Patient records stay in India, encrypted, and accounted for.

Your records stay in India

The patient record and its backups live in India. Some specialist sub-processors — speech-to-text, AI structuring, product analytics — process a request outside India and return the result; the record itself is not moved or replicated there.

Encrypted in transit and at rest

TLS 1.3 in transit, and disk-level encryption at rest from our infrastructure provider. On top of that, identifiers such as ABHA and ID numbers, bank and tax details and message bodies are encrypted as individual database fields with AES-128-CBC and HMAC-SHA256 (Fernet), so a database dump alone does not reveal them.

Individual logins, real roles

Front desk, nursing, clinician, pharmacy and owner scopes. No shared accounts — they break the audit trail.

Every access logged

Reads and writes are stamped with the user, what was touched, the time and the calling IP. Ask us and we export your clinic’s log — a self-serve download is on the roadmap, not shipped.

ABDM: ABHA today, exchange next

You can record a patient’s ABHA against their chart today. Health Information Provider registration and Consent Manager exchange are on the roadmap, not shipped — we would rather say so than let you assume it.

DPDP Act, 2023

Notice, consent, correction and erasure flows, with a published privacy contact who answers within 30 days.

Backups we restore from, not just take

Managed PostgreSQL with point-in-time restore. We rehearse restores rather than assuming a backup is good — ask us for the date of the most recent drill before you rely on it.

Dictation is not training data

Audio is held only while it is being transcribed and is never written to disk on our servers — only the transcript is kept, as part of the record a clinician signs. Patient data never trains anyone’s models.