Sample brief

project/BRIEF.md

Brief · Mitó

Your health record, in one place, readable by a doctor in the UK or the EU.
For people who move between the UK and an EU country, and the clinician who sees them first. Web and mobile.

What this is for

A nurse moves from Athens to Leeds. Her medicines, allergies and conditions sit with a practice in Greece, in Greek. At her first GP appointment she describes them from memory, and the GP starts from nothing.

Today people ask their old practice for copies, wait, and carry paper or photos on a phone. UK and EU systems do not exchange records, and the EU’s own health data space, passed in 2025, does not include the UK.

Scope

In: request your records from a UK or EU practice, and keep the documents. A one-page summary of medicines, allergies, conditions and vaccinations. Share it with a clinician for one appointment, in English or Greek.

Out: diagnosis or medical advice, writing into NHS or EU clinical systems, reading scans or test images, insurance, wearables.

Later: a link to the NHS App, more languages, records for a child or a parent you care for.

Success is 20 first appointments where the clinician used the summary, across 2 practices in the UK and 1 in Greece, by month 6. One metric, not 5. It is also the number the pre-seed round will rest on.

Constraints

A solo founder, a former NHS practice manager, and one contract developer · 6 months · £25,000 of savings to reach the round.

Health data is special category data under UK GDPR and EU GDPR. The lawful basis is explicit consent, and a data protection impact assessment is written before phase 1 stores anything.

Data sovereignty. Each record lives in the jurisdiction the person chooses at sign-up, the UK or the EU. Its host is owned there, and its encryption keys are kept there too. Nothing crosses the border except the one summary the person shares, and only for 72 hours.

• Next.js: one codebase for the person’s app and the page a clinician opens.
• Postgres, on a UK-owned or EU-owned host: one database in each jurisdiction, never replicated between them.
• The International Patient Summary format: the standard both NHS and EU systems are moving to, so nothing is rebuilt later.
• Coded terms (SNOMED CT): medicines and conditions show in each language without machine translation.

How it should feel

Calm · Plain English, then your language · Clinical, never cold.

Never: red alerts, health scores, anything that reads like a diagnosis.

Tokens, components and states are in project/design/design.md. Use them as written.

Riskiest unknown

Whether practices act on a request the app sends for someone. Anyone may make a subject access request on a person’s behalf. A practice can still insist on its own form, or on an ID check the app cannot carry. If they do, phase 1 is a letter generator, not a request service.

Spike: send 3 real requests, with consent, as the plain email the app would write: 2 to UK practices, 1 in Greece. Go if 2 of the 3 are accepted without a form of the practice’s own.

Result: not run yet. Due before phase 1.

Phases

Each phase is a vertical slice that could ship on its own.

1. Get your records outServes R1. Screens: Request, Tracker.Done when someone can send a subject access request to a UK or EU practice in that practice’s language, and watch the one-month deadline.
2. One page a clinician can readServes R2 and R3. Screens: Upload, Summary.Done when uploaded records become a one-page summary, every line linked to the document it came from, and the person has confirmed each line.
3. Share it for one appointmentServes R4. Screens: Share, Clinician view.Done when a clinician opens a link, reads the summary in their language, and the link stops working after 72 hours.
4. The pilot reportServes R5. Screens: Report.Done when each pilot practice gets a monthly count of appointments where the summary was used, and what was missing from it. Added up, it is the evidence for the round.

Decisions already made

Do not reopen these without saying so. Each links its full reasoning.

• 3 February 2026 · Held by the person, not the practice. All 3 practices interviewed said they would not take on data they then have to keep. decisions/2026-02-03-person-held.md
• 10 February 2026 · Every line traces to a source. Every GP interviewed, all 4, said they would not trust a summary they could not check. decisions/2026-02-10-every-line-sourced.md
• 17 February 2026 · No machine translation of clinical terms. Coded terms show in each language; free text stays in the original, marked as such. decisions/2026-02-17-coded-not-translated.md
• 24 February 2026 · Hosted and owned inside the UK or the EU. Both practice managers asked who could be made to hand the data over. A provider owned outside both cannot rule out a foreign order, so none is used. decisions/2026-02-24-sovereign-hosting.md

What the evidence actually supports

Press on, on 12 conversations: 5 watched, 7 heard.

Watched. 5 people asked their old practice for their records. 4 of the 5 were still waiting after a month. This is the claim everything else rests on.

Heard. 4 GPs said medicines, allergies, conditions and vaccinations would cover most first appointments. Heard, not yet watched in an appointment.

Reasoned. A practice group would pay to receive summaries in one standard format. Nobody was asked to pay. Treat the buyer as an open question, not a finding.

Assumed. People will keep their record up to date after the first move. It came from the founder, not from a conversation. Phase 4 will show whether they do.

Deferred

• The NHS App. Needs NHS approval and its data security toolkit. Comes back after the round.
• Records for someone you care for. Consent for another adult is its own legal question. Comes back when the pilot asks for it.
• More languages. 2 cover the pilot practices. Comes back with the first practice outside them.

Still open

• Clinical safety is unassessed. If the summary counts as a medical device, or needs a clinical safety case in the UK, phase 2 changes. A regulatory adviser is booked before it starts.
• Cross-border sharing rests on today’s rules. The shared summary relies on the EU and UK each treating the other’s data protection as adequate. If that changes, sharing across the border needs a new legal basis. The adviser covers this too.
• business.pricing is empty. Practices or people? The pilot report decides who pays before the round opens.
• The raise is not sized. EVIDENCE.md and the month-6 count decide between a pre-seed round and another 6 months of pilots.

Made with forest by K-D Studio.