Offline-first architecture, client-side encryption and standards-conformant personal data exchange

We can contribute to a consortium in four areas.

Offline-first architecture. Designing systems that assume no server, no connectivity and no account, and still deliver full function. This is a harder constraint than it looks and shapes every later decision.

Client-side cryptography in the browser. AES-256-GCM with Web Crypto, key derivation, recovery paths, and the human problem underneath: what happens when the person who holds the key is no longer able to use it.

Standards-conformant personal data. FHIR R4, International Patient Summary, alignment with the European Electronic Health Record Exchange Format, W3C Verifiable Credentials. Import parsing as well as export.

Open source licensing and governance. EUPL-1.2 in practice, open-core structures, software bill of materials (CycloneDX), and how to keep a public-interest project independent of any single vendor.

We are also available as a reviewer or contributor on accessibility and low-threshold design for services that must reach people who are not served by account-based portals.