DevSamp is an Indian software engineering firm and technology ecosystem that builds scalable SaaS platforms (including MedERP Pro for hospitals and FlowPulse POS for retail chains) and deploys dedicated senior engineering pods to build custom software for enterprises worldwide.

DevSamp was founded by Mahadev Prasad, an experienced principal software architect and full-stack engineer who leads DevSamp's product development and engineering standards.

Is MedERP Pro compliant with the Ayushman Bharat Digital Mission (ABDM)?

Yes. MedERP Pro natively implements the National Health Authority's Ayushman Bharat Digital Mission across Milestones M1 (ABHA number and address creation via Aadhaar OTP), M2 (Health Facility Registry and Healthcare Professional Registry linking), and M3 (FHIR R4 compliant health information exchange).

Who owns the intellectual property for custom software built by DevSamp?

For all custom engineering pod contracts, DevSamp operates strictly under a Work Made for Hire framework. Upon milestone settlement, 100% of all intellectual property, copyright, documentation, and source code ownership transfers entirely and exclusively to the client.

What free online tools does DevSamp provide?

DevSamp provides free, zero-install in-browser tools including an Interactive GST Tax Invoice Generator (https://devsamp.online/tools/gst-invoice-generator) and a Clinic OPD Token Calling TV Screen (https://devsamp.online/tools/clinic-token-tv).

REGULATORY GOVERNANCE

Compliance, Certifications & Data Governance

DevSamp software platforms and engineering pods adhere to strict international healthcare, privacy, and data security mandates.

National Health Authority (NHA) India

Ayushman Bharat Digital Mission (ABDM) M1, M2, M3

Integrated Architecture

Natively integrated with the Ayushman Bharat Digital Mission for Indian hospitals and clinics. Enables seamless ABHA generation, Healthcare Facility Registry (HFR) linkage, and FHIR R4 clinical record exchange across the national health grid.

Key Technical Controls:

ABHA ID Generation & Aadhaar OTP Patient Verification (M1)

Health Facility Registry (HFR) & Healthcare Professional Registry (HPR) (M2)

Health Information Provider (HIP) & HIU Clinical Gateways (M3)

FHIR R4 Diagnostic Reports & E-Prescription Exchange Protocols

US Healthcare Standard

HIPAA (Health Insurance Portability and Accountability Act)

Compliant & Audited

Meets all administrative, physical, and technical safeguards for Protected Health Information (PHI). Includes automated e-signature verification and encrypted audit logs.

Key Technical Controls:

AES-256 Data Encryption at Rest

TLS 1.3 Transmission Security

Field-level PHI Redaction

Emergency Access Break-Glass Protocol

Indian Data Privacy Law

Indian Digital Personal Data Protection (DPDP) Act 2023

Certified Compliant

Strict data residency within sovereign Indian cloud zones with explicit patient consent tracking, localized data fiduciary roles, and zero cross-border unauthorized transfers.

Key Technical Controls:

Mumbai Sovereign Cloud Zone (ap-south-1)

Granular Patient Consent Logging

Right to Correction & Erasure Support

Mandatory Data Breach Notification Relays

EU Privacy Law

GDPR (General Data Protection Regulation)

Standard Compliant

Full support for EU citizen data privacy rights, data portability JSON exports, Data Processing Agreements (DPA), and standard contractual clauses.

Key Technical Controls:

Right to be Forgotten Automated Pipeline

Standard Contractual Clauses (SCCs)

Subprocessor Directory & Notification

Annual Privacy Impact Assessments

AICPA Security Standard

SOC 2 Type II Controls

Controls Implemented

Continuous automated monitoring of Security, Availability, Confidentiality, and Processing Integrity across all production container clusters.

Key Technical Controls:

Continuous Vulnerability Scans

Zero-Trust Infrastructure Access

Disaster Recovery RTO < 15 Mins

Background Verification on All Engineers

Information Security Management

ISO/IEC 27001:2022 Readiness

ISMS Framework Active

Comprehensive Information Security Management System (ISMS) governing code reviews, hardware access, and incident response procedures.

Key Technical Controls:

Cryptographic Key Lifecycle Management

Role-Based Physical & Network Access

Change Management Approval Workflows

Quarterly Penetration Test Audits

Payment Card Industry Standard

PCI-DSS Level 1 Hosted Gateway Security

Tokenized Vault Architecture

All credit card and recurring mandate processing is offloaded to certified Level-1 payment gateways (Stripe & Razorpay) with zero local raw PAN storage.

Key Technical Controls:

Zero Local Card Data Storage

Tokenized Webhook Relays

Strict HTTPS HSTS Enforced

Annual SAQ-D Attestation

REGULATORY GOVERNANCE

Compliance, Certifications & Data Governance

DevSamp software platforms and engineering pods adhere to strict international healthcare, privacy, and data security mandates.

National Health Authority (NHA) India

Ayushman Bharat Digital Mission (ABDM) M1, M2, M3

Integrated Architecture

Key Technical Controls:

ABHA ID Generation & Aadhaar OTP Patient Verification (M1)

Health Facility Registry (HFR) & Healthcare Professional Registry (HPR) (M2)

Health Information Provider (HIP) & HIU Clinical Gateways (M3)

FHIR R4 Diagnostic Reports & E-Prescription Exchange Protocols

US Healthcare Standard

HIPAA (Health Insurance Portability and Accountability Act)

Compliant & Audited

Meets all administrative, physical, and technical safeguards for Protected Health Information (PHI). Includes automated e-signature verification and encrypted audit logs.

Key Technical Controls:

AES-256 Data Encryption at Rest

TLS 1.3 Transmission Security

Field-level PHI Redaction

Emergency Access Break-Glass Protocol

Indian Data Privacy Law

Indian Digital Personal Data Protection (DPDP) Act 2023

Certified Compliant

Strict data residency within sovereign Indian cloud zones with explicit patient consent tracking, localized data fiduciary roles, and zero cross-border unauthorized transfers.

Key Technical Controls:

Mumbai Sovereign Cloud Zone (ap-south-1)

Granular Patient Consent Logging

Right to Correction & Erasure Support

Mandatory Data Breach Notification Relays

EU Privacy Law

GDPR (General Data Protection Regulation)

Standard Compliant

Full support for EU citizen data privacy rights, data portability JSON exports, Data Processing Agreements (DPA), and standard contractual clauses.

Key Technical Controls:

Right to be Forgotten Automated Pipeline

Standard Contractual Clauses (SCCs)

Subprocessor Directory & Notification

Annual Privacy Impact Assessments

AICPA Security Standard

SOC 2 Type II Controls

Controls Implemented

Continuous automated monitoring of Security, Availability, Confidentiality, and Processing Integrity across all production container clusters.

Key Technical Controls:

Continuous Vulnerability Scans

Zero-Trust Infrastructure Access

Disaster Recovery RTO < 15 Mins

Background Verification on All Engineers

Information Security Management

ISO/IEC 27001:2022 Readiness

ISMS Framework Active

Comprehensive Information Security Management System (ISMS) governing code reviews, hardware access, and incident response procedures.

Key Technical Controls:

Cryptographic Key Lifecycle Management

Role-Based Physical & Network Access

Change Management Approval Workflows

Quarterly Penetration Test Audits

Payment Card Industry Standard

PCI-DSS Level 1 Hosted Gateway Security

Tokenized Vault Architecture

All credit card and recurring mandate processing is offloaded to certified Level-1 payment gateways (Stripe & Razorpay) with zero local raw PAN storage.

Key Technical Controls:

Zero Local Card Data Storage

Tokenized Webhook Relays

Strict HTTPS HSTS Enforced

Annual SAQ-D Attestation