In active development · early access soon

Collect field data anywhere —
offline and tamper-evident.

Science and Tech for the Ground Up

Load a form and collect on any device with no signal. When you're back online, records sync on their own — each one signed and hash-chained, so it can never be silently altered.

100% offline collection
every one records signed
FHIR open standard
groundmed · survey-04 offline · buffering
Verified chain
Household roster
Subject ID S-2231
MUAC (mm) 128
Consent granted
Local outbox 0

Records collect offline, buffer locally, then sync and link into a verified chain when the signal returns.

/ how it works

From a spreadsheet to a verified record.

Author a form, collect it in the field with no connectivity, sign each record on the device, then sync and verify when you're back online. Four steps, no lost work.

01 · author

Author

Build a questionnaire in a spreadsheet. It compiles to the FHIR standard and pushes to devices — no app release needed.

02 · collect

Collect

Operators work fully offline. The app renders the form, validates answers, captures consent, and stores records encrypted on-device.

03 · sign & chain

Sign & chain

Each finalized record is signed on the device and linked into a hash-chain — tamper-evident and attributable to the operator who collected it.

04 · sync & verify

Sync & verify

When a connection returns, records upload automatically. The backend verifies every signature and hash-link before storing them.

One record, end to end

The lifecycle of a single record — from the field, offline, to a verified row in your store.

signed & verified
01 render The app renders the form from FHIR.
02 capture Answers validated, consent captured, offline.
03 sign Signed on-device and hash-chained.
04 verify Signature checked on sync, then stored.

Standards in, no lock-in out

HL7 FHIR

Forms compile to HL7 FHIR and records export as FHIR resources — interoperable with health systems and aligned with open, interoperable health-record standards. Your data stays yours, in an open standard, not a proprietary silo.

open standard · your data
/ use cases

Built for the field, where connectivity and trust are thin.

Wherever data is collected off the grid and integrity is non-negotiable, GroundMed keeps every record complete, consented, and verifiable.

clinical

Medical & field surveys

Patient and household data in low-connectivity settings — captured offline, consented, and signed the moment it's finalized.

temporal

Longitudinal studies

Repeated measures on the same subject over time, linked by a stable subject ID — so each visit joins a clean, verifiable history.

cohort

Population follow-ups

Cohort rosters and revisit tracking for public-health programs — know who's been seen, who's due, and what changed since last time.

z-score

Nutrition screening

Anthropometry, MUAC and z-scores computed on-device, with validation that flags out-of-range readings before they're saved.

rct

Experimental design for public policy

Treatment and control arms with randomization built in — clean assignment and auditable records for rigorous RCTs.

For health and research organizations, NGOs, and public-health programs running consented data collection in the field.

/ why teams trust it

Data you can actually stand behind.

In the field, a record you can't trust is worse than no record. GroundMed is built so every entry is complete, consented, and provably unaltered — by design, not by policy.

01 works offline

Offline-first, always

Nothing an operator needs in the field requires a signal. Full collection with zero connectivity; automatic sync when it returns — no lost work.

02 tamper-evident

Tamper-evident & attributable

Every record is device-signed and hash-chained. Any later change is detectable, and each record is provably attributable to the operator who collected it.

03 consent by default

Consent by default

Explicit subject consent is captured as part of the record, and sensitive data is treated as sensitive from the first tap — not bolted on afterward.

04 open standard

FHIR standard, no lock-in

Records are HL7 FHIR resources you can export and move. Interoperable with health systems — never trapped in a proprietary format.

05 free forever

Free forever

The tool itself is free to use, with no per-seat, per-form, or per-record fees. The only cost is your own server infrastructure.

/ security & privacy

Integrity and privacy, engineered in.

GroundMed is built for settings where data integrity and privacy matter. Protection isn't a setting you switch on — it's how the record works from the moment it's collected.

Encrypted at rest & in transit

Records are encrypted on the device and over the wire. Keys live in the phone's secure hardware, so data on a lost device stays protected.

Signed, hash-chained records

Each finalized record is cryptographically signed and linked in a hash-chain, so any later change is detectable — tamper-evident, not blockchain.

Explicit consent for sensitive data

Health data is treated as sensitive by default, with explicit subject consent captured and stored alongside every record.

Built for domestic data-protection law

GroundMed is built to comply with the domestic laws that govern data protection and management, with privacy, encryption, and explicit consent built in from the start.

A design posture, not a certificate

honest by design

We describe how GroundMed is engineered — encryption, signed records, explicit consent, and privacy by design. Compliance ultimately depends on how your organization deploys and operates it; we make no certification claims.

/ pricing

The tool is free. Always will be.

GroundMed is free to use — no license, per-seat, per-form, per-record, or per-submission fees, and no features locked behind a paywall. The only thing you pay for is the server infrastructure it runs on, which your organization provisions itself.

No per-seat pricing

Add every operator, supervisor, and analyst you need. Team size never changes the price of the tool.

No per-record fees

Collect a hundred records or a million. You're never metered or charged by volume.

Nothing paywalled

Offline collection, signing, consent, FHIR export — the core features are all included, for everyone.

What you actually pay for

self-hosted · you own it

Only your own backend: the servers and storage GroundMed runs on. You provision and control your infrastructure — and if you'd rather not, managed provisioning may be offered as an option. Either way, the software stays free.

why it's free

GroundMed is about more than collecting data offline. We believe the most advanced science and technology should serve the people who care for the least privileged — the ground operators, nurses, and doctors doing the hardest work in the hardest places. Our commitment is to put world-class software in their hands, so they can serve their communities better and collect, store, and analyze their data better. Keeping GroundMed free is how we live that.

/ get started

Ready to collect data you can trust?

We'll walk you through a live collection, the offline-to-verified flow, and how GroundMed fits your surveys and studies. Request a demo or join the waitlist.

or email us at hello@groundmed.org Part of the Expert-family, powered by ExpertEngine.