The HDX Architecture
Enterprise-grade infrastructure built for healthcare compliance. A federated exchange that brokers connections without centralizing data.
Designed for zero-PHI brokerage
The HDX platform acts as a brokerage layer: resolving patient identities, discovering available records, settling transactions, and issuing cryptographically verifiable access grants. Protected health information never passes through the exchange.
Identity Resolution
PersonaLink maps fragmented patient identities using cryptographic tokens inside a Vault security boundary
Settlement
USDC on Solana with sub-second finality. Immutable access grants recorded via Anchor smart contracts
Direct Access
Buyers connect directly to provider FHIR R4 endpoints. HDX never touches the medical record
PersonaLink — Privacy-Preserving Patient Matching
A single patient may have dozens of different identifiers across different healthcare systems — different MRN numbers, name spellings, addresses. PersonaLink maps these fragmented identities to a single real person without ever storing or exposing PHI.
- HMAC-based cryptographic tokens inside a HashiCorp Vault security boundary
- Bloom filter comparison for fuzzy matching (typos, name variations, address changes)
- Confidence scoring with configurable thresholds for high-quality matches
- Raw demographics never accessible outside Vault — only cryptographic tokens
Key Properties
Zero-knowledge architecture
PHI never stored or exposed
Vault plugin boundary
All cryptographic operations inside Vault
HMAC-SHA256 with key rotation
Cryptographic token lifecycle management
Patent pending
HDXT Exchange — Blockchain-Settled Transactions
The exchange is the core brokerage service. It orchestrates discovery, settlement, and access grant issuance through documented APIs.
Discovery
Buyers submit patient demographics. The exchange calls PersonaLink to resolve identity, then queries registered providers for matching records. Results include data category, date range, and pricing — but never PHI.
Settlement
Payments settle in USDC on Solana via institutional-grade custody. Sub-second finality. Transaction fees under $0.01. The platform distributes payment to the data provider automatically.
Access Grants
After settlement, an immutable AccessGrant is recorded on Solana via an Anchor smart contract. The grant includes a SHA-256 hash of the agreed terms, access mode, and expiration. Providers verify grants by reading Solana state directly.
FHIR R4 from the ground up
The platform speaks FHIR R4 natively. Records are delivered as validated FHIR resources, ensuring compatibility with any standards-compliant healthcare system.
Provider authentication: OAuth2, API key, and FHIR SMART strategies supported. Provider credentials are encrypted at rest using Vault transit encryption.
Supported Resource Types
Embedded in the clinical workflow
We've built a working SMART on FHIR integration with Oracle Health (formerly Cerner) that allows clinicians in PowerChart to search for external patient records, discover what's available across the exchange, and access records — all without leaving their EHR.
Oracle Health serves over 27,000 healthcare facilities worldwide with approximately 25% of the U.S. hospital market. Our integration demonstrates the ability to embed HDX directly into this installed base.
Enterprise-grade. Healthcare-compliant.
Go Backend
High-performance exchange and identity services
Oracle Cloud Infrastructure
Autonomous Database, OKE Kubernetes, KMS encryption
HashiCorp Vault
Zero-trust secrets management, cryptographic operations, dynamic credentials
Solana / USDC
Sub-second settlement via Coinbase Developer Platform
FHIR R4
Native healthcare interoperability standard
Next.js / React
Modern frontends with Auth0 authentication
Design Principles
What HDX Is Not
Not an EHR Replacement
We integrate with existing systems like Oracle Health, not replace them.
Not a Consumer App
HDX is infrastructure for institutions and enterprises.
Not a Data Broker
We never own, store, or resell patient data. We broker connections and settle transactions.
See the platform in action
Request a demo to see PersonaLink identity resolution, blockchain settlement, and FHIR R4 record retrieval working together.