Built to satisfy section 63. Not to ask for your trust.
Here is exactly how a CareSeal record is made and kept. In plain language so your lawyer can check it.
Every step is an entry
Opening the link. Reading a chapter. Confirming a risk. Answering a question. Asking the doctor. Signing. Each becomes a time-stamped entry that can only be added and never edited or deleted. The database itself refuses changes to these tables.
Entries are chained
Each entry's fingerprint includes the fingerprint of the entry before it. Change one character anywhere and every later fingerprint breaks. That is what the checker looks for.
The document is sealed
When the doctor countersigns a PDF is produced with the full record embedded inside it. It is fingerprinted, signed with CareSeal's document key and time-stamped. It is stored write-once for up to ten years.
The certificate is ready
The evidence pack contains a section 63(4) certificate with the record's hash and algorithm filled in. Part A is for the clinic's person in charge and Part B for an expert as the Schedule requires.
Two levels chosen by risk
- Phone OTP. The patient's mobile number is verified with a one-time code before they start and again when they sign. This creates an admissible electronic record of consent. It is not an electronic signature under section 3A of the IT Act and we do not call it one.
- Aadhaar eSign. For high-risk procedures signing goes through a licensed eSign provider under the Controller of Certifying Authorities. This is an electronic signature under section 3A. The Aadhaar number never touches CareSeal.
- Witness and doctor. A relative or clinic witness can sign alongside the patient and the treating doctor countersigns. These are the blocks the ART forms and NABH expect.
Where it lives and who can see it
- Patient names, numbers, history and prescriptions are encrypted at rest and in transit. Search works on a keyed fingerprint rather than the number.
- The clinic is the data fiduciary under the DPDP Act. CareSeal is its processor under a written agreement.
- Every time anyone opens a sealed record it is logged. Clinic, lawyer or CareSeal support. The log is itself chained.
- Anyone holding an evidence pack can verify it offline with our checker without trusting CareSeal or the clinic.
- ISO 27001 and SOC 2 are planned. They will appear here when certified and not before.
See it with one of your own consent forms.
Send us the form you use today. In 15 minutes we show you the same procedure on CareSeal in your patients' language.
Prefer email? Write to support@careseal.in.
Only 2 founding places still open.