Home / Platform / Compliance

Statute in the data model, not in the brochure

Indian regulation is not a localisation layer here. It is configuration and rules the platform enforces at the moment of writing — and that the agents watch continuously.

Standards

What we support today

Stated precisely, with roadmap items labelled as roadmap.

ABDM · ABHA supported FHIR R4 supported HL7 v2 supported DICOM / PACS supported DPDP Act 2023 by design NABH evidence by design NMC rules enforced GST · e-Invoice native HIPAA readiness ISO 27001 roadmap

"Supported" means implemented and demonstrable. "By design" means the platform produces the required behaviour or evidence as a by-product of normal operation. "Readiness" and "roadmap" mean exactly that — not yet certified, and we will not imply otherwise.

India

How each requirement is actually met

By mechanism, not by policy document.

ABDM · DPDP Act 2023

ABHA-ready, with a consent ledger

Registration is ABHA-ready and every use of personal data traces to recorded consent — consulted before use, not attested after the fact. Consent is a ledger, not a checkbox.

NMC 1.3.2 / 1.4.2 / 1.5

Enforced at write time

Generic-name prescribing, prescriber statutory identity on every document, serialized certificates, and the 72-hour record-release clock escalated by an agent before it lapses.

GST · e-Invoice (IRP)

GST-native billing

HSN/SAC per line, CGST/SGST versus IGST by place of supply, e-invoice payloads with deterministic IRN, and a TDS/TCS ledger. Statutory accounting, not an export.

Telemedicine Guidelines 2020

Teleconsults without per-minute fees

Peer-to-peer video — media never touches the server. Consent gated before the call, Schedule-X drugs hard-blocked in-call.

NABH

Evidence as a by-product

CAPA, live risk register, HAI surveillance and antimicrobial stewardship — the trail assessors ask for, produced by daily work rather than a pre-audit scramble.

Data residency

Where your data lives is your decision

Self-hosted on your infrastructure or managed cloud in-region. Sensitive AI task classes can be routed to a private model so data never leaves your boundary.

Next step

See your hospital running on Ospia

An executive demonstration takes forty-five minutes. We seed a hospital with synthetic data shaped like yours, put the digital workforce on duty, and answer the hard questions with the architecture open.

Book your hospital simulation Architecture deep-dive

synthetic data · zero real patients
self-hosted or managed cloud
one database per hospital