Interoperability readiness for India's digital health ecosystem
AIpath HealthTech by AIpath DigiNext Private Limited. Our ABDM (M1–M3) and NHCX integrations are fully developed. Our application to the National Health Authority (NHA) for certification is in progress.
Integration and certification status
Last updated: October 2026
ABDM Milestone M1
ABHA creation and verification, ABHA linking, and Scan & Share registration
ABDM Milestone M2
Health Information Provider (HIP): care-context linking and consent-based sharing of health records
ABDM Milestone M3
Health Information User (HIU): consent requests and retrieval of health records from other facilities
NHCX integration
Coverage eligibility, pre-authorisation, claims, communication requests and payment notices
We will update this page as each milestone is cleared by the National Health Authority. Certification milestones are not a government endorsement of any product.
Consent-based health record exchange
Built as both a Health Information Provider (HIP) and a Health Information User (HIU), integrated with the ABDM gateway, ABHA, the Health Facility Registry (HFR) and the Healthcare Professionals Registry (HPR).
- 1Consent request
Requesting facility → ABDM gateway: Doctor requests the patient’s records for a stated purpose and date range.
- 2Approval prompt
ABDM gateway → Patient: Patient reviews the purpose, record types, date range and expiry in their ABHA app.
- 3Consent granted
Patient → ABDM gateway: Patient approves (or denies). Consent can be revoked at any time.
- 4Consent artefact
ABDM gateway → Record-holding facility: The record-holding facility receives the signed consent artefact.
- 5Encrypted FHIR records
Record-holding facility → Requesting facility: Only the consented records are sent, encrypted end to end, until consent expires.
AIpath HealthTech supports both roles: sharing records as a HIP and requesting them as a HIU.
ABDM capabilities
- ABHA creation, verification and linking where enabled
- QR-based Scan & Share registration
- HFR and HPR integration capabilities
- Health Information Provider (HIP) workflows
- Health Information User (HIU) workflows
- Consent-based health record exchange
- FHIR-based health record mapping
- Integration status and error monitoring
Patient rights we uphold
Records are shared only after the patient approves a specific purpose, date range and expiry in their ABHA app.
Patients can withdraw consent at any time; access ends when consent is revoked or expires.
Every access to a patient record is logged with who, when and why.
Only the records covered by the consent are shared, encrypted end to end.
A designated Grievance Officer handles privacy and data-protection concerns.
Standardised digital claims between providers and payers
NHCX is India’s National Health Claims Exchange, designed to standardise digital health-claim information exchange among participating providers, payers, beneficiaries and TPAs. NHCX participation has its own onboarding and integration requirements.
- 1Coverage eligibility
Hospital → Insurer / TPA: Verify the patient’s policy and coverage at admission.
- 2Pre-authorisation
Hospital → Insurer / TPA: Request approval with clinical documents attached as a FHIR bundle.
- 3Communication request
Insurer / TPA → Hospital: Payer raises queries or asks for additional documents.
- 4Claim submission
Hospital → Insurer / TPA: Structured claim prepared from the patient’s bill and records.
- 5Payment notice
Insurer / TPA → Hospital: Settlement details returned and reconciled against the bill.
All messages pass through NHCX using the HCX protocol, subject to supported workflows and participant onboarding.
- Insurance eligibility and policy details
- Pre-authorisation workflow support
- Claim preparation and submission
- Document and query management
- Claim status and response tracking
- Reconciliation and settlement visibility
- NHCX integration capabilities, subject to supported workflows and onboarding
Health data standards used
| Standard | How it is used |
|---|---|
| FHIR R4 | Health records structured to the NRCeS FHIR Implementation Guide for ABDM |
| SNOMED CT | Clinical terminology for diagnoses, findings and procedures |
| LOINC | Identification of laboratory tests and observations |
| ICD-10 | Diagnosis classification for records and insurance claims |
| HCX protocol | Health Claims Exchange specification used by NHCX |
| ABDM APIs | ABDM gateway, ABHA, HFR, HPR and consent manager integration |
How the platform fits together
Health data protected by design
Health data is hosted in Indian cloud regions on AWS or Microsoft Azure, encrypted in transit and at rest, and accessible only through role-based, MFA-protected and fully audited access.
Data protection
- Encryption in transit with TLS 1.2 or higher
- Encryption at rest with AES-256
- Keys managed in AWS KMS or Azure Key Vault, with rotation
- Masking of sensitive identifiers such as Aadhaar and ABHA numbers
- Field-level access rules for sensitive clinical data
- Encrypted backups with point-in-time recovery
- Configurable data retention and secure deletion
Cloud infrastructure
- Deployment on AWS or Microsoft Azure
- Hosting in Indian cloud regions to support data residency
- Private network isolation (VPC / VNet) with no public database access
- Web application firewall and DDoS protection
- Secrets stored in managed vaults, never in code
- Least-privilege cloud IAM for services and administrators
- Hardened, regularly patched infrastructure
Governance & compliance
- Privacy by design and data minimisation
- Designed to support the Digital Personal Data Protection (DPDP) Act, 2023
- Aligned with ABDM security and consent requirements
- Secure development lifecycle with code review and dependency scanning
- Regular vulnerability assessment and penetration testing (VAPT)
- Documented security policies and incident response
Accountable contacts
AIpath DigiNext Private Limited
Developer and operator of AIpath HealthTech. Registered in India.
+91 91256 58344contact@aipathdiginext.comTechnical & integration contact
ABDM and NHCX integration, sandbox testing and technical documentation.
+91 91256 58344contact@aipathdiginext.comGrievance Officer
Anuj Kumar Singh. Privacy, consent and data-protection concerns under the DPDP Act, 2023.
+91 91256 58344contact@aipathdiginext.comSee Your Hospital Operations, Unified.
A guided walkthrough of AIpath HealthTech, mapped to your departments and workflows.