ABDM mandates. DPDP enforcement. Patient data trapped in legacy HMIS and LIMS.
Sammati is the consent and compliance rail that turns both mandates into working pipelines — certified, evidenced, and running in 90 days.
The 2026 reality
ABDM
NHA is progressively mandating ABDM compliance for PMJAY-empanelled hospitals — FHIR R4 or lose empanelment revenue
DPDP
The DPDP Rules are notified and the compliance clock is running: consent, purpose limitation, and erasure are now engineering requirements, not policy paragraphs
Legacy estates
Patient records live in HMIS/LIMS systems that predate every one of these mandates — and can't be replaced overnight
Why a privacy policy isn't compliance
Most healthcare providers 'comply' with DPDP the way most companies comply with anything new: a policy document and hope. But consent is a data engineering problem. Which records were accessed, under which consent, for which purpose? Can you prove erasure actually happened — everywhere, including backups and downstream copies?
When the audit or the breach investigation comes, the policy document is worth nothing; the evidence trail is worth everything. We build the trail.
Sammati (सम्मति) — the consent rail
- Consent enforced in the pipeline, not promised in a policy: purpose limitation, consent artefacts, and verifiable erasure as code
- ABDM/FHIR R4 compliance for HMIS and LIMS vendors — certified in 90 days
- DPDP-ready record systems for hospitals and diagnostic chains, with evidence trails for every access
Sammati enforces consent in the pipeline itself: every data flow carries its consent artefact and purpose; access outside purpose is blocked, not logged-and-hoped; erasure is verifiable, not aspirational. It sits on the same evidence-grade chassis as our banking rail — because we learned provenance discipline in regulated pharma and Tier-1 banking, where every number must carry its evidence.
Pricing: Fixed-fee compliance sprint + monthly rail subscription per facility or per product.
ABDM Compliance Rail — FHIR R4 in 90 days
We take HMIS/LIMS vendors through FHIR R4 certification in 90 days, and run compliance + incentive-recovery rails for diagnostic chains and hospitals — priced on outcomes.
Who we work with
HMIS/LIMS vendors
FHIR R4 certification in 90 days, then Sammati as your embedded DPDP layer — a selling point to every hospital you pitch.
Diagnostic chains & hospitals
ABDM incentive recovery, DPDP-ready record systems, and evidence trails for every access.
Health-tech & pharma
Consent-clean data pipelines for products and research — the difference between 'we anonymized it' and proving it.