Date: July 21, 2026

KMP / Board / Auditor Changes

Not Specified

Dividend Declaration or Non-Declaration

Not Specified

Board Meeting Outcomes

Not Specified

Financial Results

Not Specified

Disinvestment / Strategic Actions

Not Specified

Other Operational / Legal / Strategic Disclosures

SOC 2 Type II Certification Details

  • Saarathi Healthcare Private Limited, a subsidiary of QMS Medical Allied Services Limited, received SOC 2 Type II Certification based on AICPA Trust Services Criteria
  • Certificate Number: 260135269
  • Issued by: Mr. Pradeep Kumar Moharana (SOC 2 Lead Auditor / ISO 27001 Lead Auditor, UKIAF Certified)
  • Certification Period: 5 years (Initial Registration: July 14, 2026)
  • Surveillance Schedule: First surveillance - July 15, 2027; Second surveillance - July 15, 2028; Re-certification due - July 15, 2029

Trust Services Criteria Covered

  • Security - Effective
  • Availability - Effective
  • Processing Integrity - Effective
  • Confidentiality - Effective
  • Privacy - Effective

Scope of Certification

Provision of patient support program management, patient assistance program administration, patient engagement and adherence support through phone, SMS, WhatsApp, email and digital platforms, patient data collection, processing, storage, retrieval and record management, coordination with healthcare professionals, pharmacies, laboratories and field teams, scheduling of follow-ups, screening camps, counseling and treatment support, call center and helpline operations, digital workflow management for patient journeys, vendor and third-party coordination under defined data protection controls, conduct of screening camps using point-of-care devices, and development, deployment and management of CRM, ERP, web, mobile application and portal solutions.

Audit Findings

  • Major Nonconformity: None
  • Minor Nonconformity: None
  • Observations: None
  • Opportunities for Improvement: Continuous Security Monitoring

Operational Areas Audited

  • Patient Support Operations ☑
  • CRM Platform ☑
  • ERP System ☑
  • Mobile Applications ☑
  • Patient Database ☑
  • Call Centre Operations ☑
  • WhatsApp/SMS Platform ☑
  • Vendor Management ☑
  • Cloud Infrastructure ☑
  • Backup & Recovery ☑

Information Security Controls Implemented

  • Password Policy ☑
  • MFA Controls ☑
  • Data Encryption ☑
  • Endpoint Protection ☑
  • Firewall Security ☑
  • Vulnerability Management ☑
  • Log Monitoring ☑

Privacy Controls

  • Consent Management ☑
  • Patient Privacy ☑
  • Personal Data Handling ☑
  • Data Retention ☑
  • Secure Disposal ☑

Business Continuity Controls

  • Backup ☑
  • Disaster Recovery ☑
  • High Availability ☑
  • Incident Response ☑
  • Recovery Testing ☑