DPDP Act compliance, built into your stack.

import { DPDPA } from "@dpdpa-suite/node";

const dpdpa = new DPDPA(process.env.DPDPA_API_KEY);

// Capture purpose-specific consent at patient registration
const consent = await dpdpa.consents.create({
  principal: { id: "UHID-20931", phone: "+91XXXXXXXX21" },
  purposes: ["treatment", "billing", "lab_reports_sms"],
  notice: { language: "ta", version: "2026-09" },
  channel: "front_desk_tablet",
});

console.log(consent.status); // "granted"

# Open an erasure request on behalf of a Data Principal
curl https://api.dpdpa-suite.dev/v1/rights-requests \
  -H "Authorization: Bearer $DPDPA_API_KEY" \
  -d type=erasure \
  -d principal_id=UHID-20931 \
  -d channel=patient_portal

# Response
{ "id": "rr_8Kq2", "status": "verifying_identity",
  "retention_holds": ["clinical_records"] }

from dpdpa_suite import Client

client = Client()

# Let the AI classifier map personal data in your EHR replica
scan = client.discovery.scan(
    source="postgres://ehr-replica/hospital",
    profile="in_healthcare",
)

for field in scan.findings:
    print(field.table, field.column, field.category)
# patients  mobile_no   contact
# visits    diagnosis   health