To declare compliance isn't an attestation. The purchase committee knows the difference.
Several clinical file systems in Mexico declare compliance with NOM-024 and NOM-151but signature, validation of identity and retention status depend on third parties or remains unpublicly detailed. It works till a hospital legal area with its questionnaire arrives.
We write this from the infrastructure side, not as a competition of your product. If that cape is necessary and doesn't want to build it, it exists as API.
The five questions we have seen appear in hospital purchase questionnaires while participating in the legal area. None are about clinical functionality. They are all about evidence.
Three products, not a consultant.
JAAK offers electronic information and signature software. Test each person directly and we are not an office and this does not replace his or her legal team's advice.
Fingerproof face biometrics, OCR official identification and list consultation, in a single flow.
- Liveness detection (anti-supurization)
- OCR official identification
- Consultation with list and risk
- Expediente digital descargable
The five questions that have been decided by the law area, but not the clinic.
Open them and answer them against their current product. If some have no documented response, it's the one that will stop the sale at the committee.
Q1Who issues maintenance status and their accreditation is valid?
The NOM-151 lays down that registration is issued by an accredited certification service provider. " NOM-151"and" we issue constancy through an accredited provider, while keeping the validation chain "are different statements and a sophisticated purchase area distinguishes them.
NOM-151-SCFI-2016 · 4.2 and 6.2
Q2How's the evidence exported for an audit or a trial?
The certification standard checks logs, manuals and implementation evidence. A screen board isn't an attestatory surrender: you have to export the file with its versions, signatures, accesses and constances in a format that an expert can review.
CSG certification model · Standard 3
Q3Do the system allow shared or generic accounts?
The NOM-024 require authentication at least by user and password, and recommends additional factors. If a complete shift enters with the same account, the nonrepudiation stops holding up even if the system registers each event.
NOM-024-SSA3-2012 · 6.6.1 and 6.6.3
Q4What sign modalities and with what evidence?
The NOM-004 It supports autograph, electronic or digital signature without defining levels. That neutrality requires us to document why the chosen method is reliable for each type of document and to have the system support more than one modality by risk.
NOM-004-SSA3-2012 · 5.10 · CCom 97
Q5How do you get a sign from a professional?
Since February 2026, the federal standard has been clear that the professional paper does not constitute an official identification. Validation of the paper attests to qualification and to prove that the person who signed them requires a different cape.
Professional electronic cabling standard · 17 / 02 / 2026
Build or integrate the attrition layer.
It's not an ideological question, it's an assignment of equipment. The layer of evidence doesn't differ his clinical product but his absence deniates him in a large purchase.
Her team develops her
- Agreement and maintenance with an accredited certification service provider
- Life-proof documentary and biometric monitoring and maintenance against fraud
- Validation of professional cordage against source and management of casualties and cancellations
- Export format of evidence that holds an expert
- Updating every time the frame changes, as happened four times since 2025
It's consumed by API model of a white brand
- Maintenance conformity issued through an accredited provider
- Identification and Liveness detection as Service
- Six signing modalities to cover the risk matrix per document
- Exporting evidence with versions, signatures, accesses and constancy
- Your equipment remains in the clinical product, which is where they compete
What's the rule about every requirement.
Without intermediate interpretations: instrument, number and what requires in practice. The links to the Official Journal are at the end of the page.
NOM-151-SCFI-2016
Obsecute while invoking4.2 · 6.2
The preservation certificate is issued by an accredited certification service provider. It is advisable to verify current accreditation and keep the validation chain.
NOM-024-SSA3-2012
Permite6.6.2
The document should be structured and unchanged and allow advanced electronic signature of the professional as determined by the provider. It's functionality enabling by risk policy and not universal mandate.
NOM-024-SSA3-2012
Obliga6.1.3 · 6.6.5
Using recognised integration standards and profiles and interviewing with authentication, encryption and consent monitoring. Sending files by mail isn't interoperability.
NOM-004-SSA3-2012
Obliga5.10 · 5.12
Any note with date, time, full name and autograph, electronic or digital signature. Electronic means are allowed if the remaining applicable framework is met.
Trade Code
Equivalent Obleague93 · 93 Bis · 97
Integrity and accessibility for matching with writing, integrity from final generation for matching with original and criteria for signature reliability.
Clinical signature levels
LagunaNo definition
The NOM-004 supports electronic or digital signature without defining levels of authentication, certificates and minimum evidence. It allows to design risk-proportional controls, documenting why they are reliable.
Statements that circulate and do not resist the number.
We hear them from vendor evaluations and internal committees in this sector.
«Nuestro sistema cumple NOM-151.»
A system does not fulfill NOM-151 by itself: the maintenance record is issued by an accredited certification service provider. The justifiable statement identifies that provider and shows that his accreditation is valid.
NOM-151-SCFI-2016 · 4.2 and 6.2
"The NOM-024 requires advanced electronic signature at every note. "
The rule looks at them as soon as the provider determines them. What's always enforceable is what's about the signature: nominal authentication, traceability, inalterability and nonrepudiation.
NOM-024-SSA3-2012 · 6.6.2 and 6.6.3
"If the hospital export a PDF of the file, you can fight back."
A legible PDF does not atcredit integrity or versions or accesses. To produce the file at a trial we have to export the document's history, but its final appearance.
CCom 93 Bis · NOM-024 · 5.8 and 5.9
Two ways to continue, as necessary.
30 minutes call with our technical equipment
We have reviewed his current architecture, what about KYCSignature NOM-151 or Signature NOM-151 + Biometrics best to integrate through APIand how integration would look. It includes the commercial channel scheme.
Add callTechnical documentation
API documentation, integration diagram, handling of cryptographic fingerprints and timestamps, and evidence export format. Ninety-second demos of each layer.
Information material. It does not replace a legal opinion for a particular case. No technology itself guarantees legal validity, prevents sanctions or excludes professional liability. What can do a well-designed system is to reduce gaps of evidence and explain what happened.
Each statement of this page has its official source.
Consulted on July 27, 2026. If you find an up-to-date, write and correct with a date of visible review.