Skip to content
Technology

How Diagnosuya is built and run

You are trusting us with patient data and with the system your laboratory runs on. This page sets out how we look after both — in enough detail to be checkable.

Infrastructure

The commitments behind the service

  • Encrypted end to end

    TLS 1.3 in transit and AES-256 at rest. Each laboratory's data is logically isolated, so one customer's records are never reachable from another's session.

  • Continuous backups

    Point-in-time recovery with backups replicated to a second geographic region. We test restores on a schedule, because a backup nobody has restored is a hypothesis.

  • 99.95% uptime

    Measured across the last twelve months, excluding announced maintenance. Maintenance is scheduled outside Indian business hours wherever practicable.

  • Access controlled and logged

    Our staff cannot reach your data without your explicit, time-limited grant for a specific issue. Every such access is logged and visible to you.

  • Hosted in India

    Data for Indian customers stays on Indian infrastructure, with backups in a second Indian region. Overseas customers are hosted in the region nearest them.

  • Monitored continuously

    Performance and error monitoring around the clock, with alerting that reaches an engineer rather than a dashboard nobody is watching.

Engineering

How we build it

Four decisions that shape what the software is like to use.

  • Built to be fast on a slow connection

    Many Indian laboratories work on modest broadband or a mobile connection. We optimise aggressively for that: small payloads, minimal round trips, and screens that remain usable while data loads rather than blocking on it.

  • Continuous, reversible deployment

    We ship small changes frequently rather than large releases occasionally. Every change goes through automated testing and can be rolled back in minutes. You never install anything, and you never pay for a version upgrade.

  • Designed around the audit trail

    Record history is append-only at the storage layer. Amendments create new versions rather than overwriting, which is what makes the audit trail trustworthy rather than merely present.

  • Boring technology, deliberately

    We use well-understood, widely-supported technology rather than whatever is fashionable. Laboratory software needs to work for a decade; that is a different design goal from being interesting.

Data protection

Questions about your data

The answers we give in writing, not just in a sales call.

Where is our data stored?
On servers located in India, with backups replicated to a second Indian region. Data never leaves the country unless you are an overseas customer, in which case we host in the region nearest you.
Who at Diagnosuya can see our patient records?
Nobody, by default. Support staff can only access your data when you grant temporary access for a specific issue, and every such access is logged and visible to you. We do not browse customer records, and we never use patient data for anything beyond running the service for you.
What happens if we stop paying?
Your account moves to read-only rather than being deleted. You can still view and export everything for 90 days. We send several reminders before that window closes, and a full export is always available on request.
Do you meet Indian data protection requirements?
We are built to comply with the Digital Personal Data Protection Act, 2023, including consent records, breach notification and the right to erasure. Our data processing agreement is available on request and forms part of the customer contract.

Want to go deeper?

We are happy to walk your IT adviser through our architecture, provide a data processing agreement, or answer a security questionnaire.

Ask us anything technicalJoin a live demo
  • No card required
  • Setup and migration included
  • 14-day money-back guarantee