Your records are scattered across insurers and providers, and nearly impossible to gather. Corpus collects all of it, keeps it current, and watches over it — so you have one complete, private health asset.
Corpus contacts your insurers and every provider on your behalf — we handle whatever format your providers use: portals, secure upload, or traditional requests.
Patient-controlled encryption and fully portable. If you ever leave — or we ever close — your full export is available immediately, with a 90-day grace period.
Keeps your record complete and flags what's relevant — a weekly digest, not an alert for every finding. Corpus surfaces information; it never gives medical advice.
The most valuable thing AI can do for your health isn't being smarter — it's finally having the full picture. Family history, old scans, raw signals — most of it is lost or never collected.
This is what lets Corpus request records in your name. It's used to authorize record requests — never shared with providers without a specific request attached.
You grant a limited records-access authorization — the legal authority to request your data and nothing more. This is not a medical power of attorney: Corpus can never make a treatment decision, give consent, or override any healthcare proxy or advance directive you already have. Your rights vary by region, so we tailor each request to where your records are held.
From your insurers, hospitals, clinics, labs and pharmacies.
Your original scan images and ECG waveforms — not just a summary letter. Format depends on what each provider has digitized; we request the highest-fidelity version and escalate if only a summary comes back. Raw DICOM imaging, raw ECG signal, and discrete lab values where available.Technical detail
Living relatives authorize separately — Corpus can send an invitation, but you cannot sign for them. Deceased relatives require a different legal mechanism (next-of-kin / estate documentation).
No treatment, no consent — Corpus signs nothing but data requests.
Withdraw the authorization in one tap. It stops immediately.
Subprocessors: cloud hosting, identity verification (KYC), the AI model provider, and secure mail/fax for record requests — each named in our full policy.
Our role: Corpus operates as a personal health record (PHR) service acting under your authorization. Breach notification: within HIPAA (60 days) and GDPR (72 hours) timelines. Cross-border: EU/UK/CH transfers under SCCs / the EU-US Data Privacy Framework. You have a right to erasure and an access/audit log of every request made in your name. (Final legal classification & named medical director shown here before launch.)
This isn't a blank check. It's a narrowly-scoped authorization that lets Corpus do the one thing that's otherwise nearly impossible: get providers to actually hand over your data.
Your insurer holds a billing-code ledger of every covered encounter — which Corpus uses as a map to then request your actual clinical records from each provider. It's one of the most complete lists, but not the only one: it misses self-pay, out-of-network, and group-billed care.
Your insurer(s) — tap all that have ever covered youUS · commercial
US · commercial
US · commercial
US · commercial
US · govt · may need extra steps
US · govt
US · govt
US · military
DE · GKV
DE · GKV
UK
Search 1,000+
To file your first record request, providers need to confirm the requester is really you. This one-time check is the credential they accept — the same bank-grade verification used by major fintechs, run by Persona. Your image is encrypted on capture and deleted by both Corpus and Persona within 24 hours; we keep only a cryptographic proof.
Passport, driver's license, or national ID — captured securely.
A 3-second video confirms it's really you, not a photo.
Verified once, then reused to authorize every future record request.
Verification is run by Persona. Both Persona and Corpus discard the raw image within 24 hours — only a cryptographic proof is retained.
Records are only part of the picture. Everything here is optional and opt-in — toggle on what you use. Anything that touches a third party stays OFF until you turn it on.
Vitals, activity, sleep
Sleep & recovery
Strain & HRV
Continuous glucose
Prescription history
Quest, Labcorp & more
Consumer (DTC) markers
Invitae, GeneDx, Color · raw VCF + ACMG report
Auto-follow-up after visits
Self-pay MRI, eye exams, PDFs
DNR/POLST, proxy, allergies, blood type
Read-only · merchant names only
Off by default · inherited patterns
You'll hear from us within 24 hours, even if it's just "first batch sent, waiting." Most people see their first records in 3–5 days; complex histories can take up to 4 weeks — and we'll always tell you exactly why each delay happens.
One complete, living record — yours to keep. Corpus keeps it current and surfaces what matters.
Allergies · blood type · advance directive · proxy
14 raw ECGs · 2 echocardiograms
9 studies · raw DICOM
Tacrolimus levels · graft function
186 results · since 2009
Candesartan 8mg daily · Northside Cardiology
FLAG Tacrolimus 2mg BID · last dispensed 12 days ago
Apple Health · Oura · CGM
Clinical VCF + ACMG report
3 relatives · patterns below
Transplant nephrology · trough trending
Oncology · raw DICOM recovered
Valley Imaging · re-requested in full
Quest Diagnostics
Bone-density screening flagged across 3 relatives — Corpus suggests discussing earlier screening with your doctor. Family-reported items are kept apart from your clinical records and never mixed into your timeline.
Corpus flagged this study for your awareness.
They originally sent a summary; Corpus asked for the underlying signal so future models can re-read it.
Flagged for your next check-in — information, not a diagnosis.
A treating clinician (verified by NPI) can see only a small card — allergies, blood type, current meds & doses, code status, emergency contact — without unlocking your full vault.
A person you name can request access; you can veto it within a window you choose (default 48 hours). Auditable, and revocable anytime.
Matched against ClinicalTrials.gov and rare-disease registries.
A vetted physician reviews a complete packet and establishes a real relationship first.
Send your record to an AI of your choice. We strip direct identifiers, but a full history can still be identifiable, and cannot be recalled once sent. Not medical advice.
Optionally contribute de-identified data to vetted research, with full disclosure first.