How we keep your patients’ data safe.
Where your data lives, who can see it, what we claim and what we don’t. If you’re the cautious family member reading this before a doctor signs up, start here.
Last reviewed: 23 October 2026.
- Hosted on Microsoft Azure, Central India (Pune)
- Encrypted in transit and at rest
- Hospital-level isolation: no other clinic can see your patients
- Every write audit-logged; your data exportable any time
- Payments by Razorpay
- Built in India for the DPDP Act; ABDM integration planned Q1 2027
We’d rather be shorter than impressive. As of today:
- No ISO 27001, SOC 2 or HIPAA certification. Our architecture is built to meet those bars, and the work is on the roadmap. We don’t have the signed paper yet, so we don’t claim it.
- ABDM integration is planned for Q1 2027. Not shipped today. We won’t show an ABDM badge or add-on until it is.
- Field-level encryption is on the roadmap, not in production. Data is encrypted in transit and at rest at the database and storage layer. Per-field envelope encryption (BYOK or similar) is a future increment.
India, on Microsoft Azure Central India (Pune).
Patient records, prescriptions, uploads, invoices and reports are stored in India, in the Microsoft Azure Central India region (Pune). Daily backups, 7-day point-in-time restore window on Postgres Flexible Server. No cross-border data transfer for storage; the application tier runs in the same region.
Only your hospital. We confirm this with code, not policy.
Every row in the database carries your tenant id; every query is scoped to it at the application layer. Another doctor using EMRDoctor never sees your patients, even if the same patient visits them. No one at Vallixo opens clinical records unless you ask for support, and every such access is in your audit log and tied to a named operator account.
Every write, attributable to a user and a time.
Create, update, delete — on patient records, prescriptions, admissions, invoices, user accounts. The audit trail is immutable from the operator panel; raw rows carry user id, request id, IP, and the before / after payload where it is a safe to log. Login + password-reset events are logged separately with device + IP.
Full export of your data on request, within 24 hours, free.
Patient list, visit history, prescriptions, invoices, reports, audit log — everything. CSV where it fits, JSON for the chart records. You stop paying, we stop billing; the data is yours to take anywhere. We don’t charge for export and we never will.
DPDP today. The rest, on the roadmap, honestly stated.
For India today, we build to the Digital Personal Data Protection Act (DPDP). The HIPAA-aligned architecture lands with the US market launch; the DPDP implementation checklist is public on request. ABDM integration is planned for Q1 2027 and field-level encryption is on the roadmap. We hold no ISO 27001, SOC 2 or HIPAA certification today and will say so until we do.
Three questions doctors always ask us
How long does onboarding take?
Can I bring my existing data?
Who can see my data?
Also on EMRDoctor
If a specific risk worries you, ask us directly.
30-min demo or a WhatsApp thread, your choice. Vishal will answer any security + data question honestly, including the ones we don’t have a shiny answer to yet.