Patient
The citizen
Onboards over WhatsApp, verifies once, and holds a wallet for rewards and payments. Proves age or residency without revealing anything else.
Holds: Verified Patient credential, People's Coin, stablecoin balance
People's Wallet Concordium
Infrastructure blueprint · v0.1
A blueprint for embedding Concordium into the People's stack: one verified account and wallet for every actor, provable trust where it earns its keep, and compliant payment and reward rails you own end to end.
WhatsApp, the AI avatar, doctor consultations, MyKiya, MedPlus fulfilment, and every patient record. All of it stays in your systems, unchanged, where you control it.
A thin, high-value layer underneath: verified identity, prescription integrity, consent receipts, and the People's Coin and stablecoin payment rails.
Anchored to your model
Your People's Doctor Africa Triangle already names the three pillars. Concordium does not touch the first two. It adds provable trust and the payment rail to the third, the Execution Platform, where consultation, prescription, fulfilment, and outcomes happen.
Telecom and bank reach: MTN, Airtel, Telecel, Orange, and the banking partners. Stays exactly as it is.
Pharma, pharmacy, and last-mile partners: Novo Nordisk, MedPlus, HealthPlus, and delivery. Stays exactly as it is.
Consultation, prescription, fulfilment, outcomes.
Concordium plugs in here: verified doctors and patients, tamper-proof prescriptions, consent receipts, and payment and reward rails.
Reach figures from the People's Doctor Africa Triangle. Concordium scales to match: ~1,200 to 2,000 TPS, finality in 2 to 4 seconds.
One app, one wallet
The blockchain is not a separate destination. Using the Concordium Wallet SDK and the ConcordiumID App SDK, the wallet and identity live inside the People's experience. Doctors, patients, the avatar, pharmacies, and data buyers each get a Concordium account they never have to think about.
Patient
Onboards over WhatsApp, verifies once, and holds a wallet for rewards and payments. Proves age or residency without revealing anything else.
Holds: Verified Patient credential, People's Coin, stablecoin balance
Doctor
Carries a Verified Doctor credential tied to their MDCN registration. Presents it as a proof at login and at the moment of prescribing.
Holds: Verified Doctor credential, consultation fee balance
AI avatar
Runs as a registered, accountable agent with a verified entity behind it, so every action it takes carries an auditable line back to People's Doctor.
Holds: Verified agent identity, sponsored transaction rights
Pharmacy
Scans the prescription QR to confirm it is authentic, signed by a verified doctor, and not already used. Releases medicine, then the escrowed payment settles.
Holds: Verified pharmacy account, settlement wallet
Data seller
Consents to share anonymised health insights and earns People's Coin for it. The consent is recorded on chain and can be withdrawn at any time.
Holds: consent receipts, People's Coin earnings
Data buyer
Novo Nordisk and others verify as a business identity, pay for anonymised aggregate insight products, and get a provable record of lawful basis behind every dataset.
Holds: verified business identity, settlement account
The embedded wallet is real and ready. Integrate the Concordium Wallet SDK for full in-app control, or offload identity to the @concordium/id-app-sdk so the People's app handles signing while account creation and recovery run through the Concordium ID App. Sponsored transactions mean your users transact in stablecoin and People's Coin without ever holding or understanding a gas-token.
The pieces
Each is a protocol-level capability, not a fragile smart contract. Built-in identity and compliance come with the rail rather than being patched on top.
Protocol-level identity. Every account is tied to a real verified person or business, held encrypted and disclosable only under a court order.
Where it fits: the verification step in your WhatsApp onboarding (NIN or BVN backed) and at doctor login. The base every other piece sits on.
W3C verifiable credentials. Issue a Verified Doctor or Verified Patient credential that lives in the holder's wallet and proves a fact with zero knowledge.
Where it fits: turns your licensed-doctors promise from a database claim into something a pharmacy, regulator, or Novo can verify directly.
Native tokens issued by the protocol, no smart contract honeypot. Built-in mint, burn, pause, allow and deny lists, and identity-gated holding.
Where it fits: People's Coin and a Naira-pegged stablecoin. You are the issuer and you keep full control of supply and access.
Trustless escrow at the protocol layer. Funds are held under conditions, not in a contract that can be drained, and release on confirmation.
Where it fits: secure medicine purchase. The patient's payment is locked, then released to the pharmacy only when the order is dispensed or delivered.
One checkout step that verifies identity or age and moves the stablecoin payment together, with no extra screens for the user.
Where it fits: the MyKiya and pharmacy checkout. Confirms the buyer is eligible and settles payment in a single tap.
Pay-per-call payments for service-to-service and agent-to-agent use, settled in stablecoin.
Where it fits: pay-per-consultation, and pay-per-query for data buyers querying People's Research insight products.
An ERC-8004 compatible registry that anchors an AI agent to a verified human or business, with a Verified by Concordium badge that travels across chains.
Where it fits: the AI doctor avatar becomes accountable, supporting the doctor extender, not replacement position regulators prefer.
Users and agents transact in native stablecoins without ever needing to hold the network token.
Where it fits: the invisible-wallet experience. Citizens earn, spend, and pay without touching crypto mechanics.
Tech stack
Your platform is the top. The Concordium rail is the bottom. Between them sit the embedded wallet and the issuer and verifier services. Switch between the diagram and the detailed text, or flip the highlight to see exactly what touches the chain.
Off chain · the People's stack
On chain · the Concordium rail
Concordium L1 · ConcordiumBFT · 2 to 4s finality · ~EUR 0.01 per transaction
Process flows
Each journey shows what happens in your platform and the few moments that touch the chain. See it as a flow diagram or as detailed steps. The point is how little needs to be on chain, and how high-value each on-chain moment is.
From a WhatsApp message to medicine at the door, with one identity check and one locked payment.
The citizen taps an ad and talks to the AI avatar over WhatsApp in their own language. Onboarding and screening happen entirely in your platform.
Before a prescription can be issued, the patient verifies once with NIN or BVN and receives a Verified Patient credential into their embedded wallet. The same WhatsApp number becomes their patient ID, now backed by a credential they can prove with a zero-knowledge proof, nothing more revealed.
A verified doctor reviews the case over video. Notes and diagnosis stay in your system of record.
The prescription is signed by the doctor and its fingerprint is anchored on chain. The patient gets a QR code. The medicine details stay off chain.
The patient pays in Naira-pegged stablecoin. The funds are held in a Protocol-Level Lock, not released yet.
The pharmacy verifies the prescription, dispenses, and confirms. The lock releases payment to the pharmacy. The prescription is marked used and cannot be reused.
Reminders and coaching run in your app. Healthy engagement and consented contribution earn People's Coin.
A doctor proves they are real and licensed once, then carries that proof into every consultation and prescription.
The doctor verifies their MDCN registration and receives a Verified Doctor credential into their wallet, issued against the medical council register.
At login they present the credential as a proof. The platform confirms a valid, current licence without storing or seeing the underlying record.
The doctor reviews the avatar's intake summary and consults the patient. The clinical work stays in your platform.
The doctor signs with their wallet key. The signature and the prescription fingerprint anchor on chain, binding the prescription to a proven licensed provider.
The consultation fee settles to the doctor's wallet in stablecoin, with per-consultation payment handled by x402.
If the licence is revoked, the credential is revoked, and the doctor can no longer authenticate or prescribe. Trust stays current automatically.
A citizen chooses to contribute anonymised insights, earns People's Coin, and stays in control of that choice.
In the People's Wallet, the citizen is offered People's Coin in return for consenting to share anonymised health insights.
They opt in. A consent receipt is written on chain: what they agreed to, and when. It is revocable and tamper-evident. Their actual data never goes on chain.
Their data feeds People's Research only as anonymised, aggregated insight, processed inside your platform.
People's Coin is minted to their wallet as the reward. You are the issuer and you set the rules of the reward.
They spend People's Coin on health, food, airtime, and more. At any time they can withdraw consent, and the on-chain receipt records that too.
A pharma company or insurer buys anonymised aggregate insight, and gets a provable record of lawful basis behind every dataset.
Novo Nordisk, an insurer such as AXA, or a research funder verifies a business identity on Concordium, created from corporate documents. Only accredited buyers can transact.
They explore the People's Research catalogue of anonymised, aggregated insight products built inside your platform.
They settle in stablecoin, with pay-per-query access metered by x402. Pricing and access are yours to control.
They get anonymised aggregates and analytics, never raw or identifiable health data. No personal data leaves your platform, and none is on chain.
Behind the dataset sits the on-chain consent record. The buyer and any regulator can confirm the data was contributed with live consent.
Secure commerce
Protocol-Level Tokens are your stablecoin and reward rails. Protocol-Level Locks add trustless escrow, so a patient's payment is protected until the medicine is actually in their hands. The funds are held at the protocol layer, not inside a contract that can be drained.
The patient checks out. Identity and prescription are verified, and stablecoin payment is captured in one step.
InitiatedThe stablecoin moves into a Protocol-Level Lock. The pharmacy can see the order is funded, but no one can touch the money yet.
In escrowThe pharmacy scans the QR, confirms the prescription is valid and unused, and dispenses or ships the medicine.
FulfillingDelivery or dispense is confirmed. The lock releases and the pharmacy is paid. The prescription is marked used.
SettledIf the order is not delivered, the lock returns the funds to the patient. No counterparty risk, no idle middleman.
ReturnedYou issue People's Coin and the stablecoin, so you own them - and the responsibility for them - end to end. Concordium provides the decentralised rail and the controls: as the issuer you keep mint, burn, pause, and allow / deny lists, plus identity-based geofencing. The infrastructure is ours. The token, and the call on how to run it, is yours.
The data market
People's Research becomes a market where citizens are paid for what they choose to share, and buyers can prove they bought it lawfully. The data itself stays inside your platform. Only the consent and the payment touch the chain.
Sell side
Buy side
The one rule
A public ledger cannot be edited or deleted, which is exactly why personal health data must never be written to it. Keeping data off chain is what keeps you compliant with NDPR and GDPR, including the right to erasure, while the chain still proves everything that matters.
Verified trust, payments you own, and a data market that is provable by design. Ready to integrate, with the wallet and SDKs available today.
People's Wallet Concordium