The Five x Five integration MVP is open to invited visitors. Enter your access key.
The record you just watched, its flags, the chain head, and a real Ed25519 signature. Check it at /verify or offline on any machine.
Synthetic encounters only, no patient data, six weeks to evidence. One click opens the request with your role and intent prefilled.
The receipt plus the pilot one-pager, sent to you once.
Every sealed record carries a signature anyone can check on their own equipment, with no access to our keys. Recompute the hash below, then alter the record and watch verification fail. The SHA-256 and Ed25519 on this page are real and run in your browser.
Press Recompute & verify to check this record against its seal.
Scope, stated plainly: this demo generates a fresh keypair in your browser, so it proves integrity (the record was not altered after signing). In production, keys are created and held in AWS KMS/CloudHSM in Canada, never leave hardware, and only the public key is published, which adds provenance: who signed, and when, with the daily chain-root anchored to an independent RFC-3161 timestamp authority.
Yes. Our AI can misread a moment too; any AI can. So we built a product that never depends on being perfect. No single point of failure, and the final word is never the AI. It is the retained source and a human. Here is the net.
Every gate a health-system evaluator scores (residency, consent, least privilege, human oversight, tamper-evidence) is a design decision, not an afterthought. No real patient data flows until a PIA and TRA are signed off.
ca-central-1 (Montreal). Region-locked by policy. Data never leaves Canada.
Consent captured before capture. Minimized to the clinical encounter. No SIN, no ID numbers.
SMART on FHIR: reads the note, writes an advisory flag only. Never touches orders or medications.
Flags for clinician review. Does not diagnose, prescribe, or block. The clinician adjudicates; the decision is sealed.
Ed25519 signed, hash-chained, S3 Object Lock (WORM). Anyone can verify offline. Deletion never breaks the chain.
Role-based, owner-scoped access. Every read and write logged to an immutable trail.
PHIA · PIPEDA · ITSG-33 / Protected B · PIA + TRA before real PHI · SOC 2 Type II · independent pen-test.
Works beside any scribe and never needs its transcript. It holds the chart up to its own sealed source.
Start where nothing can go wrong: role-played and synthetic encounters, no PHI, no PIA required. Prove the catch rate and the seal in weeks. Then, only after PIA and TRA sign-off, a small consented run.
A clinical champion and a Phase-A validation slot. No PHI, no risk, six weeks to evidence.
These are the pilot's endpoints. The numbers come from the pilot. We don't pretend to have them yet.