Secure Patient Data via SMART Health Cards & Links
Enable patients to instantly share verified health records with any provider with a QR code.
Trusted by healthcare leaders, trusted by patients
“Imagine scanning a QR code at your doctor's office and instantly sharing your medical history. Just like when you board a flight.”
Patient-First Data Sharing
Transform healthcare data sharing with cryptographically signed, tamper-proof QR codes that work offline - built on the SMART Health Cards & Links standard.
Simple Check-In Workflow and Post-Visit Summary
Patients check-in with a QR code that contains their insurance and medical history. Before they leave the waiting room, FHIR resources are already transferred directly into the EHR. After the visit, patients receive a summary of everything the doctor said.
Tamper-Proof Health Records
Every SMART Health Card contains cryptographically signed FHIR data with verifiable provenance - providers can trust the data.
Any Provider, Any EHR
Encode any data through these standards-based QR codes that work with any FHIR-capable system - enabling seamless data exchange across the entire healthcare ecosystem.
Flexpa's Complete SMART Health Cards & Links Platform
Everything you need to build, deploy, and manage SMART Health Cards and Links with enterprise-grade security and compliance
The Missing SMART Health Links API
A fully-featured API for SMART Health Links with support for passcodes, presigned URLs to update records, and SDKs for full-client side encryption and key management.
Cryptographic Data Provenance
Every health record includes verifiable proof of origin through digital signatures (ES256). Flexpa supports both pass-through transport and Flexpa-signed SMART Health Cards.
Enterprise Security
Full support for all features described in the SMART Health Links specification, including passcodes, intelligent rate limiting, geographic restrictions, expiry management, and patient revocation.
Standards-Based Interoperability
Full-conformance to SMART Health Cards and Links IG STU1. Built-in API support for $health-cards-issue operation and SDKs for decryption and verification.