Designed for Nigerian healthcare
- Lagos University Teaching Hospital
- University College Hospital, Ibadan
- OAU Teaching Hospital, Ile-Ife
- Reddington Hospital
- St. Nicholas Hospital
- Eko Hospital
- National Hospital Abuja
- ABU Teaching Hospital, Zaria
Why MedLink
Every access is a receipt.
Not a promise, not a setting buried in a menu — a tangible, time-stamped, hash-chained artifact. Patients see who, doctors prove why, and the chain proves it happened.
- Patient-issued
Only the patient can sign a grant. No clinic-side override.
- Scoped
Read scope is explicit — meds, labs, history — never "all records".
Consent receipt
CR-NG-204881-A7
- Patient
- Aisha O.
- Doctor
- Dr. K. Adeyemi
- Facility
- LUTH · Lagos
- Scope
- History · Meds · Labs
- Issued
- 2026-05-21 · 22:14
- Expires
- 2026-06-04 · 22:14
- Time-bound
Auto-expires. Revoke any time; the doctor's next action shows access removed.
- Hash-chained
Each entry links to the previous. Tampering breaks the chain — visibly.
How it works
A consent flow that explains itself.
Nothing happens without a request, a grant, and an audit entry. Patients stay in the loop; doctors get the access they need.
Doctor requests
A verified clinician asks for a specific scope and duration.
Patient approves
You see who, why, and what — then you decide.
Doctor reads
Records appear in their dashboard, scoped to the grant.
Sealed in audit
Every read writes a tamper-evident entry to your audit log.
Live consent
Visible to you at every step
Revoke any time. The doctor's next action shows access revoked.
What you get
Built for clinics. Owned by patients.
Six surfaces, one promise — your record follows you, and nothing happens without your sign-off.
AI summaries, doctor-verifiable
A 3-bullet brief on top of the full record. Source-cited at the line, never autonomous.
Source-anchored
Every bullet links to the original record line. Doctors can drill in, never out.
One MedLink ID
Carry one identity across every facility.
ML-NG-204881
Verified clinicians
MDCN-checked. Facility-bound.
Emergency access
Break-glass when the patient can't consent. Always flagged.
Multi-facility
Records follow the patient, not the building.
Tamper-evident audit chain
Hash-chained reads. Every access is provable; every entry is yours to see.
sha256 · prev → currBy the numbers
0+
records ready to travel
across patient lifetimes
0
facilities in the network
private + public, LUTH to rural GPs
0%
audit chain integrity
tamper-evident on every read
0s
to grant consent
from doctor request to record read
Prototype figures, ground-truth promises. The numbers grow with the network — the audit guarantees don't move.
Live audit
Every access — provable, visible, yours.
A glimpse of MedLink's append-only audit chain. Patients see exactly who read what, when, and why.
“The first time I read a new patient's allergies before they sat down, I stopped guessing. MedLink makes the next visit feel like a continuation, not a restart.”

Dr. K. Adeyemi
Consultant Cardiologist · LUTH












Compliance at the core
Designed to meet the bodies that already govern Nigerian healthcare.
- NDPRData Protection
- NITDAInformation Tech.
- MDCNMedical & Dental
- NHIAHealth Insurance
- NPHCDAPrimary Health Care
Security defaults
NDPR-aligned
Nigerian Data Protection Regulation
AES-256 at rest
Field-level for PII & sensitive notes
Infisical-managed KMS
Per-environment keys (ADR-0009)
Audit on every read
Hash-chained, tamper-evident
Consent-scoped sharing
Patient-controlled, time-bound
Ready when you are
Take your medical history with you.
Create your MedLink ID in minutes. Grant access in seconds. Revoke it just as fast.
Prototype build · A demonstration of MedLink Nigeria's identity and consent model.