SECURITY & COMPLIANCE

    Security, layer by layer

    Review the controls, contractual scope and supporting evidence that apply to your facility before onboarding patient data. This page is not a certification or live status report.

    SECURITY LAYERS

    Six security topics,
    confirm your scope

    Hosting & availability

    Request scope

    Ask for the current hosting region, subprocessors, service availability terms and incident communication process for your deployment.

    Encryption & data flow

    Review architecture

    Request the encryption and key-management scope for transport, storage and backups. Server-side processing is not an end-to-end encryption guarantee.

    Role-based access

    Configure access

    ArogyaLens uses role and permission checks. Confirm which records each role can access and review staff permissions before onboarding.

    Access review
    Data-flow review
    Hosting scope
    Illustration of a shield protecting patient records
    Security Illustration

    Encryption

    Encryption scope

    Availability

    Confirm with support

    ALL SECURITY FEATURES

    Every Layer, Explained

    Review infrastructure, access and recovery requirements with our team.

    Hosting & availability

    Request scope

    Ask for the current hosting region, subprocessors, service availability terms and incident communication process for your deployment.

    Contractual terms vary by deployment

    Encryption & data flow

    Review architecture

    Request the encryption and key-management scope for transport, storage and backups. Server-side processing is not an end-to-end encryption guarantee.

    Confirm transport, storage and backup controls

    Role-based access

    Configure access

    ArogyaLens uses role and permission checks. Confirm which records each role can access and review staff permissions before onboarding.

    Review roles with your facility administrator

    Logging & incident response

    Request details

    Request the applicable logging scope, retention and incident response contacts before processing patient data.

    Review event coverage and retention

    Authentication

    Confirm methods

    Confirm the sign-in methods and account recovery options supported by your portal. Multi-factor authentication is not represented as mandatory for every login.

    Review sign-in and recovery

    Backups & recovery

    Contract scope

    Request backup retention, restore procedures and recovery commitments for your contract. No recovery time or recovery point objective is promised on this page.

    Confirm retention and restore testing
    SECURITY DUE DILIGENCE

    Confirm your requirements

    Request current documentation through our contact page. Include your facility type, intended use and required controls; do not send patient records.

    Certification evidenceNo ISO 27001 certification or SOC 2 audit report is claimed here. Request current evidence and its scope if needed.
    Review scope
    Healthcare requirementsHIPAA and NABH suitability must be assessed for your use case and contractual arrangements; this page is not a compliance attestation.
    Review scope
    Privacy requirementsAssess applicable Indian and other privacy requirements with your legal advisers. Review our privacy policy and request processing terms.
    Review scope

    Topics to review

    Access review
    Data-flow review
    Hosting scope
    AVAILABILITY INFORMATION
    Contact support for status

    This page does not display live monitoring or a measured uptime history. Availability and response commitments must be confirmed in your contract.

    YOUR DATA IS SAFE WITH US

    Security You Can Trust. Evidence You Can Review.

    ArogyaLens stores and processes patient data with the same care a doctor gives their patients. Request available security documentation and speak with our team.

    Review access
    Review scope
    Confirm availability
    256-bit Encrypted