Methods and systems for performing operations comprising: receiving, by a server from a client device, a request to access a data object comprising one or more medical records, the request comprising authentication information; determining, by the server, that the authentication information is valid; in response to determining that the authentication information is valid, transferring, by the server, the data object to a temporary storage location; transmitting a first portion of the data object to the client device from the temporary storage location; and deleting the first portion of the data object from the temporary storage location after the first portion of the data object has been transmitted to the client device.