Access control and admin access
← Back to trust centreHow platform and clinic access should be controlled, reviewed, and explained to clinics in a simple way.
Current platform approach
Clinic users are separated by role so the same permissions are not granted to every staff member.
Admin, receptionist, and practitioner flows are intentionally different because their responsibilities are different.
Platform-level and infrastructure-level access should remain more restricted than normal clinic operations access.
What to document next
Who has access to production infrastructure and how that access is reviewed
How staff access is removed when a team member leaves
How privileged actions are audited or double-checked
Whether multi-factor authentication is required or planned