Privacy Policy

Last updated: 20 July 2026

Chartos ("Chartos", "we", "us") provides an ABDM‑compliant Electronic Health Record (EHR) and clinic‑management platform to healthcare providers in India. This policy explains how we handle personal and health data, consistent with India's Digital Personal Data Protection Act, 2023 (DPDP), the EHR Standards 2016, and the Ayushman Bharat Digital Mission (ABDM) framework.

1. Data we process

• Patient health data (on behalf of clinics): demographics, ABHA identifiers, clinical notes, diagnoses, prescriptions, lab results, appointments and billing — stored as FHIR R4 resources.
• Staff/account data: name, role, work email and authentication data for clinic staff and doctors.
• Enquiry data: details you send us (e.g. email address, clinic name) when you request a demo or contact us.
• Technical/operational logs: access and audit logs required for security and EHR‑standards compliance. These are kept resident in India.

2. Purpose & lawful basis

We process data to deliver and secure the EHR service, to enable ABDM interoperability (ABHA linkage and consent‑based sharing) at the clinic's and patient's direction, to maintain audit trails required by law, and to respond to enquiries. Patient data is processed on the basis of the consent obtained by the clinic and, for ABDM sharing, on the basis of the patient's ABDM consent artefact. We do not use patient data for advertising, and we never sell personal data.

3. Consent & ABDM sharing

Health records are shared with other facilities or applications only when a patient grants consent through ABDM. A patient may withdraw an ABDM consent at any time, after which further sharing under that consent stops. ABHA creation/linkage is performed at registration with the patient's explicit consent.

4. Data residency

All patient data — records, logs, analytics, backups and any AI inference — is stored and processed within India. Our systems are configured to refuse data flows to processors outside India.

5. Security

We apply encryption in transit (TLS) and at rest, role‑based access control with per‑tenant isolation, multi‑factor authentication for staff, least‑privilege service access, and a full audit trail on every access and change (ISO 27789). Clinical records are immutable — corrections create a new version, never an in‑place edit or deletion.

6. Sharing with third parties

We do not sell personal data. We share data only: (a) with other ABDM participants when a valid patient consent exists; (b) with infrastructure sub‑processors that operate within India and under contract; and (c) where required by law. A current list of sub‑processors is available on request.

7. Retention

Patient records are retained for as long as the clinic (Data Fiduciary) requires, in line with medical‑record retention norms and applicable law. On termination of a clinic's account, data is returned or deleted per the clinic's instruction, subject to legal retention obligations.

8. Your rights

Patients may exercise their rights (access, correction, grievance redress and, where applicable, erasure) through their clinic, which is the Data Fiduciary. For account or enquiry data held by Chartos, or to raise a grievance about our processing, contact our Grievance Officer below.

9. Grievance & Data Protection Officer

10. Data breach notification

In the event of a personal‑data breach, we will notify the affected individuals and the Data Protection Board of India without undue delay, in accordance with the DPDP Act, 2023 and its Rules. Where Chartos acts as Data Processor, we also inform the clinic (Data Fiduciary) promptly so it can meet its own notification obligations.

11. Changes

We may update this policy as the product and the ABDM framework evolve. Material changes will be reflected here with a new "Last updated" date.