Role-based access, an unbroken audit trail, encrypted credentials and daily backups.
Hospital data in CareLite is separated per hospital, reachable only through role-based access, recorded in an insert-only audit trail, and backed up daily. Integration credentials are encrypted. The application database user cannot alter the schema.
Every record carries the hospital it belongs to, and every query filters on it. There is no shared table through which one hospital could read another's patients, bills or reports. A user's session is bound to one hospital.
Individual logins, permissions by role, and server-side checks on every screen rather than hidden buttons. Sessions expire on inactivity. Accounts lock after repeated failed attempts. Deactivating a user takes effect on their next action, not at their next sign-in.
WhatsApp, email and ABDM credentials are stored encrypted with authenticated encryption, keyed from an application key held outside the database. Passwords are hashed, never stored or recoverable. Secrets and one-time passwords are masked before anything is written to a log — a compliance log is still a log.
The audit trail is insert-only and covers creation, modification, cancellation, discount, refund, export, printing, sign-in and denied access, each with the before and after values. No screen in the hospital application can alter it.
A daily database backup runs on a schedule, is pruned on a retention window, and can be verified by actually restoring it into a scratch database and comparing rather than assuming the dump succeeded. Backups are meant to be copied off the server: a backup living on the machine it protects is not a backup. A failed backup raises an alert inside the application.
CareLite provides the application controls above. Server hardening, network security, HTTPS certificates, physical access and the hospital's own password discipline sit with whoever operates the deployment. Where CareLite hosts, those are ours; where a hospital hosts on its own infrastructure, they are the hospital's. This is worth settling in writing before go-live rather than after an incident.
Every record carries the hospital it belongs to and every query filters on it, so no hospital can read another's patients, bills or reports. A user session is bound to a single hospital.
Daily, on a schedule, with a retention window and pruning. Backups can be verified by actually restoring them into a scratch database and comparing rather than assuming the dump worked, and a failed backup raises an alert inside the application. Backups should be copied off the server.
WhatsApp, email and ABDM credentials are stored using authenticated encryption keyed from an application key held outside the database. Passwords are hashed and never recoverable, and secrets and one-time passwords are masked before anything is written to a log.
CareLite provides the application controls. Server hardening, network security, HTTPS certificates and physical access sit with whoever operates the deployment — us where we host, the hospital where it hosts its own. It is worth settling in writing before go-live.
Tell us your bed count and we will walk your team from registration to settlement.
Request a demo See pricing