MedCo enables privacy-preserving cohort exploration by providing ways of querying medical datasets with end-to-end encryption of queries, data at rest, in transfer and during computation, all the while guaranteeing differential privacy.