Entitle AI Passport Ideathon 2026 · Work · Build

Prove the need.
Never the diagnosis

Getting a disability accommodation means handing over a medical diagnosis — to the university, the internship, the exam board, the employer, and every AI tool they run. Entitle carries the entitlement between them and seals the diagnosis so completely that no one can ask for it.

entitle.pass/i/priya
The problem

Five doors.
One unchanged fact

Priya was assessed once, in 2023. Nothing about her has changed since. She has proved it five times anyway — and each institution asked for far more than it needed to act.

2023

University

Full assessment report

2024

Internship

Doctor's letter

2025

Study abroad

Diagnosis + medication

2026

Exam board

New letter, under 6 months

2026

Employer

Occupational health referral

How it works today

  • A clinician must diagnose her, agree the diagnosis warrants accommodation, and document both — for every institution, from scratch.
  • Disclosure is permanent. Once an employer knows a diagnosis it cannot be untold, and no expiry applies to it.
  • The disclosure is disproportionate. An exam board needs to know she gets 1.5× time; it receives her medical history.
  • Each institution can infer, from the freshness of a letter, that she has sought accommodations elsewhere.

How it works with Entitle

  • Assessed once. The entitlement becomes a set of named, verifiable fields the person holds.
  • Each institution requests exact fields, states a purpose and a duration, and receives only what she grants.
  • The diagnosis sits in a sealed vault that is not requestable at any scope — so no one can ask, and no one can pressure her into it.
  • Every read is receipted, every pass expires, and releases are independent — so no institution learns about the others.

The American Bar Association describes the current requirement as so onerous that it "adds an element of discrimination to the enforcement of anti-discrimination law."

How it works

Four steps, and one
thing that can't move

01

Assess once, issue a passport

A clinic converts an existing diagnosis into an Entitle pass. The functional entitlements become named fields — extra_time, flexible_start — carrying an assessor class and an expiry. The diagnosis, clinician, medication and report go to the Vault.

02

An institution requests exact fields

It cannot browse a profile or ask for "her accommodation record". It names the fields it wants, states why — configure interview format — and states for how long: hiring process only. A pass granted for scheduling cannot be reused for onboarding.

03

She approves, edits down, or denies

Editing is the load-bearing path. Asked for four fields, she grants the two the interview actually needs. If a combination is unusually identifying, Entitle warns her before she releases it — because fields that are individually harmless can be jointly revealing.

04

Every read is receipted, every pass revocable

The institution holds a resolvable pass, not a downloaded record. It expires on the event that justified it, and she can end it in one action from the same screen that shows the evidence.

The passport

One side travels.
The other never can

Tap the card to see the sealed side

Live demo

Ask once.
Then carry it

Walk the whole loop: Priya asks the clinic that diagnosed her for a pass, receives it, then decides what each institution gets. Nothing is pre-baked — the ledger below moves with you.

  1. 1 · Request
  2. 2 · Issue
  3. 3 · Hold
  4. 4 · Share
  5. 5 · Receipts
flow ready
RC

Riverside Health Clinic

Diagnosed and assessed Priya on 02 Oct 2023 · registered clinician

Priya asks the clinic that holds her medical record to issue a portable pass for the accommodations it assessed her as needing.

  • extra_time1.5×
  • flexible_startrequired
  • screen_readerrequired
  • quiet_roomrequired
Riverside Health Clinic is issuing your pass
  • Locating clinical record
  • Confirming clinician registration
  • Sealing diagnosis to Vault
  • Minting pass
Pass issued
extra_time1.5×
flexible_startrequired
screen_readerrequired
quiet_roomrequired
verified_byassessor · class A
valid_until2027-06-30
Vault · sealed at issue

diagnosis  ·  clinician  ·  medication  ·  assessment_report

These never entered the pass. They stayed inside the clinic that made the diagnosis — so there is no copy for Priya to leak, lose, or be pressured into sharing.

Each request names exact fields, a purpose and a duration. Untick anything that stage does not need.

The ledger

What crossed, and
what didn't

Northfield received

4 fields · expires on hiring decision

    Northfield did not receive

    10 fields · not requestable at any scope

      Northfield learns that Priya needs 1.5× time and a flexible start. It never learns why — and it never learns that she asked anyone else. Cross-institution correlation is the harm no existing process prevents.

      Receipts

      Every read,
      on the record

      Northfield Group2 fields 12 Aug 2026Interview format
      Meridian Exam Board1 field 04 Jun 2026Exam conditions
      Study Abroad Ltd3 fields 11 Mar 2025Placement setup Expired
      Summer internship0 fields 18 Jul 2024Onboarding Revoked
      Riverside Health Clinicissued 02 Oct 2023Original assessment Issuer

      Revocation isn't buried three levels into a settings page. It's one action, on the same screen as the evidence — and nothing was copied, so there is nothing left behind to revoke around.

      For institutions

      Why you'd want
      less data

      Entitle isn't only better for the person. Every institution in this chain is currently absorbing medical data it never wanted, can't safely use, and now has to store and defend.

      Stop holding what you can't use

      An exam board needs to know someone gets 1.5× time. A diagnosis is operationally useless to it and turns an ordinary scheduling system into a special-category data controller overnight. Entitle removes the liability by never sending it.

      Skip the verification loop

      Today a request means a form, a wait, a chase, and an occupational-health referral before anything is scheduled. A resolvable field with an assessor class and an expiry replaces the entire round trip.

      Defensible by construction

      Every read is receipted with its purpose, scope and duration. When a decision is challenged you can show precisely what you knew, when, and under what authority — and precisely what you did not know.

      Privacy & risk

      What could go wrong

      A design that only lists its strengths hasn't been thought through. These are the five ways Entitle could hurt the person it is meant to protect.

      An employer asks for more than it needs, and a candidate who wants the job grants it. Consent given under that asymmetry isn't really consent.

      Every request must state a purpose, shown beside each field so mismatches are legible. Over-broad requests are recorded and become visible as a pattern across many candidates — which is how it gets fixed at the source.

      An institution copies the values out before the pass ends, and revocation becomes theatre.

      Scoped resolution rather than bulk export, short purpose-bound durations, and evidential receipts. We are explicit that a passport cannot make retention technically impossible — what it does is make it evidentially costly, which is more than any current process offers.

      A system holding disability data for many people is a target worth attacking.

      The Vault is not exposed through any request path, so the surface reachable by an integrating institution contains no medical data at all. The shareable layer holds functional entitlements only — meaning a full compromise of the integration surface yields accommodations, not diagnoses.

      If only some institutions accept Entitle, the person carries two processes instead of one — and the tool meant to reduce burden adds to it.

      v1 targets a single high-repetition corridor — university to first employer — so the pass is useful with three participants rather than three hundred, and never replaces the existing route.

      The first version

      One corridor, one direction

      The first version doesn't have to solve accommodation. It has to prove that one assessment can serve two institutions without the second one learning a diagnosis.

      Out of scope for v1: multi-country assessor accreditation, employer-side enforcement tooling, and any write-back of new entitlements. Scope is a feature — the smallest version that proves the claim is the one worth building.

      Why not just a database?

      The only party who should hold it is the person it describes

      A university won't hand medical records to an employer's vendor. An employer won't accept a competitor's assessment API. A candidate won't trust either to hold the diagnosis. That isn't a product gap — it's the reason this has to be a passport.