DocKit Care (Sole Proprietorship) supports the Ayushman Bharat Digital Mission (ABDM). This page explains how ABHA numbers and linked health records are handled, and what rights a patient has over them.
1. Current integration status
This page is updated when production certification is granted. We do not describe the platform as ABDM-certified before that happens.
2. Our role
- The clinic or hospital using DocKit Care is the Health Information Provider (HIP) and remains the owner of the clinical record.
- DocKit Care is the technology service provider. We process ABDM-related data strictly on the instructions of that clinic or hospital.
- We never create an ABHA number on a patient's behalf, and we never use ABDM data for advertising, profiling or resale.
3. Consent
An ABHA number is only linked to a patient record when the patient asks for it. The platform enforces this in software, not merely as a policy statement:
- Clinic staff record the ABHA number a patient chooses to share. It is saved in a pending, unverified state and is not treated as confirmed.
- Verification requires an OTP sent by the ABDM gateway to the patient's own registered mobile number. Only the patient can complete this step.
- The link is marked verified only after that OTP succeeds. Staff cannot promote it manually.
Consent is purpose-limited and time-bound. It covers the care episode for which it was given, and it is never assumed from a previous visit.
4. Withdrawing consent
A patient may withdraw an ABHA link at any time, by asking the clinic or by writing to us at support@dockit.care. On withdrawal:
- The ABHA link is deactivated immediately and no further sharing can occur.
- The underlying clinical record stays with the treating clinic, because medical records must be retained under Indian medical record rules — withdrawal of an ABDM link is not the same as deletion of a medical history.
- To delete a patient account itself, see Delete your account.
5. What we store
- The ABHA number or ABHA address the patient chose to share.
- Whether that link is pending or verified, and the time of verification.
- An audit trail of who linked, verified or withdrew it, and when.
We do not store ABDM OTPs, and we do not retain copies of any Aadhaar number. Aadhaar is never collected by DocKit Care at any point in the ABHA flow.
6. Security
- All traffic is encrypted in transit with TLS; stored data is encrypted at rest.
- Each clinic's data is isolated per tenant. Staff access is controlled by a role and permission matrix, so a user only sees what their role allows.
- ABDM-related actions are written to an append-only audit log that the clinic can review.
- Access to production systems is restricted and logged.
7. Data retention and residency
- All health data is stored on servers located in India.
- Records are retained for as long as the treating clinic is required to keep them under applicable medical record rules, and are deleted or returned when that clinic ends its relationship with us.
- We do not transfer ABDM data outside India.
8. Patient rights
Under ABDM and the Digital Personal Data Protection Act, 2023, a patient may:
- Ask which of their records are linked to their ABHA.
- Withdraw an ABDM consent at any time, as described in section 4.
- Ask for a correction of inaccurate personal details.
- Raise a grievance and receive a response within 15 days.
9. Grievance Officer
- Email: grievance@dockit.care
- Phone: +91 78000 38366 (Mon–Sat, 9:00–18:00 IST)
- Address: Vaishali Nagar, Jaipur 302021, Rajasthan, India
Unresolved ABDM-specific complaints may also be raised with the National Health Authority through the grievance channel published on the official ABDM website.