Own Your Medical Records.
The patient-controlled vault that encrypts your health data, gives you complete access control, and creates an immutable audit trail.
Part of the Cliff Labs Family
MedVault is built on the Cliff Labs Data Sovereignty tenet: patients own their keys and their data, and no raw record is representable outside the owner's boundary. It is the same principle VETL applies to autonomous agents, turned toward your health. Learn about Cliff Labs.
The Problem
Your health data is everywhere but yours.
Fragmented across systems, invisible to the people who access it, and slow to reach the moments where it matters most.
Fragmented Data
The average patient's history is scattered across 20+ EHR systems. No single record. No single owner.
Zero Visibility
Patients have 0% audit-trail visibility into who accessed their medical data, when, or why.
Emergency Gaps
A 7 minute average delay to retrieve medical history in an emergency. Minutes that matter.
How It Works
Three steps to total control.
Upload & Encrypt
Your records are encrypted with AES-256-GCM client-side, before they ever leave your device. The server never sees plaintext.
Control Access
Grant time-limited access, from 15 minutes to 90 days, to any provider. Revoke anytime, instantly. You hold the keys.
Verify Everything
Every access event is written to an immutable audit trail with blockchain and Merkle-proof verification. Nothing is hidden.
Features
Everything you need to own your health data.
Encryption, access control, verification, and compliance, engineered as one coherent system.
Zero-Knowledge Encryption
Your master key is derived from your password via 600,000 PBKDF2 iterations. Per-record DEKs are wrapped by the master key. We only ever see ciphertext.
Time-Limited Access
Grant access on your terms, from 15 minutes to 90 days. Every grant is scoped, logged, and revocable at any moment.
Blockchain Verification
Merkle proofs anchor your audit trail so every record and access event is cryptographically verifiable and tamper-evident.
911 Emergency Access
A scannable QR card surfaces the essentials first responders need: allergies, current medications, and blood type. Fast, safe, controlled.
Full Audit Trail
Who, what, when, and where, for every interaction with your records. Fully exportable, so the record of access belongs to you too.
HIPAA Compliant
Built to HIPAA, HITECH, and SOC 2 standards, backed by annual third-party audits. Compliance is engineered in, not bolted on.
Security Architecture
Zero-Knowledge by Design
MedVault is zero-knowledge. Your master key is derived from your password through 600,000 PBKDF2 iterations, on your device, never transmitted.
Every record gets its own AES-256-GCM data encryption key. Each of those per-record DEKs is wrapped by your master key, so a record can only be opened with a key that never leaves your control.
The server only ever sees ciphertext. There is no physical path for a raw record to escape your boundary.
// on device, never transmitted masterKey = PBKDF2( password, salt, iterations: 600_000 ) // per-record data key dek = AES_256_GCM.key() wrapped = wrap(dek, masterKey) // server stores ciphertext only store(encrypt(record, dek))
Pricing
Plans for every stage of care.
Start free. Upgrade when you need more. Every plan is built on the same zero-knowledge foundation.
Pro
- Unlimited records
- Full encryption suite
- Unlimited grants
- Emergency QR card
- Blockchain verification
- Priority support
Family
- 6 vault accounts
- All Pro features
- Family dashboard
- Pediatric records
- Elder-care mode
Enterprise
- Unlimited providers
- SSO / SAML
- Custom SLA
- On-premise option
- Dedicated support
- White-label
Take Control of Your Health Data
No credit card required. Free plan includes 50 records.
Create Your VaultMedVault is a product of Cliff Labs Incorporated. HIPAA, HITECH, and SOC 2 Type II compliance is maintained through annual third-party audits. MedVault provides patient-controlled record storage and does not replace professional medical advice, diagnosis, or treatment.