Hosted in India
Patient records, hospital data and uploaded files are stored in a Supabase Postgres database and private storage, and the application runs on DigitalOcean. Our database and application servers are hosted in India.
Encryption
- In transit: the HMS, the patient app and our APIs are served only over HTTPS (TLS), so data moving between your device and our servers is encrypted.
- At rest: our hosting providers encrypt stored data at rest by default, including the database and file storage.
- Passwords are stored only as one-way hashes, never in readable form. OTPs are never returned in responses or written to logs.
Access by role
Every staff member signs in with their own account, and access depends on their role: owner, doctor, receptionist, nurse, coordinator, and staff for billing, laboratory and pharmacy. Owners see the hospitals and branches they own, and other staff see only the screens their role needs. Staff of one hospital cannot see another hospital's data. Owners add and remove staff and change roles, so access ends when someone leaves.
Owner-only deletion, with confirmation
Deleting patient records is the most sensitive action in the HMS, so only the hospital owner can do it, checked strictly against ownership of that hospital or branch. Administrators and other staff cannot. Every deletion needs explicit confirmation. In Nxt AI, a plain "yes" never deletes anything: the owner has to say clearly that they want the records deleted. The hospital itself, its settings, staff, wards, price lists and stock are never removed by these tools.
Reports and documents are never public
Clinical documents such as lab reports, scans, IPD files and consultation recordings are kept in private storage. They are never served from public, unsigned addresses. Staff open them through signed links that expire, and recordings play only for doctors and owners. When a printed lab report carries a QR code for the patient, the code holds a signed, hard-to-guess token for that one report, not a guessable address.
Activity history
Sensitive modules keep a history of who did what and when: laboratory, pharmacy, radiology and the billing ledger each record changes, and Nxt AI keeps a log of the actions it carried out. Our servers also keep request and error logs, which help us investigate problems and misuse.
Your data, under your control
From Settings → Data & privacy (or Data & privacy in the multi-branch dashboard, per branch), a hospital owner can download all patient records as a ZIP file of tables and files, delete all records or records from selected days, or set automatic deletion of records older than a chosen number of days. Admitted patients are never deleted automatically. See our Privacy Policy for how long we keep data.
ABDM: sharing only with consent
When a hospital uses ABDM features, ABHA creation and linking start only when the hospital initiates them, and health records are shared with other providers only under the patient's consent captured through the ABDM consent flow.
Nxt AI asks before it changes anything
Nxt AI, the voice and chat assistant, can read information a user is allowed to see. It never changes data on its own: every change, such as booking, updating or deleting, appears as a card that the user confirms by voice or tap before anything happens. Nxt AI only acts within the role of the person using it.
Report a security issue
If you believe you have found a security vulnerability in Sehat Nxt, please e-mail support@sehatnxt.com with the details and steps to reproduce it. Please do not access, change or delete other people's data, do not disrupt the service, and give us reasonable time to fix the issue before sharing it publicly. We will acknowledge your report and keep you updated.
Frequently asked questions
Where is hospital and patient data stored?
In a Supabase Postgres database and private file storage, with the application running on DigitalOcean. Our database and application servers are hosted in India.
Can receptionists or other staff delete patient records?
No. Only the hospital owner can delete patient records, and every deletion needs explicit confirmation. Staff access is limited by role.
How do patients receive lab reports securely?
Reports are kept in private storage. Staff open them through signed links that expire, and the QR code on a printed report holds a signed token for that one report rather than a public address.
Can Nxt AI change records by itself?
No. Nxt AI shows every change as a card that the user must confirm by voice or tap. Deleting records needs the owner to say clearly that they want them deleted.
Can we take our data out of Sehat Nxt?
Yes. The hospital owner can download all patient records as a ZIP file at any time from Settings, then Data & privacy.