Sharing and permissions on exora

You are always in control

exora is built on a simple principle: your health data is yours. Nobody can see it unless you decide to share it, and any access you grant remains yours to change or remove at any time.

• Nothing is shared by default. Access only exists because you created it.
• You set the boundaries. What is shared, with whom, at what level, and for how long.
• You can revoke at any time. The moment you remove access, it ends.

Share a whole profile, or just part of it

When you share, you decide how much to reveal:

• The whole profile - everything in that person’s health record.
• Specific categories only - share just your medications and conditions with a specialist, for example, while keeping everything else private.

exora lets you choose from a detailed list of health data categories - medications, conditions, allergies, lab results, vitals, immunizations, procedures, imaging, family history, and many more. By default everything is included; tap to customize and switch off anything you would rather not share.

A note on partial sharing

Health data is connected, so sharing one category can sometimes imply another. For example, sharing your medications without your conditions can still suggest that a condition exists. When a selection might reveal more than you intend, exora shows a gentle warning so you can make an informed choice. The decision is always yours.

Set the access level

For each person you share with, you choose what they are allowed to do:

• View only - they can see the data you have shared, and nothing more.
• View and edit - they can also add documents and contribute to the record.
• Full access - they can view, edit, and re-share, and help manage the record. Reserve this for people you trust completely, such as a co-parent or primary carer.

People you share with can never grant more access than they have themselves.

How to share

exora gives you a few ways to share, depending on whether the other person is with you or not:

• Send an invite - generate a secure link and send it however you like (message, email, or in person). The link is single-use and can carry an expiry, so it cannot be passed around.
• Connect in person - when you are together, scan a QR code to connect on the spot.
• Set an expiry - choose how long access lasts, from a single day to ongoing. You can always extend or end it later.

The person you invite accepts the share to connect. If they do not use exora yet, they can still accept through the web.

Sharing with family and carers

Sharing is ideal for the people who help look after your health, or whose health you help look after:

• Share your own record with a partner so they can help manage appointments and medications.
• Share a child’s or dependent’s profile with another parent or carer.
• Accept a profile shared with you by a parent or grandparent, so you can help with their care.

For more on managing the profiles you own and the ones shared with you, see the managing profiles guide.

Sharing with your healthcare team

You can share records with a healthcare provider the same way you share with anyone else - you choose exactly which categories they see and at what access level. This gives your provider a consolidated view of the information you have chosen to make available, drawn from across all your sources.

Providers on exora are verified before they can access shared patient data, and they only ever see what a patient has explicitly shared. There is no default or implied provider access. You can read more in the provider verification guide.

Change or revoke at any time

Everything you have shared lives in one place, under Settings then Permissions. From there you can:

• See who currently has access, and to which profile.
• Adjust the categories or access level of any share.
• Extend or shorten how long access lasts.
• Revoke any share instantly - once revoked, the other person can no longer see your data.

Sharing is never permanent unless you want it to be. Your record stays under your control for as long as you own it.

Questions?

If you have a question about sharing or want help setting up access, contact us at support@exora.au.