Industry context

Blockchain platforms and networks in healthcare and life sciences

We set up permissioned ledgers that several organisations run together, with the governance, identity and integration each member needs.

Hand placing a sticky note on a workshop wall of blank notes

A permissioned ledger is shared infrastructure, so most of the work is governance: who runs nodes, who can join, how keys are issued and how members agree upgrades. We set up the network, the identity and membership model and the integration with each member's systems, and we document the operating rules every participant signs up to.

Healthcare providers, insurers and life sciences companies work under patient safety obligations and strict health data rules. Clinical leaders, privacy officers and IT need to agree how data is accessed and shared before anything is configured. Shared ledgers in the region often include government or regulated members, so data residency, the UAE PDPL, the Saudi PDPL and each member's sector regulator shape what may be written to the ledger.

After stabilisation we hand over to your teams or keep running the service with you.

Alongside sector regulation, we often map delivery evidence to cross-industry baselines such as the UAE Information Assurance Regulation issued by TDRA, the NCA Essential Cybersecurity Controls in Saudi Arabia and the NIST Cybersecurity Framework, which many risk reviewers already use.

How the work is organised

From design to stable operation, with the evidence clinical governance committees, privacy offices and health regulators ask for.

  • Consortium governance

    Membership, voting, upgrade and exit rules written down and agreed with participants before the network goes live.

  • Node and identity operations

    Node hosting, certificate authorities and key issuance designed so each member controls its own identities and data.

  • Integration with member systems

    Adapters that post to and read from the ledger without duplicating records already held in each member's core systems.

  • Health regulators and exchanges

    We work within the requirements of the authority that licenses you: DOH in Abu Dhabi, DHA in Dubai or MOHAP in the UAE, or the Ministry of Health, the Saudi Food and Drug Authority and the National Health Information Center in Saudi Arabia. In Saudi Arabia, health insurance claims follow the Council of Health Insurance's rules through NPHIES, and public hospitals are grouped into health clusters under Health Holding. Integration with exchanges such as Malaffi, Nabidh, Riayati and NPHIES is planned where your services use them.

  • Data placement rules

    Rules for what is written on the ledger and what stays off it, so personal data is not stored where it cannot be erased.

  • Network operations

    Monitoring, upgrades and incident handling shared between members under a written operating agreement.

Checks before you start

A shared ledger is worth building when several parties need the same record and none of them should hold it alone.

  • The licensing authority and any health information exchange you report to have been identified.
  • At least two organisations have agreed to share the ledger and named an owner on each side.
  • The members have agreed which data goes on the ledger and which stays in their own systems.

Plan blockchain platforms and networks in healthcare and life sciences

Tell us where you are today and which dates matter. We will propose a first phase with scope, owners and an itemised quotation.

Start the conversation