Technical FAQ

Yes. IntaOps is designed with Privacy by Design as its core principle. We comply with the NDPA (2023) and the NDPR (2019) by ensuring that the patient (the Data Subject) remains the ultimate authority over their personal health information. Our platform facilitates the lawful basis of "Consent" and "Contractual Necessity" for data processing.

IntaOps does not maintain a centralized "honeypot" database of medical records. Instead, we use a Decentralized Storage Model.

• At Rest: Data remains in a secure, encrypted decentralized node.
• At Work: We only store the "Pointer" and the "Cryptographic Hash" of the data on the ledger. This means that even if IntaOps were compromised, no medical data could be read because we don't hold the keys.

We move beyond "implied consent" to Active, Granular Consent.

• Every time an entity or doctor requests access, the patient receives a push notification.
• Access is granted via a Biometric Handshake (fingerprint or facial recognition).
• This creates a timestamped, immutable record of consent that is fully audit-ready for NDPR compliance.

We implement a multi-layered security stack:

• End-to-End Encryption (E2EE): Data is encrypted at the source and only decrypted on the authorized recipient's device.
• Zero-Knowledge Architecture: Our servers facilitate the exchange without ever "seeing" the plain text data.
• Identity Anchoring: We use W3C-compliant Decentralized Identifiers (DIDs). Unlike traditional usernames/passwords, DIDs are resistant to phishing.

IntaOps provides a Verifiable Audit Trail. Every interaction — from patient check-in to lab result issuance — is recorded as a "Verifiable Credential." When an HMO audits a claim, they aren't looking at a PDF that could be photoshopped; they are verifying a digital signature that is mathematically linked to a specific biometric event.

Yes. While the ledger record of a transaction is immutable (for audit purposes), the access to the underlying personal data can be revoked by the user at any time. Once a user revokes a "Secret Key," the data remains encrypted and unreadable to all previous parties, effectively fulfilling the right to erasure.

As part of our partnership, we provide our partners with a Technical Compliance Package. This includes:

• Documentation of our security protocols
• Data flow maps
• Risk mitigation strategies to support your organization's annual NDPR audit filings