Where your data lives, and who owns it
Your clinic's data is stored in India, encrypted, backed up every day, and visible only to your team. Under the DPDP Act, 2023, your clinic is the Data Fiduciary and we are its Data Processor.
Stored in India
- Patient records
- DigitalOcean, Bangalore, India
- Clinical images: X-rays, DICOM files, photos
- AWS S3, Mumbai, India
- Voice notes and AI structuring
- Deepgram and Google Gemini, United States. Only when a doctor uses those features.
Stored in India
- Patient records are stored in India, on DigitalOcean in Bangalore.
- Clinical images (X-rays, DICOM files, photos) are stored in India, on AWS S3 in Mumbai.
- Backed up every day.
Encrypted
- Encrypted in transit (TLS).
- Encrypted at rest.
Only your team can see it
- Role-based access: doctor, assistant, admin, nurse and billing, each with its own permissions.
- An assistant assigned to a doctor sees only that doctor's patients.
- Every change is logged in an audit trail.
- No one at ClinicOS looks at patient records.
Your clinic owns its data
- Under the DPDP Act, 2023, the clinic is the Data Fiduciary and CodingRippler Tech Private Limited is its Data Processor.
- No advertising, no selling of data, and no analytics trackers inside the app.
- If you stop your subscription, all your patient data is sent to your registered email address.
- Records are then kept only as long as Indian law requires: medical records for 3 years from the last treatment, billing records for 6 years.
Voice notes and AI features
- Voice notes are transcribed by Deepgram and structured by Google Gemini. Both run in the United States, and only when a doctor uses those features.
- Everything else stays on the servers in India.
The full wording is in the privacy policy and terms of use.
Questions about your data?
Ask us on WhatsApp before you start. We answer them the same way for every clinic.