Trust and security

Where a patient's record lives, and who can reach it

Hosted in India. One private account per hospital. Every view logged. The AI sees the transcript, never the patient. Your data, exportable any day.

Where the data livesHosted in India
Records · encrypted
Audio · deleted after signing
Backups · daily
Encrypted in transit and at rest · one private account per hospital
What the AI receivesNo identifiers
Ravi Kumar 98480 12345 SC-004821 ABHA 91-2345…
"Fever for three days with body pain and headache. No vomiting. Chest clear. Paracetamol 650 three times a day after food for three days. CBC and dengue test."
The transcript, the specialty and the note structure. Never the name, number, ID or address. The draft comes back and is attached to the record inside the hospital's account.
Audit logEvery view, every change
Exportable

The rules we work under

DPDP Act, 2023

The hospital is the data fiduciary; Vaidyah is its processor. Consent is recorded at registration, per purpose, and can be withdrawn. Patients can ask for a copy or deletion through their hospital.

The doctor signs

AI output is a draft in a draft table. A record exists only when a doctor signs it with a PIN. Signed records are immutable; corrections are addenda.

Data stays in India

Records, backups and consultation audio are stored in India, encrypted. The AI model is reached through an enterprise cloud service; no patient identifiers are in the request, and nothing is used to train the model.

How it is built

One database, walls between hospitals
Sree Clinicpatients · notes · bills
City Hospitalpatients · notes · bills
Rule every record belongs to one hospital, and the database itself refuses to show it to another.

Walls between hospitals

Every record belongs to one hospital and the database itself enforces it. One hospital can never see another's patients, whatever screen or report is used.

Who can see what
Front deskNurseDoctorBilling
Register, queue●○○○
Vitals○●●○
Clinical notes—view●—
Sign——PIN—
Payments, refunds●——●

Who can see what

Roles decide the screens and the actions: front desk, nurse, doctor, lab, pharmacy, billing, insurance, administrator. Doctors sign with a personal PIN. Sessions on shared computers end when left idle.

What the AI receivesNo identifiers
Ravi Kumar 98480 12345 SC-004821 ABHA 91-2345…
"Fever for three days with body pain and headache. No vomiting. Chest clear. Paracetamol 650 three times a day after food for three days. CBC and dengue test."
The transcript, the specialty and the note structure. Never the name, number, ID or address. The draft comes back and is attached to the record inside the hospital's account.

What the AI receives

The transcript, the specialty and the note structure. Never the name, mobile, UHID, ABHA or address. The draft returns to the hospital's account and is marked as a draft until a doctor signs.

Backups and restoreEvery day
Yesterday · full backupverified
Two days ago · full backupverified
Three days ago · full backupverified
Kept separately, encrypted. Restoring is practised regularly.

Backups and restore

A full backup every day, encrypted and kept separately. Restoring from it is practised regularly, so a bad day at the hospital is never a lost record.

Consent, per purpose

Storage, recording and messages are separate consents, taken by signature or OTP and shown on the record. Withdrawing one stops that use at once and is logged.

Your data, any dayExport
patients.csv4,812 rows
visits.csv · notes.csv · prescriptions.csvsigned, with hashes
bills.csv · payments.csvimmutable
reports/ · records/PDF and images
One zip, requested by the administrator, logged in the audit trail.

Your data is yours

The administrator can export every table as CSV and every document as PDF, any day, with the signed notes' hashes. Leaving Vaidyah is a download, not a negotiation.

Questions IT and owners ask

Is Vaidyah certified?

We show every credential we hold in the badges above and do not claim certifications we do not have.

Where is the AI model?

A leading AI model, reached through an enterprise cloud service. Requests carry no patient identifiers and are not used to train the model.

What happens to consultation audio?

It is encrypted, used to produce the draft, and deleted after the retention period the hospital sets once the note is signed.

Can we run a security review?

Yes. Send your questionnaire to the address in the footer. We answer in writing and can walk your IT person through the architecture.

How do I report a security problem?

Write to the address in the footer. We acknowledge within one working day and keep you informed until it is fixed.

The formal statements are on the Privacy and Terms pages.

Have a security question?

Send it to us. We answer in writing, in plain language, within one working day.

Get in touch