Security & Compliance
Built with healthcare data protection at its core.
Data Encryption
- AES-256 encryption at rest — Data stored in the Arko platform is encrypted using AES-256 encryption.
- TLS encryption in transit — All data transmitted between your browser and our servers is protected by TLS encryption.
ABDM Integration
Arko Care is ABDM-ready: health records are structured using the HL7 FHIR R4 standard, so the hospital is positioned for India’s digital health ecosystem as those integrations land.
ABHA ID creation, Health Locker storage and Consent Manager integration are not available today. We make no ABDM certification claim, and we are not an ABDM-certified system.
Compliance posture in India: DPDP-aligned and ABDM-ready (FHIR R4).
DPDP Act 2023
Arko is designed to support hospitals in meeting their obligations under India's Digital Personal Data Protection Act, 2023. Our platform includes capabilities for:
- Purpose-scoped access — Staff see the records their role requires, enforced server-side rather than hidden in the interface.
- Change audit trail — Every change to a patient record is logged with the user who made it and when.
- Data Subject Rights (DSR) support — Facilitate responses to data principal requests for access, correction, and erasure.
- Breach notification preparedness — Tools and processes to support timely notification in the event of a data breach.
Infrastructure
Marketing Site
Cloudflare Pages
Global edge deployment with automatic SSL
Application
Google Cloud Platform
Enterprise-grade cloud infrastructure
CDN
Cloudflare
Global edge network for fast delivery
Audit Logging
Arko Care logs changes to patient records. The scope is deliberately stated rather than implied:
- Creation, update and deletion of a patient record is logged.
- Each entry carries the acting user and a timestamp.
- Record views are not currently audited, and audit export is not available today.
Compliance Status
Arko is committed to healthcare data security. The information on this page describes our design principles and capabilities. For specific compliance certifications, please contact us at [email protected].
See it running in a real hospital
Twenty minutes, on your screen: a walk-in registered, a prescription on your own letterhead, and the day’s billing closed.