Trust

Security, privacy and compliance at Insource

Hospitals trust us with some of the most sensitive data there is. This page describes the controls built into our platform and the standards it is designed to support. Certificates and reports are available to customers under NDA.

Request security documentation

ExperienceWeb, Hospital Super App, Patient App, RadioMind viewer
WorkflowTasks, approvals, discharge, grievance, TAT, mobile worklists
Hospital corePatient identity, care episodes, clinical record, orders, results, billing
Data & integrationPACS, ABDM/ABHA, HR/payroll, finance, devices, external systems
Security & governanceRBAC/ABAC, audit, privacy, AI controls, country overlays, SLO monitoring

TechPro architecture layers, as described in the platform design document.

Built-in controls

Access control

Role-based and attribute-based access (RBAC/ABAC), with access reviews.

Audit trails

Overrides, downtime, integrations, replays and corrections are logged and reviewable.

Break-glass

Emergency access is allowed when needed and always reviewed.

Encryption

Data encrypted at rest and in transit using AES-256.

Protected routes

POSH, grievance, privacy and safety workflows have special access boundaries.

Recovery

Downtime, replay, reconciliation and fallback workflows; RTO ≤30 min and RPO ≤5 min targets for clinical-critical services.

Standards and frameworks

Status as stated in Insource product materials. Ask for certificates and scope documents.

Standard	What it covers	Status
ISO/IEC 27001:2022	Information security management system	Certified (certificate on request)
SOC 2 Type II	Security, availability and processing integrity controls	Report on request under NDA
HIPAA	US health privacy and security rules	Safeguards designed to support HIPAA requirements
GDPR and India's DPDP Act	Personal data protection	Designed to support controller obligations
HL7 and FHIR R4	Health data exchange standards	Supported for integration
DICOM	Medical imaging standard	Supported in RadioMind PACS
ICD-10	Diagnosis coding	Supported in EMR and coding
NABH, NABL and JCI	Hospital and lab accreditation	Features support accreditation evidence

AI controls

AI in TechPro can summarise, suggest and prioritise. It cannot decide, sign, diagnose or hide risk. Every AI hook is assigned a risk class, AI activity is audited, and core clinical work continues if AI is unavailable. See governed AI.

Our privacy commitment

Your data remains yours. We do not sell it, share it for advertising or use it to fund the business in any way other than the licence you pay for. Data processing terms, sub-processors and hosting locations are listed in each customer agreement.

Frequently asked questions

Where is data hosted?

TechPro runs on AWS cloud infrastructure for SaaS and dedicated cloud deployments, or on your own servers on-premise. Hosting region is agreed per customer to meet local data residency rules.

Can we see your SOC 2 report?

Yes, customers and serious prospects can request it under NDA.

Is TechPro HIPAA certified?

There is no official HIPAA certification for software. TechPro's safeguards are designed to support HIPAA requirements for organisations that need them.

Product feature page

Talk to the team

Request our security pack

We share certificates, the SOC 2 report and data processing terms with prospects under NDA.

info@insourcesoftware.in +91 91001 90353 Mon–Sat, 10:00–19:00 IST