Decentralised, lossless health records
GitEHR is an open source platform powered by Git, cryptography, and open standards. It keeps every clinical change auditable, portable, and owned by the patient.
Start with the GUI and repository basics
Use the Getting Started guide to run the GUI, open a repository, and learn the on-disk layout.
The Health Record, Reimagined
We replaced the siloed database with a distributed ledger. The result is a system that is naturally secure, offline-first, and infinitely portable.
Patient Owned
Records live with the patient, not the institution. Share them across providers, borders, and decades without rebuilding the data.
Cryptographic Trust
Every entry links to the last one, forming an append-only chain that is tamper-evident and mathematically verifiable.
Offline First
Git-powered repositories work without constant connectivity. Sync seamlessly whenever a secure link is available.
Built for the entire ecosystem
For Clinicians
See the whole picture. Access a patient's complete longitudinal history, not just what's in your local system.
GitEHR provides a unified view of care across specialists and facilities, reducing medical errors and redundant testing.
For Patients
Your health, in your hands. You hold the master copy of your record. No more requesting faxed transfers.
Grant temporary access to new doctors with a key, and revoke it when you're done. Your privacy is mathematically guaranteed.
For Organisations
Secure and compliant. Eliminate the risk of massive centralized data breaches. Lower infrastructure costs.
Native audit trails ensure compliance by default. Interoperate with legacy systems via standard HL7/FHIR adapters.
A Fundamental Shift
Why moving from centralized databases to distributed version control changes everything.
Traditional Systems
Records are trapped in one hospital's database.
"Correction" often deletes the previous value.
The hospital owns the data; patients must request it.
Fragile, expensive custom interfaces (HL7) to move data.
The GitEHR Way
The record is a folder of files you can move anywhere.
Nothing is ever deleted. Full audit trail by default.
The patient holds the repo; institutions are contributors.
`git pull` and `git push` handle synchronization perfectly.
How it works
Initialize
Create a GitEHR repository with a secure journal chain and structured folders.
Append
Each visit or update is a new commit, cryptographically linked to the history.
Sync
Collaborate via Git remotes. Clinicians push updates; patients pull the latest record.