Regulations, Compliance & AI Ethics
AIPharmaPulse operates in full compliance with Indian pharmaceutical regulations, data protection laws, and ethical AI principles. This page documents our legal commitments and operational boundaries.
Table of Contents
1.1Drugs & Cosmetics Act, 1940 & Rules, 1945
All drug dispensing must be supervised by a registered pharmacist (B.Pharm / M.Pharm / D.Pharm / Pharm.D) as required under Rule 65 of Drugs & Cosmetics Rules, 1945.
AIPharmaPulse enforces Schedule H and H1 prescription requirements at POS — a valid prescription number must be entered before the sale can be completed.
Schedule X (narcotic/psychotropic) drugs maintain a mandatory dispensing register with full patient details, as required by the Narcotic Drugs & Psychotropic Substances Act, 1985.
Cold chain products (vaccines, biologicals, insulin) tracked separately with temperature monitoring log compliance per Schedule M guidelines.
Batch number and expiry date are mandatory fields for all pharmaceutical inventory entries — cannot be bypassed.
Dispensing of Schedule H drugs without a valid prescription is an offence under the Drugs & Cosmetics Act. AIPharmaPulse enforces this digitally — any attempt to override is logged and flagged for audit.
1.2CDSCO (Central Drugs Standard Control Organisation)
AIPharmaPulse is a pharmacy management SOFTWARE — it is a business management tool, not a medical device for diagnostic or treatment purposes.
The AI drug interaction checker is a clinical decision-support tool only. All dispensing decisions remain the sole responsibility of the licensed pharmacist.
We are actively pursuing registration as a Software as a Medical Device (SaMD) per CDSCO MDR 2017 guidelines for clinical AI features.
The platform does not support import, manufacture, or wholesale distribution of drugs — it is designed exclusively for retail dispensing management.
1.3Pharmacy Practice & Licence Requirements
A valid State Pharmacy Council registration of the supervising pharmacist is required to use the platform for dispensing operations.
The Drug Licence number (Form 20 / Form 21 / Form 20B / Form 21B as applicable) is captured at registration and displayed on all generated invoices.
If a pharmacy's drug licence is detected as expired in the system, Schedule H/X drug billing is automatically restricted.
AIPharmaPulse does not enable or support unlicensed drug sales under any circumstances.
1.4NDPS Act, 1985 — Narcotic & Psychotropic Substances
Schedule X drug quantities are enforced at POS — dispensing limits per prescription per patient per month.
Mandatory digital register maintained: prescription number, patient name and address, prescribing doctor's registration number, quantity dispensed, date, and pharmacist's digital signature.
Online sale or home delivery of NDPS-classified substances is not permitted through the platform.
Compliance reports for State Drug Inspectors available in the Compliance → Narcotic Register module.
1.5Drugs Price Control Order (DPCO) 2013
Prices of scheduled essential medicines (National List of Essential Medicines) are capped by the NPPA (National Pharmaceutical Pricing Authority) — AIPharmaPulse prevents billing above the government-notified MRP.
Generic substitution feature shows bioequivalent alternatives per DPCO guidelines — pharmacist must inform patients of generic options.
MRP validation occurs at both purchase (GRN) and billing (POS) stages.
2.1Goods & Services Tax — CGST Act, 2017
GST rates applied automatically based on HSN code: 0% (essential life-saving medicines per Schedule I), 5% (most prescription drugs), 12% (certain formulations and medical equipment), 18% (vitamins, supplements, some devices).
e-Invoice mandatory for turnover above ₹5 crore (current threshold). Threshold reduces to ₹1 crore from April 2025. AIPharmaPulse integrates with IRP (Invoice Registration Portal) for real-time IRN generation.
GSTR-1 (outward supplies) and GSTR-3B (summary return) auto-preparation is built into the platform. GST input credit on purchases is automatically calculated at GRN stage.
Composition scheme pharmacies (small retailers under ₹1.5 crore turnover) are also supported with simplified billing.
2.2e-Invoice & e-Way Bill
B2B invoices auto-registered with NIC's IRP for IRN + digitally signed QR code — printed on invoice automatically.
e-Way Bill generated automatically for consignments above ₹50,000 inter-state. Intra-state thresholds vary by state — system checks applicable threshold based on your registered state.
Cancellation of e-Invoices within 24 hours per GST rules — after 24 hours, amendment invoice (credit/debit note) required.
All e-Invoice and e-Way Bill data is transmitted over encrypted HTTPS to NIC servers. No invoice data is stored on third-party servers — only on AIPharmaPulse India-region servers and NIC (government).
2.3Audit Trail & Books of Accounts
Complete audit trail of all transactions, modifications, voids, and deletions — including the user who made the change, timestamp (IST), and reason.
Books of accounts maintained digitally as per Section 44AA, Income Tax Act, 1961 — exportable in standard formats.
Tally-compatible XML export for seamless accounting integration.
3.1Digital Personal Data Protection Act (DPDPA), 2023
AIPharmaPulse is a Data Fiduciary — we are legally responsible for lawful, fair, and transparent processing of personal data.
Patient health data (prescriptions, medical history, purchase records) constitutes Sensitive Personal Data — processed only for specified pharmacy purposes with informed consent.
Data Principals (patients) have rights to: Access their data, Correct inaccurate data, Erase data (right to be forgotten), and Nominate a person to exercise their data rights.
We appoint a Data Protection Officer (DPO) per DPDPA requirements — reach the DPO team at info@aipharmapulse.com (same inbox as general privacy and compliance).
Breach notification to CERT-In within 6 hours of discovery (as per CERT-In 2022 directions) and to affected Data Principals within 72 hours.
3.2Data Localisation & Storage
ALL data stored exclusively on AWS Mumbai (ap-south-1) region — India only. Data never leaves Indian territory.
No cross-border data transfers. AI model inference uses anonymised, aggregated patterns only — no patient-identifiable data sent abroad.
Prescription images stored in encrypted AWS S3 buckets (India region) with AES-256 encryption at rest.
No personal data sold to, shared with, or licensed to any third party — ever.
3.3ABDM / ABHA — Digital Health ID
Patients can optionally link their ABHA (Ayushman Bharat Health Account) ID to their pharmacy profile.
Health records shared with ABDM Health Information Exchange (HIE) only with explicit, granular patient consent — consent artefact generated and stored.
PHR (Personal Health Records) linked to ABHA number as per NHA Health Data Management Policy.
Consent can be revoked by the patient at any time — data sharing with HIE is immediately suspended.
3.4Information Technology Act, 2000
All electronic records maintained per Section 43A (Reasonable Security Practices) requirements.
Platform follows OWASP Top 10 security standards, quarterly penetration testing, and HTTPS everywhere with HSTS headers.
Session management: 8-hour session timeout, device fingerprinting, IP-based anomaly detection.
Our Core AI Principles
TRANSPARENCY
All AI-generated recommendations are clearly labelled. Users always know when AI is involved.
ACCOUNTABILITY
A licensed pharmacist must review and approve all AI recommendations before acting on them.
FAIRNESS
AI models are trained on diverse Indian patient populations to avoid demographic or regional bias.
PRIVACY
No personal health data is used to train external AI models — ever.
SAFETY
All AI features have human-in-the-loop design — AI advises, humans decide.
EXPLAINABILITY
AI recommendations include reasoning (e.g., which drugs interact and why) so pharmacists can evaluate them critically.
4.1What AI CAN and CANNOT Do
AI CAN (as decision support):
Suggest drug interaction warnings based on drug database
Predict demand based on historical sales patterns
Read prescription text via OCR and suggest cart items
Suggest generic alternatives at equivalent efficacy
Identify expiry risks and suggest actions (discount/return)
Flag unusual transaction patterns for fraud review
Provide drug information and dosage guidance to pharmacists
Optimise reorder quantities and vendor selection
AI CANNOT (and will never be used to):
Replace a licensed pharmacist's dispensing decision
Diagnose, treat, or prescribe medications to patients
Autonomously dispense controlled or Schedule X substances
Make final billing decisions without pharmacist review
Access or share patient data outside your pharmacy
Override prescription requirements for Schedule H drugs
Operate without internet in a way that bypasses safety checks
Generate medical reports or certificates
4.2Generative AI (Claude by Anthropic) Usage
The AI Pharmacist Copilot is powered by Claude (Anthropic) via secure, encrypted API calls.
All queries are anonymised before sending to Claude — no patient names, ABHA numbers, prescription numbers, or any personally identifiable information is included in API calls.
Claude's responses are informational only — pharmacists must verify using authoritative sources (Drug Index, CIMS India, WHO Model Formulary, BNF).
We comply with Anthropic's usage policies and update our AI governance as Indian AI regulations evolve.
The AI Pharmacist Copilot is a pharmacist's intelligent reference tool — NOT a substitute for professional training, experience, or judgment. If AI output contradicts your clinical knowledge, trust your training.
4.3NITI Aayog Responsible AI Principles Alignment
AIPharmaPulse adheres to NITI Aayog's "Responsible AI for All" (2021) framework — inclusivity, safety, diversity, and public interest.
We are inclusive: supporting 12+ Indian languages, accessible on low-bandwidth connections (2G/3G compatible PWA), and affordable pricing for small independent pharmacies.
We promote SDG Goal 3 (Good Health & Well-being) through accessible pharmacy automation for rural and semi-urban India.
Annual AI impact assessment published publicly. Current AI systems undergo bias testing for age, gender, language, and regional drug usage patterns.
5.1Status of Draft Online Pharmacy Rules
The Ministry of Health & Family Welfare has proposed Draft Rules for Online Sale of Drugs (2018 draft; revised 2022 draft under review).
AIPharmaPulse currently supports in-store dispensing and pickup notification operations only — we do NOT support home delivery of prescription medicines.
Our delivery module handles same-day pickup notifications and logistics coordination for existing in-store prescriptions — this falls within current legal boundaries.
We will update our platform immediately upon enactment of final rules and obtain required additional licences (expected to include: online pharmacy licence from CDSCO, mandatory pharmacist-patient video consultation for Rx medicines, cold chain requirements for temperature-sensitive items).
ONDC (Open Network for Digital Commerce) integration for pharmacy is supported for non-prescription (OTC) products only, in compliance with current guidelines. Prescription drug orders via ONDC are deferred pending final rules.
5.2Telemedicine & Prescription Validity
Prescriptions issued via telemedicine (Telemedicine Practice Guidelines, 2020 — MoHFW) are accepted by AIPharmaPulse when accompanied by the digital prescription with doctor's registered number.
Schedule H drugs cannot be dispensed on teleconsultation prescriptions for first-time prescriptions (as per 2020 guidelines). Refills may be dispensed with existing documented prescription history.
The following are strictly prohibited when using AIPharmaPulse. Violation may result in immediate account suspension, licence revocation, and referral to appropriate regulatory authorities.
Using AI features to dispense medications without a valid drug licence and supervising pharmacist
Sharing licence keys or activation codes to enable use by unlicensed pharmacies or individuals
Using the API or any technical means to bulk-export patient data without explicit patient consent
Attempting to bypass Schedule H/H1/X prescription requirements via any technical workaround
Using the platform for online delivery of prescription medicines before obtaining required licences
Billing medicines above the government-notified MRP or manipulating pricing data
Using the AI Pharmacist Copilot to provide medical advice directly to patients (it is a pharmacist's tool only)
Generating fake invoices, e-Invoices, or GST returns — a criminal offence under CGST Act and IPC
Storing or processing patient data outside of the platform's designated data systems
Using the platform in jurisdictions where pharmaceutical regulations prohibit such software without local approval
Compliance & Legal Queries
General Queries
info@aipharmapulse.comData Protection Officer
info@aipharmapulse.comCompliance Team
info@aipharmapulse.comAIPharmaPulse (PP-v1) · Built for Indian Pharmacies · Jurisdiction: Republic of India · All regulatory references are to Indian law as of March 2026. This page is for informational purposes — consult a qualified legal or regulatory professional for specific advice.