Health & life sciences
Doctor profiles stay within the conduct code.
We build patient journeys, consented patient records and health communication for hospital groups, clinics, diagnostic chains and home-care providers. Each is built to the DPDP Act and measured on time from first contact to appointment.
Where rules matter mostMap of all forty-one industries
What is shifting
They compare doctors, prices and waiting times online, consult by video and carry their reports on a phone. Each shift names what it demands, with a fact you can check.
What it needsService pages, doctor profiles and price information that answer the question without promising outcomes.
EvidenceRule 9 of the Clinical Establishments (Central Government) Rules, 2012 requires registered establishments to display each service’s rate in the local language and English.
What it needsTeleconsultation journeys with identity, consent and records handled as carefully as in the clinic.
EvidenceThe Telemedicine Practice Guidelines of March 2020 let registered doctors consult by video, audio and text, with limits on what can be prescribed remotely.
What it needsSystems that link to a patient’s health account and share records only on the patient’s consent.
EvidenceUnder the Ayushman Bharat Digital Mission, records move between providers only against the patient’s consent.
What it needsAssistants that route and summarise, with clinicians deciding and every output reviewable.
EvidenceThe ICMR’s 2023 ethical guidelines for AI in healthcare ask for human oversight, accountability and data privacy.
The rulebook
The professional-conduct code, the clinical-establishment rules, telemedicine guidance, the data law and its health records framework, read for a care provider. Your medical and legal teams keep sign-off.
Standards we build to
We design and build to these standards. This does not mean we are certified.
Shapes most of the work
National Medical Commission
Doctors may not solicit patients or advertise themselves; what they may publish about themselves is limited. The NMC’s 2023 conduct regulations were held in abeyance in August 2023, so the 2002 code applies.
We designDoctor profiles state qualifications, specialities, languages and timings, and never claim superiority or results.
Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002 · NMC notice of 23 August 2023
Central Consumer Protection Authority
Claims must be substantiated, and disclaimers may not contradict the claim they qualify; outcome and success-rate claims need evidence.
We designService pages describe treatments and processes; any figure carries its source and date.
CCPA · Guidelines for Prevention of Misleading Advertisements and Endorsements, 9 June 2022 Official text: CCPA misleading-ads guidelines, 2022
Shapes most of the work
Ministry of Health and Family Welfare
Where a state or union territory has adopted the Act, registered establishments display each service’s rate in the local language and English.
We designPrice and package pages are built from the same rate card the front desk uses.
Clinical Establishments (Central Government) Rules, 2012 · rule 9
Board of Governors in supersession of the Medical Council of India
Registered doctors may consult by video, audio or text; patient and doctor identify themselves, consent is recorded and remote prescribing is limited by list.
We designTeleconsultation journeys capture identity and consent, and keep the record with the clinic’s own.
Telemedicine Practice Guidelines, 25 March 2020 Official text: Telemedicine Practice Guidelines, 2020
Shapes most of the work
Ministry of Electronics and IT
Health information is personal data: consent per purpose, security safeguards and breach reporting. The Rules exempt care given to a child by a clinical establishment from the parental-consent requirement, to the extent needed for the child’s health.
We designPatient data is collected per purpose, access is role-based and logged, and retention is set by record type.
DPDP Act, 2023 · DPDP Rules, 2025, Fourth Schedule (core obligations from 13 May 2027) Official text: DPDP Act, 2023 and DPDP Rules, 2025
National Health Authority
Records shared through the Ayushman Bharat Digital Mission move only against the patient’s consent, recorded as a consent artefact.
We designRecord-sharing screens are designed to the consent artefact, and every grant is logged.
NHA · Health Data Management Policy, Ayushman Bharat Digital Mission
Shapes most of the work
Indian Computer Emergency Response Team
Report cyber incidents within six hours of noticing them, and keep logs of every ICT system for a rolling 180 days, within India.
We designPatient portals launch with logging, monitoring and an incident response plan in place.
CERT-In · Directions under section 70B(6), 28 April 2022 Official text: CERT-In Directions, 2022
Often shapes the work
Indian Council of Medical Research
Non-binding guidance: AI used in care should be validated, explainable, privacy-preserving and overseen by people who remain accountable.
We designEvery assistant has an evaluation set, a named clinical owner and a log of what it produced.
ICMR · Ethical Guidelines for Application of Artificial Intelligence in Biomedical Research and Healthcare, March 2023
Updated 3 October 2026. Our reading of typical projects, not legal advice. Rules change, so your lawyer confirms how each applies to you.
Challenges
What patients need before, during and after a visit — and what it takes your teams to give it to them from systems that rarely talk to each other.
Doctors, departments, prices and waiting times explained before the first visit.
Reports, prescriptions and follow-ups sent to the patient, so nobody has to chase them.
Home visits, sample collection and remote follow-up booked as easily as an appointment.
What we make
A typical project here uses each area in this mix. Each line says what it makes for the industry and links to the service behind it.
Patient journeys for search, booking, home collection, reports and follow-up, tested with patients and front-desk staff.
A consented patient record, with reminders and follow-up across WhatsApp, SMS and email.
Brand architecture for groups of hospitals, clinics and specialities, and doctor profiles that inform without advertising.
Integrations between hospital, lab and CRM systems, secure patient portals and audit logging.
Assistants that route enquiries and draft documents for clinicians to review.
Health information written to the advertising rules and reviewed by clinicians.
Projects
Each project shows its plan, typical length and main measure. Lengths are typical. We agree yours on the first call.
First project
We follow patients from first search to report, and check what your pages and profiles say against the professional-conduct code.
What you get
02Milestone · 4–9 months
Booking, home collection, reports and follow-up rebuilt as one journey, integrated with the systems you run.
MeasureShare of appointments booked online
Services: Complete UX & UI design · Web or mobile app · System integration
Enquire about Booking, reports and follow-up journey03Project · 8–12 weeks
One consented patient record behind every reminder, report notification and follow-up.
MeasureFollow-ups completed on time
Services: One record per customer · Email, SMS & WhatsApp set-up · Automated journeys
Enquire about Consented patient CRM and reminders04Retainer · Ongoing
Service pages and articles on what patients search for, reviewed by your clinicians.
MeasureOrganic visits to service pages
Services: Content plan & calendar · Monthly content production
Enquire about Health content programmeHow success is measured
Main measureTime from first contact to appointment
AI, under the rules
Each use case runs inside automatic checks: no diagnosis, no prescription, a clinician signing what matters and a log a medical director could read.
AI job 01
Measured byTime to first human response
Tested forOWASP LLM01 · Prompt injection
Goes live only after testing, with safety checks and a named owner
AI job 02
Measured byTime from discharge decision to signed summary
Tested forOWASP LLM09 · Misinformation
Goes live only after testing, with safety checks and a named owner
AI job 03
Measured byPatient queries about reports
Tested forOWASP LLM09 · Misinformation
Goes live only after testing, with safety checks and a named owner
Work and insights
We publish projects in this industry once the client approves the write-up. Until then, here is what we have written on related topics.
A typical project · example
A multi-city diagnostics chain moved booking, home collection and report delivery onto one consented journey, so patients see one record from test to report.
An example of the shape a project takes, without client names.
Nothing published on hospitals & care providers yet. Ask us what we are seeing in the industry.
Ask usQuestions
Something else on your mind? Ask us directly
Yes, within the professional-conduct code. Profiles state qualifications, specialities, languages and timings, because the code does not allow doctors to solicit patients or claim superiority. Your medical and legal teams sign off.
Yes, through its APIs or your integration engine. We design the patient journey around the systems you already run.
We design it to the DPDP Act from the start: consent per purpose, minimum data, role-based access, logging and breach response. Records shared through ABDM follow the patient’s consent artefact.
Partly. It routes enquiries, explains report terms and drafts documents for clinicians to sign. It does not diagnose or prescribe.
Keep exploring
You will talk to the lead who would run your work.
01About 2 minutes
You get A reply from a named lead
02About 8 minutesRecommended
You get Options and prices after one call
03About 15 minutes
You get Confirmation and a named lead
We always agree a written scope and price before work begins. How each plan is priced
