Skip to content
OPRP

An open protocol · Created by Convey

Patient-owned records.
Built for every system.

Build healthcare applications around a record the patient can host and move. OPRP combines FHIR data, Host-issued permissions, and post-quantum encrypted exchange in a backend protocol.

Start building Read the protocol

Experimental developer preview. Working reference software and SDKs are available for synthetic development. Independent security review, broader clinical coverage and production deployment work remain open. See what is implemented.

Application developers
Use an SDK

Request permissions and an access period from a Host, then read or write authorized clinical data.

TypeScript, Python and .NET
Host implementers
Host the record

Choose storage, approval policy and patient interactions. Implement the open exchange and portability contract.

Run the two-Host lab
Patients & representatives
Keep control

Understand standing permission, emergency access, delegated authority, backups and provider transfers.

Understand the design

How an application connects

  1. 01

    Locate the Host

    Resolve an email-shaped patient address through WebFinger and verify its signed delegation.

  2. 02

    Request access

    Ask for explicit permissions and duration. Patient interaction happens only when Host policy requires it.

  3. 03

    Exchange data

    Send signed, encrypted payloads and use Host-issued, requester-bound tokens.

  4. 04

    Recover safely

    Retry ordered writes, reconcile changes, receive protected hints and follow a verified transfer.

Read the complete documentation

34 versioned documents cover protocol behavior, implementation, SDKs and operations.