Compliance
Honest about where we stand
Pakistan’s data-protection rules and the rules for pharmacies, labs and clinics are changing. We are mapping them against the product control by control. This page says what is done, what is underway and what we do not claim.
In place today
- Role-based access with a permission for every action
- An audit log of changes and of reads of patient records
- Hospital data separated from other hospitals’ data
- Patient records are deactivated, never silently erased
- Signed treatment-plan acceptance stored with a document hash
- Prescriptions and clinical notes with a clear author and date
- A starter pharmacy and lab catalogue for Pakistan, to edit
Being built now
- Tamper-evident audit log
- Patient consent records
- Patient data requests: access, correction and deletion where allowed
- Retention rules per record type
- A controlled-drug register for pharmacies and expiry blocks at dispensing
- Lab result amendment history and critical-value acknowledgement
- Removing personal data from logs and analytics, with tests
- Cookie consent on this site
What we do not claim
- We do not claim any certification. HIPAA has no certification; we build to a HIPAA-style baseline.
- We do not claim to meet every provincial healthcare commission rule yet. We are mapping them.
- We are not a substitute for your own legal advice.
Need a data processing agreement or a security questionnaire answered? Contact us and we will respond with specifics for your situation.
Need something specific?
Tell us the rule or document your organisation needs.