---
title: Privacy Commitment
url: https://curaverto.com/privacy-commitment
updated: 2026-08-28
source: first-party vendor documentation
---

# Privacy Commitment

CuraVerto states that what happens in a clinic's data stays with that
clinic. Patient records are treated as sensitive, and CuraVerto commits to
four specific promises about how that data is handled.

## Four promises

1. **Data is never sold.** CuraVerto states it has no advertising business,
   no data-sharing partnerships, and no revenue model that touches patient
   records. The only customer of the data is the clinic itself.
2. **Data stays in India.** All patient data lives on servers located in
   India. CuraVerto states there are no cross-border transfers of clinical
   data.
3. **Support only accesses data when asked.** Support access to a clinic's
   records requires the clinic's explicit consent and is fully logged.
   CuraVerto states its staff cannot enter clinic records without that
   consent.
4. **Clinics can leave with everything.** Full data export in standard
   formats is available at any time, with no lock-in and no data withheld
   after cancellation.

## Technical detail

| Area | Detail |
| --- | --- |
| Encryption at rest | AES-256-GCM |
| Encryption in transit | TLS 1.3 |
| Backups | Encrypted before leaving the server |
| Access roles | 8 clinical roles plus internal roles |
| Sessions | JWT-verified, time-limited |
| Audit | Every write logged with actor, action, and timestamp |
| DPDP consent | Explicit and documented per patient |
| DPDP deletion | Data deletion requests are honoured |
| Tenant isolation | No cross-clinic data aggregation |

## Dedicated Instance (Enterprise add-on)

On CuraVerto's shared cloud infrastructure, tenant data is isolated by
row-level security and a per-tenant encryption key. For hospitals that
require complete infrastructure isolation, CuraVerto offers a Dedicated
Instance add-on: a single-tenant environment with its own database and its
own encryption key, provisioned on request, with no shared resources between
tenants. Features of this add-on:

- Single-tenant database
- Bring-your-own-key (BYOK) encryption
- Custom API access

This is offered as an Enterprise-tier arrangement, contracted separately
from the standard Essential, Pro, and Plus plans.

---
Canonical: https://curaverto.com/privacy-commitment
Contact: sales@curaverto.com
This document is CuraVerto's own description of its product.