Security & DPDPA

End-to-End Data Protection

At Sampurna, we treat patient health information with the highest level of security. All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Our infrastructure is designed to ensure that your clinic's data remains isolated and completely secure from unauthorized access.

DPDPA 2023 Compliance

We are fully compliant with India's Digital Personal Data Protection Act, 2023. As a data processor, we provide clinics (data fiduciaries) with the tools required to maintain compliance:

• Digital patient consent management
• Granular role-based access control (RBAC) for staff
• Right to erasure (data deletion) tools
• Immutable audit logs for all sensitive actions

100% Data Localization

To comply with Indian healthcare regulations, all Sampurna databases, backups, and servers are hosted physically within India (Mumbai region). Your patient data never crosses national borders.