GDPR Art. 15 · HIPAA Right of Access

They have your data.
We get it back.

We legally retrieve your scattered medical records from hospitals, insurers, and labs. One authorization. Every institution.

🇪🇺 🇬🇧 🇺🇸

EU-US Data Privacy Framework We never sell your data, but you can Encrypted at rest
Vault · Live activity Active
Medical Records · Aetna Insurance
Request denied · 2 weeks ago
Denied
MRI Scans · Kaiser Permanente
"Form 27-B required" · 6 weeks pending
Pending 6w
Mental Health · Talkiatry
"Call back Monday" · 3 weeks pending
No reply
Genomic Data · 23andMe
No response · 8 weeks pending
Denied
acta · Notice issued Pursuant to GDPR Article 15, you have 30 days. Failure to comply will result in formal proceedings.
The reality

You endured the procedures.
They kept the records.

We replaced forms, faxes, and phone trees with automated legal enforcement that institutions cannot ignore. Every request is timestamped, logged, and escalated on schedule.

See how it works
The app

Your entire medical history, in your pocket.

Every record, every status, every consent request — live on your phone. Watch your vault fill up in real time.

acta.bio Your medical vault
👤


What acta does

Three things, one authorization.

Whether you're chasing your own records, choosing who profits from your data, or opting into research you actually believe in.

Get your records back

We send the legal demand to every institution that holds your data. If they refuse, we sue on your behalf.

For individuals

Get paid for your data

You decide which studies see your records. Cash on consent. No resale. Revoke any time.

Data marketplace

Join research you care about

Opt in to studies aligned with your values. You choose, you consent, you can revoke any time. No blanket consent.

Your data, your terms

How it works

Three steps. Zero hassle.

You authorize us

One digital signature covers every institution — hospitals, insurers, labs, pharmacies, wearables. EU, UK, US.

We enforce the law

GDPR gives 30 days. HIPAA gives 45. We file, track, escalate. When they refuse, we sue.

Your vault fills up

Records arrive encrypted. Only you hold the keys. Share with researchers on your terms — or don't.

Your data, your compensation

Data Dividend.

Optional. Ethical. Transparent. Researchers need data for studies that save lives. You choose whether to participate — and get compensated.

Consent request $240
University of Cambridge

Cancer biomarker study — anonymized blood panel and genomic data. 18-month longitudinal.

Compensation
Active participation $1,800 / yr
Roche Pharmaceuticals

Diabetes prevention trial — wearable data and quarterly reports. 24-month commitment.

Recurring


Voices

Real people fighting for their records.

"I spent three years asking my hospital for my dad's records. Acta got them in eleven days. Eleven. I cried."
"BUPA told me they'd 'lost' my MRI scans. Acta filed a Subject Access Request the same week. The scans showed up on the 28th day. I am still angry, but less."
"For ten years I tried to get my full medical history out of three hospitals across two countries. Acta did it without one phone call from me. I just signed once."

Global reach

Active legal channels in three frameworks.

Same right-of-access infrastructure under each regulator. More coming.

🇪🇺European Union
GDPR Article 15

30-day compliance window. Full right of access to personal data held by any controller.

180+
Institutions
18d
Avg. retrieval
🇬🇧United Kingdom
UK GDPR

Same 30-day framework, enforced through the ICO. Full data portability rights.

85+
Institutions
22d
Avg. retrieval
🇺🇸United States
HIPAA Right of Access

45-day compliance window. Covers all covered entities and business associates.

75+
Institutions
28d
Avg. retrieval

For those who care about the work.

For pharma & research

Volunteers who care about your research.

Custom cohort biobank we recruit just for you. Pre-consented participants, verified medical histories. Pay on delivery.

Full research info $100–$500 recruitment deposit · Delivery in weeks, not months

Stop asking nicely for your own data.

One authorization. Every institution.

App Store Google Play

GDPR Art. 15 & 20 · EU-US Data Privacy Framework · Your data never sold without consent