Health & life sciences
The rules decide what you may say.
Hospital groups, clinics, diagnostic chains and home-care providers, where the patient researches online and the rules limit what a provider may advertise. We build patient journeys, consented data and clear, rule-aware communication — from the first search to the discharge summary.
Where the rules biteMap of all forty-one industries
What is shifting
They compare doctors, prices and waiting times online, consult by video and carry their reports on a phone. Each shift names what it demands, with a fact you can check.
It demandsService pages, doctor profiles and price information that answer the question without promising outcomes.
SignalRule 9 of the Clinical Establishments (Central Government) Rules, 2012 requires registered establishments to display the rates for each service, in the local language and in English.
It demandsTeleconsultation journeys with identity, consent and records handled as carefully as in the clinic.
SignalThe Telemedicine Practice Guidelines of March 2020 let registered doctors consult by video, audio and text, with limits on what can be prescribed remotely.
It demandsSystems that link to a patient’s health account and share records only on the patient’s consent.
SignalUnder the Ayushman Bharat Digital Mission, records move between providers only against the patient’s consent.
It demandsAssistants that route and summarise, with clinicians deciding and every output reviewable.
SignalThe ICMR’s 2023 ethical guidelines for AI in healthcare ask for human oversight, accountability and data privacy.
The rulebook
The professional-conduct code, the clinical-establishment rules, telemedicine guidance, the data law and its health records framework, read for a care provider. Your medical and legal teams keep sign-off.
Frameworks we build to
Frameworks we design and build to — not a claim of certification.
Shapes most of the work
National Medical Commission
Doctors may not solicit patients or advertise themselves; what they may publish about themselves is limited. The NMC’s 2023 conduct regulations were held in abeyance in August 2023, so the 2002 code applies.
We designDoctor profiles state qualifications, specialities, languages and timings — never superiority or results.
Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 · NMC notice of 23 August 2023
Central Consumer Protection Authority
Claims must be substantiated, and disclaimers may not contradict the claim they qualify; outcome and success-rate claims need evidence.
We designService pages describe treatments and processes; any figure carries its source and date.
CCPA · Guidelines for Prevention of Misleading Advertisements and Endorsements, 9 June 2022 Official text: CCPA misleading-ads guidelines, 2022
Shapes most of the work
Ministry of Health and Family Welfare
In the states and union territories that have adopted the Act, registered establishments display the rates for each service, in the local language and in English.
We designPrice and package pages are built from the same rate card the front desk uses.
Clinical Establishments (Central Government) Rules, 2012 · rule 9
Board of Governors in supersession of the Medical Council of India
Registered doctors may consult by video, audio or text; patient and doctor identify themselves, consent is recorded and remote prescribing is limited by list.
We designTeleconsultation journeys capture identity and consent, and keep the record with the clinic’s own.
Telemedicine Practice Guidelines, 25 March 2020 Official text: Telemedicine Practice Guidelines, 2020
Shapes most of the work
Ministry of Electronics and IT
Health information is personal data: consent per purpose, security safeguards and breach reporting. The Rules exempt care given to a child by a clinical establishment from the parental-consent requirement, to the extent needed for the child’s health.
We designPatient data is collected per purpose, access is role-based and logged, and retention is set by record type.
DPDP Act, 2023 · DPDP Rules, 2025, Fourth Schedule (core obligations from 13 May 2027) Official text: DPDP Act, 2023 and DPDP Rules, 2025
National Health Authority
Records shared through the Ayushman Bharat Digital Mission move only against the patient’s consent, recorded as a consent artefact.
We designRecord-sharing screens are designed to the consent artefact, and every grant is logged.
NHA · Health Data Management Policy, Ayushman Bharat Digital Mission
Shapes most of the work
Indian Computer Emergency Response Team
Report cyber incidents within six hours of noticing them, and keep logs of every ICT system for a rolling 180 days, within India.
We designPatient portals ship with logging, monitoring and an incident runbook from day one.
CERT-In · Directions under section 70B(6), 28 April 2022 Official text: CERT-In Directions, 2022
Often shapes the work
Indian Council of Medical Research
Guidance, not binding law: AI used in care should be validated, explainable, privacy-preserving and overseen by people who remain accountable.
We designEvery assistant has an evaluation set, a named clinical owner and a log of what it produced.
ICMR · Ethical Guidelines for Application of Artificial Intelligence in Biomedical Research and Healthcare, March 2023
Compiled 3 October 2026. Our reading of typical programmes, not legal advice. Rules change; your counsel confirms how each one applies to you.
Challenges
What patients need before, during and after a visit — and what it takes your teams to give it to them from systems that rarely talk to each other.
Doctors, departments, prices and waiting times explained before the first visit.
Reports, prescriptions and follow-ups that find the patient, not the other way round.
Home visits, sample collection and remote follow-up booked as easily as an appointment.
What we build
A typical programme here draws on each discipline in this mix. Every line names what it builds for the industry and links to the capability that does the work.
Patient journeys — search, booking, home collection, reports and follow-up — tested with patients and front-desk staff.
A consented patient record, with reminders and follow-up across WhatsApp, SMS and email.
Brand architecture for groups of hospitals, clinics and specialities, and doctor profiles that inform without advertising.
Integrations between hospital, lab and CRM systems, secure patient portals and audit logging.
Assistants that route enquiries and prepare drafts for clinicians, inside guardrails.
Health information written to the advertising rules and reviewed by clinicians.
Programmes
Each programme is a real engagement shape: a package, a typical length and the number it moves. Lengths are typical, never promised — the first conversation sets yours.
The way in
We follow patients from first search to report, and read what your pages and profiles say against the professional-conduct code.
What it hands over
02Milestone · 4–9 months
Booking, home collection, reports and follow-up rebuilt as one journey, integrated with the systems you run.
MovesShare of appointments booked online
Services: End-to-end UX & UI design · Web or mobile app · System integration
Enquire about Booking, reports and follow-up journey03Project · 8–12 weeks
One consented patient record behind every reminder, report notification and follow-up.
MovesFollow-ups completed on time
Services: Customer data & identity foundation · Email, SMS & WhatsApp set-up · Lifecycle journey build
Enquire about Consented patient CRM and reminders04Retainer · Ongoing
Health information patients search for, written to the advertising rules and reviewed by your clinicians.
MovesOrganic visits to service pages
Services: Content strategy & editorial plan · Content production retainer
Enquire about Health content programmeHow success is measured
The number we moveTime from first contact to appointment
AI, under the rules
Each use case runs inside a guardrail: no diagnosis, no prescription, a clinician signing what matters and a log a medical director could read.
Use case 01
Measured byTime to first human response
Tested forOWASP LLM01 · Prompt injection
Ships only with its evaluation set, its guardrail and an owner
Use case 02
Measured byTime from discharge decision to signed summary
Tested forOWASP LLM09 · Misinformation
Ships only with its evaluation set, its guardrail and an owner
Use case 03
Measured byPatient queries about reports
Tested forOWASP LLM09 · Misinformation
Ships only with its evaluation set, its guardrail and an owner
Work and insights
Projects in this industry are published once a client approves the write-up. Until then, here is what we have written on the rules that apply.
A typical programme · composite
A multi-city diagnostics chain moved booking, home collection and report delivery onto one consented patient journey, so a patient sees one record from test to report.
Anonymised and illustrative: the shape a programme takes, never a named client.
Nothing published on hospitals & care providers yet. Ask us what we are seeing in the industry.
Ask usQuestions
Something else on your mind? Ask us directly
We present them truthfully — qualifications, specialities, languages, timings — within the professional-conduct code, which does not allow doctors to solicit patients or claim superiority. Your medical and legal teams sign off.
Yes, through its APIs or your integration engine. We design the patient journey around the systems you already run.
Consent per purpose, minimum data, role-based access, logging and breach response, designed in to the DPDP Act — and, where records move through ABDM, to the patient’s consent artefact.
It can route, explain and draft, inside guardrails and with clinicians deciding. It does not diagnose or prescribe.
Keep exploring
Next · Same sector
Pharma & biotech
Time from brief to medical-legal approval
Same sector
Medical devices & diagnostics
Time from design change to approved release
Same sector
Consumer health
First-time claims approval
Finance & insurance
Financial services
Onboarding completion
Finance & insurance
Insurance
Time from claim to settlement
Tell us what you’re building. We’ll answer straight.
01About 2 minutes
You get A reply from a lead, not a sales queue
02About 8 minutesMost useful
You get Options and a first scope after one call
03About 15 minutes
You get Receipt confirmed and a named bid lead
Every engagement starts with a written scope and a quote agreed before work begins. How each package is priced
