The consent layer for every Indian healthcare touchpoint.
v1.5 reframes the product from a surgery consent app into a multi-pathway consent surface - signed, verifiable, and live.
v1.5 - Strategic Depth
Care pathways · 3 friction tiers · buyer economicsTeleconsult booking
Tier A inline consent - single checkbox at the moment of booking. DPDP Rule 3 done right.
E-Pharmacy checkout
Inline consent at checkout for prescription, pharmacy, courier. Three artifacts in one click.
OPD visit check-in
Tier B quick consent - one screen, mandatory + optional toggles, mobile OTP.
My consents (patient)
DPDP Rule 6 patient rights - view all, withdraw any, see expiry. Two clicks max.
Hospital consent yield
CFO/CMO view: opt-in % by bucket, A/B copy lift, ₹/month revenue from consent.
v1.0 - Reference Flows
Untouched · IPD ceremony · breach · registryProduct strategy
Read the 18-section product strategy. Personas, modules, competitive teardown, GTM, risk/mitigation, v1-vs-deferred.
IPD ceremony · 4 archetypes
Full 5-step ceremony for high-risk admission. Aadhaar / mobile OTP / voice biometric / passport liveness.
Compliance dashboard
KPIs, language donut, recent artifacts, DPDP readiness score - all live from Supabase.
Consent registry
Filterable, searchable table of every signed consent artifact with cryptographic provenance.
Breach console
Simulate a breach incident. AI classifies severity and drafts the DPB notification (live model when configured; labeled heuristic fallback otherwise), with a 72h countdown.
System architecture
Interactive 3-layer diagram with 7 modules and 5 external integrations. Click any node for detail.
Real vs simulated - an honest status board
- Live Supabase writesConsent artifacts are written to a live Supabase database (schema committed at src/lib/certinal/schema.sql), with an immutable audit log and SHA-256-hashed IPs.
- HMAC-SHA256 signingReal HMAC-SHA256 over canonical JSON with constant-time verification. The registry verify action and the dashboard integrity control re-run this crypto live.
- Readiness computed liveThe DPDP readiness score is computed from the live rows on every load - no hardcoded KPIs.
- Real AI, badgedAI grading, breach triage and drafting call a real model via OpenRouter when a key is configured, and every response carries a live-vs-fallback badge.
- Heuristic fallback (no key)Without a model key, grading runs a labeled deterministic rubric - clearly badged, never presented as AI.
- Demo signing secretSigning uses a demo HMAC secret unless a hospital key is set; production requires per-hospital P-256 PKI (not built).
- Aadhaar OTP mockedAadhaar OTP is mocked unless Cashfree credentials are configured.
- ABDM / NHCX / DPB e-fileABDM / NHCX / DPB e-filing are roadmap only, not integrated.
- MT consent copy · est. ARRHindi/Tamil/Telugu consent copy is machine-translated; market and ARR figures in the strategy doc are illustrative estimates.
Hover any row for the exact crypto, schema and integration detail.
Tip for live demo: walk teleconsult → my-consents → hospital consent yield → /certinal/strategy v1.5 section.