Database-Level Security Proof

Is Your Hospital Data Safe?
Built with Kernel-Level Isolation.

Patient health information is sacred. QureSetu delivers multi-tenant hospital operations with PostgreSQL Row-Level Security (RLS), role-based staff permissions, encrypted patient identifiers, and a full tamper-evident audit trail.

PostgreSQL Row-Level Security (RLS)

Database-Level Hard Tenant Isolation

Unlike ordinary SaaS applications that rely on application-level WHERE hospital_id = ? query filters in code, QureSetu enforces PostgreSQL Row-Level Security directly on all database tables.

Every database session binds to the authenticated hospital ID via SET LOCAL app.current_tenant_id. Even if a bug occurred in application code, the PostgreSQL engine physically rejects any query attempting to access another hospital's data.

How we verified it: Tested under 50 simultaneous cross-tenant requests — zero data leakage.

// Production Tenant Isolation Policy (PostgreSQL RLS)

ALTER TABLE patients ENABLE ROW LEVEL SECURITY;

CREATE POLICY hospital_tenant_isolation ON patients

FOR ALL

TO hms_app_role

USING (hospital_id = current_setting('app.current_tenant_id')::uuid);

Database engine physically isolates each hospital tenant.

Encrypted Identifiers

Patient identifiers, ABHA records, and clinical files are encrypted at rest with AES-256 and protected with TLS 1.3 in transit.

✓ Hardware-accelerated disk encryption

Staff Role-Based Access

Granular permissions for 8 distinct hospital roles. Doctors see clinical records; cashiers manage invoices; aggregate financials stay admin-only.

✓ Strict privilege separation

Searchable Audit Trail

Every patient record creation, consultation update, invoice edit, and pharmacy dispense is logged with user ID, IP address, and timestamp in an in-app audit viewer.

✓ Tamper-evident activity logs

Encrypted Backups & Sync

Automated daily encrypted database backups combined with PowerSync local caching for continuous offline counter operations during network drops.

✓ Point-in-time recovery protection

Have specific security questions?

Speak directly with our engineering team regarding database-level tenant isolation, encryption standards, or DPDP 2023 readiness.

Speak with Engineering & Security

Chat with Sales

Is Your Hospital Data Safe? Built with Kernel-Level Isolation.