| Data residency | ap-south-1 (Mumbai). No cross-border replication or backup. | Live |
| Encryption | TLS 1.3 in transit; AES-256 at rest, including backups. | Live |
| Tenant isolation | Row-level security in the database, not filtering in the application. Proven against a second hospital rather than asserted. | Live |
| Access control | Role-scoped: reception, doctor and hospital admin each reach only their own screens. | Live |
| Audit trail | Every clinical and billing write is recorded and attributable, and the hospital reads its own trail at Settings, Audit trail. | Live |
| Consent (DPDP) | Purpose-bound consent records, retention windows, deletion on request. | Live |
| Backups | Point-in-time recovery. Restore drills quarterly. | Live |
| Sub-processors | Listed in the DPA. Notice before any addition. | Live |
| Two-factor authentication | Mandatory second factor for administrator accounts. | Roadmap |
| Support impersonation | Support access is read only, capped at thirty minutes, needs a typed reason, and is written into the hospital's own audit view. | Live |
| ABDM / ABHA | HIP registration and ABHA capture at registration. | Roadmap |
| Penetration test | Third-party test annually; summary letter available under NDA. | Roadmap |