Privacy and India readiness
- Purpose-specific consent records
- Patient access, correction and deletion request tracking
- Immutable access and administrative audit events
- Role and clinic-tenant access boundaries
SynQHIPAA safeguard mapping
- Unique account and role access
- Short-lived private document links
- Recorded document access and integrity checks
- Transmission protection and session controls
SOC 2 readiness
- Security and release evidence register
- Change, workflow and AI traceability
- Availability and response-state monitoring
- Human approval for sensitive clinical and AI actions
Ayushman Bharat and ABHA
- ABHA address stored against your account only
- Consent-led sharing with a stated purpose and expiry
- Withdrawal that takes effect immediately
- No scheme claim processing by SynQ
Security-first architecture
- Access rules enforced in the database, not the screens
- Clinic tenant separation
- Private, screened documents with recorded openings
- Policy engine in front of every AI answer
Clinical and AI safety
- No-diagnosis boundary
- Approved-version clinical publication
- Emergency escalation wording
- Policy filtering, redaction and citations
Current document protection
Files are private, screened before use, opened with expiring links after a server-side ownership check, and each successful opening is written to your access history.
What we do not claim
HIPAA legal applicability and BAA decisions, a SOC 2 examination, ABDM gateway certification, independent penetration and accessibility assessments, breach exercises, and external malware-service assurance remain blocked until qualified third parties complete them. SynQ does not present these as passed.