Privacy Policy

1. ABDM Consent Native Framework

EntheoryAI operates exclusively as a Health Information User (HIU) and Health Information Provider (HIP) technical wrapper aligned with the Ayushman Bharat Digital Mission (ABDM) guidelines established by the National Health Authority (NHA) of India.

We do not access, process, or transmit patient medical records without an active, signed digital consent artifact generated via the ABDM Consent Manager. Patient consent may be revoked at any time by the data principal.

2. India Data Residency & Storage

In full accordance with the Digital Personal Data Protection (DPDP) Act 2023 and Ministry of Health guidelines, 100% of data processing, temporary caching, and encrypted database storage for EntheoryAI services are strictly maintained within MeitY-empanelled cloud data centers physically located in India (AWS Mumbai / Azure India Central).

3. Data Encryption & Security Standards

• Encryption at Rest: All database volumes, FHIR bundle caches, and DICOM study pointers are encrypted using AES-256 bits.
• Encryption in Transit: Data exchanged between hospital EMRs, PACS networks, and EntheoryAI endpoints is encrypted using TLS 1.3.
• Zero Retention RAM Processing: In high-security enterprise tiers, patient records are processed entirely in ephemeral RAM and purged immediately upon presentation to the tumor board.

4. Disclosure to Third Parties

We never sell, monetize, lease, or trade personal health information (PHI) or hospital clinical datasets to third-party advertisers, data brokers, or pharmaceutical marketers. Data is shared exclusively with authorized clinical tumor board members participating in the patient's direct care team.

5. Contact Privacy Officer

For privacy inquiries or consent audit requests, please contact our Data Protection Officer at:
ENTHEORY AI PRIVATE LIMITED
10-10-24, RAMOLLAWADA, Warangal, Warangal- 506002, Telangana, India
Email: privacy@entheory.ai