Corpus

Patient-owned health-data fiduciary · You’re the customer, never the product

Your medical record is scattered across 20+ providers. We go get all of it.

One doctor or fifteen, your history is spread across insurers and clinics — incomplete and degrading by the day. Corpus files the legal requests, chases every provider holding a piece of you, and assembles one complete record you own outright. One job, no compromise, never your data for sale. You hold the key; we do the work.

No upload, no fee to start. We file the first requests; you hold the key.

  • Patient-owned
  • No data selling
  • End-to-end encryptable
  • Leave anytime
reqsourceformatstatus
[ YOU ] your entire record —— START RECOVERY →
REQ-001 FAMILY PRACTICE · visit history PDF CHASING RECOVERED
REQ-002 UNIVERSITY HOSPITAL · discharge + labs FHIR CHASING RECOVERED
REQ-003 RADIOLOGY ASSOC. · MRI · 2019 DICOM CHASING RECOVERED
REQ-004 CARDIOLOGY CLINIC · ECG series raw CHASING RECOVERED
REQ-005 REGIONAL LAB · blood panels LOINC CHASING RECOVERED
REQ-006 PHARMACY · dispense history RxNorm CHASING RECOVERED
REQ-007 FORMER CLINIC (closed) · imaging —— OVERDUE · ESCALATED
RECOVERED 6 / 7 1 ESCALATED · we don’t close the case until it’s whole
Illustration of the recovery process — not live data
§02

The problem

59%

of people already juggle multiple patient portals — and only 7% use anything to combine them. Your record exists. It’s just scattered, and quietly disappearing. The fix isn’t a smarter model; it’s someone going to get all of it.

20+ providers hold pieces of a typical person’s record over about seven years.
~30 days is the legal deadline for a machine-readable copy — routinely missed.
Lossy a JPEG of a scan, a three-line summary, a lab PDF with no ranges — signal gone.
What you’re usually given JPEG photo of a scan viewer Three-sentence radiology note Labs PDF, reference ranges missing we demand What Corpus secures Original DICOM image series Full report + the raw ECG trace LOINC-coded values with ranges

What they send vs. what we secure — we pursue the raw, coded source, not a screenshot of it.

§03

The work

The verbs are ours. Your only verb is start.

WE FILE We send the legal records requests to every insurer and provider that holds a piece of you.
WE CHASE We follow up, refuse the lossy copy, and hold each holder to the statutory clock.
WE ESCALATE A formal demand when they stall — and we loop in your doctor only with your go-ahead.
WE CLOSE Nothing is “done” until your record is whole, coded, and irrevocably yours.

Most “AI health” tools analyze the one slice they sold you. Corpus pursues the raw, coded source from every holder — because going and getting all of it is the only thing we do.

Day 0 You authorize Days 1–3 Requests sent Day 15 First follow-up Day 28 Formal demand Day 30+ Escalate / loop in doctor Statutory access clock: a machine-readable copy is due within ~30 days (extendable). We hold providers to it.
Exhibit · the statutory clock we hold providers to.
M. K. — longitudinal record
illustrative example

Problem list

  • Hashimoto’s thyroiditisICD-10 · E06.3
  • Essential hypertensionICD-10 · I10

Medications

  • Levothyroxine 75 µgRxNorm · 966224
  • Candesartan 8 mg gap · refill missing

Labs · TSH trend

3.8 mIU/L LOINC · 3016-3

Imaging

Thyroid ultrasound · 2025DICOM · raw series

Concierge

New study flagged

A paper on a medication you already take. Saved for you to raise with your doctor — not medical advice.

Every field is traceable

Source document · provider · date · original format.

Exhibit · what you actually end up holding.
You’ve seen how. Now point us at your providers →
§04

The alignment

Alignment you can audit beats alignment you have to believe.

We don’t ask you to trust our character. We’ve arranged our incentives so being on your side is the only rational move — and put the proof on the page.

  1. §01 You are the customer. Never the product.
  2. §02 Zero dollars from your data — proven by an annual Revenue Provenance Report. ↳ audit
  3. §03 You hold the gate. Every sensitive access needs your yes. ↳ audit
  4. §04 One-click export in open formats, and you can self-host. Storage stays free. ↳ audit
  5. §05 If we ever go dark, the code goes free. You are never stranded. ↳ audit
  6. §06 True zero-knowledge: we genuinely cannot read — or recover — what only you hold. ↳ audit
Your device master key ciphertext only Corpus storage 9f3a··e1 7c··b2 a4··dd 02··9c f1··6e no plaintext, no key Analysis runs on your device, or in an isolated session erased afterwards. name never sent

Exhibit · your key never leaves your device; we store only ciphertext.

Read the full security & trust model

Start recovery

Recover my record

Where should we start? We file the first requests; you hold the key. We reply within two business days.

I’m enquiring…

What happens next: we reply within two business days. Onboarding is a one-time identity check (about five minutes — the video is never stored) and a tap to select your insurers; we take it from there.