Skip to contentSkip to content
Security & DPDP

Patient data is the most sensitive thing your lab holds.

MargLabz is built for DPDP Act 2023 compliance from the first release: encrypted in transit and at rest, role-based access, a full audit trail behind every clinical and financial change, and consent captured before data moves.

Encrypted in transit and at restDPDP Act 2023 alignedFull audit trail
The controls

Security built into the data model, not bolted on

Compliance is part of the core from the first slice — tenant isolation, consent and audit are not a Phase 2 add-on.

Encryption everywhere

Patient and financial data encrypted in transit and at rest.

Role-based access

Staff see only what their role allows; pathologist-only sign-off is enforced, not assumed.

Tenant isolation

Every lab's data is isolated at the database level with row-level security — never just in app code.

Full audit trail

Every clinical and financial change is recorded — who, what and when — and cannot be quietly edited away.

Consent-first handling

Consent is captured before data moves, in line with the DPDP Act's data-fiduciary duties.

Your data stays yours

The lab owns its data; MargLabz processes it only on the lab's instructions.

About data protection

What your IT and compliance team will ask

Is MargLabz DPDP Act 2023 compliant?

MargLabz is built for DPDP Act 2023 compliance: encryption in transit and at rest, role-based access, audit logs, and consent-first data handling. Where a lab uses MargLabz to process its patients' data, the lab is the Data Fiduciary and Marg ERP Ltd. acts as a Data Processor on the lab's instructions.

Who can see my lab's data?

Only the staff you authorise, and only what their role permits. Every lab's data is isolated at the database level with row-level security, so one lab can never see another's data.

Can AI features change a clinical result on their own?

No. AI in MargLabz assists — it flags and it explains — but a qualified pathologist validates and approves every result. AI never authorizes a clinical result on its own.

What happens to my data if I leave?

Your lab owns its data. Retention is set by your lab's own policy, and your data can be exported. MargLabz processes it only on your instructions while you hold the account.

Questions from your IT or compliance team?

Bring them to the demo — we answer them on the call.

No credit card required · Demo in English or Hindi

Book Free Demo