Skip to content
Private betaPsychiatry.Ink is currently in private beta. Access is invitation-only. EU/EEA access to storage-based workspace functionality is not generally available at this stage.
Request access

How it is built

An architecture that treats patient trust as a design constraint

Psychiatry.Ink is engineered so that patient identifiers cannot leak — not as a policy promise, but as a property of the system. This page explains the core architecture in plain language and introduces the two systems working behind the scenes: Mira and Noevia.

Three commitments the code enforces

Settings can be changed; architecture cannot. These three properties are structural.

The zero-knowledge patient vault

Patient name and date of birth are encrypted in your browser before anything is stored — AES-256, with a content key that is itself wrapped by a second key whose private half never leaves your device. Our server stores ciphertext; we could not read it even if we wanted to.

One gate for every AI call

There is exactly one code path through which text can reach an AI model. It de-identifies the text on the server, then re-checks the result; if identifying patterns remain, the call is blocked instead of sent. No feature can bypass the gate — an automated audit fails our build if one tries.

Advisory intelligence, clinician truth

Diagnostic criteria support and clinical extraction never write to the chart on their own. Every suggestion is a draft with evidence attached; only your explicit acceptance — your attestation — turns it into clinical documentation.

The data boundary

Where your data lives — and where it can never go

Three zones, one rule: readable patient data exists only in the first.

Zone 1

Your device

  • The editor, the case file and all clinical work happen here.
  • Patient identifiers are encrypted here; the private key stays in this browser.
  • Scanned documents are stored encrypted and are never parsed or uploaded for reading.
  • Deterministic engines — diagnostic criteria and Noevia — run entirely on-device.

Zone 2

Our server

  • Stores encrypted snapshots and wrapped keys — ciphertext plus technical metadata.
  • Runs the de-identification gate in front of every AI call.
  • Handles accounts, credits and sync. It holds no key that could open your vault.

Zone 3

AI providers

  • Receive de-identified clinical text only, and only when you trigger an AI action.
  • Return drafts that wait for your review — nothing enters the record automatically.
  • EU-resident model routing is available for practices that require it.

The full encryption story — with diagrams and concrete examples — is on the Security page. How the encryption works

Knowledge systems

Meet Mira and Noevia

Two named systems work behind the workspace — one keeps the pharmacological knowledge current, one makes clinical inference explainable.

Mira, the Psychiatry.Ink knowledge curator — an illustrated robot holding a book.

Medication intelligence

Mira

Medication Intelligence and Research Assistant

The name comes from her central purpose: bringing medication knowledge, research evidence and clinical decision support together in one structured intelligence system.

Mira is Psychiatry.Ink’s psychopharmacology knowledge and medication-governance layer. She combines established pharmacological knowledge, our structured medication database and selected external evidence sources to support clinically relevant information on indications, dosing, interactions, adverse effects, monitoring requirements and treatment strategies.

Audits the database
Compares monographs against structured claims and flags missing sections, inconsistent numbers and contradictions.
Watches the evidence
Monitors publications and regulatory sources — PubMed, Europe PMC, EMA, FDA — for changes that affect the knowledge base.
Verifies independently
Every proposal passes a second, independent verification: citation support, numeric plausibility checks, country-specific rules.
Never publishes alone
Anything risk-relevant goes to clinician review. Mira drafts; people decide what ships.

Rather than functioning as a static drug database, Mira continuously organises, compares and contextualises medication knowledge. She identifies missing or conflicting information and assists in preparing evidence-based updates — while consequential clinical claims remain dependent on verifiable sources and professional validation.

Mira works exclusively on the medication knowledge base. She has no access to patient cases, case files or any patient identifier — that separation is enforced at the database level.

StatusIn operation — releases are clinician-approved

Noevia, the Psychiatry.Ink deterministic analyst — an illustrated robot examining an evidence graph with a magnifying glass.

Deterministic clinical inference

Noevia

Networked Ontology for Evidence, Variability, Inference and Adaptation

The name is inspired by the Greek concept of noesis — the process of understanding, reasoning and forming meaning from knowledge.

Noevia is Psychiatry.Ink’s patient-specific intelligence layer: she transforms fragmented longitudinal clinical information into a structured, evolving representation of the individual patient — connecting symptoms, psychopathology, diagnoses, medication exposure, treatment response, risk, contextual factors and change over time.

Runs where the data is
Pure, deterministic code on the client. The patient evidence graph lives in encrypted device storage, inside the same zero-knowledge envelope as the vault.
The server ships rules, not data
Noevia downloads versioned, signed content packages — ontology, mapping rules, scoring rules. Patient data never travels the other way in readable form.
Every number shows its work
Every score is decomposable, recomputable offline and version-stamped — you can always ask why.
AI stays a candidate
Language models may propose candidates through the same guarded gate, but a candidate only becomes truth through deterministic rules or your acceptance.

Noevia identifies relevant patterns, contradictions and uncertainties — helping clinicians understand not only what has been documented, but how the available evidence fits together across the course of illness. She supports clinical reasoning; she does not replace it. Every conclusion remains traceable to the underlying documentation and subject to professional review.

StatusIn beta — advisory, with a limited initial clinical scope

Mira curates the shared medication knowledge. Noevia reasons across the whole clinical picture of the individual patient — symptoms, course, treatment and context — drawing on Mira’s foundation wherever medication is involved.

See the encryption in detail

The Security page walks through the vault and the AI gate step by step — with diagrams and concrete examples.

How the encryption worksQuestions? Read the FAQ