Your health record,
held by you.
Your medical history is scattered across every clinic, hospital and specialist that ever treated you, and none of it belongs to you. Ovivo is building the record that does. Secure, lifelong, and yours to carry.
In vivo, not in vitro.
In development. Not yet open to the public.
Ovivo explains: two markers moved since 2023. Worth asking your GP about.
Operative note, discharge summary and histology, attached.
Complete schedule, carried across two countries.
Where the record starts. It runs from here.
You are the only constant in your own care.
Doctors change. Clinics close. You move cities, or countries. Every system holds a fragment of your history and none of them holds the whole thing, least of all you.
Records get lost
Millions of health records go missing every year, and the history that goes with them is rarely recoverable.
Tests get repeated
When a clinician cannot see what was already done, the safest option is to do it again. That costs time, money, and sometimes unnecessary exposure.
Details get missed
Diagnosis depends on history, and a history nobody can see is a history that cannot inform the decision.
You are asked to remember
Every new appointment starts with recalling dates, doses and diagnoses from memory. Nobody recalls them perfectly.
Families carry it alone
Managing health information for children, parents or partners across separate systems falls to whoever has the time.
Nothing travels
Cross a border and, in practice, your medical history stays behind.
One record. Your whole life. Held by you.
Ovivo Record is a self sovereign health record, which is a plain way of saying it belongs to you and not to a hospital, an insurer, or to us. It gathers your history into a single timeline you control, from birth onward.
Your whole timeline
Conditions, medications, results, imaging, procedures, immunisations, allergies and letters, in one chronological history rather than a dozen partial ones.
Sharing you control
Your full history to a new specialist, or a single result to a pharmacist. Set access to expire, withdraw it whenever you like, and see a permanent log of who looked at what.
Plain language, not jargon
Ovivo explains what is in your record in words you can actually use, flags what has changed, and suggests what is worth raising with your doctor, grounded in current medical evidence.
It travels with you
Between doctors, between hospitals, between countries. A portable summary you can present in an emergency, wherever you happen to be.
Family and proxy access
Hold records for your children from birth, or help a parent manage theirs, with proper permissions rather than a shared password and a folder of scans.
A record that outlives you
A health history your family can inherit, if you choose to pass it on, because the patterns in it matter to the people who come after you.
From scattered files to a single history.
Five things have to be true for a personal health record to be worth having. Here is how each one works.
It gathers what already exists
Connections to existing health systems can collect much of your history for you. Older material, such as birth records and past hospital notes, you can request and attach yourself, or ask us to help gather. Be as involved as you want to be.
It will be encrypted, and the keys will be yours
Record is being built so that your record is encrypted with keys only you hold, which would make reading it something we are unable to do rather than something we promise not to. That is the design and the work is under way. We will tell you when it is finished rather than before.
You decide who sees what, and for how long
Permissions are set per person, per purpose and per period. Grant access, watch it expire on the date you chose, or withdraw it early without needing anyone's cooperation. Every access is written to a log you can read.
It makes sense of what is there
A lifetime of results and letters is only useful if you can read it. Ovivo turns your record into a clear timeline, explains it in plain language, and flags what is worth asking your doctor about.
It goes where you go
Built on open health data standards so the record stays portable by design. Between doctors, between hospitals, between countries, and onward to the people who come after you.
Rights, not features.
Regulation is finally catching up with the idea that health data belongs to the person it describes. The European Health Data Space sets out what people should be able to do with their records. We are building to that standard rather than waiting to be told to.
- Reach your health data immediately, in full, at no cost.
- Share it with any provider you choose, without the previous one being able to block it.
- Add your own information, and information for the people who depend on you.
- Correct what is wrong in it, because records do contain errors.
- Restrict access to particular parts of it, with sensible overrides when your life is at stake.
- See exactly who has opened your record, and when.
Health data is the most personal data there is.
Everything below is a commitment we are prepared to be held to. Where something is still being built, it says so.
We are building it so we cannot read your record
Ovivo Record is being built to encrypt your data with keys only you hold, so that reading it is not something we are able to do rather than something we promise not to. We would rather describe that as the design it currently is than claim it early.
Encrypted storage, patient held keys, decentralised identifiers rather than an account we issue you.Nothing is shared without your say so
No access without your explicit, specific consent, revocable at any time, with a record of who accessed what and when.
Granular consent, per provider, purpose limited and time limited, on an attributed access log.Your clinician decides, not our software
Ovivo surfaces evidence and suggests. A qualified human being makes every clinical decision. That line does not move.
Ovivo proposes, humans decide. It is a governance rule, applied across every product we build.Research participation is opt in, always
Your data only contributes to research if you choose it, in a form that is not identifiable as you. Where that contribution creates value, we believe you should share in it.
De-identified and consent gated. Re-identification is prohibited, not merely discouraged.You can leave, and take it with you
Built on open health data standards so your record is portable by design. No lock in, which is the entire point.
FHIR R4 as the interchange format, with a full export and a compliant deletion path.Your record is walled off from everything else
The part of Ovivo that holds identifiable health data is kept separate from the parts that do not, by deployment and by design.
Separate infrastructure and certifications, aligned to HIPAA, GDPR Article 9 and the European Health Data Space.Where the walls actually are.
Claiming separation is easy. This is what it means concretely.
- This website holds no health data of any kind. It stores an email address if you give us one, and nothing else.
- The evidence engine runs on published literature and de-identified data. It never sees an identifiable record.
- The patient record and the clinician workspace run on their own hosts, with their own certifications and their own access controls.
- A marketing mistake on this site cannot reach patient data, because the two do not share an origin, a cookie scope or a deployment.
- The mapping between a person and their de-identified token lives only inside the record's own key management, out of reach of engineers on every other product.
- Neither application host resolves to anything until the agreements that govern that tier of data are signed.
The things people ask first.
If the record is encrypted, how can Ovivo help me understand it?
This is the hardest part of the design and we would rather set it out than gloss it. The aim is that reading and explaining happen where your keys are, under your control, rather than on a copy of your data we hold. Doing that with a hosted AI model is genuinely unsolved, so we will say plainly which parts run under your control and which do not before Record opens, rather than implying it is already settled.
What happens if I lose access to my keys?
Genuine key loss is the hardest problem in this design, and we would rather say so than pretend otherwise. Recovery will use trusted contacts and backup methods you set up in advance, so that regaining access does not depend on us being able to read your record. The detail of that has to be right before Record opens, which is one of the reasons it is not open yet.
Will my doctor need to use Ovivo for this to work?
No. You can share your record as a standard, readable summary that any clinician can open, and it uses open health data standards so it fits the systems they already have. Clinicians who do use Ovivo get more from it, but nothing about your record depends on that.
Do you sell health data?
No. Your record only contributes to research if you specifically choose it, in a form that is not identifiable as you, and you can withdraw that choice. Where that contribution creates value, we believe you should share in it rather than simply be the source of it.
Is my data used to train models?
No. Identifiable health data is not training data. Contribution to research is separate, opt in, de-identified, and something you can withdraw.
Is this a medical device, or medical advice?
Ovivo Record helps you keep and understand your own health history. It does not diagnose you and it does not tell your clinician what to do. Where we build software that supports clinical decisions, that software is regulated as such, validated before use, and always leaves the decision with a qualified human being.
When can I actually use it?
We are not going to give a date we cannot stand behind. MASIE goes to market first, and Record follows once the security work and the regulatory groundwork are done. Register your interest and we will write to you when there is something real to try.