Trust Center
Healthcare data carries a responsibility ordinary business data does not. Here is what protects it, where it lives, and exactly which standards we hold and which we do not.
Looking for how it actually works?
Branch isolation, roles, consent, audit records and what happens when the connection drops.
Security
Security is a property of the server, not of the screen.
- End-to-end encryption for data in transit and at rest
- Access rules enforced server-side, whatever app or device is asking
- Multi-factor authentication supported
- Append-only audit records — not editable after the fact, by anyone
Privacy
A patient record belongs to the patient before it belongs to anyone else.
- Patient data protection built into product design
- Privacy-first architecture
- Granular consent management
- Access limited to the organisation the record was created in
- Data residency in India
Infrastructure
Reliable, and tested rather than assumed.
- Enterprise-grade cloud hosting, located in India
- Automated daily backups, with restores tested
- Disaster recovery protocols (planned for enterprise scale)
Standards
Ready is not the same as certified, and we will not blur the two.
- NABH ready — documentation and audit records in the expected shape
- NABL ready — sample and report traceability records
- ABDM ready — data structures built for interoperability
- DPDP Act — designed around it
- HIPAA (future)
- ISO 27001 (future)
- SOC 2 (future)
Responsible Disclosure
Security is a community effort. If you are a researcher and have found a vulnerability in our platform, we would rather hear it from you than from a customer.
security@zivyaa.co.in