YN

Co-founder · Product & compliance architecture

Yash Nerkar

Yash leads product and compliance-aware system design at Brandlabs — HIPAA/DPDP sequencing, trust UX for health products, and the operating cadence that turns AI prototypes into production software.

  • Regulated AI product design
  • HIPAA & DPDP posture
  • Health & compliance platforms

Writing

PHI minimization in RAG pipelines.

Chunking, redaction, retrieval filters, and eval hooks so regulated AI answers without stuffing patient data into every context window.

DPDP consent UX that founders can actually ship.

Practical notice, purpose limitation, and consent patterns for AI products selling to Indian regulated buyers — without freezing the roadmap.

BAA before PHI: the sequencing most teams get wrong.

A decision tree for LLM vendors, subprocessors, and when synthetic data is enough — before anyone pastes real patient data into a prompt.

HIPAA vs DPDP: one product, two postures.

Shared primitives for regulated AI — access control, logs, minimization — and the jurisdiction-specific deltas US and Indian buyers actually diligence.

Audit logging for every inference call.

What to log for HIPAA-aware LLM systems, what never to log, how long to keep it, and who can open the trail.

Who sits in an embedded AI pod.

FDE, senior engineers, product design, and compliance-as-needed — roles and anti-patterns for shipping regulated AI in 12–20 weeks.

How US healthcare startups should buy AI build partners.

Diligence questions on BAA fluency, eval discipline, and clinical workflow empathy — before you hire a studio to ship your AI product.

Regulated-industry AI buyer’s guide (India).

Questions CFOs and compliance officers should ask before signing an AI vendor — DPDP, updates, liability, and evidence — not just a demo.

Trust UX for telehealth and women’s health platforms.

Privacy, language, and stigma-aware product patterns from shipping telehealth for women’s health — so care feels safe enough to start.

Voice AI for low-literacy health access.

Latency, vernacular STT/TTS, and when voice beats chat — lessons from rebuilding Myna Voice AI for rural women’s health support.

Shipping on Fridays without breaking trust.

A pattern for weekly demos that are evidence, not theatre. What we ship, what we don't, and what we say out loud.

Compliance as architecture, not paperwork.

HIPAA and DPDP shouldn't be a last-mile checklist. Here's how we bake them into the first commit.