22 frameworks · 1,747 controls · self-assessed coverage
Every regulation IdeaHIS maps to, every control we cover, and every role journey we verified against production runtime.
| Framework | Scope | Controls | Covered | % | Owner | Evidence |
|---|---|---|---|---|---|---|
| ABDM Ayushman Bharat Digital Mission |
India · National | 42 | 42 | 100% | Integrations · Sec-Eng | ABHA linking, HIP/HIU sandbox logs, consent manager traces, HPR/HFR cache, ABDM M2/M3 milestones |
| NABH National Accreditation Board for Hospitals (6th Edition) |
India · Clinical | 358 | 358 | 100% | Clinical Quality | AAC, COP, PRE, PRI, MOM, HRM, HIM, FMS, IMS chapters with auto-bound SOPs and monthly evidence binder |
| NABL National Accreditation Board for Labs |
India · Lab | 184 | 184 | 100% | Lab Ops | Calibration logs, IQC/EQC runs, TAT dashboards, internal audits, corrective-action registry |
| JCI Joint Commission International (7th Edition) |
Global | 298 | 276 | 93% | Clinical Quality | IPSG + ACC/APR/AOP/COP/ASC/MMU/PFR/PFE/QPS/PCI/GLD/FMS/SQE/MCI bound to SOP library |
| HIPAA US Health Insurance Portability Act |
USA | 54 | 54 | 100% | Security | BAA templates, PHI access logs, encryption at rest + in transit, breach workflow |
| DPDP Digital Personal Data Protection Act 2023 |
India | 38 | 38 | 100% | Legal · Security | Consent artefacts, data-principal rights workflow, DPO register, cross-border transfer map |
| GDPR EU General Data Protection Regulation |
EU/EEA | 99 | 96 | 97% | Legal · Security | RoPA, DPIAs, Art. 28 processor contracts, SCC bundles, breach-72h runbook |
| HL7-FHIR HL7 v2 & FHIR R4/R5 Interop |
Global | 120 | 120 | 100% | Integrations | ADT/ORM/ORU/DFT/MDM live, FHIR Patient/Encounter/Observation/MedicationRequest/Claim resources implemented (HAPI FHIR live) |
| SOC2 AICPA SOC 2 Type II |
USA / Enterprise | 64 | 64 | 100% | Security · Platform | Security, Availability, Confidentiality TSCs mapped in-product; external Type II attestation on compliance roadmap |
| ISO27001 ISO/IEC 27001:2022 ISMS |
Global | 93 | 93 | 100% | Security | Annex A 4-category control set and Statement of Applicability mapped in-product; certification audit on roadmap |
| PCIDSS PCI DSS v4.0 |
Payments | 12 | 12 | 100% | Payments | Gateway tokenisation keeps card data out of scope; SAQ-A boundary documented in-product |
| CERT-In CERT-In Directions April 2022 |
India | 8 | 8 | 100% | Security | 6-hour incident reporting pipeline, 180-day log retention, NTP sync, KYC on API consumers |
| CCPA California Consumer Privacy Act |
USA · California | 22 | 22 | 100% | Legal | "Do Not Sell" toggle, consumer rights portal, 12-month lookback logs |
| WCAG WCAG 2.1 AA Accessibility |
Global | 50 | 48 | 96% | Product · Frontend | axe-core CI, keyboard traversal suite, contrast tokens, ARIA-label sweep |
| RGHS Rajasthan Govt Health Scheme |
India · Rajasthan | 36 | 36 | 100% | Schemes | Empanelment bundle, pre-auth engine, claim submission, reconciliation ledger, TMS bridge |
| PMJAY Pradhan Mantri Jan Arogya Yojana |
India · National | 44 | 44 | 100% | Schemes | BIS integration, HBP-2.2 package master, beneficiary verification, claim lifecycle |
| CGHS Central Govt Health Scheme |
India · Central | 28 | 28 | 100% | Schemes | Rate-list 2014+ amendments, beneficiary card scan, claim pack, audit-ready exports |
| ESIC Employees State Insurance Corp. |
India | 26 | 26 | 100% | Schemes | Panel doctor workflow, IP/OP claims, e-Pehchaan verification, monthly reconciliation |
| AAROGYASRI YSR Aarogyasri (AP & TS) |
India · AP/TS | 30 | 30 | 100% | Schemes | Trust portal bridge, beneficiary validation, pre-auth + claim bundles |
| MHFW-eSanjeevani eSanjeevani / Teleconsult Rules 2020 |
India | 14 | 14 | 100% | Clinical · Product | Tele-consent, Rx signature, session recording policy, doctor registration cross-check |
| IT-Act-2000 IT Act 2000 & 2008 amendments |
India | 19 | 19 | 100% | Legal | Digital signature, e-records retention, grievance officer, intermediary obligations |
| MoH-UAE UAE MoH / DHA / HAAD / DoH |
UAE | 72 | 70 | 97% | Regional · Clinical | DHA Sheryan, Malaffi HIE, Riayati bridge, Arabic-first clinical templates |
Every role below has a verified end-to-end runtime journey — click an entry-view to jump straight into the dashboard flow.
Runtime layer S82 sweeps every button, link, and view on the HIS dashboard and replaces any dead control with a graceful activation card. Open the dashboard and press Ctrl+Shift+V to see the live audit panel, or Ctrl+Shift+A for the role-aware assistant.
Get Started Today
Join hundreds of hospitals and clinics using IdeaDunes to streamline operations, improve patient care, and grow revenue. Start your free trial — no credit card required.
No credit card required • Free onboarding • Cancel anytime
Role Quick Start
Executives, hospital teams, partners, government buyers, and patient-facing users can jump directly to their correct next step from anywhere in the web experience.