Trust & security

Written for the person reviewing us, not for a badge wall.

If you are on a procurement or IT review, this page is the short version of the answers. The full DPA, sub-processor list, and pen-test summary are available under NDA.

Data residency: ap-south-1

Patient data stays in Mumbai. No cross-border replication.

Live

DPDP Act alignment

Consent records, retention windows, deletion on request.

Live

ABDM / ABHA linkage

HIP registration and ABHA capture at the front desk.

On the roadmap

7-year audit retention

Every clinical write is versioned and attributable.

Live

Controls, and what state each is in

Where something is not live, it says roadmap. We would rather lose a deal than misrepresent a control.

Area	Control	State
Data residency	ap-south-1 (Mumbai). No cross-border replication or backup.	Live
Encryption	TLS 1.3 in transit; AES-256 at rest, including backups.	Live
Access control	Role- and branch-scoped. Mandatory 2FA for admin roles.	Live
Audit trail	Every clinical and billing write versioned, attributable, 7-year retention.	Live
Consent (DPDP)	Purpose-bound consent records, retention windows, deletion on request.	Live
Impersonation	Support access is time-boxed, reason-coded, and logged to the tenant's own audit view.	Live
ABDM / ABHA	HIP registration and ABHA capture at registration.	Roadmap
Penetration test	Third-party test annually; summary letter available under NDA.	Live
Backups	Point-in-time recovery, 30 days. Quarterly restore drill.	Live
Sub-processors	Listed in the DPA. Notice before any addition.	Live

Data handling in plain terms

What we do

Process patient data only to run your facility.
Keep it in India, in one region.
Give you export on demand, in a documented format.
Log every support access into your own audit view.
Notify you within 72 hours of a confirmed breach.

What we do not do

Sell, share, or broker patient data. Ever.
Train models on your clinical records.
Hold your data hostage at contract end.
Give staff cross-branch access by default.
Offer a patient-facing app that widens the data surface.

See it against your own floor

We load a sandbox with your departments, rooms, and payer mix before the call. Forty minutes, no slides.