Security and data
Your patients' records stay safe, private and yours
Every RevisitPlus clinic runs on its own dedicated server, set up and managed by Accucia, in India by default. Data is encrypted in transit and at rest and backed up daily. Access is set per role and per branch, and an audit trail records who opened or changed every patient file. The clinic owns its data and can export it at any time.
Where your data lives
Each clinic runs on its own dedicated server. It holds all of that clinic's data and hosting, and it is not shared with any other clinic. Accucia sets it up and manages it, so the clinic never looks after a server.
Your dedicated server is set up in India by default. The region can be chosen per clinic. Nothing is stored on a computer at the counter, so a stolen laptop or a failed hard disk at Hadapsar does not take patient files with it.
The server cost is covered in the first year by the one-time fee. From year two it is billed by Accucia at cost, as a separate line from the AMC. See pricing
RevisitPlus is built on Next.js and Node.js, with a MongoDB database. The Android app is built in Flutter.
How it is protected
| Protection | What it means for the clinic |
|---|---|
| Encryption in transit | Data moving between the browser or Android app and our servers travels over HTTPS, so it cannot be read on the clinic's Wi-Fi. |
| Dedicated server | Your clinic's data sits on its own server, not beside another clinic's data. |
| Encryption at rest | Data stored on the server and in backups is encrypted. |
| Backups | Daily, automated, kept on separate storage. |
| Access per role and per branch | Each login sees only what its role needs, and staff can be limited to their own branch. |
| Audit trail | Every open, change and deletion of a patient file is logged with the login and time. |
| Staff NDAs | Every Accucia team member who can reach client systems signs a non-disclosure agreement. |
Who in your clinic sees what
Access is set per role and per branch, so the screen matches the job and the location.
Reception
Sees registration, appointments, payments and medicine tracking. Reception does not need the case history, so it does not see it unless the owner allows it.
Doctors
See the full case history, prescriptions and follow-up dates for their patients, at any branch the patient visits.
The owner
Sees reports across every branch: patients, collections, missed visits, Revisit Rate.
Branch staff
Can be limited to their own branch's patients and reports. The owner and chosen managers see all branches.
Roles and branch access are set at onboarding and the owner can change them. If a prescription is edited at Wakad on a Tuesday afternoon, the audit trail shows which login made the change and when. See the patient record
Who owns the data
The clinic owns it
The clinic owns its patient data. Accucia processes it only to run RevisitPlus for you.
Export any time
You can export your records at any time in Excel and PDF, or as a full database dump, without asking permission and without paying an exit fee. Your accountant can pull payments by mode. Your doctors can take a patient list to another system.
If the AMC is not renewed: hosting stops and your clinic receives a full handover of its data: a full database dump plus Excel and PDF exports. Your data stays yours. The handover terms are written into your agreement and set out in the AMC and refund terms.
The DPDP Act 2023, in one honest paragraph
The Digital Personal Data Protection Act, 2023 governs how personal data in digital form is collected and used in India. For patient data, your clinic is the data fiduciary: it decides why the data is collected and answers to the patient for it. Accucia, through RevisitPlus, is a data processor acting on your clinic's instructions. RevisitPlus supports what the clinic needs to do: showing consent notices, recording consent, and acting on a patient's request to correct or delete their data. Your clinic's own obligations depend on how it works, so take advice from your own lawyer. This page is not legal advice.
WhatsApp messages and AI
WhatsApp from your own number
WhatsApp reminders, prescriptions and receipts go from the clinic's own business number, verified on the official WhatsApp Business API, so patients see the clinic's name. They do not pass through a receptionist's personal phone or a WhatsApp group.
See WhatsApp RemindersYour data never trains AI
Patient data is never used to train AI models, ours or anyone else's. The AI Assistant is available as an add-on, set up on request. If your clinic adds it, it reads your data only to answer your own staff's questions, inside your own account.
See the AI AssistantHow long we have looked after healthcare data
Before RevisitPlus, Accucia had already run Lotus Imaging Clinics, a diagnostics chain (not a homeopathy clinic), on one platform across six locations since 2018. Dr. Tathed's Homeopathy And Healing Center now runs its three branches on RevisitPlus. Read the Dr. Tathed case study
What we do not do
We do not sell, rent or share patient data with advertisers or anyone else.
We do not use patient data to train AI models.
We do not send patient messages from personal WhatsApp numbers.
We do not charge you to export your own data.
We do not hold your data back if you leave. You get a full handover.
We do not open patient records ourselves except to fix a problem you have reported.
Reporting a security concern
If you think patient data has been exposed, or you find a weakness in RevisitPlus, use the contacts below. We acknowledge it the same working day and tell the affected clinic what happened, what we fixed and what it needs to tell its patients. The rest is set out in our privacy policy.
Security questions
Is patient data stored in India?
Can my receptionist see case histories?
What happens to our data if we stop using RevisitPlus?
Does RevisitPlus make us DPDP Act compliant?
Can Accucia staff see our patient records?
Are WhatsApp messages secure?
Ask us the hard questions in person
Bring your security questions to a Patient Journey Review. We will show you access by role and branch, the audit trail and an export, running live with your branch names.
Related: How pricing and the AMC work · Doctor Dashboard
Last reviewed: 4 Oct 2026 by the RevisitPlus team