Apu Sensible Data Guardian

A decentralized platform for managing sensitive healthcare data while enabling privacy-preserving research for non-profit organizations. Combines client-side encryption, decentralized storage, and Fully Homomorphic Encryption (FHE) to protect patient records while allowing statistical analysis.

Features

• End-to-End Encryption: Patient data encrypted client-side before transmissione
• Privacy-Preserving Analytics: FHE enables computation on encrypted data without exposure
• Smart Contract Access Control: Transparent permission management via Zama contracts
• Regulatory Compliance: Built-in audit trails and compliance support

Architecture

Data Flow

1. Data Submission: Patients encrypt records client-side before upload
2. Private Computation: FHE performs calculations without decryption
3. Insight Generation: Aggregated, anonymized results delivered to authorized parties
4. Access Control: Smart contracts enforce granular permissions with audit trails

Technical Architecture

graph TB
    User[Patient] --> Frontend[React/Next.js Frontend]
    Frontend --> Wallet[Web3 Wallet Connection]
    Frontend --> Backend[API Backend]
    
    Backend --> FHE[Zama FHE Analytics]
    Backend --> Contracts[Zama Smart Contracts]
    
    Contracts --> Sepolia[Ethereum Sepolia]
    
    FHE --> Results[Aggregated Results]
    Results --> Frontend
    
    classDef primary fill:#3b82f6,stroke:#1d4ed8,color:#fff
    classDef storage fill:#10b981,stroke:#059669,color:#fff
    classDef compute fill:#f59e0b,stroke:#d97706,color:#fff
    
    class Frontend,Backend primary
    class Contracts storage
    class FHE,Results compute

Loading

Components:

• Frontend: React/Next.js with Web3 wallet connection
• Backend: Solidity / Typescript
• Smart Contracts: Ethereum Sepolia using Zama confidential contracts
• Storage: FHE smart contracts for encrypted data
• Computation: Zama FHE for off-chain analytics

Key Benefits

• For Organizations: Risk reduction, compliance support, operational insights
• For Researchers: Ethical research on larger datasets with built-in privacy
• For Patients: Data sovereignty, enhanced privacy, improved care coordination

MVP Capabilities

• Health Record Storage: Secure, encrypted patient record management
• Statistical Research: Privacy-preserving analytics on encrypted datasets
• Access Control: Smart contract-based permission management
• Compliance Support: Audit trails and regulatory compliance features

Roadmap

• MVP — Target date: October 15, 2025
  Encrypted upload, basic smart contract access policy, and one FHE aggregate query.

• Validation — Target date: November 15, 2025
  End-to-end demo: user → upload → FHE query → aggregated report; basic audit logging.

• Next steps — Target window: Jan 15, 2026 – Mar 31, 2026
  Expand FHE primitives, implement role-based access control, and run pilot programs with partner foundations.

Business model

• Non-profit subscription — Pricing & pilot plans ready by November 30, 2025.
• Pay-per-query / credits — Beta available by February 15, 2026; general availability by April 30, 2026.
• Professional services & grants — Service offering and partner program launch May 15, 2026.

Deployed Contracts

The access-control contract for the current demo has been deployed to Sepolia. You can inspect transactions and contract state on Etherscan:

• Deployed contract address: 0x9467a74fa655590739e5c5b617d10c35f2f1a7c4
• Etherscan (Sepolia): https://sepolia.etherscan.io/address/0x9467a74fa655590739e5c5b617d10c35f2f1a7c4

Documentation

• GitBook: Detailed integration guides

Contributing

Submit PRs following security standards. All contributions require code review and security assessment. Report security issues to [email protected].

License

MIT License with additional security requirements. Important: Ensure regulatory compliance before deployment.