Prove your care records were never changed.

Testied seals what happens around a fall, a restraint or a delivery the moment it happens, with a signature kept outside your systems and a time stamp from an independent authority. Years later, anyone can check the record, and nobody can quietly rewrite it.

The sample incident on this page is synthetic. Its hashes, signatures and FreeTSA time stamps are real, and your browser is checking them now.

Incident INC-SAMPLE-0001

Ward 3 · Bed 302B · synthetic

Checking…
Generated image of an empty single-bed hospital room at night with a lamp on the bedside cabinet.
Synthetic room · generated with World Labs
  1. 21:34:52+0.0 sBed exit detectedFrom the bed-exit radar, as sentChecking…
  2. 21:35:12+19.4 sNurse at bedsideRegistered nurse · arrived after 19.4 sChecking…
  3. 21:35:38+45.4 sRestraint decisionNot used; alternatives recordedChecking…
  4. 21:35:53+60.8 sGuardian notifiedDelivery receipt sealedChecking…
Re-checking hashes and signatures in your browser…

Measured9 November 2026

17 of 17 integrity tests pass, including an insider re-signing the ledger with a stolen key.

RFC 3161 time stamps from an independent authority, checked end to end against its root.

Ed25519 signatures, with a key the ledger refuses to keep beside its own records.

Restraint records follow Article 39-7 and Annex 7 of the Enforcement Rule of Korea's Medical Service Act; missing items are sealed as gaps.

The record is read years after the night it was written.

When a family sues or an auditor asks, the question is rarely what happened in general. It is what was recorded, when, and whether anyone touched it since. Courts weigh the gaps and the times.

  • Seoul High CourtReported December 2016

    105 minutes with no fetal monitoring or nursing entries in the delivery room weighed against the hospital. Report

  • Busan District Court2023

    A patient's fall in hospital: KRW 282 million, with the hospital held 60% responsible. Case

  • Seoul Central District Court20 November 2025

    A caesarean 25 minutes after documented bradycardia was held appropriate, and a KRW 1.5 billion claim was dismissed. The times were on record. Report

As reported in Korean medical and legal press. Testied does not make a record complete. It makes a record provable, including what is missing from it.

Sealed when it happens. Proven from outside the building.

Testied makes no sensors and reads nothing clinical. It takes events from the systems already in the room and seals them in order. The values below are from the sample incident.

  1. 1

    Capture

    Bed-exit radar, nurse call, badge readers and the EMR send events as they happen. Each is kept exactly as the vendor sent it.

    event  BED_EXIT_DETECTED
    source bed-exit radar
    time   21:34:52
  2. 2

    Seal

    Each record is hashed into a chain with the one before it and signed with an Ed25519 key held outside the ledger.

    prev cdc44d…
    hash 7b451a…
    sig  ed25519 715e85f8…
  3. 3

    Stamp

    An independent RFC 3161 authority signs each record's hash. A record rewritten later gets a late stamp, and the check reports it.

    tsa     FreeTSA
    genTime 21:35:13
    lag     +0.3 s
  4. 4

    Checkpoint

    The head of the chain, signed and stamped, goes to people outside the hospital. Any rewrite before a checkpoint fails, even with the key.

    head seq 4 · baf6e0…
    sent guardian, insurer
    tsa  21:35:54

Try to alter a sealed record.

This is the incident from the top of the page, with its real hashes, signatures and time stamps. Change anything below and your browser re-checks the whole chain, the way an expert witness would.

Change the record

Record 2. Make the response look faster.
s
Restraint decision Record 3. Rewrite what was decided.
Record 4. Change what the family was told.

What your browser checked

Checking…

#RecordContent hashLink to previousSignatureTime stamp

Hashes, links, signatures and the checkpoint are checked in your browser with SHA-256 and Ed25519. The FreeTSA tokens are checked with OpenSSL; download one and follow the steps at the end of the page.

It records. It never interprets.

Designed as record-sealing software. Its regulatory classification has not yet been confirmed by Korea's Ministry of Food and Drug Safety.

What Testied seals

From systems already in the room, in the order things happened.

  • Sensor events, exactly as the vendor sent them
  • Staff arrival, how it was proven, and what was doneBadge reads and nurse-call cancels count as proof; typed times are marked as typed.
  • Restraint orders, consent, observations and release, item by item under Annex 7 of the Enforcement Ruleconsent document: missing — sealed as a gap
  • Guardian notifications with their delivery receipts
  • Shift handovers and who was on duty

What it never does

So the record stays neutral, and courts can trust it.

  • Read sensor data, predict falls or detect delirium
  • Raise clinical alerts or advise on care
  • Fill a missing item with a defaultA blank stays blank, and is sealed as blank.
  • Trust its own clock, keys or storageTime, keys and checkpoints come from outside the ledger.
  • Keep video or audio from the room

Delivery rooms are next.

Planned, not yet built. From 27 May 2027, Korea limits prosecution for accidents in high-risk essential care, childbirth included, when the hospital has monitored and explained as required. Both have to be shown from records.

Fetal monitoring traces
Sealed as they are recorded, without being read. A gap in the trace stays visible.
Decision to delivery
The time a caesarean was decided and the time of delivery, each taken from the system that knew it.
Explanation and consent
Who explained what, and when the form was signed, sealed with the form's hash.
For as long as a claim can be brought
Sealed records stay verifiable after the paper strips are gone.

What is measured, and what is still a plan.

Every figure on this site is either measured, with its date, or marked as planned. Nothing here is a customer, a certification or a clinical outcome, because none exist yet.

ItemStatusDetail
Integrity test suiteMeasured17 of 17 passing on 9 November 2026Outside edits, insider re-signing, late re-stamping, rewrites after a checkpoint, deletions, forged checkpoints, concurrent writers, time-stamp outages.
Independent time stampsMeasuredToken from FreeTSA verified against its root, 9 November 2026
The sample on this pageMeasured4 records sealed with the production code and FreeTSA, re-checked in your browser
Batch stampingPlannedOne time stamp per minute of events through a Merkle tree, for hospitals with thousands of beds
Delivery-room recordsPlannedFetal monitoring traces, decision-to-delivery times, explanation and consent
Security certificationPlannedISMS-P in Korea, SOC 2 in the United States
IntegrationsPlannedEMR, nurse call and bed-exit sensor vendors
United States rulesPlannedRestraint and seclusion records under 42 CFR 482.13
First hospitalsTargetPilots with Korean obstetric and long-term care hospitals
Where this is headedTargetServing the world's largest hospitalsNot achieved. Stated so the work is measured against it.

Priced per bed and per delivery room.

Annual contracts. The first ward runs free for 90 days. Prices exclude VAT. Set on 9 November 2026.

Care Ledger

Wards and long-term care hospitals

$9per bed per month

₩9,900 per bed per month in Korea

  • Bed-exit, nurse-call, badge and EMR events, sealed as sent
  • Restraint orders, consent, observations and release under Annex 7
  • Guardian notifications with delivery receipts
  • Checkpoints handed to outside parties
  • Dossiers for courts and audits, kept verifiable for 10 years
Start a 90-day pilot

Delivery Ledger

Labour, delivery and caesarean rooms

$290per delivery room per month

₩390,000 per room per month in Korea

  • Fetal monitoring segments, sealed as recorded
  • Monitoring gaps sealed as their own records
  • Decision-to-delivery time from the systems that knew it
  • Explanation and consent, with missing items sealed as gaps
  • EEG and BCI device output, sealed exactly as the device sent it
Start a 90-day pilot

Enterprise

1,000 beds or more, or outside Korea

Quoteper contract

Priced with you

  • Signing keys in your HSM or cloud KMS
  • One time stamp per minute of events, for thousands of beds
  • Rules for your country, starting with the United States
  • Your EMR, nurse call and sensor vendors
Talk to RISCON Labs

About Testied

A company built by SIMUL

Testied is edition 22 of SIMUL, a fully orchestrated company built by simul.risconlabs.com. Its people and its office are synthetic. Its product code, its tests and the ledger on this page are real.

What the room image is

The hospital room at the top was generated with the World Labs API from a text prompt. It is an illustration. No generated image is used in any check, and no real patient or hospital appears on this site.

Who it is for

Directors of quality and patient safety, hospital counsel, and heads of obstetrics who need records that hold up years later without adding a single click for the nurses who make them.

Take the sample home and check it yourself.

One file holds everything needed to re-check the sample: the records, their signatures, the public key and the time-stamp tokens.

How to verify it without this website
  1. For each record, write the header fields event_time_ms, prev_hash, record_type, recorded_time_ms, seq, signer_pubkey_hex, stream_id, subject_id as JSON with sorted keys and no spaces. SHA-256 of RISCON-EVIDENCE-V3, a newline, that header, a newline and payload_json must equal record_hash, and prev_hash must equal the hash of the record before it.
  2. Check signature_hex over that hash with Ed25519 and the published key 8245cf25…4b41 (fingerprint 00793eba…e844).
  3. Save a record's tsa_token_b64 as a binary file and run openssl ts -verify -digest <record_hash> -token_in -in record.tst -CAfile cacert.pem with FreeTSA's root certificate.

Ward 3 · Bed 302B, in 3D

Drag to look around. Each pin marks where a sealed record happened. Change a record in the tamper test and its pin turns red here.

Outside the room:

Synthetic room generated with the World Labs API. Pin positions are illustrative; the room is never used in any check.