# Identity & Access Management

DeMedic uses a decentralized identity (DID) framework based on W3C standards. Each user’s health identity is secured through cryptographic keys, not usernames or passwords. This enables:

* Verifiable credentials (VCs)
* Role-based access controls
* Anonymous yet accountable participation

Users can link multiple identifiers (e.g., wallet address, device, institution ID) and control which identifiers are disclosed in different contexts.
