health data / open source · Jan 2025 – May 2025
Curaport — a patient-owned front door to health data
- NestJS
- Next.js
- Hapi FHIR
- Prisma
- PostgreSQL
- JWT/RBAC
The problem
Patients’ clinical records live inside whichever system captured them — a hospital EMR, a national registry — with no consistent way for the patient to see or share their own data. Symbionix wanted to prove that any FHIR-compliant server or HIE could support real patient ownership, and open-source the result.
What I did
- Architected and built a multi-tenant Turbo monorepo from scratch as the sole engineer: a NestJS backend API, a Next.js patient portal, and a Next.js EMR microfrontend.
- Built the self-registration and record-claiming flow — a patient claims their FHIR record, and a registered practitioner has to verify and approve the claim before access is granted.
- Designed the trust hierarchy across ministries of health, practitioners, and patients, so MOHs onboard practitioners who can in turn approve patient claims.
- Packaged a reusable NPM microfrontend component library, installable into any JavaScript EMR to surface FHIR data inside existing clinical systems.
- Implemented RBAC with JWT auth and organisation-level data isolation on top of a Hapi FHIR integration.
Outcome
Open-sourced at github.com/symbionix/curaport — a working demonstration that patient-owned health data doesn’t require replacing the systems already in place underneath it.