Zyposoft
All insights
Healthcare

Building for ABDM: ABHA, consent and national registries

The Ayushman Bharat Digital Mission is usually described as a compliance requirement. It is more useful to think of it as an identity and consent layer you would otherwise have had to build yourself.

Clinical Systems16 Jun 20263 min read

What the stack actually gives you

Three things worth having. A health identity that is not owned by any one hospital. A set of registries that make facilities and professionals discoverable. And a consent mechanism that makes exchanging records between organisations a defined process rather than a series of phone calls.

Each of those is a hard problem that most health systems solve badly or not at all. Treating them as a checkbox exercise misses that they are answers to questions the platform has to address regardless.

ABHA is an identity, not another number

The instinct on first encountering ABHA is to store it as an extra column next to the hospital number and move on. That works right up until the moment it matters, and then it does not.

The point of a portable health identity is that a record can follow a person between organisations. That only works if the identity is resolved at the point of care, linked deliberately, and treated as a first-class part of the patient's identity model rather than metadata.

It also has to degrade gracefully. Not every patient will have one, not every patient who has one will remember it, and the workflow cannot stall on either case. A registration screen that cannot proceed without it will be worked around within a week.

Consent is a workflow, not a flag

The most common modelling error is to store consent as a boolean. Consent has a scope, a purpose, a time window, and a revocation path. It is closer to a lease than a switch.

Which means the design questions are workflow questions. Who requests it, in what words, at what moment. What the patient is actually agreeing to share, expressed in terms they can evaluate. What happens when it expires mid-episode. What happens when it is withdrawn after data has already moved.

Getting those right is the difference between a consent mechanism that protects a patient and one that produces a defensible audit trail while protecting nobody.

Registries are useful beyond compliance

Facility and professional registries turn 'which Dr Sharma' into a resolvable question. That is quietly valuable well outside any regulatory context referrals, results routing, and access decisions all get easier when the directory is authoritative and shared.

We treat registry lookups as part of the ordinary identity resolution path rather than a separate compliance module, for the same reason we do not keep a separate copy of the truth anywhere else.

Records that travel need to mean something on arrival

Exchange only helps if the receiving end can interpret what arrives. A bundle of documents that requires human reading is better than nothing and considerably worse than structured data.

So the standards work and the ABDM work are the same work. Records built to be interpretable travel usefully; records built to be displayed travel decoratively.

Where it fits in the day

If the compliance layer is visible to clinicians as extra steps, it has been implemented wrong. Identity resolution belongs in registration where identity is already being handled. Consent belongs at the moment sharing is actually being discussed.

The measure of success is that nobody on the ward has to think about ABDM at all, and the hospital can still answer every question the framework exists to ask.

Talk to us
Working on something like this?

If any of the above matches a problem you are dealing with, we are happy to go deeper than a blog post reasonably can.

Get in touch

More from Insights

Zyposoft Technologies is a product engineering company based in Bangalore, building software for healthcare and enterprise operations. Our products are Zypocare One, the connected hospital platform; Zypo Clinical AI, which adds intelligence a clinician can overrule; and the Integration Platform that keeps them working with the systems already in place.
Products
Zypocare OneZypo Clinical AIIntegration Platform
Solutions
Healthcare TransformationEnterprise Product EngineeringAI and AutomationCloud, Data and Integration
Company
About ZyposoftLeadershipPartnersCareersContact
Get in touch
Bangalore, IN
#7, Nisarga Layout
Chikkalsandra
Bangalore 560061
India
info@zyposoft.com
Security & GovernanceIdentity & AccessData PrivacyData Security
© 2026 Zyposoft Technologies. All rights reserved.
Privacy PolicyTerms of UseSitemap