Reunivo
Reunivo is a web platform that facilitates contact between organ-donor families and recipients — a real human need in a setting where the law forbids healthcare providers from revealing who donated to whom. Users upload pseudonymized medical records and an AI matching engine (pgvector + OpenAI embeddings) surfaces possible connections based on clinical and narrative parameters. Anonymity stays absolute until explicit mutual consent: medical data is end-to-end encrypted with libsodium and the server never reads message content. EU-first GDPR stack throughout (Supabase Frankfurt, Clerk with HIPAA BAA, self-hostable LiveKit for post-match video calls). Free service — no paywall on core features.
The problem
The law forbids hospitals from revealing who donated to whom, yet families still need to find each other. The technical problem is as delicate as the human one: connecting two people without anyone — the platform operators included — being able to trace health data or identities before both sides have explicitly chosen to.
How we tackled it
Records are uploaded pseudonymised, and the matching engine works on clinical and narrative parameters together, because the connection is rarely purely clinical. Matches stay anonymous until a mutual consent granted step by step, and revocable. Messages are end-to-end encrypted: the server carries them, it never reads them. After a match, video calls happen inside the platform.
Technical choices
Vector search with pgvector on Supabase for matching, client-side libsodium encryption, Clerk authentication, self-hostable LiveKit video. Infrastructure entirely within the EU (Supabase Frankfurt): a GDPR-first decision taken up front, not compliance bolted on later. Core features stay free, with no paywall.
What it includes
Account registration and verification, pseudonymised record upload, clinical-narrative matching engine, multi-stage consent with revocation, end-to-end encrypted messaging, built-in video calls after a match, and an admin panel for moderation. Documented GDPR-first setup: EU-only data, client-side encryption, minimal data collection and no advertising processing.