Technical overview
Nigerian healthcare data lives in too many places — hospital systems that don't talk to each other, chat threads with photos of lab results, paper folders the patient carries between specialists. When something goes wrong, no single party holds the full record, and the patient holds it least of all.
OneHealth replaces that fragmentation with a single, encrypted health record that the patient owns. No clinician can read it without an explicit consent grant — scoped to a specific slice of the record, such as your lab results or your imaging, and time-limited so access expires automatically rather than lingering. Every grant, and every individual record it touches, is written to a tamper-evident audit trail.
Records are encrypted at rest with envelope encryption, and the documents behind them — lab PDFs, imaging, scanned referrals — are stored only in encrypted form, never as plaintext. The platform runs entirely within African data residency, so when a regulator asks where a patient's data lives, the answer is short.
When a patient exercises their right of access under the NDPA 2023, OneHealth returns their record in a standards-based, portable format that another hospital or health system can actually read — accompanied by a verifiable record of who accessed what, and when.
The result treats health records the way the rest of the platform treats identity: encrypted, scoped, expiring, and tamper-evident — designed so patients direct access to their own records, with care providers as accountable participants.