Trust

Where your patient data lives. Why it matters.

Mithun K. Singh 15 May 2026 5 min read

Most Indian healthtech runs on US servers. Lucoze doesn't. Here is the commitment we've made.

The commitment we’ve made

Here is a commitment we want on the record: every byte of Lucoze patient data sits in Indian data centres. Not in Virginia. Not in Singapore. Not in some “global” region that resolves to wherever the provider felt like.

India hosting costs noticeably more than US/EU equivalents. We accept that cost as table stakes for the customer relationship we want.

The legal reason

The DPDP Act 2023 leaves cross-border data transfer as a footnote you don’t want to be reading in 2027 with 80 clinics on your platform and a regulator’s notice on your desk. The exact rules are still being clarified. The safe call — the one a clinic owner doesn’t need a lawyer to verify — is: data stays in India.

The practical reason

Round-trip latency from a Tier-2 clinic in Patna to an Indian data centre is ~40ms. To a US-east region, it’s ~280ms. For a front-desk staffer searching for a patient 200 times a day, that 240ms difference is the gap between software that feels like a tool and software that feels like a tax.

The trust reason

The buyer question we can’t dodge: “Where does our patient data live?” The answer that costs us trust — with the buyer, with the regulator, eventually with the regulator’s notice — is anywhere outside India.

What production looks like

Primary database: Indian data centre, India region only.
Object storage: Indian regions only.
Backups: Indian-region replicas. Never cross-region outside India.
Encryption: at rest (AES-256) and in transit (TLS 1.3).
Key management: customer-managed keys per tenant.
Audit log: every record access logged for 7 years.

Three questions to ask any vendor

Where is the primary patient database hosted? Not the CDN. The database.
Where are nightly backups stored?
Who at the cloud provider has key access to encrypted data?

If the answer to (1) is anywhere outside India, you are not buying ABDM-ready software. You are buying a brochure.