Nothing lives on one phone
A father's reports, a child's vaccination card, and years of prescriptions move off scattered phones and email accounts into one encrypted place that isn't lost if a single device is.
Available now
In build
The whole team
Nineteen specialists, each with a defined job and an honest status label.
See all nineteenThe person has one encrypted place for every original document (prescriptions, reports, discharge papers, insurance cards, vaccination certificates) they'd otherwise keep as loose paper or scattered phone photos.
Works with
What it does
Every file the user uploads is stored in an encrypted vault, retrievable by profile, date, or document type, with the original file always available for download exactly as uploaded. This is pure storage and retrieval — no content of the stored files is interpreted beyond the filing metadata used elsewhere in the agent.
Between a father's diabetes reports, a child's vaccination certificate, an insurance card, and years of scattered prescriptions, a family's actual health paperwork often lives across three phones, a shared email account nobody checks, and a physical folder that's been moved between two houses over the years. None of it is backed up anywhere, and all of it is one lost phone away from being gone for good.
Document vault storage gives every original file — prescriptions, reports, discharge papers, insurance cards, vaccination certificates — one encrypted home, retrievable by person, date, or document type, with the original always available exactly as it was uploaded. This is the storage layer every other organising capability in the app sits on top of, and it interprets absolutely nothing about what any document actually contains inside it.
Doctor runs this directly on the platforms your customers already use — no separate app for them to install.
How it works
Add prescriptions, lab reports, discharge papers, insurance cards, or vaccination certificates in whatever format they arrive — a photo, a scan, or a PDF — and each one enters the vault encrypted from the start.
Every single upload is checked carefully before it's accepted into storage, so a corrupted or unsafe file never enters the vault or puts the rest of the family's stored documents at any real risk of harm.
Find any stored document by the family member it belongs to, its date, or its document type, without needing to remember the exact file name or where it was originally uploaded from many months back.
Every single file remains available exactly as it was originally uploaded, so a document needed for a new specialist or an insurance claim can be pulled and shared in its original, unaltered form right away.
Why it matters
A father's reports, a child's vaccination card, and years of prescriptions move off scattered phones and email accounts into one encrypted place that isn't lost if a single device is.
Searching by person, date, or document type finds a file even when the original filename or upload location has long since been forgotten by everyone in the family.
Every file downloads in its original form, so a document needed for an insurance claim or a new doctor's records request is never altered by anything the app has done to it.
The detail
This capability is pure storage and retrieval, and it is deliberately built to stay exactly that way, nothing more. The vault does not analyze, summarise, or flag anything about the content of a stored file beyond the filing metadata other capabilities in the app already use elsewhere — it is the infrastructure every organising feature sits on top of, not a feature that reads or interprets documents in its own right. A father's discharge summary sits in the vault as securely, and as genuinely unread by the app itself, as an insurance card.
This is also the largest single point of exposure in the entire product if it were ever handled carelessly, which is why encryption at rest and in transit, together with strict key management that keeps encryption keys away from application-layer code entirely, is treated as non-negotiable rather than a configuration choice. A breach investigation, should one ever genuinely be needed, has to be able to show exactly which documents were accessed, by whom, and precisely when — which is why access is logged at the individual file level.
Because health documents are sensitive personal data under India's DPDP Act, the vault operates against a disclosed retention and deletion policy the family can actually see and understand, including what happens to every stored file if an account is ever closed down. A vault that quietly keeps documents forever, or deletes them without warning anyone first, would fail the very consent and transparency standard this entire product is built to meet.
Industry use cases
3 industries where Doctor applies this directly.
An HR team at a mid-sized NBFC offers Doctor as a voluntary employee benefit so staff can organize their own family's health records privately; the bank has no visibility into any employee's records, and the connection to the finance industry begins and ends with it being offered as a wellness perk.
See the banking and finance playbookA freelance graphic designer uploads a lab report after a routine checkup, and Doctor files it under their profile and lets them draft three questions to ask at the follow-up appointment about a result they didn't understand, without the designer needing to interpret the report themselves or rely on Doctor to explain it.
See the freelancers and consultants playbookA person managing a parent's post-hospitalization care uploads the discharge summary, several follow-up lab reports, and the current medication list into one family profile, sets reminders for each medication's timing, and generates a visit brief ahead of the follow-up appointment so the family doesn't have to recall everything from memory in the waiting room.
See the health and wellness playbookMore from Doctor
The person sees every report, prescription, and visit they've uploaded laid out in date order instead of as a loose pile of files.
Learn moreThe person adds a paper prescription or report to their record in seconds by taking a photo, instead of typing it in by hand.
Learn moreOne person — often a caregiver — can organize records for their parents, children, or in-laws separately, without mixing up whose test is whose.
Learn moreA person managing an elderly parent's records can invite a sibling to view or help, and can cut off that access instantly if circumstances change.
Learn moreThe person can see a lab report's parameter names, values, units, and reference ranges as clean text instead of squinting at a scanned PDF.
Learn moreThe person can see how one specific lab value has moved across multiple visits without manually flipping between old reports.
Learn moreQuestions
No — the vault stores and retrieves files using only the filing metadata (who it belongs to, its date, its document type) that other capabilities in the app already use for organising purposes. It doesn't read, summarise, or flag the clinical content of any stored document; that's simply not what this particular layer of the app is built to do for anyone.
The vault operates against a retention and deletion policy that's disclosed to you clearly, stating exactly what happens to stored files when an account closes, rather than leaving that outcome unclear or ambiguous to anyone. You should be able to see precisely what gets deleted and on what timeline before you ever decide to actually close an account for good.
Every document is encrypted at rest and in transit, with encryption keys kept away from the application layer entirely and managed instead by a dedicated encryption service, rather than being accessible to the app's regular code. This is treated as a non-negotiable baseline for every file stored, regardless of document type or how sensitive it might individually seem to anyone.
You get the exact original every time — the file downloads precisely as it was uploaded, with nothing altered, cropped, or re-processed in any way in the version you eventually retrieve from storage. This matters when a document is needed for a formal purpose, like an insurance claim, where an unaltered original is genuinely what's actually required by the process.
The rest of your stack
No rip-and-replace — securely store all health documents works alongside the systems already running your business.
Coming soon