Trust centre
A hospital buying software that touches patient data has a list of questions. This is that list, answered, so you do not have to email us for a PDF.
NADI · DOCUMENT
● Status current
● Plain language yes
● Contact stated
✓ published, dated, binding
Data residencyWhere data lives, and what never leaves India.Sub-processorsEvery third party, what they do, and where.Security practicesAccess, encryption, review and testing.AvailabilityWhat we commit to, and how you see it.Incident responseWhat happens, and when you hear from us.Business continuityBackups, restore, and the worst case.Data processing termsThe DPA, in readable form.Retention and deletionWhat we keep and for how long.Access controlWho at Drapto can reach what, and when.Vulnerability disclosureHow to report, what we do.Compliance postureDPDP, IT Rules, ABDM, NABH — stated honestly.How the assistants use dataWhat Nadi reads, and what it never does.
Read the rest of it.
Every one of these pages says what we do, what we do not, and who to write to when it matters.