Your patients' data stays yours
Clyno is hosted in secure data centres in India, encrypted end to end, and built around the principles of India's DPDP Act — with role-based access, audit logging and per-clinic isolation as the default, not an upsell.
Security that's on by default
Every clinic gets the same protections — there is no 'security tier'.
Hosted in India
Data lives in enterprise-grade data centres in India. Clinical data does not leave the country in normal operation.
Encrypted in transit & at rest
256-bit encryption on the wire and at rest, with industry-standard key management — keys are never embedded in the apps.
Role-based access control
Six roles, each scoped to exactly what it needs. Access is enforced on the server, not just hidden in the UI.
Audit logging
Sensitive actions are recorded, so a clinic can see who did what and when.
Per-clinic isolation
Every clinic is a separate tenant. One clinic can never read another's patient records.
Backups & recovery
Automated daily backups with fast recovery, so a mistake or outage doesn't mean lost records.
Secure sign-in
Strong login controls with OTP verification for sensitive roles, account lockout on repeated failures and automatic session protection.
No PHI on public screens
The waiting-room 'Now Serving' board shows tokens, not patient names — privacy by design.
Defence in depth
Multiple independent layers of protection stand between the internet and clinical data — reviewed and strengthened continuously.
Built around the DPDP Act, 2023
India's Digital Personal Data Protection Act sets the rules for handling personal data. Clyno is designed around its core principles.
Our honesty policy on certifications
We publish the security practices we actually run — not compliance badges we haven't earned. Clyno does not currently claim a formal HIPAA or ISO 27001 certification. As we scale, formal certification is on our roadmap, and we'll say so here the day it's real. Until then, what you read on this page is what the platform does today.
Frequently asked questions
In India, in enterprise-grade data centres. Your clinic's clinical data does not leave the country in normal operation.
Security you can put in front of a patient
See exactly how Clyno handles clinical data — book a walkthrough with our team.
Related: EMR · ABDM & ABHA