Where your data is stored
- Database. Patient records, appointments and bills are in a database hosted in Google Cloud’s Delhi region.
- Uploaded files. X-rays and clinical photos are currently stored with Google Cloud in the USA.
We mention the second point plainly because some clinics care where files live. If it matters to you, ask before you upload images.
Encryption
Data is encrypted in transit, as it moves between your device and our servers, and encrypted at rest, while it is stored.
Each clinic’s data is separate
Your clinic’s data is kept separate from every other clinic using OPD Sathi. Another clinic’s staff cannot see your patients, and you cannot see theirs.
Role-based access inside your clinic
Inside your clinic, people see only what their role needs. Owners, doctors and front desk have separate logins, and a visiting doctor can be limited to their own appointments. Read more on team access.
An audit log of changes
The audit log records who changed what and when, so there is a trail if a record is edited or an appointment is cancelled.
DPDP Act and the privacy policy
OPD Sathi’s privacy policy is written around India’s Digital Personal Data Protection Act, 2023. As a clinic you are the one who decides why and how patient data is used, so you have your own duties under the Act. Our guide to the DPDP Act for dental clinics explains what they are.
What we do not claim
We do not hold security certifications that we have not earned, and no online system is perfectly secure, so we do not promise that. We tell you what we do, and you can judge whether it fits your clinic.
This page describes how OPD Sathi works. It is general information, not legal advice. Ask your lawyer about your obligations as a clinic.