every care site, multiplying breach exposure.

HIPAA's minimum necessary standard requires sharing only the data needed for treatment, but technical systems make it easier to share everything than to filter. The result is over-sharing that violates regulatory intent and creates liability.

The Old Way

The PRIVATE.ME Solution

XorIDA splits EHR data across multiple providers. No single provider holds a complete patient record. Patient consent is validated before every reconstruction.

Each patient's record is split into N shares distributed across participating healthcare providers. Care coordination proceeds by reconstructing only the minimum necessary data at the point of care, with the patient's real-time consent. After the care event, the reconstructed data is discarded.

This model transforms EHR interoperability from "copy everything to everyone" to "reconstruct only what's needed, when it's needed, with consent."

The New Way

How It Works

A consent-driven pipeline ensures patient records are only reconstructed at the point of care, with minimum necessary data, and discarded after use.

Use Cases

Integration

import { splitRecord, coordinateCare } from '@private.me/xrecord';

// Split EHR across 3 providers (2-of-3 threshold)
const shares = await splitRecord(ehrPayload, {
  providers: ['hospital-a', 'hospital-b', 'specialist'],
  n: 3,
  k: 2
});

// Coordinate care with consent-gated reconstruction
const record = await coordinateCare({
  consentToken: patientConsent,
  providers: ['hospital-a', 'specialist']
});

Security Properties

Verifiable Data Protection

Every operation in this ACI produces a verifiable audit trail via xProve. HMAC-chained integrity proofs let auditors confirm that data was split, stored, and reconstructed correctly — without accessing the data itself.

Ready to deploy xRecord?

Talk to Ren, our AI sales engineer, or book a live demo with our team.

Ship Proofs, Not Source

xRecord generates cryptographic proofs of correct execution without exposing proprietary algorithms. Verify integrity using zero-knowledge proofs — no source code required.

Use Cases