How it works
From scattered to complete — and kept that way.
Four sources, dozens of providers, a decade of history. Here’s how Corpus assembles it into one record you own, and keeps it current.
§01
The process
Five steps. One complete record.
STEP 01 · VERIFY ONCE A brief, bank-grade identity check (about five minutes) and a limited healthcare power of attorney that lets us request records on your behalf — and nothing else. It covers record requests only, is revocable anytime, and survives even if you cancel. What the authorization covers →
STEP 02 · PICK YOUR INSURERS Select the insurers you’ve used. They return the list of every provider who billed them — your map of where the data actually lives. (Where insurer APIs allow; otherwise we request it under your statutory access rights.)
STEP 03 · WE PURSUE EVERY RECORD We request complete, machine-readable data from each provider, follow up on gaps, and remediate degraded formats. When a provider stalls, we escalate the request — and only with your explicit approval do we loop in your doctor.
STEP 04 · WE MAKE IT YOURS Your raw source files (DICOM, ECG, original PDFs) are kept as the source of truth. From them we build a normalized record using open standards — FHIR R4, with labs in LOINC, diagnoses in ICD-10/SNOMED CT, imaging in DICOM, medications in RxNorm — exportable anytime.
STEP 05 · IT STAYS CURRENT New records are added as they’re billed, and the concierge watches for research relevant to you — re-reading your raw data as models improve to extract more, never to diagnose. The difference between a backup and an active partner.
§02
The escalation ladder
What happens when a provider says no.
We don’t ask nicely and hope. We run a defined ladder — automated request, human follow-up, a formal demand citing your rights, then (only with your consent) your doctor.
§03
Your rights
The law is on your side. We use it.
EUROPEAN UNION GDPR Article 15 gives you a copy of your data, and Article 20 the right to receive it in a structured, commonly used, machine-readable format — normally within one month (extendable to three). Compliance is inconsistent in practice, so we escalate. The EHDS and Germany's ePA are widening access further.
UNITED STATES The HIPAA Right of Access requires your records within 30 days, and the 21st Century Cures Act's information-blocking rule — now actively enforced — bars providers from withholding them. Nationwide exchange (TEFCA) and patient-access APIs extend our reach.
Available today for patients in Germany and the EU; US support is on the roadmap. We’ll always tell you honestly what we can retrieve where.
§04
From raw files to one record
Raw data in. A coherent record out.
- Complete raw data
- Degraded / action needed
- Not yet received
Start recovery
Recover my record
Where should we start? We file the first requests; you hold the key. We reply within two business days.