Clinic Agreements

The following agreements govern the relationship between Sapinetra and clinics using the platform.

Clinic Service Agreement

By registering a clinic account on Sapinetra OS, the clinic ("Clinic") enters into a binding Service Agreement with Sapinetra Technologies Pvt. Ltd. ("Sapinetra").

The Clinic agrees to use the platform only for lawful healthcare management activities, to maintain accurate registration data, and to obtain appropriate consent from patients before processing their personal health information.

Sapinetra agrees to provide the subscribed services as described in the relevant plan, maintain service availability of at least 99.5% monthly, and notify the Clinic of material changes with a minimum 30-day notice period.

Data Processing Agreement (DPA)

This DPA governs the processing of personal data by Sapinetra on behalf of the Clinic, in accordance with India's Digital Personal Data Protection Act, 2023.

Roles: The Clinic is the Data Fiduciary. Sapinetra is the Data Processor. Sapinetra shall process data only on documented instructions from the Clinic.

Security: Sapinetra implements appropriate technical and organisational measures, including AES-256 encryption, access logging, and regular penetration testing.

Sub-processors: Sapinetra may engage sub-processors (e.g., cloud providers, WhatsApp Business API) listed at legal@sapinetra.com. Changes to sub-processors will be notified 14 days in advance.

Deletion: Upon termination, Sapinetra will delete or return all clinic data within 90 days.