NEXUSNOVA|v1.0|ONLINE
IST--:--
India residency by default. Encryption, RBAC + audit trails, NABH/ABDM + IT Act practices mapped during discovery — not a blanket claim. Hospital owns patient data.
TLS 1.2+ in transit, AES-256 at rest. Supabase India region (ap-south-1) or on-prem/VPC. Daily backups, encrypted, with retention policy + point-in-time recovery tested.
> In transit + at rest · India default
Role-based access (nursing, billing, TPA, admin), audit trails per ADT/discharge/claim, monthly ops reports. Least-privilege + session expiry + 2FA for admin. No patient-data sale — ever.
> RBAC + audit trails · hospital owns data
India residency by default — data stays in India (Supabase ap-south-1 or hospital DC). NABH/NABL, ABDM M1-M3, IT Act practices mapped in discovery — not a blanket badge. 99.9% SLA with on-prem/VPC option.
> NABH/ABDM mapped · IT Act · 99.9% SLA
No blanket NABH/ABDM claims before audit. No patient-data sale. No HIS replacement — FHIR layer with write-back + parallel run. No offshore residency without written consent.