Copyright © 2026 Authors retain the copyright of this article. This article is an open access article distributed under the Creative Commons Attribution License which permits unrestricted use, distribution, and reproduction in any medium, provided the original work is properly cited.

@article{197839,
        author = {Ankit Upadhyay},
        title = {VitaCollab: A Privacy-First Personal Health Record Platform with Consent-Driven Workflows and a Longitudinal Health Timeline},
        journal = {International Journal of Innovative Research in Technology},
        year = {2026},
        volume = {12},
        number = {11},
        pages = {11236-11244},
        issn = {2349-6002},
        url = {https://ijirt.org/article?manuscript=197839},
        abstract = {The fragmentation of medical records across disconnected hospital systems remains one of the most persistent structural problems in modern healthcare. Patients routinely lose control of their own clinical data, creating barriers to continuity of care, emergency access, and informed self-management. While Electronic Health Record (EHR) systems have digitised individual institutions, they have not resolved the fundamental asymmetry in which providers, rather than patients, hold authority over personal health information.
This paper presents VitaCollab, a privacy-first, patient-centric Personal Health Record (PHR) platform that reframes data ownership as a first-class architectural concern. Built on a fullstack web architecture using Next.js, Node.js with Express, and MongoDB, VitaCollab introduces two principal contributions: (1) a consent-driven approval workflow that requires explicit patient authorisation before any hospital-uploaded record becomes part of the canonical health history, and (2) a longitudinal Health Timeline interface that presents medical events in a chronologically ordered, visually coherent feed inspired by social media interaction patterns. Security is realised through JSON Web Token (JWT) authentication with refresh-token rotation, RoleBased Access Control (RBAC), and layered AES-256 encryption at the application, file, and database levels. The platform is deployed at https://vitacollab.in and its architecture is evaluated against the requirements of India’s Ayushman Bharat Digital Mission (ABDM), demonstrating structural readiness for national PHR certification.},
        keywords = {Personal Health Record, Patient Data Ownership, Consent-Driven Workflow, Health Timeline, Next.js, JWT Authentication, RBAC, AES-256 Encryption, ABDM, Digital Health, Healthcare Interoperability},
        month = {April},
        }