Compliance & Security

ENCRYPTION: All Patient Data is encrypted at rest using AES-256 and in transit using TLS protocols.

ACCESS LOGS: We maintain tamper-evident audit logs of significant actions on patient records, including timestamp and user ID.

DATA MINIMIZATION & RBAC: Role-based access control ensures each user sees only the data necessary for their designated function.

INFRASTRUCTURE: Hosted on AWS, which maintains ISO 27001, SOC 2, and other internationally recognized certifications.

DPDP ACT: We act as Data Processor and comply with obligations under the Digital Personal Data Protection Act, 2023 as its provisions come into force.