Winning NABH Digital Health Accreditation with Medblaze

01Executive summary

The NABH Digital Health Standards for Hospitals, 2nd Edition (September 2025) marks a structural shift in how Indian hospitals are evaluated on digital maturity. The standard has been consolidated into 8 chapters, 38 standards and 182 objective elements, and, for the first time, accreditation is awarded at three graded maturity tiers.

8Chapters3 clinical · 5 non-clinical

38Standardsstatements of expectation

182Objective elementsscored 0 / 5 / 10

3Maturity tiersSilver · Gold · Platinum

This is no longer a binary pass/fail exercise. It is a stepwise progression model in which a hospital chooses its ambition and is assessed only against the objective elements applicable to that ambition.

The central problem this creates for hospitals is not clinical. It is evidentiary.

Most hospitals pursuing Digital Health Accreditation already own a HIS, an EMR, a LIS and a RIS. Those systems generate the transactions the standard asks about: appointments, prescriptions, discharge summaries, bills. What they almost never generate is the governance layer the standard equally demands: the versioned IT policy with review dates, the ITSM record of security incidents, the asset calibration register, the sentinel event workflow with root cause analysis, the training completion matrix, the quality-of-care dashboard, the corrective action closure trail.

That governance layer is precisely what a Quality Management Information System exists to produce.

What this paper establishes

27of 182

Medblaze is the system of record for 27 objective elements, about 15% of the standard, concentrated in DOM, HRM, COP.7 and IMS.2.

45of 182

A further 18 objective elements are materially supported, bringing total involvement to roughly 25% of the standard.

48%of Chapter 5

Coverage is concentrated where hospitals are weakest: 48% of DOM, 43% of HRM, and 100% of Standard COP.7.

11of 11 KPIs

All 11 NABH Digital KPIs can be computed and reported from one engine.

The strategic reading: a hospital with a mature HIS and no QMIS will typically clear Silver and stall somewhere between Gold and Platinum, because the Achievement and Excellence tiers are dense with governance, audit, training, asset and analytics requirements that transactional systems do not address. Medblaze exists to close that specific gap.

02What changed in the 2nd Edition

The 2nd Edition rewrites the shape of the programme, not just its wording.

Chapters reduced to 8

Three clinical, five non-clinical.

182 objective elements

Categorised Core / Commitment / Achievement / Excellence, mirroring the 5th and 6th Edition Hospital Standards.

Three maturity tiers introduced

Silver → Gold → Platinum. Hospitals self-select their target level.

Accreditation valid 4 years

With a surveillance / renewal assessment at 24 months.

Certification valid 2 years

No surveillance assessment during the period.

Wider eligibility

Entry-Level Certified hospitals may enter at Silver; accredited eye care organisations are now eligible. The guidebook is published free on the NABH website.

Why the tiering changes the conversation

Under a binary model, the hospital's question was "are we compliant?" Under a tiered model it becomes "how far can we credibly get, and what is the marginal cost of the next tier?"

That is a portfolio question. It requires knowing, objective element by objective element, which system owns the evidence and whether that evidence is auditable. It rewards hospitals that can produce a live gap analysis rather than a pre-assessment scramble.

The standard itself signals this

Step 1 of the application process is GAP Analysis, before policies, before the self-assessment toolkit, before fee submission.

03Anatomy of the standard

Objective elements by chapter

COP Care of Patients 41

AAC Access, Assessment and Continuity of Care 40

DOM Digital Operations Management 25

IMS Information Management System 18

FPM Finance and Procurement Management 17

DIS Digital Infrastructure 14

HRM Human Resource Management 14

MOM Management of Medication 13

Objective elements per chapter. Total 182.

Read this chart carefully

The two clinical chapters (AAC, COP) hold 81 of 182 objective elements (45% of the standard) and are almost entirely HIS/EMR territory. The remaining 101 sit in chapters where a QMIS is either the primary or a major contributing system.

Chapter distribution in full

Chapter	Code	Standards	OEs
Access, Assessment and Continuity of Care	`AAC`	8	40
Care of Patients	`COP`	9	41
Management of Medication	`MOM`	4	13
Digital Infrastructure	`DIS`	2	14
Digital Operations Management	`DOM`	6	25
Finance and Procurement Management	`FPM`	3	17
Human Resource Management	`HRM`	4	14
Information Management System	`IMS`	2	18
Total		38	182

Accuracy note on the DOM count

The published DOM row shows 24 objective elements, but its category breakdown (6 + 4 + 8 + 7) sums to 25. The category column totals (17 + 57 + 53 + 55) reconcile correctly to 182, whereas the objective-element column sums to 181. This appears to be a typographical inconsistency in the source guidebook. Hospitals should confirm the applicable DOM count with the NABH secretariat before finalising their self-assessment denominator. The figures used throughout this paper are the category-wise ones, which reconcile to 182.

Objective elements by scoring category

Core 179.3%

Mandatory at every assessment, every tier: 100% required

Commitment 5731.3%

Gates Silver, Gold and Platinum

Achievement 5329.1%

Gates Gold and Platinum

Excellence 5530.2%

Gates Platinum only

The four scoring categories. Compliance is evaluated separately for each, never as a single blended figure.

The three-part anatomy of every requirement

Standard COP.7

A statement of expectation.

Objective element COP.7.c

The measurable component, scored on a rating scale.

Interpretation Guidance

What the organisation must actually do.

10 Fully met 5 Partially met 0 Not met NA Service not provided

Numbering: the first three letters denote the chapter, the number the standard's position, the trailing letter the objective element. COP.7.c is the third objective element of the seventh standard of Care of Patients.

Language convention, and why your quality team should care

In the interpretation text, shall / should / will / would signals a mandatory requirement. Can / could signals a desirable aspect that is not scored: it informs the assessor's narrative but does not move the number. When building your evidence pack, tag every requirement by its verb. Desirable items are worth doing, but should never displace mandatory ones in a constrained implementation window.

04The maturity grid

Three tiers, each adding a category of objective elements on top of the one below. A hospital is assessed only against the elements applicable to the tier it applies for.

Silver 74objective elements in scope

Core 100%
Commitment 60%

Entry-Level Certified hospitals may enter here.

Gold 127objective elements in scope

Core 100%
Commitment 60%
Achievement 60%

Platinum 182objective elements in scope

Core 100%
Commitment 60%
Achievement 60%
Excellence 60%

Thresholds shown are for first accreditation. At surveillance, every 60% threshold rises to 80%.

Rules that catch hospitals out

Rule	Consequence
Only OEs applicable to the level applied for are evaluated	Applying for Silver does not expose you to Achievement or Excellence scoring, but also banks no credit toward Gold.
Core is 100%, always	A single Core objective element scored 0 or 5 sinks the entire application, regardless of overall performance.
Services not provided are marked NA	A hospital without a blood centre is not penalised for COP.3, but NA elements leave the denominator, which raises the absolute count required elsewhere.
Scoring is 0 / 5 / 10 only	There is no partial credit below 5. "Nearly done" scores the same as "half done".
90 days to close non-compliances	Applies to both first and surveillance assessments.
Surveillance raises the bar from 60% to 80%	A hospital that scraped Gold at 61% Achievement will fail surveillance without roughly 19 further percentage points of improvement.

The most under-planned risk in the programme

The surveillance cliff is where hospitals lose accreditation they have already won. See section 13.

05The scoring arithmetic

Final score = Σ score obtained across all applicable objective elements Highest potential possible score × 100

Each OE scores 0, 5 or 10. NA elements are excluded from both numerator and denominator. Compliance is evaluated separately for each category : Core, Commitment, Achievement and Excellence, not as one blended figure.

The absolute numbers behind the percentages

This is the table most hospitals never build for themselves. Assuming no NA exclusions, here is what each threshold means in raw objective elements.

Target	Core (17)	Commitment (57)	Achievement (53)	Excellence (55)	In scope
Silver, first	17	35	n/a	n/a	74
Silver, surveillance	17	46	n/a	n/a	74
Gold, first	17	35	32	n/a	127
Gold, surveillance	17	46	43	n/a	127
Platinum, first	17	35	32	33	182
Platinum, surveillance	17	46	43	44	182

Figures are fully-met-equivalents. Because scoring is 0/5/10, a threshold can also be reached through a mix: 60% of Commitment can be reached with 30 fully met plus 10 partially met.

06Where Medblaze fits, and where it does not

Medblaze is a Quality Management Information System. It is deliberately not a HIS, EMR, LIS, RIS, HRIS or ERP. It sits alongside those systems and integrates with them over HL7/FHIR-compliant APIs.

Transactional layer: not Medblaze

HIS / HMIS Registration, ADT, billing
EMR / EHR Notes, orders, prescriptions
LIS Lab orders and results
RIS / PACS Imaging, DICOM
ERP / HRIS Supply chain, payroll

Governance & quality layer: Medblaze

Incident & sentinel events Infection surveillance & AMS Audit & non-conformance Risk management QI / KPI engine Feedback, PROMs / PREMs Accreditation manager Document & policy Committee management Credentials & OPPE Learning management Ticketing & assets

Assessor-facing output

Evidence pack
Gap reports
Readiness score
KPI dashboards
Audit trails

Transactional systems generate what the standard asks about. The governance layer generates the evidence that it is controlled.

The division of labour, stated plainly

The standard asks for…	Owned by	Medblaze role
Digital appointment booking (AAC.3)	HIS	None Consumes the KPI denominator only
Digital prescription (COP.1)	EMR	None
Digital lab orders and sample tracking (AAC.4)	LIS	None
Digital billing template (FPM.3.e)	HIS / Billing	None
Pharmacy inventory (MOM.1)	Pharmacy module	None
Patient feedback capture and analysis (AAC.8)	n/a	Primary
Infection incident tracking (COP.7.a)	n/a	Primary
Sentinel event capture (COP.7.c)	n/a	Primary
IT policy lifecycle and periodic review (DOM.1)	n/a	Primary
ITSM incident / problem / change tracking (DOM.3.c)	n/a	Primary
IT asset inventory and e-waste (DOM.3.a, .e)	n/a	Primary
Equipment calibration and maintenance (DOM.6)	n/a	Primary
Staff training records and e-learning (HRM.4)	n/a	Primary
Staff performance evaluation, goals, KPIs (HRM.3)	n/a	Primary
Quality-of-care dashboard (IMS.2.d)	n/a	Primary
Analytical dashboards (IMS.2.f)	n/a	Primary

Why the boundary matters

Assessors have seen vendors overclaim. A vendor that draws its own boundary precisely (and can name the systems it depends on) reads as competent rather than evasive. It also protects the hospital from buying the wrong thing.

07Chapter-by-chapter coverage

Primary: Medblaze is the system of record Supporting: contributes evidence Out of scope for a QMIS

DOM 12 of 25 48%

HRM 6 of 14 43%

COP 5 of 41 12%

AAC 2 of 40 5%

IMS 2 of 18 11%

MOM 0 of 13 0%

DIS 0 of 14 0%

FPM 0 of 17 0%

Medblaze primary coverage by chapter. Totals: 27 primary, 18 supporting, 137 out of scope: 15% primary, 25% involved.

Coverage by scoring tier

This is the analytically important cut, because tiers (not chapters) decide the award.

Core 2 of 17 12%

DOM.1.a and DOM.1.b: the IT policy and its periodic review. Both are Core, both pure document governance.

Commitment 8 of 57 14%

Gates every tier, including Silver.

Achievement 10 of 53 19%

Gates Gold. The highest Medblaze concentration.

Excellence 7 of 55 13%

Gates Platinum.

Medblaze primary contribution as a share of each scoring category.

The insight for a Gold-seeking hospital

You must fully meet 32 of 53 Achievement objective elements. Medblaze is the primary system for 10 of them, 31% of your Gold requirement in that tier, from one platform.

08The objective element crosswalk

The working crosswalk, chapter by chapter. Primary means Medblaze is the system of record. Supporting means it contributes evidence or workflow but another system is primary. Expand a chapter to see its objective elements.

AAC Access, Assessment and Continuity of Care 3

OE	Tier	Requirement	Fit	Module	Evidence produced
`AAC.1.b`	Commitment	Digital system to display accreditations	Supporting	Accreditation Manager	Live accreditation status, certificate repository
`AAC.8.a`	Commitment	Digital system to collect patient / family feedback	Primary	Patient Feedback; Patient Concierge	Multi-channel capture: web, email, SMS, app, kiosk, QR, IVRS, voice
`AAC.8.b`	Achievement	Segregate and analyse feedback by patient touchpoint	Primary	Patient Feedback; PROMs/PREMs; AI sentiment	Touchpoint satisfaction index, trend analysis, NPS, service recovery closure

The standard’s interpretation explicitly names online surveys, digital suggestion boxes, social and review monitoring, chatbots and real-time messaging, and calls for “a dedicated feedback module” supporting website, e-mail, SMS, mobile app, kiosk, QR code and voice capture. That is a near-verbatim description of a patient experience module. It is one of the few places in the standard where a QMIS is the obvious and intended answer.

COP Care of Patients 6

Standard COP.7: “the hospital uses a digital system to track and monitor all infection related incidents and sentinel events”, is covered in full.

OE	Tier	Requirement	Fit	Module	Evidence produced
`COP.7.a`	Commitment	Track, report and manage infection-related incidents individually	Primary	Infection Surveillance & AMS	HAI register, reporter capture, bundle checklists, antibiogram, location attribution
`COP.7.b`	Commitment	Digital reference to antibiotic usage policy for treating physicians	Primary	Document & Policy Management	Version-controlled AMS policy, role-based access, read-acknowledgement
`COP.7.c`	Achievement	Capture all patient care incidents and sentinel events	Primary	Clinical Incident Management	Incident register, severity grading, RCA (fishbone), CAPA tracking, anonymous reporting
`COP.7.d`	Excellence	Records of staff exposed to infections at workplace	Primary	Infection Surveillance; Incident Mgmt	Staff exposure register (HIV, Hep B, Hep C), incident linkage
`COP.7.e`	Excellence	Track completion of post-exposure prophylaxis and health records	Primary	Infection Surveillance; Credentials	Per-worker PEP record, completion status, follow-up scheduling
`COP.5 / COP.6`	Achievement	Surgical and nutrition workflows	Supporting	Audit Manager	Surgical safety checklist audit reports: supplementary to EMR

COP.7 is a five-element standard spanning Commitment, Achievement and Excellence. A hospital pursuing Platinum needs all three tiers, delivered from a single deployment.

MOM Management of Medication 2

OE	Tier	Requirement	Fit	Module	Evidence produced
`MOM.3`	Core / Excellence	Digital system to reduce medication errors; device records	Supporting	Clinical Incident Management	Bedside verification and CPOE alerts are EMR functions. Medblaze is where medication error events are reported, root-caused and trended
`MOM.3.c`	Core	Digital checklist per hospital policy	Supporting	Audit Manager	Configurable digital checklists with scoring

Honest position: Medblaze does not fulfil MOM. It provides the incident and audit evidence that shows the MOM controls are working.

DIS Digital Infrastructure 5

DIS is about the hospital’s own infrastructure: power backup, devices, browsers, firewalls, anti-virus. Medblaze does not fulfil DIS objective elements. It does, however, itself comply with several, which matters because the assessor evaluates the digital estate as a whole.

OE	Tier	Requirement	Fit	Module	Evidence produced
`DIS.1.g`	Excellence	Digital system supports single sign-on	Supporting	Platform	SSO via Microsoft Entra ID and OAuth2
`DIS.1.h`	Excellence	Largely deployed on cloud-based infrastructure	Supporting	Platform	Cloud-native on AWS; on-premise option available
`DIS.2.a`	Achievement	Digital means to ensure data is encrypted	Supporting	Platform	AES-256 at rest; TLS in transit
`DIS.2.d`	Achievement	System captures audit trails of each transaction	Supporting	Platform	Record-level and user-activity audit trails across all modules
`DIS.2.e`	Excellence	Digital mechanism for secure remote access	Supporting	Platform	Role- and attribute-based access control; secure web and mobile access

A precision note. Field-level data masking is a frontend, context-based presentation-layer control and should be described as such, not as a cryptographic boundary. Encryption satisfies DIS.2.a; masking does not.

DOM Digital Operations Management Strongest fit 17

OE	Tier	Requirement	Fit	Module	Evidence produced
`DOM.1.a`	Core	IT policy governing use, management and security of IT assets	Primary	Document & Policy Management	Version-controlled IT policy covering security, open source, data management, access, DR, monitoring, change management
`DOM.1.b`	Core	IT policy reviewed periodically	Primary	DPMS: renewal & expiry	Validity periods, automated review reminders, overdue-revision report, approval timestamps
`DOM.2.a`	Achievement	Digital system for internal IT maintenance plan	Primary	Ticketing & Asset Maintenance	Preventive maintenance schedules, task boards, SLA timers
`DOM.2.c`	Achievement	Monitor performance of healthcare applications	Supporting	QI / KPI Engine	Uptime and performance KPI capture and trending
`DOM.2.f`	Excellence	Formal change request process for IT changes	Primary	Ticketing; Committee Mgmt	Request → approval → testing → implementation → monitoring, with audit trail
`DOM.3.a`	Achievement	Digital inventory of all IT assets, procurement to retirement	Primary	Asset Maintenance	Asset register with specification, location, configuration, lifecycle history
`DOM.3.c`	Achievement	Record and track IT security incidents, issues, changes, problems	Primary	Ticketing; Incident; Risk	ITSM with unique IDs, escalation matrix, SLA tracking, closure validation
`DOM.3.d`	Excellence	Periodic internal IT audits confirming no major vulnerabilities	Primary	Audit Manager & NC	IT audit form builder, scored responses, NC ticketing, CAPA closure evidence
`DOM.3.e`	Achievement	Maintain and track records for electronic waste	Primary	Asset Maintenance	E-waste register, disposal records, regulatory compliance trail
`DOM.4.a`	Commitment	Disaster recovery plan for patient healthcare records	Primary	DPMS	Written DR guidance, version-controlled, approval trail
`DOM.4.b`	Commitment	Disaster recovery plan for administrative operations	Primary	DPMS	As above
`DOM.4.c`	Core	Digital system to archive and retrieve data	Supporting	DPMS; platform archival	Document archival and retrieval; platform-level retention
`DOM.5.a`	Core	Manage end-user credentials and access	Supporting	Platform RBAC / ABAC	Granular role-based access control, user provisioning records
`DOM.5.e`	Commitment	Auto-terminated electronic sessions	Supporting	Platform	Configurable session timeout
`DOM.6.a`	Achievement	Record of periodic calibration and maintenance plans for all equipment	Primary	Asset Maintenance	Calibration register, schedules, complete equipment history
`DOM.6.b`	Achievement	Notify maintenance in-charge for scheduled maintenance	Primary	Ticketing + Alerts	Automated alerts via system, email, SMS, WhatsApp; escalation on overdue
`DOM.6.c`	Achievement	Record of collection and disposal of biomedical waste	Primary	Ticketing & Asset; Audit	BMW collection and disposal register, audit checklists

DOM scorecard: 12 primary + 3 supporting of 25 objective elements, including 2 of the 6 Core elements in the chapter.

FPM Finance and Procurement Management 1

FPM is ERP and billing territory. The only meaningful contribution is the supplier and material non-conformance workflow.

OE	Tier	Requirement	Fit	Module	Evidence produced
`FPM.1`	Excellence	Digital system to record quality concerns of materials received	Supporting	Non-Conformance; Ticketing	Supplier NC workflow with closure evidence

HRM Human Resource Management Second strongest 9

OE	Tier	Requirement	Fit	Module	Evidence produced
`HRM.1.a`	Commitment	Digital system to maintain personal files for all staff, including credentials	Primary	Credentials & Privileges with OPPE	Credential repository, licence and registration expiry tracking, privilege delineation
`HRM.1.b`	Excellence	Medical practitioners registered in Healthcare Professionals Registry	Supporting	Credentials	HPR ID captured and tracked as a credential field
`HRM.2.c`	Achievement	Manage employee resignation and separation	Supporting	Credentials	Privilege revocation and offboarding workflow
`HRM.3.a`	Excellence	Digital system for staff to set goals and KPIs	Primary	QI/KPI Engine; Scorecards	Goal setting, KPI assignment, department and individual scorecards
`HRM.3.b`	Excellence	Digital system to evaluate staff performance	Primary	OPPE / FPPE	Ongoing and focused professional practice evaluation cycles, evidence-linked
`HRM.4.a`	Achievement	Online induction training for staff	Primary	Learning Management System	Induction programme, enrolment, completion and assessment records
`HRM.4.b`	Achievement	Digital learning platform beyond traditional training	Primary	Learning Management System	Multimedia repository, session scheduling, attendance tracking
`HRM.4.c`	Excellence	Digital access to medical journals	Supporting	LMS content repository	Curated resource library with role-based access
`HRM.4.d`	Commitment	Maintain staff training records	Primary	Learning Management System	Training matrix by department, role and competency; assessment scores

HRM scorecard: 6 primary + 2 supporting of 14 objective elements, and most of them sit in the Achievement and Excellence tiers that gate Gold and Platinum.

IMS Information Management System 6

OE	Tier	Requirement	Fit	Module	Evidence produced
`IMS.1.g`	Excellence	Digital consent management system	Supporting	DPMS; Survey Management	Consent form templates, acknowledgement tracking
`IMS.1.h`	Excellence	Patients can request data correction	Supporting	Patient Concierge; Ticketing	Request logging, routing, SLA-bound resolution, closure evidence
`IMS.2.a`	Commitment	Designated IT team to manage digital operations	Supporting	Committee Management	IT / digital governance committee: charter, members, quorum, MoM, action tracking
`IMS.2.b`	Excellence	Defined role for Data Protection Officer	Supporting	Committee Mgmt; DPMS	DPO role definition, appointment record, governance charter
`IMS.2.d`	Commitment	Digital dashboard to measure quality-of-care delivery	Primary	QI/KPI Engine; Dashboards	Real-time dashboards on turnaround time, wait time, infection control indicators
`IMS.2.f`	Excellence	Digital system showing different types of analytical dashboards	Primary	Analytics & AI layer	Descriptive, diagnostic and predictive dashboards; heatmaps; benchmarking; one-click export

IMS.2.d is worth dwelling on. Its interpretation names turnaround time, wait time and infection control indicators as examples, and permits the dashboard to be managed through HIS, EMR, analytics or enterprise content tools. A QMIS with a configurable KPI engine is the most direct route, and it is a Commitment element, so it gates Silver as well as Gold and Platinum.

09The 11 NABH Digital KPIs

The 2nd Edition introduces a dedicated KPI annexure. Each indicator is defined with inclusion and exclusion criteria, formula, unit, collation frequency, the corresponding objective element, and the maturity levels it applies to.

#	Indicator	Unit	Corresponding OE	Applies to	Medblaze role
1	Digital Appointment	%	`AAC.3.a`	S · G · P	Compute & report
2	ABHA Creation	Number	`AAC.2`	G · P	Compute & report
3	Digital Prescription	%	`COP.1`	S · G · P	Compute & report
4	Digital Nursing Notes	%	`COP.2`	G · P	Compute & report
5	IPD Digital Feedback	%	`AAC.8.a`	S · G · P	Source system
6	OPD Digital Feedback	%	`AAC.8.a`	S · G · P	Source system
7	Digital IPD Billing	%	`FPM.3.e`	S · G · P	Compute & report
8	Digital Discharge Summaries / LAMA	%	`AAC.7.a`	S · G · P	Compute & report
9	System Uptime	%	`DOM.2.c`	G · P	Compute & report
10	Access and Security	Number	`DIS.2.c`	S · G · P	Compute & report
11	IT Support (SLA)	%	`DOM.3.c`	G · P	Source system

All indicators are collated monthly. S · G · P = Silver, Gold, Platinum.

KPI 9 sets a hard target

Average system uptime for critical healthcare systems and applications shall be 99%, including scheduled maintenance.

The single-engine argument

Numerator / denominator sources HIS: appointments, billing, discharges, ABHA EMR: prescriptions, nursing notes, summaries Monitoring stack: uptime, IDS, firewall Medblaze native: feedback, IT tickets

QI / KPI engine

Formula configuration
Inclusion / exclusion logic
Monthly collation
Target vs actual
Trend & benchmark

Monthly KPI pack

All 11 indicators · one export
PPT / PDF / Excel · assessor-ready

Three of the eleven indicators originate natively inside Medblaze. The other eight originate elsewhere, but all eleven can be configured, computed, trended and exported from one place.

Without this, the quality team assembles eleven indicators from four systems in a spreadsheet every month, for four years. That is the single most common point of failure between accreditation and surveillance.

10Documentation architecture

The standard devotes an entire section to system documentation and presents it as a five-tier pyramid.

Mission & visionDirection and purpose

Policies & proceduresSOPs, operations manuals, reviewed once or twice a year

Work instructionsStep-by-step task execution

Forms, formats, recordsNumerical, text, image, sound, physical or electronic

Documents of external originLicences, statutory clearances, contracts, MoUs

The NABH documentation pyramid. Each tier maps to a Medblaze control.

Pyramid tier	Medblaze module	Controls delivered
Mission, vision	DPMS	Central repository, controlled publication
Policies & procedures	Document & Policy Management	Version control with revision history, structured version comparison, multi-level approval, escalation for pending approvals, validity periods with automated review reminders, overdue-revision reports
Work instructions	DPMS + LMS	Controlled editing rights, read-acknowledgement, knowledge verification linked to document review
Forms, formats, records	All modules; Survey Mgmt	Form builder, configurable templates, record-level and user-level audit trails
Documents of external origin	Statutory & Legal Compliance Tracker	Central repository, digital workflows, calendar alerts on expiry, gap reports

The single highest-leverage point in the whole standard

DOM.1.a and DOM.1.b are Core objective elements: 100% compliance is mandatory at every tier, at every assessment. They require an IT policy that exists, is comprehensive, and is demonstrably reviewed on a periodic cycle. A policy file on a shared drive cannot demonstrate periodic review. A document management system with validity periods, automated reminders, approval timestamps and an overdue-review report can. In one screen.

11The evidence pack

Pre-application: where Medblaze is deployed

Gap analysisPolicies & manualsSelf-assessment toolkit

1 Registration on web portal
2 Information & document submission
3 Fee submission
4 Final assessment digital assessors assigned
5 NC closure 90-day window
6 Recommendation by Digital Accreditation Committee

Accreditation granted: valid 4 years, renewal assessment at 24 months

The NABH process. Note that gap analysis comes first, before any submission.

What the assessor actually asks, and what appears on screen

Assessor asks	Medblaze produces	Module
"Show me your IT policy and when it was last reviewed."	Current version, revision history, approver, approval timestamp, next review date, acknowledgement log	DPMS
"How do you track IT security incidents?"	Ticket register with unique IDs, severity, routing, escalation history, SLA performance, closure evidence	Ticketing; Incident Mgmt
"Show me a sentinel event from last quarter and what you did about it."	Incident record → RCA (fishbone) → CAPA → corrective action ticket → closure evidence → recurrence trend	Clinical Incident Mgmt
"How do you know your infection control is working?"	HAI counts, monthly trends, bundle compliance, antibiogram, location attribution, AMS audit results	Infection Surveillance & AMS
"Where is your equipment calibration register?"	Asset-wise calibration schedule, completion status, overdue alerts, full maintenance history	Asset Maintenance
"Show me training records for the ICU nursing team."	Training matrix by department and role, mandatory vs optional, completion %, assessment scores	LMS
"How is staff performance evaluated?"	OPPE/FPPE cycles, credential and privilege status, scorecards against assigned KPIs	Credentials with OPPE
"Show me your quality-of-care dashboard."	Live QI/KPI dashboard with drill-down, targets vs actuals, department benchmarking	QI / KPI Engine
"What is your accreditation readiness score right now?"	Overall readiness %, chapter-wise compliance distribution, department performance, open corrective actions	Accreditation Manager
"How do you capture and act on patient feedback?"	Multi-channel capture, touchpoint segmentation, sentiment analysis, service recovery tickets and closure	Patient Feedback; Service Recovery

The Accreditation Manager as control tower

The module is configured with the NABH chapter → standard → objective element hierarchy, with each objective element:

tagged to a responsible department or functional unit
rated compliant / partially compliant / non-compliant, configurable to mirror the 10/5/0 scale
linked to uploaded evidence
scored at department and institution level
gap-analysed, with corrective actions carrying owners and due dates
escalated when corrective actions run overdue
dashboarded as an overall readiness score with chapter and department distribution

Because the module supports controlled updates when standards are revised, migrating a 1st Edition mapping to the 2nd Edition's eight chapters and 182 objective elements is a configuration exercise, not a rebuild.

12Implementation roadmap

0

Baseline

3–4 weeks

Kickoff and scoping · target tier decision · systems inventory and integration map

Exit criterion Target maturity tier signed off by leadership; integration map agreed with the HIS/EMR vendor

1

Gap analysis

8–10 weeks

Configure the NABH framework · tag 182 OEs to departments · baseline self-assessment · gap report

Exit criterion Baseline readiness score published; every non-compliant OE has an owner and a due date

2

Governance core

6–8 weeks

IT policy and DR plans in DPMS · IT governance committee · licence compliance tracker

Exit criterion IT policy live with review cycle configured: DOM.1.a and DOM.1.b demonstrably met

3

Operational modules

10–12 weeks

Incident and sentinel events · infection surveillance and AMS · ticketing and assets · audit and NC

Exit criterion COP.7 fully live; DOM.3 and DOM.6 registers populated with a full cycle of records

4

Experience & workforce

8–10 weeks

Patient feedback and PROMs/PREMs · LMS and training matrix · credentials, privileges and OPPE

Exit criterion AAC.8 capture live across channels; HRM.4 training matrix populated for all staff categories

5

Analytics

6–8 weeks

QI/KPI engine for the 11 NABH KPIs · leadership dashboards · HIS/EMR integration go-live

Exit criterion All 11 KPIs computing monthly with at least three months of trend data

6

Assessment

8–10 weeks

Evidence pack assembly · mock assessment and remediation · NABH application

Exit criterion Mock assessment score at or above target threshold plus a 10-point buffer in every category

Indicative end-to-end: 10–13 months for a first-time Platinum-track hospital. Silver-track deployments compress considerably, because Achievement and Excellence elements fall out of scope.

The three-month evidence rule

Several objective elements require demonstrable practice, not just capability. An assessor will not accept a training module that exists but has no completions, or an incident register with three test entries. Plan for a minimum of one full quarter of live operating data before the assessment date.

13The 24-month surveillance cliff

First assessment

Core100%
Commitment60%
Achievement60%
Excellence60%

Surveillance: month 24

Core100%
Commitment80%
Achievement80%
Excellence80%

For a Platinum hospital with no NA exclusions, that is +33 objective elements to close in 24 months, roughly 1.4 per month, while continuing to operate.

Why hospitals fail surveillance

Failure mode	Root cause	Control
Policies lapsed past review date	No automated review cycle	DPMS validity periods, automated reminders, overdue-revision report
Training completion decayed after go-live	No recurring assignment	LMS mandatory-training recurrence and completion dashboards
Calibration schedule slipped	Manual register	Asset module preventive schedules with escalation on overdue
Corrective actions never closed	Actions tracked in email	Accreditation Manager corrective action tracking with owner, timeline, escalation, closure evidence
KPI reporting stopped after accreditation	Spreadsheet dependency on one person	QI/KPI engine with automated monthly collation
Nobody knows current readiness	No live scoring	Accreditation Manager readiness dashboard, always current

A system that produces a readiness score on any given Tuesday converts surveillance from an event into a state.

14Commercial and operational case

Cost of the alternative

Approach	Typical pattern	Hidden cost
Spreadsheets + shared drive	Quality team maintains a 182-row tracker; evidence in folders	One to two FTE quality staff absorbed; evidence integrity unverifiable; no audit trail; single-person dependency
Consultant-led sprint	External firm assembles documentation three months before assessment	High per-cycle cost, repeated every 24 months; documentation far removed from reality, a risk the standard itself names; no residual capability
Point solutions	Separate incident tool, separate LMS, separate ticketing	Integration cost; fragmented audit trails; no unified readiness view; multiple vendor relationships
Unified QMIS	Single platform configured to the standard	Recurring subscription; residual capability compounds across accreditation frameworks

Reported operational outcomes

~25%reduction in administrative burden

~30%improvement in patient safety event tracking

~40%reduction in Cost of Poor Quality

~50%increase in customer loyalty

Platform-level figures across a client base of 1,000+ healthcare facilities. Indicative of direction, not guaranteed for any specific hospital.

Multi-framework leverage

A hospital deploying Medblaze for NABH Digital Health Accreditation acquires the ability to run parallel compliance against other frameworks the Accreditation Manager supports: JCI, NABH Hospital Standards, NABL, ACHS, CAP, AACI, MSQH, KARS, HA, SafeCare, GAHAR, COHSASA, JAWDA, CBAHI, ISO and NHRA, tracked simultaneously against a shared evidence base. For hospital groups with international units or medical value travel ambitions, this is often the larger part of the business case.

15Limitations and honest scoping

This section exists because credibility with a hospital CIO is built by what a vendor declines to claim.

Medblaze does not satisfy 137 of 182 objective elements. It is not a substitute for HIS, EMR, LIS, RIS, PACS, pharmacy or ERP investment. Chapters AAC (except 8), COP (except 7), MOM, DIS and FPM require those systems.
Medblaze cannot make you accreditation-ready on its own. It makes you evidence-ready in its domains and gives you a live gap picture across all of them. The remediation work is the hospital's.
Frontend data masking is a presentation-layer control. It should not be positioned as satisfying encryption or data-security objective elements.
Three of the eleven KPIs are natively Medblaze-sourced. The other eight depend on data quality in HIS, EMR and the monitoring stack. Medblaze computes and reports; it does not manufacture missing source data.
Objective element categorisation may be revised by NABH. Mappings here reflect the September 2025 2nd Edition. Confirm against the current published guidebook before relying on them commercially.
The DOM chapter count is internally inconsistent in the source document. Confirm with the NABH secretariat before finalising denominators.
"Fully met" is an assessor judgement, not a system output. A configured module scores nothing without live, consistent, department-wide usage.
Integration depends on the incumbent vendor's API maturity. The HL7/FHIR readiness of your HIS is a project dependency that must be assessed in Phase 0.
Compliance posture should be stated precisely. ISO 27001 alignment and DPDP/GDPR positions should be represented per current documentation status, not aspirationally.

ASelf-assessment worksheet

Work through this before your first vendor conversation. Blanks are your gap.

A.1 · Target tier decision

Which tier are we applying for?	Silver · Gold · Platinum
Objective elements in scope	Silver 74 · Gold 127 · Platinum 182
Target assessment date
Which services do we not provide? (→ NA elements)
Revised in-scope denominator after NA exclusions

A.2 · System ownership audit

For each evidence domain, name the system that holds it today, and whether that evidence is auditable.

Patient feedback capture & analysisInfection incidents & AMSPatient care incidents & sentinel eventsIT policy & periodic review cycleDisaster recovery plan documentsIT security incident / problem / change trackingIT asset inventory & lifecycleE-waste and biomedical waste recordsEquipment calibration & preventive maintenanceInternal IT audit programmeStaff credentials, privileges, OPPE/FPPETraining records & e-learningStaff goals, KPIs, performance evaluationQuality-of-care dashboardAnalytical dashboardsCommittee charters, MoM, action trackingLicences, contracts, MoUs with expiry alertsMonthly computation of all 11 NABH KPIs

A.3 · Readiness checklist: 90 days out

Every Core objective element scored fully met, with evidence attached
All 11 KPIs computing monthly, with at least three months of trend data
IT policy current, within review cycle, acknowledgement log complete
Disaster recovery plan approved, version-controlled and dated
At least one full quarter of live incident, audit and feedback records
Corrective actions from the mock assessment closed with evidence
Committee minutes for the IT / digital governance committee for four quarters or more
Training matrix complete for every staff category, no lapsed mandatory training
Calibration register current, zero overdue items
Readiness dashboard showing target threshold plus a 10-point buffer in every category
Department ownership assigned and acknowledged for every in-scope objective element
Evidence pack exported and reviewed by the Quality Head and CIO jointly

BGlossary

Chapter codes

AACAccess, Assessment and Continuity of Care

COPCare of Patients

MOMManagement of Medication

DISDigital Infrastructure

DOMDigital Operations Management

FPMFinance and Procurement Management

HRMHuman Resource Management

IMSInformation Management System

Terms

StandardA statement of expectation defining structures and processes that must be substantially in place

Objective elementThe measurable component of a standard, scored 0 / 5 / 10

InterpretationGuidance on what the organisation must do to meet the objective element

CoreMandatorily assessed at every assessment; 100% compliance required at all tiers

CommitmentGates Silver, Gold and Platinum

AchievementGates Gold and Platinum

ExcellenceGates Platinum

ABDMAyushman Bharat Digital Mission

ABHAAyushman Bharat Health Account: unique health ID

HPRHealthcare Professionals Registry

HFRHealth Facility Registry

DPDPDigital Personal Data Protection Act, 2023

ITSMIT Service Management

OPPE / FPPEOngoing / Focused Professional Practice Evaluation

PROMs / PREMsPatient Reported Outcome / Experience Measures

CoPQCost of Poor Quality

HAIHospital-Acquired Infection

AMSAntimicrobial Stewardship

RCA / CAPARoot Cause Analysis / Corrective and Preventive Action

QMISQuality Management Information System

Sources

NABH Digital Health Standards for Hospitals, 2nd Edition, September 2025. National Accreditation Board for Hospitals and Healthcare Providers, Quality Council of India. ISBN 978-81-959-6769-8.
Medblaze Functional Specifications, Verventus Healthtech Solutions Private Limited.
Medblaze Platform Overview, Verventus Healthtech Solutions Private Limited.

Objective element mappings reflect the September 2025 2nd Edition and should be verified against the current published guidebook before commercial reliance.

01Executive summary

What this paper establishes

02What changed in the 2nd Edition

Chapters reduced to 8

182 objective elements

Three maturity tiers introduced

Accreditation valid 4 years

Certification valid 2 years

Wider eligibility

Why the tiering changes the conversation

03Anatomy of the standard

Objective elements by chapter

Chapter distribution in full

Objective elements by scoring category

The three-part anatomy of every requirement

04The maturity grid

Rules that catch hospitals out

05The scoring arithmetic

The absolute numbers behind the percentages

06Where Medblaze fits, and where it does not

The division of labour, stated plainly

07Chapter-by-chapter coverage

Coverage by scoring tier

08The objective element crosswalk

09The 11 NABH Digital KPIs

The single-engine argument

10Documentation architecture

11The evidence pack

What the assessor actually asks, and what appears on screen

The Accreditation Manager as control tower

12Implementation roadmap

Baseline

Gap analysis

Governance core

Operational modules

Experience & workforce

Analytics

Assessment

13The 24-month surveillance cliff

Why hospitals fail surveillance

14Commercial and operational case

Cost of the alternative

Reported operational outcomes

Multi-framework leverage

15Limitations and honest scoping

ASelf-assessment worksheet

A.1 · Target tier decision

A.2 · System ownership audit

A.3 · Readiness checklist: 90 days out

BGlossary

Chapter codes

Terms

Sources

See this run against your own standard

Sharath Mirdiddi