Skip to content
PRS India

ABDM · ABHA · DPDP · FHIR

Healthcare Software Development

Healthcare software where the identity system is national, consent is required by law, and no-shows decide whether the clinic makes money. We build ABDM-ready systems where consent is a core part, not a checkbox.

Last updated

  • ABDM / ABHA linkage
  • DPDP consent, versioned and auditable
  • No-shows cut 27% to 11%
  • HL7 v2 and FHIR R4
The real problem

The patient record is not yours any more.

That is the sentence most hospital software has not absorbed. Under ABDM, a patient's health identity is portable and belongs to them. They can give a different hospital access to your records, for a set purpose and a set time, and take it back afterwards. Under the DPDP Act, you must be able to show, with proof, exactly what they agreed to and when. Software built on the idea that the hospital owns the data cannot be fixed to fit this cleanly. We build consent as a core part of the system in the first sprint. Every time clinical data is read, it is checked against a live consent, not just a role. Everything else in a hospital system depends on getting that right.

Talk about your facility
11%
No-show rate

Down from 27% at one client. WhatsApp confirm, auto-waitlist, risk scoring. None of it is clever. We just measure, then act.

100%
Consent auditable

Each version of the notice text is saved with every consent, so you can show what the patient actually read, not what the form says today.

3
Protocols terminated

HL7 v2, FHIR R4 and whatever the lab machine uses, all mapped to one standard internal model.

9min
OPD registration

Typical time from walk-in to ready for consultation, with ABHA scan-and-share replacing the form.

What healthcare software in India actually has to get right

Healthcare software in India is different from healthcare software anywhere else. The difference is not the medicine. The identity system is national, consent is now required by law, and the money a clinic makes depends on a number most software does not even measure.

ABDM and ABHA: identity you do not own

The Ayushman Bharat Digital Mission gives a patient an ABHA number — a health identity that the patient can carry anywhere. It is theirs, not your hospital's. To link your records to it, your facility must register in the ABDM system and set up the Health Information Provider flows. It must also honour a consent request from a Health Information User you have never heard of, correctly, on demand. Teams often underestimate this last part.

The mental shift is real. Your patient record is no longer a row in your database that you control. It is a record the patient can let a different hospital see, for a set purpose and a set time, and then take back. Software written on the idea that the hospital owns the data cannot be fixed to fit this cleanly. We build consent as a core part of the system from the first sprint. Every time clinical data is read, it is checked against a live consent, not against a role.

The DPDP Act made consent a legal artefact, not a checkbox

Under the Digital Personal Data Protection Act, health data is sensitive. Consent must be specific, informed and easy to take back. You must be able to prove, not just claim, what a patient agreed to and when. A checkbox in a form, with no record of what the notice said when it was ticked, does not do that.

So we keep each version of the consent notice. We store the exact text the patient was shown with the consent, add the time, and record the purpose. When a patient takes consent back, we really cut access, not just set a flag. We log every access to sensitive data in an audit trail that only grows, which an engineer cannot quietly edit. The data layer allows data to be used only for the stated purpose. This is more work. It is also the difference between a compliance story and a compliance claim.

No-shows are the number that decides whether a clinic is profitable

A specialist consultation slot that goes unfilled is money that cannot be recovered, because the hour is gone. Indian outpatient no-show rates are commonly between 20 and 30 percent. Most hospital software does not measure it at all, let alone act on it.

What actually works, in the order it works: a WhatsApp reminder 24 hours before, with a one-tap confirm or reschedule, because SMS is ignored and calls take too much time. A second nudge on the morning of the visit. A waitlist that offers a freed slot to the next patient as soon as a cancellation comes in. Booking with a deposit for the appointment types where no-shows are most common. And a risk score for each patient, based on their own history, so the front desk knows which slots to overbook. We have taken no-shows from 27 percent to 11 percent doing exactly this. Nothing on that list is clever. It is just measured, and then acted on.

HL7 v2 and FHIR, in the real world

Your radiology system speaks HL7 v2 with pipes and carets, because it was installed in 2016 and nobody is replacing it. ABDM speaks FHIR R4. The lab machine speaks something the vendor invented. We build a connecting layer that takes in all three, maps them to one standard internal model, and does not let the ugliest of the three decide the shape of your whole system. Every incoming message is saved raw before it is read, because the day a mapping is wrong you will want the original.

Modules

What we build into a healthcare platform.

Patient registration + ABHA

Scan-and-share ABHA registration, matching of patient details against existing records, and removal of duplicates that does not silently merge two people.

Appointments and no-show engine

WhatsApp confirm and reschedule, nudges on the morning of the visit, an automatic waitlist when someone cancels, booking with a deposit, and a risk score for each patient.

Consent management

Each version of the notice text saved with the consent, data used only for the stated purpose, and consent withdrawal that really cuts access.

Clinical records and OPD notes

Organised notes, prescriptions, vitals, allergy and interaction checks, with clinical templates for each specialty instead of one blank box.

HL7 / FHIR integration layer

Takes in HL7 v2, FHIR R4 and vendor formats. The raw message is saved before it is read, because one day the mapping will be wrong.

Lab and radiology (LIS/RIS)

From order to sample to result, DICOM study linking, and alerts for critical values that call a person instead of filling a queue.

Billing, TPA and insurance

Package pricing, TPA claim steps, pre-authorisation, and the matching of accounts that tells you what the insurer actually paid.

Patient app

Appointments, reports, prescriptions, consents the patient can review and take back, and teleconsultation where it makes sense.

Audit trail and access control

A log of every access to sensitive data that only grows, reads limited by role and consent, and a trail an engineer cannot quietly edit.

India, specifically

The compliance surface you are actually building against.

  • ABDM ecosystem

    Health Facility Registry, Healthcare Professionals Registry, Health Information Provider flows, and consent requests honoured from users you have never heard of.

  • DPDP Act

    Specific, informed consent that can be taken back, with each version of the notice text saved. You can prove it, not just claim it. Taking consent back cuts access for real.

  • HL7 v2 and FHIR R4

    Both, at the same time, for good. The 2016 radiology system is not being replaced, and ABDM is not going to start speaking pipes and carets.

  • Data residency

    Hosting in an Indian region, backups inside the country, and real care about which outside SDK is quietly sending identifiable data abroad.

  • NABH documentation

    If accreditation is in your plans, the audit trails, incident logs and clinical protocol records need to exist from day one, not be rebuilt later.

  • TPA and insurance reality

    Pre-authorisation, sending claims, part payments, and the matching of accounts that shows what the insurer actually paid against what you billed.

The metrics that matter

What a hospital administrator actually asks about.

Not uptime. Not page load. These four numbers come up in every board meeting we have ever sat in with a hospital group. Most hospital software cannot produce any of them without somebody exporting to Excel first.

Talk to us
16%
OPD no-show rate

The biggest money leak you can win back in an outpatient business, and the one measured least often.

2.3days
Average length of stay

This decides how fast beds turn over, and so how many inpatients you can take.

34days
TPA claim cycle

From discharge to money received. Every day of it is working capital sitting with an insurer.

89%
Bed occupancy

Measured live, by ward, not rebuilt at month end from a register.

Can you show what a patient consented to, and when?

Not the checkbox, but the exact notice text they were shown at that moment. If the answer is no, that is now a legal risk, not just a technical problem. Let us talk about what it takes to fix it.

The stack

Built on tools that will still be here in five years.

  • Laravel
  • React Native
  • PostgreSQL
  • Redis
  • ABDM Gateway
  • ABHA
  • HL7 v2
  • FHIR R4
  • DICOM
  • WhatsApp Business API
  • Razorpay
  • AWS (India region)

FAQ

The questions you were going to ask on the call.

Registering your facility in the Health Facility Registry, registering practitioners in the Healthcare Professionals Registry, linking patient records to their ABHA number, and setting up the Health Information Provider flows so that when a patient consents, another hospital can pull the records they have allowed. Teams often underestimate the consent flow: you must honour a request from a Health Information User you have never heard of, correctly, on demand. This must be built into the system from the start. It is not a certificate you buy at the end.

Consent stops being a checkbox and becomes proof. It must be specific, informed and easy to take back. You must be able to show what the patient agreed to and when. This means keeping each version of the notice text and saving the exact wording shown when consent was given. When consent is taken back, access must really be cut, not just flagged. Data can be used only for the stated purpose, and the data layer enforces this. Every access to sensitive data goes into an audit trail that only grows. It is more work, and it is the difference between a compliance story and a compliance claim.

Yes, and it pays back the most in most hospital projects, because an unfilled specialist slot is money that cannot be recovered. Indian OPD no-show rates commonly run 20 to 30 percent. It takes WhatsApp reminders with one-tap confirm or reschedule, a nudge on the morning of the visit, an automatic waitlist that offers a freed slot as soon as someone cancels, booking with a deposit for the high-risk appointment types, and a risk score for each patient so the front desk knows what to overbook. We have taken a client from 27 percent to 11 percent with exactly that list.

Both, because you will have both. Your radiology system speaks HL7 v2 with pipes and carets and is not being replaced. ABDM speaks FHIR R4. The lab analyser speaks whatever its vendor invented. We take in all of them in a connecting layer that maps to one standard internal model, so the ugliest protocol in the building does not get to decide the shape of your system. Every incoming message is saved raw before it is read. The day a mapping is wrong, you will want the original.

In India, in practice. We put your system live in an Indian AWS or Azure region, keep backups inside the country, and are careful about which outside services ever see identifiable data. An analytics SDK or a support tool that sends data abroad is a quiet compliance failure that nobody notices until an audit. Encryption when data is stored and when it moves is a given. The harder part is collecting less: do not collect what you do not need, and do not keep it once the purpose is served.

A working system (patient registration with ABHA, appointments with the no-show machinery, OPD notes, billing and a first ABDM linkage) typically takes 18 to 26 weeks, from around ₹24,00,000. We deliberately deliver appointments and the no-show tools early, because that part gives a return you can measure. It also helps you make the case for the rest of the project inside your own organisation.

Let's talk healthcare software development

Bring us the hard version of the problem.

A senior engineer reads every enquiry. You'll get a real answer — scope, risk and a number — within one business day.