Bring in your team.Keep the keys.
Invite your receptionist, your nurse, your billing clerk — and tick exactly what each of them can do. Every permission is enforced on the server, not merely hidden in a menu, with tasks, a private line to you and an audit log of every change.
Default deny · Checked on the server · Every refusal logged
- Patients
- Register a new patient
- Appointments
- Book appointments
- Check in and finish
- Read the clinical record sensitive
- Mental-health notes sensitive
- Observation photographs sensitive
- Billing
- Create and issue an invoice
A team that helps, without the master key
Your front desk can book, register and bill without ever opening a case. You decide where each line is drawn — and the server holds it.
Nothing until you tick it
Access is off by default. A new staff member starts with their own inbox and their own account — and nothing else, until you grant it.
Permission by permission
Forty-seven tick boxes, arranged as a tree — a child needs its parent. Start from Front desk, Billing only or Full clinical, then adjust.
Enforced on the server
Not hidden menus. Every request is checked on the server; a refusal is a real 403 in plain English, and it is logged. A revoke applies to their very next request — no sign-out needed.
Tasks to an inbox
Assign work with a priority, a due date and, if you like, a patient. If they cannot open that patient, the server withholds the name and the link.
A private line to the doctor
Each staff member has one private text thread with you, with read receipts — sent, delivered, seen — and a few quick reactions.
An audit log of everything
Every grant and revoke, invite, deactivation, password reset, task change, lockout and refused request — who did it, and when.
Seeing the list is not reading the case
The person who books the appointment does not thereby need the case notes, the mental-health record or the photographs. Each is its own decision, and none comes bundled with another.
- Sensitive permissions ask you to confirm before they are granted
- Exporting patient data and deleting an invoice are their own permissions
- Lock-screen notifications never show a patient’s name
Five steps, and you hold every one
Staff cannot open Staff Admin or grant themselves anything. A clinic always keeps at least one admin — you.
- 01Invite by emailThe invitation is valid for seven days; resend or cancel it at any time.
- 02They set their own passwordFrom a one-time link. You never see it and never choose it.
- 03Tick what they may doStart from a preset or from nothing. Save shows exactly what changes.
- 04Assign the workTasks land in their inbox; they start, reply and mark them done.
- 05See it in the audit logEvery change of access and every refused request, on the record.
Staff can be reminded of upcoming appointments — their own or the whole clinic’s — with a snooze when the moment is not right.
Questions, answered
What can a new staff member see?
Nothing, until you tick it. Access is off by default and granted one permission at a time — patients, appointments, billing, prescriptions, documents, the clinical record and more — with presets such as Front desk and Billing only as a starting point.
Is it just hidden menus?
No. Every request is checked on the server. A staff member who types the address of a page they have not been given gets a refusal, and the refusal is logged. Revoking a permission takes effect on their very next click — no sign-out needed.
How do staff sign in?
You invite them by email; they set their own password from a one-time link. You never see or choose it. Five wrong passwords lock the account for fifteen minutes.
How do I give my receptionist work?
Assign a task — with a priority, a due date and, optionally, a patient — and it lands in their inbox. They can start it, reply and mark it done. Each staff member also has a private message thread with you.
Can I see who did what?
Yes. The audit log records every grant and revoke, invite, deactivation, password reset, task change and refused request — who, what and when.
More questions? See the full FAQ
Share the work, not the case
Start free — no card required. Invite your first staff member and decide, line by line, what they may open.