Security & Compliance
Built to be questioned.
Doctors should interrogate software that makes clinical suggestions. This page answers the three questions that matter most: how the AI actually works, where your patients’ data lives, and what happens when the internet doesn’t.
AI governance
How the AI actually works — and where its authority ends.
Every suggestion shows its work
A note draft, a flagged interaction, a harness prompt — each comes with a visible trail back to where it came from: a specific entry in the chart, or a cited clinical source. If it can’t show its work, it doesn’t show the suggestion.
Nothing is ever auto-committed
Every suggestion is accepted, edited or rejected by the doctor, and that decision is permanently logged. Nothing enters a patient’s record or prescription without a doctor’s explicit action.
The off switch is real
The scribe and the harness can each be turned off — for one patient or the whole practice — and the platform keeps working exactly the same without them.
We maintain a formal internal process for reviewing anything AI-related that goes wrong — not just a bug tracker, but a genuine clinical-safety review process, because a mistake in this domain isn’t the same category of problem as a mistake in most software.
Exactly what each system does — and doesn’t
The scribe
Does: Transcribes the consultation in ten Indian languages and English, and drafts a structured clinical note from it.
Does not: Interpret findings, or write anything into the record without the doctor accepting it.
The harness
Does: Surfaces questions that haven’t been asked and considerations worth ruling out, each with the source that prompted it.
Does not: Diagnose, rank a differential as a conclusion, direct treatment, or act on its own prompts.
This boundary is deliberate, and it is where we intend to stay. The platform is clinical decision support: it informs the doctor’s reasoning and never substitutes for it.
Your data
Where your data lives, and who can see it.
The obligations here aren’t marketing claims — they’re the legal and technical baseline a health-data platform in India has to meet, and the one RepleteCare is engineered around.
Encrypted, hosted in India
Patient data is encrypted in transit and at rest, and hosted in India.
DPDP & ABDM aligned
Handled in line with the DPDP Act and ABDM’s data-sharing framework.
Role-based, fully audited access
Every view, edit and AI interaction is logged and attributable. You control what’s visible in a chart and who can see it.
ABHA integration is native
Part of the platform’s foundation — not a bolted-on afterthought.
Reliability
Built to keep working when the internet doesn’t.
Clinic connectivity in India isn’t always reliable, and neither is power. Consultations and prescriptions are fully usable offline, with everything syncing automatically the moment connectivity returns — a note started during a power cut is never lost.
Have a question this page didn’t answer?
Security questions deserve straight answers. Ask us directly — or start with the FAQ, which covers the questions doctors ask us most.
No subscription fee for the core platform. No credit card. No hardware to buy.