Sensitive work deserves clear boundaries.
ArogyaTap implementations are guided by security and responsible-operations principles. This page describes a review approach, not a certification, compliance status or production security statement.
Build trust into the workflow.
Formal legal, hosting, retention and technical reviews are still required before any production or pilot commitment.
DPDP applicability, processing roles, lawful purpose, notice/consent, retention and incident responsibilities should be assessed for each implementation with qualified advisers. This marketing site does not claim DPDP compliance or readiness, HIPAA compliance, AES-256/TLS 1.3, PHI masking, a 72-hour breach response, immutable audit logs, complete RBAC, India-only hosting or security certifications.
The responsible questions come first.
A readiness discussion should cover the intended workflow, data minimisation, roles, human review, retention, hosting, incident handling and the boundaries of any evaluation.
What information is actually needed?
Who can review, approve or escalate?
Where does the workflow stop instead of guessing?
What retention and hosting decisions remain to be confirmed?
Need to talk through a sensitive workflow?
Start with the process and the people involved. We will not ask you to send medical records through this marketing site.