Skip to content

The clinic's data stays the clinic's.

Every screen and server call checks the person's role at the record's clinic.

Editing the Reception role: a checklist of permissions grouped by area
The Reception role at Saket Health. Each permission is one checkbox.

A role at each clinic.

Access follows the clinic a record belongs to, not a job title.

  • Roles defined per organisation
  • One role per clinic for each member
  • Permissions checked on the server and by row-level security
  • Organisation-wide history behind its own permission
  • Only the owner manages staff and role permissions
Staff at Saket Health: each member's role and the clinics they work at, including a member with a different role at each clinic
Neelam Arora is an administrator at Gurugram Clinic and reception at Saket OPD.

Every change, written down.

The owner reads who did what. The trail leaves clinical notes out.

  • Audit trail without clinical content
  • CSV exports recorded in the audit
  • Sign-in audit for platform operators
  • Cross-tenant audit for platform operators
Data and audit: CSV downloads for patients, appointments and consultations, and the activity history with who did what and when
The audit trail lists the action, the person and the time.

Who gets in, and what can leave.

Hosphi runs on Cloudflare, with the clinic's data in Supabase.

  • Invitation-only accounts
  • Email and password sign-in
  • HttpOnly cookie sessions
  • 60-minute idle timeout
  • Sign out everywhere
  • Patient, appointment and consultation CSV export
  • Patient CSV import with duplicate review
  • No billing data, because there is no billing

What we do not claim.

Hosphi is pre-certification. We do not claim SOC 2, ISO 27001 or ABDM certification, or data residency. Ask us the hard questions and we will answer them in writing.

Write to security@hosphi.com. Last reviewed .

Bring your clinic day.

Twenty minutes on sample data, with the person who builds Hosphi. You leave with a clear answer on fit.

Book a walkthrough

Hosphi is taking its first pilot clinics. Accounts are by invitation.