Your data. Your terms. Provably.
A Personal Health Cloud is not an unrestricted data lake. Consent is granular, purpose-bound, revocable — and enforced in the access path rather than described in a policy.
Four questions the individual answers.
What data
Which layers of the twin are shared — molecular, clinical, nutritional, wearable — chosen individually rather than as one switch.
Who can use it
Which institutions, which roles, and which named individuals.
For what purpose
Care, research, or population analysis. Consent granted for care does not implicitly authorise research.
For how long
With expiry, and with revocation that propagates to derived artefacts within a defined period.
Three obligations ordinary health data does not create.
It cannot be remediated
There is no equivalent of changing a password. A breach is permanent.
It implicates others
A disclosure affects relatives who never consented and cannot be asked.
It creates a standing duty
An interpretation issued today will mean something different in ten years.
Review our data governance.
Data-processing agreements, control mappings and consent architecture shared under NDA.