API base: https://api.nanosense.net
Reference: Version 3.0
Format: JSON in, JSON out

Documentation

Everything you need to integrate, operate and review NanoSense in a healthcare application.

Quickstart

**Table 1.** The three quickstart calls, in order. Paths are relative to the API base.
Step	Request	Purpose
1	`POST /tenants/register`	Register a tenant
2	`POST /query`	Run a query, authenticated with a bearer JWT
3	`GET /billing/usage`	Check usage

# 1. Register
curl -X POST /tenants/register \
  -d '{"name":"My Clinic", ...}'

# 2. Query
curl -X POST /query \
  -H "Authorization: Bearer <jwt>"

# 3. Check usage
curl /billing/usage

Abbreviated sample. The ... stands for the remaining registration fields, and the query call also takes a request body. The API reference lists every parameter.

API and integration

**Table 2.** Reference material for developers.
Resource	Covers	Open
Interactive API Explorer	Try every endpoint live with Swagger UI. Authenticate, send queries and inspect responses in your browser.	Open Swagger UI
API Reference (v3.0)	Complete endpoint reference with curl examples: authentication, query modes, billing, FHIR R4, imaging, analytics and admin.	Read the reference
CSV Ingest Guide	Import patient data from any EMR CSV export, including Plato Medical clinics. Profile selection, export guidance, a register-to-query walkthrough and error-report interpretation.	Read the CSV guide
Partner Integration Guide	BFF proxy templates (Express.js, FastAPI, React hook), webhook subscriber lifecycle coupling, FHIR data push and security controls.	Read the partner guide
SDK Reference	Official Python (`medintelligent`) and TypeScript (`@medintelligent/sdk`) client libraries with async and sync support.	Read the SDK docs

Security, legal and validation

The documents a security or procurement reviewer asks for. We sign a Business Associate Agreement with every customer.

**Table 3.** Security, compliance and legal documents.
Document	Covers	Access
Security Whitepaper	Architecture, encryption (at rest and in transit), access controls, tenant isolation, PHI protection, audit logging and a HIPAA Security Rule coverage matrix.	Request the whitepaper
Data Retention Policy	Retention periods for clinical data (6 yr), audit logs (10 yr) and imaging (7 yr). Disposal methods, automated enforcement and tenant termination procedures.	Read the policy
Regional Privacy and Compliance Brief	Singapore PDPA and Australia Privacy Act obligations summary, plus data residency: SG tenants on ap-southeast-1 (live), US on us-east-1 (live), AU on ap-southeast-2 (provisioned). Informational only, not legal advice.	Read the brief
Incident Response Plan	Seven-phase incident response with severity classification, breach notification timelines (72 hr CE, 60 day HHS) and annual testing requirements.	Read the plan
Business Associate Agreement	Standard BAA covering permitted uses, safeguards, subprocessors, breach notification and the on-premises VPC deployment option.	Request the BAA
Platform Validation Report	Live production test results across all subscriber tiers: FHIR ingest, rate-limit verification, query performance and clinical accuracy.	Read the report

Read the security statements

Access

API keys are issued when you subscribe through AWS Marketplace. Questions about a BAA or a security review go to hello@nanosense.net.

Request access