A covenant, not a company line.

A medical history is scattered by default. The hospital system holds one piece, the lab another, the wearable a third; move between providers or countries and the trail crosses borders the data may not. Institutions cannot simply pool those records — the laws that stop them exist for good reasons, and we would not repeal them if we could.

But there has always been one party with the right to assemble the whole picture: the patient. Access rights in the United States, portability rights in the EU and UK — modern privacy law broadly agrees that you may gather your own records even where no institution may. Patient-mediated access is not a loophole. It is the lawful path that was there all along, waiting for infrastructure.

Meanwhile chronic-disease research starves. Conditions that unfold over decades get studied in fragments, because no single silo holds a decade. The records exist; the willingness to consent exists; what is missing is the machinery in between. Building that machinery — to the standard described on this page — is the company.

Mithras Health began with one hard disease and the community that refused to stop documenting it. People living with interstitial cystitis / bladder pain syndrome have organized, recorded symptoms, and waited for research attention for roughly thirty years. Their records were always valuable — what was missing was infrastructure that could carry consent, privacy, and fair payment at the same time.

So we built the spine first: a system of record on FHIR R4 / US Core, a consent engine that treats a revocation as seriously as a yes, a k ≥ 5 gate that cannot be configured away, research views in OMOP, and an append-only audit trail under all of it. IC/BPS is the flagship cohort; the same machinery, unchanged, carries all twenty-eight conditions — urology to oncology — across forty-seven connectors and five legal regimes.

The name is a promise. Mithra is the oldest recorded god of covenants — the witness who watched over kept agreements — and later the herald of dawn. We took the name because that is the model: explicit terms, a witness that never sleeps, and a sunrise owed to communities that have waited in the dark long enough.

Everything on this page reduces to one diagram. The patient and the researcher never touch directly; every request passes through a platform whose checkpoints are machinery, not policy — consent verified in the query path, provenance written for every event, and a fee posted back to the patient on every approved use. Access, never ownership: a study is granted scope-limited use of consented records. There is no purchase, because there is nothing for sale.

Some product decisions are feature lists. Ours are refusals. Any platform that holds patient records is eventually offered the easy versions of itself — the data sale, the quiet default, the tracker in the footer. We wrote the refusals down first, as machinery where possible and as standing answers everywhere, so that none of them would be negotiable later.

Every part of the machine is drawn before it ships. The consent engine, the gate, the ledger — each exists as a numbered, mono-labeled figure before it exists as running code, the way an instrument maker drafts the plate before cutting metal. If a component cannot be drawn plainly enough to label, we take that as proof we do not yet understand it well enough to build it.

This website is built under the same discipline. The figures on this page are numbered A1 through A3 and were drawn before they were styled. The interface speaks audit language because the product does. The cookie policy is one sentence, because the truthful answer fits in one. The platform underneath is patent-pending platform technology, described here in public — a covenant you cannot inspect is not a covenant.

Four phases, in order, none of them dated — a covenant should not promise what it cannot schedule. The architecture is designed and built. The exhibits exist and run, and every demonstration to date runs on synthetic records, because real patient records do not enter the machine until the machine has earned them. The platform is pre-launch.