Security and privacy

Who can see what

This is what the system does today, with no claims about certifications.

• Each clinic's data is separate. Staff of one clinic cannot open another clinic's patients, even with a copied link.
• Access follows the role. Each role sees only what it needs, and only doctors the owner has allowed can write prescriptions.
• Patient files are private. A file opens only after sign-in, for authorised staff of the same clinic. No file has a public link.
• A test result reaches the patient's portal only after the named reviewer has reviewed and released it.
• Important changes leave a trail: who made them and when. The owner can read it under Audit log.
• Signed notes are kept as they were signed, and an issued prescription is never deleted.
• A relationship between two people gives no access. Access to a patient's file by anyone outside the clinic team needs an explicit, limited grant.

Your password

1. 1

   To change it, open Settings and then the tab Security & password. Press Change password: write the current password and a new one of at least 8 characters, and repeat the new one.

2. 2

   If you forgot it, press Forgot your password? on the sign-in page and write your email or phone number. Press Send reset code.

3. 3

   Write the 6-digit code and a new password, and press Set new password. The code is valid for 15 minutes.

Two-step verification

1. 1

   Open Settings, the tab Security & password, and press Enable two-factor authentication.

2. 2

   Install an authenticator app on your phone, scan the QR code, or type the key, then write the 6-digit code it shows.

3. 3

   Save the recovery codes now. Save these codes now. They will not be shown again. Each code works only once.

• At every sign-in you are asked for the 6-digit code (Two-step verification). If you lose the phone, press Use a recovery code instead.
• To make a new set of recovery codes, open the security page (Recovery codes) and press Create a new set. Creating a new set cancels all the old codes immediately.

When a staff member leaves

1. 1

   Open Settings, the tab Users, and open the person.

2. 2

   In the danger zone press Deactivate user and confirm. The person can no longer sign in, their open sessions are closed, their records stay, and their place is free for someone else.

3. 3

   If a doctor leaves, give the tests that were waiting for them to another reviewer with Change reviewer. A deactivated doctor's public page stops opening.

4. 4

   Change any password or code that the person shared with others, for example one used on the reception computer.