Enterprise-grade security

HIPAA & DPDP ready data protection

RxNote is built with security at its core: HIPAA and India DPDP Act ready, encrypted end to end, and continuously monitored so patient data stays private.

HIPAA Ready
India DPDP Act Ready
GDPR Ready
SOC 2 Type II Ready

Security

Protection at every layer

Multiple layers of protection for your healthcare data.

End-to-end encryption
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Patient conversations and notes are never accessible to unauthorised parties.
Secure cloud infrastructure
Hosted on enterprise-grade cloud infrastructure with multiple redundancy zones, automatic failover, and 99.99% uptime guarantee.
Access controls
Role-based access control (RBAC), multi-factor authentication (MFA), and single sign-on (SSO) options to manage who can access what.
Audit logging
Comprehensive audit trails track all access and modifications to patient data, meeting regulatory requirements for healthcare.
Data backup & recovery
Automated daily backups with point-in-time recovery. Your data is protected against accidental loss or system failures.
Secure authentication
Industry-standard OAuth 2.0 authentication with support for MFA, biometric login, and enterprise SSO integration.

Compliance

Built to the rules your data lives under

India, the US and the EU each ask for something different. RxNote is built for all three.

HIPAA

HIPAA ready

RxNote maintains full compliance with the Health Insurance Portability and Accountability Act (HIPAA). We implement administrative, physical, and technical safeguards to protect Protected Health Information (PHI).

RxNote signs Business Associate Agreements with all healthcare customers.

Business Associate Agreements (BAA) available
Regular third-party security audits
Employee HIPAA training
Incident response and breach notification procedures
Minimum necessary access principle enforced
PHI disposal and retention policies

India DPDP Act

India DPDP Act ready

RxNote complies with India's Digital Personal Data Protection (DPDP) Act, 2023. We implement the necessary safeguards to protect personal data of Indian citizens and healthcare providers, ensuring lawful processing and data principal rights.

Ready for India's Digital Personal Data Protection Act, 2023 for healthcare providers across India.

Consent-based data processing as mandated by DPDP
Data principal rights — access, correction, erasure
Data localization options for Indian healthcare data
Appointed Data Protection Officer for compliance
Breach notification procedures per DPDP requirements
No cross-border transfer without adequate protection

GDPR

GDPR ready for EU customers

RxNote complies with the General Data Protection Regulation (GDPR) for our European Union customers. We respect data privacy rights and provide tools for data management.

Ready for European Union data protection regulations.

Right to access personal data
Right to data portability
Right to erasure (right to be forgotten)
Data Processing Agreements (DPA) available
EU data residency options
Lawful basis for processing documented

Data practices

How we handle your data

Transparency in how we handle your data.

Data minimisation
We only collect and process data that is necessary for providing our services. No unnecessary data collection.
No data selling
We never sell patient data or use it for advertising. Your data is used solely to provide and improve our services.
Data retention
Clear data retention policies with automatic deletion options. You control how long your data is stored.
Data residency
Choose where your data is stored. Options available for India, US, EU, and other regions to meet local regulations including DPDP Act requirements.

Standards

The frameworks we build to

HIPAA: Ready
DPDP Act: India ready
GDPR: Ready
SOC 2: Type II ready
ISO 27001: Aligned

Keep exploring

Transforma tu flujo clínico

Comienza a ahorrar horas en documentación clínica hoy con la solución de escribiente médico con IA de RxNote.