Who can see your emergency profile, and when

Nobody can browse your emergency profile. It is only ever revealed through "break-glass" — a fast, logged, one-time emergency access by a verified responder.

How it stays safe:

- Break-glass access requires a credentialed responder (an EMT, paramedic, nurse, or ship doctor whose organization has verified their clinical license).
- The responder only ever sees the emergency subset — blood type, allergies, conditions, meds, advance directive. Never your full medical chart.
- Every single access is written to a tamper-evident log you can read, and you are notified immediately. Your emergency contacts are notified too.
- You control consent. In the Emergency medical section, turn Break-glass access on to pre-authorize responders. If you leave it off, a responder can still reach your profile in a genuine life-threatening emergency, but that access is flagged as not pre-authorized, escalated for review, and always notified — never silent.

To review who has accessed your profile, scroll to "Who accessed your profile" on the Personal safety page. Every row shows the responder's organization, the reason, and whether it was pre-authorized.