Secure sharing · OTP-protected

Share medical reports securely.

One link, one OTP, one purpose. Set the scope, set the expiry. Revoke any time. Your family’s health stays yours.

How it works See what’s protected →

How sharing works

Four steps. Five seconds. Full control.

Choose what

Pick a single report, a specific test panel, or a whole profile. Tap the tests you want included — leave the rest out.

Choose with whom

Doctor, family member, second-opinion specialist — enter their phone number or share a link directly.

Verify by OTP

The recipient verifies with a one-time code before they can see anything. A 6-digit PIN you set, or an SMS-issued code each visit.

Audit access

See every open, every download, every device. Revoke access in one tap if you change your mind.

Three modes

From a single value to a full timeline — share the right amount.

Most precise

Single report

A specific lab report from a specific date. Useful when a doctor asks for last week's blood test — and only last week's.

Most common

Test panel

A test or group of tests across visits — HbA1c history, full lipid panel, thyroid trend. The cleanest way to share a tracker view.

Most context

Whole profile

Every report for one person, all panels. Reserved for when a doctor genuinely needs the full picture — and only with their explicit OTP verification.

Built-in guarantees

Every share comes with the same five locks.

Encrypted in transit and at rest

TLS 1.3 on the wire. AES-256 for files in storage. Per-PII column encryption in our database.

OTP for doctors, PIN for family

Doctors get a fresh SMS code each time. Family members reuse a 6-digit PIN you set once. Both are required to open the share.

Expiry on every link

24 hours, 7 days, 30 days, or a custom date. Links auto-expire — no orphan access drifting through your life.

Revoke any time

One tap and the link stops working. Active recipients get logged out immediately; new viewers can't open it at all.

Full audit log

See every open, every device, every download. Watermarks on each PDF page include the recipient name and access timestamp.

For doctors

If a Medfolio link was shared with you

Open the link in any browser. You'll be asked for a one-time code — either sent by SMS or shared with you directly by the patient. No installation, no signup, no fee. You see the panel you were sent and nothing else.

FAQ

Sharing questions, answered.

That's your choice. By default share links are view-only with no download button. You can grant download access when you create the link — every downloaded file is watermarked with the recipient's name and access timestamp on every page.

The recipient sees an expired message. The OTP no longer works. The audit log preserves the history of who opened it while it was active.

Yes. Revoking removes future access immediately, and an active viewer is signed out. Anything already downloaded (if you granted download permission) remains with them — that part is physics, not Medfolio.

No. Share links open in any browser with just the OTP. Doctors never see anything about you they haven't been explicitly granted.

Share without losing control.

Get Medfolio. Every share is yours to time-limit, revoke, and audit.

Coming soon to Google PlayComing soon on the App Store