Health Sovereignty Infrastructure

Your health record.
Your proof.
Yours.

سجلّك الصحي. إثباتك. ملكك.

Palma Health builds the trust infrastructure that lets patients own, carry, and prove their health credentials — across borders, without intermediaries.

Request a demo Read the whitepaper
Built on
W3C VC 2.0 WHO IHR 2024 FHIR R4 Avalanche PDPL compliant
Healthcare professional with holographic health data and DNA strand
ICVP verified
✓ WHO IHR 2024
Blockchain anchor
Live · Avalanche Fuji
The Problem

Health data is broken at the border

البيانات الصحية مكسورة عند الحدود

Every year, millions of patients cross international borders with health records that no system can read, verify, or trust.

01
Siloed, disconnected systems

A patient's records exist across dozens of institutions. No portability. No single source of truth. Every new physician starts from zero.

02
Paper still dominates

1.8 million Hajj pilgrims carry paper WHO Yellow Cards every year — documents that can be forged, lost, or completely unreadable at a Saudi checkpoint.

03
No patient sovereignty

Health data belongs to institutions, not patients. Patients cannot access, carry, or prove their own records without asking permission from the system that holds them.

How It Works

Issued once. Verifiable everywhere.

تُصدر مرة واحدة. وتُثبَت في كل مكان.
Step 01
Clinical record

Clinic creates a FHIR R4 resource — vaccination, allergy, diagnosis, condition.

FHIR R4
Step 02
PalmaAI maps it

PalmaAI normalises and maps the clinical record to a W3C VC 2.0 credential with confidence scoring.

PalmaAI
Step 03
Anchored on-chain

A Merkle root is written to HealthChainCore.sol on Avalanche. Zero PHI on-chain — only a cryptographic proof.

Blockchain
Step 04
Patient holds it

Credential is delivered to the patient's phone via OID4VCI. Stored locally. Patient controls all disclosures.

OID4VCI
Step 05
Verified anywhere

Any verifier — checkpoint, hospital, insurer — scans the QR. ES256 signature verified in under 3 seconds.

OID4VP
The Platform

Three layers. One infrastructure.

Palma Health is built as a modular platform. Each layer is independently deployable, open-source, and designed to work without the others.

Layer 1 · Active
Palma HealthChain

The trust layer. Merkle roots anchored on Avalanche blockchain. Zero PHI on-chain by architecture, not policy.

  • HealthChainCore.sol — live on Fuji testnet
  • W3C VC 2.0 + SD-JWT-VC credentials
  • W3C Bitstring Status List revocation
  • No proxy upgrade pattern — immutable by design
Layer 2 · Active
PalmaAI

The adoption layer. Converts any FHIR R4 clinical record into a verifiable credential with confidence-tiered mapping.

  • Five specialised mapping agents
  • Three input channels — SMART on FHIR, NPHIES, upload
  • ISO 42001 audit log from day one
  • Tier 1 auto / Tier 2 review / Tier 3 specialist
Layer 3 · Roadmap
Palma Wallet

The sovereignty layer. Patients hold their own credentials on their phone. Present with a QR. Works offline. No app required.

  • PWA — installable, no app store
  • Web Crypto API hardware-backed keys
  • Selective disclosure — show only what's needed
  • Three delivery channels — QR, WhatsApp, link
Lighthouse Use Case

1.8 million pilgrims.
182 countries.
One credential.

١٫٨ مليون حاج. ١٨٢ دولة. وثيقة واحدة.

The Hajj is the world's largest annual mass gathering. Saudi Arabia must verify the vaccination status of every pilgrim within a compressed arrival window. Palma HealthChain replaces paper IHR Yellow Cards with cryptographically verified credentials — issued by any clinic in any country, verified at any Saudi checkpoint in under 3 seconds.

1.8M
Pilgrims require health verification every Hajj season
182
IHR signatory countries — all require ICVP-compliant documentation
<3s
Credential verification time — versus minutes with paper
🏥
Lagos clinic, Nigeria

GP issues meningococcal and yellow fever credentials via OID4VCI. Patient holds them on her phone.

Issued
✈️
Jeddah port of entry

Saudi checkpoint scans QR. ES256 signature verified. Merkle root checked on Avalanche. Green in 3 seconds.

Verified
🩺
Hajj physician, Makkah

Screening physician adds diabetes and hypertension credentials. Patient's full health picture in one wallet.

Issued
🚨
Emergency at Mina camp

Paramedic scans wristband QR offline. Penicillin allergy displayed in 3 seconds. Correct treatment given.

Emergency
🏨
King Faisal Hospital

Hospital issues diagnostic credential after treatment. Third Merkle root anchored. Patient leaves with her records.

Discharged
📋
Insurer claim, Kano

Travel insurer requests proof via OID4VP. Cryptographic verification. No fax. No waiting. Claim approved.

Approved
Open Standards

Built on open standards. Designed for sovereignty.

مبني على معايير مفتوحة. مصمّم للسيادة.

Every technical decision was made to maximise interoperability, patient control, and regulatory compliance. No lock-in. No proprietary formats.

W3C VC 2.0 WHO IHR 2024 SD-JWT-VC FHIR R4 OID4VCI OID4VP ES256 · P-256 SNOMED CT CVX PDPL compliant ISO 42001 EU EHDS compatible Avalanche blockchain MIT licensed
Zero
PHI stored on-chain
PDPL compliant by architecture, not policy
Live
Avalanche Fuji testnet
Contract verified on Snowtrace
182
IHR signatory states
Credentials accepted without bilateral agreements

Ready to bring credential sovereignty to your health system?

مستعد لإحضار سيادة الوثائق إلى نظامك الصحي؟

We're working with health authorities, academic institutions, and technology partners across the Gulf region. If you're building the future of health infrastructure, let's talk.

Request a demo → Read the whitepaper
Explore the code Live contract on Snowtrace View live demo