EMR software checklist for small clinics in India What to test in the demo, what to ask in writing, and a sheet to print for every vendor.

Before you buy EMR software, check five things on the vendor's own screen: how fast your doctor writes a real prescription during a busy OPD, whether the printed prescription carries what the regulations require, whether a corrected visit keeps the original, whether you can export every visit in a file you can open, and what keeps working when the internet drops. Then ask four things in writing: where the data is stored and who at the vendor can see it, what security the vendor runs for you under the DPDP Act, what the ABDM status of the software really is, and the full price for a year. The printable table at the end puts all of it on one page.

This is the EMR-specific list. For the wider question of choosing clinic management software (front desk, queue, billing, a 20-minute demo script), read our guide to choosing clinic management software first. If you are not sure EMR is even the right category for your clinic, our post on HIS, HMS, HMIS and EMR sorts out the terms.

Will the doctor be faster on it than on the pad?

This is the test that decides whether you will still be using the EMR in three months. At most OPD desks the doctor goes back to the paper pad on the first day the queue backs up, and an EMR the doctor does not write in is an empty record. So the demo has to be done by your doctor, on the vendor's software, with your clinic's real cases, not by the salesperson on prepared data.

1. Pick the five prescriptions your doctor writes most often in a week. Write each one from a blank screen and time it against the pad.
2. Repeat a previous visit's prescription with one change (a dose or a duration). This is most of a follow-up OPD, so it should take seconds.
3. Search a drug by the short name your doctor actually uses, a misspelling, and a generic name. See what comes up and how many keystrokes it takes.
4. Add a medicine that is not on the vendor's list, and check it is there next time without being retyped.
5. Look at the patient's past visits while writing today's. If the history is on another screen, count the clicks to get back.
6. Try it on the computer that will sit in the cabin, at its real screen size. A form that scrolls on a small laptop costs time on every patient.

Favourites and templates

Favourites (single drugs the doctor uses often) and templates (a full set of drugs and advice for a common condition) are where an EMR saves most of its time. Ask whether they belong to each doctor or to the whole clinic, how many you can save, whether the doctor can edit a template mid-prescription without changing the saved one, and whether they come with you in the export. Ask also where the template content comes from. A template the doctor builds is the doctor's decision; a ready-made template from the vendor is a clinical suggestion, and you should know which one you are looking at.

Does the printed prescription carry what the rules require?

The patient leaves with the print, not the screen, so judge the EMR on the paper. The Indian Medical Council (Professional Conduct, Etiquette and Ethics) Regulations, 2002, which the NMC publishes on its site, set out what a prescription must show:

• Registration number: regulation 1.4.1 says every physician "shall display the registration number accorded to him by the State Medical Council / Medical Council of India in his clinic and in all his prescriptions, certificates, money receipts given to his patients." The receipt the EMR prints counts too.
• Qualifications: regulation 1.4.2 allows only "recognized medical degrees or such certificates/diplomas and memberships/honours which confer professional knowledge" as a suffix to the doctor's name.
• Letterhead contents: regulation 7.13 lists name, qualifications, titles, speciality and "registration number including the name of the State Medical Council under which registered", and says "The same should be the contents of his prescription papers."
• Generic names: regulation 1.5, as substituted by the Gazette notification of 08.10.2016, says "Every physician should prescribe drugs with generic names legibly and preferably in capital letters".

Print a sample prescription for each doctor in the clinic and hold it up against that list. Check that the drug line can show the generic name clearly, that the registration number and council name sit on every page of a two-page prescription, and that nothing else is on the paper: no vendor logo, advert, QR code or pharmacy name. Check A4 and A5 if you use both. Our free prescription format tool shows a layout built on these clauses. For what the rules mean for your own prescribing, read the regulations or ask your state council; this post covers the software, not the prescribing.

What happens when a saved visit is corrected?

Doctors correct records: a wrong duration, a missed allergy, a note added after a phone call. The question is whether the EMR keeps what was there before. The MoHFW Electronic Health Record (EHR) Standards for India 2016 are clear on what they recommend. Under "Principles of data change" they say "The data once entered into a health record system must become immutable", that "Alteration of the previously saved data is not permitted", and that "Any record requiring revision should create a new medical record containing the changed/appended/modified data of earlier record", with the new one marked active and the previous version marked inactive, and "a complete audit trail of such change maintained by the system."

In the demo, save a visit, edit it, and ask the vendor to show you both versions and who changed what, when. If the old version is gone, the clinic has no way to show later what was actually prescribed on the day. The same document asks for an audit log that records "the date, time, record identification, and user identification whenever any electronic health information is created, modified (non-clinical data only), deleted (stale and non-clinical data only), or printed". Ask who in your clinic can see that log, and whether it covers the vendor's own staff.

Can you take every record with you?

The EHR Standards 2016 describe records as "held in trust" by the healthcare provider "on behalf of the patient", with the data "owned by the patient himself / herself" and the storage medium owned by the provider. Whatever the vendor's contract says, the records are not the vendor's. You also need them to answer patients: regulation 1.3.2 of the 2002 regulations says records requested by a patient, an authorised attendant or legal authorities "shall be issued within the period of 72 hours".

For an EMR, a list of patient names and phone numbers is not an export. Ask for a full export during the trial and open it. It should have every visit with its date and doctor, complaints and diagnosis as written, each drug line (name, strength, dose, frequency, duration), advice and follow-up, and the bill, in CSV or Excel files you can open without the vendor. Ask whether export is in every plan, whether the clinic admin can run it without a support ticket, and what happens to the data on the day you stop paying. Our post on switching clinic software and moving your data covers what to check before and after a move.

What does the doctor see when the internet drops?

Ask for the exact list of what works offline, then test it: turn off the Wi-Fi in the middle of a consultation. For an EMR the questions are specific. Can the doctor still open the current patient's past visits, or only today's? Is the drug list on the device? Can the prescription be saved and printed? When the connection comes back, does everything sync on its own, and what happens if two people edited the same record? If the answer is "it is cloud software, it needs internet", plan for a second connection and a paper fallback, and count that in the cost. Our post on running the OPD when the internet drops has a backup kit.

Where is the data stored, and who keeps it safe?

Under the Digital Personal Data Protection Act, 2023, the clinic stays responsible for patient data even when a vendor stores it. Section 8(1) makes the Data Fiduciary responsible for processing "undertaken by it or on its behalf by a Data Processor", section 8(2) allows a processor to be used "only under a valid contract", and section 8(5) requires "reasonable security safeguards to prevent personal data breach." These sections, and the security rule below, come into force eighteen months after the 13 November 2025 notifications (G.S.R. 843(E) and G.S.R. 846(E)), that is in May 2027. Our post on the DPDP Act for clinics covers the rest of the Act.

Rule 6 of the DPDP Rules, 2025 lists the minimum safeguards. Each one turns into a question for the vendor:

On data location: the DPDP Act does not require all personal data to stay in India. Section 16(1) lets the Central Government restrict transfer to countries it notifies, and rule 15 allows transfer outside India subject to requirements the government may specify. So ask the vendor which country and which provider store your data and its backups, and get the answer in writing. If a scheme, an insurer or your state asks for data in India, the written answer is what you will need.

Do you need software that follows the EHR Standards 2016?

The EHR Standards for India 2016 are a MoHFW e-Health Division document titled "Standards Set Recommendations v2.0". It says it "provides a set of recommendations relevant to adoption of electronic health informatics standards in EHR/EMR and other similar clinical information systems" and that it "does not cater to wider implementation scenarios such as of administrative, legal or regulatory nature." It is a set of recommendations for software, not a licence or registration a clinic has to hold.

It is still a useful yardstick. Besides the data-change and audit points above, it recommends SNOMED CT as the primary clinical terminology and lists ICD-10 for classification, unique user identity with access control, and a backup mechanism. A vendor that claims to follow the standards should be able to say which parts it implements. Treat "EHR-compliant" or "certified" on a brochure as a question to ask, not an answer.

Do you need ABDM-compatible software?

Only if you choose to join ABDM. The ABDM FAQ says "Participation of a healthcare facility or an institution is also voluntary and shall be taken by the respective management", and that enrolment in the Health Facility Registry "is voluntary." Medical council registration is the legal requirement; ABDM is not. Our post on HFR and HPR registration for a private clinic covers the registries and Scan & Share.

If you do want it, "ABDM-compatible" has a checkable meaning. The FAQ says software is integrated first in the ABDM Sandbox, and that "Applications are required to undergo functional testing and security assessment before entering the production environment", including "functional testing and security audit by NHA-impaneled agencies". So ask the vendor: which ABDM functions are live in production today (for example linking records to a patient's ABHA), which are still in the sandbox or planned, and whether that is in writing. A roadmap is not a feature.

Which EMR charges are easy to miss?

Our post on free vs paid clinic software has a full one-year cost worksheet. For the EMR itself, ask about these lines, because they rarely appear in the headline price:

• Per-doctor pricing that counts a visiting consultant as a full doctor.
• Limits on templates, favourites or saved drugs in the lower plan.
• Letterhead printing, or printing without vendor branding, only in a higher plan.
• A storage limit on records or attachments, and the price above it.
• Charges per prescription sent to the patient by SMS or WhatsApp.
• An export fee, or full export only in a paid tier.
• ABDM features as a paid add-on, or promised for later at a higher price.
• A year paid upfront with no refund if the doctor stops using it.

The printable checklist

Print this and fill in one column per vendor. Write what you saw on screen, not what you were told. A blank is a question to send the vendor before you pay.