Every specialty on one record. ↗

Move past software that models a general ward and asks every specialty to fit inside it. Pensieve treats the specialty as the unit of work: its own order catalogue, its own forms, its own clock, its own device feed and its own tariff, all of them carried on the one record the rest of the hospital reads.

Forge holds a fixed, hospital-approved list of everything that can be ordered, so a clinician picks rather than types. A cardiology order set and a chemotherapy order set are two lists on one catalogue, and the catalogue is the hospital’s. Forge locks in exactly what was ordered at the moment it was ordered, so a later change to the price list or the catalogue leaves every order already placed exactly as it was.

Glyph builds the forms a specialty actually uses, with its own validations and its own calculators, and with no developer in the loop. A completed form locks the moment it is finished, so it can never be silently altered afterwards, and Glyph keeps the version history that proves which design was in force when it was filled. A consent form carries a formal sign-off step. A results form hangs directly off the order it belongs to.

Quest turns every ordered dose into a scheduled task with a due time, marks it given, missed or skipped, and keeps that history against the patient. Cadence runs the repeatable procedures around it: the admission checklist, the day-care list, the insurance approval. A step running late is flagged as overdue on a live board, where a manager sees it while it can still be fixed.

Westron is the console for the connections a specialty depends on: the analysers, the RIS-PACS, the outside laboratory, the insurer. It manages the credentials, translates between the hospital’s format and the outside system’s, watches the incoming traffic for problems, and keeps a forensic trail of every exchange. It mirrors the setup of the orophin bridge on site, which opens one outbound connection and asks for no inbound hole in your firewall. The imaging viewer opens a study against the right patient and the right order, from wherever the reader happens to be in the app.

Vault adds the charge the moment a chargeable order is placed, applies the hospital’s approved pricing rules, its taxes and its discounts, and produces the final bill for the visit. Deposits, insurance claims, third-party administrators and government scheme work sit in the same place, so one clinical event produces the cash bill, the corporate credit note and the scheme claim without a separate desk for each. Vault can hold or clear a discharge on whether the bill is settled, and every transaction leaves a tamper-proof financial trail.

Nexus Manager maintains a digital twin of the hospital: the wards and the rooms, the teams, the physical assets and which of them is in use right now, and the duty roster that says who is on shift and where. A specialty’s cath lab, its day-care beds and its registrar on call are objects in that twin, which is how a due task lands with the person actually working and how a resource is scheduled against something real.

Durin is a drag-and-drop builder. Hospital staff compose their own apps and widgets on top of the governed data, with no code and no vendor ticket, and a forward-deployed engineer can build the same thing for a hospital that would rather hand it over. Everything built this way sits on the same permissions and the same audit trail as the rest of the platform. Cornea rehearses a site’s configuration on a simulated site first, so the mistakes are found where they cost nothing.

A specialty record is the most sensitive thing a hospital holds, and a specialty is where the pressure on access is highest: the visiting consultant, the outside reader, the insurer’s auditor, the registrar covering a night shift in a department that is otherwise closed. The hospital decides who may see what. Pensieve is the instrument that enforces the decision and records that it was enforced.

Cirith decides, for every single action in the app, whether a specific person may take it, and it treats the patient’s consent together with the hospital’s admission as the gate that opens a record. An administrator can look up who currently holds access to one patient’s record, look up everything one staff member can reach, and simulate a permission change before making it. There is an emergency path for urgent cases, and every use of it is logged.

Atlas is the only tool allowed to hold a patient’s actual health information. Every other tool asks Atlas for it rather than keeping its own copy, which is what makes a single answer to the question of who holds this data possible at all. It is enforced in the build: an automated check fails the build when a tool tries to route around a core system.

Atlas keeps the history of consent and of who has read the record. Vault keeps a tamper-proof trail of every financial transaction. Westron keeps a forensic trail of every exchange with an outside system. Vigil turns that same activity into standing accreditation evidence: incidents and their investigations, committees and their action items, training and credentials, internal audits, policy acknowledgements, risk registers and equipment maintenance. Assembled continuously, rather than reconstructed in the six weeks before an assessment.

India’s data protection rules put purpose-limited consent, notice, breach duties and erasure rights on the hospital, and they arrive on a dated clock. What makes them expensive is an architecture of separate registration, billing and pharmacy systems with no shared consent state. Pensieve holds consent on the record itself, and every tool reads it from there. Linking an ABHA stays voluntary for the patient, and a refusal never obstructs treatment.

Export speaks HL7 v2, FHIR R4 and DICOM, so a hospital that decides to leave takes its record with it in a form other software can read. Where Pensieve runs is a deployment decision the hospital makes, and the deployment page states the models plainly. None of this makes a hospital compliant on its own: compliance is a property of how the hospital works, and what Pensieve holds is the record and the evidence a review asks to see.

India runs two rankings at once and they disagree, so this page prints both. Revenue concentrates in cardiac sciences, oncology, orthopaedics, neurosciences, gastroenterology and renal sciences: the listed Indian hospital groups publish their own inpatient specialty mix, and that is what it says. Volume concentrates somewhere else entirely. Cataract surgery is the largest single surgical programme the country runs, at 8,344,824 operations in 2022-23 against a national target of 7,500,000. Source 8 Haemodialysis runs on a session clock across 1,889 centres in 759 districts, and has delivered more than 14.4 million sessions under the national dialysis programme. Source 9

The list below reads down from the money, then across to the volume, then to the diagnostics every other specialty depends on, then to the outpatient work whose record has to hold together across years rather than across an admission. Every one of them runs on the same platform and the same record. What changes is which order sets, which forms, which devices and which tariff are turned on first.