One record, many practitioners, precise boundaries.
Relationship-based access control tied to the active care episode, with delegation, cover arrangements and automatic scope expiry.
- Access scoping
- Per-episode
- Access events logged
- 100%
- Single practitioner identity
- SSO
- Plan
- Klinik or Spital, by record volume
Built for what
you are actually dealing with.
Practitioners rotate between sites and need the right record without inheriting access to everything the group holds.
- Per-episode
- Access scoping
- 100%
- Access events logged
- SSO
- Single practitioner identity
What we usually
find on arrival.
Practitioners rotate between sites and need the right record without inheriting access to everything the group holds.
3–10 sites · shared clinical staff
Relationship-based access control tied to the active care episode, with delegation, cover arrangements and automatic scope expiry.
How this
actually runs.
A real timeline with named gates, not a marketing promise. Every stage has a written acceptance point before the next one starts.
Structure mapped
We model your sites, specialties and cover arrangements as policy — including how practitioners move between locations.
Identity federated
One practitioner identity across all sites via your existing identity provider, with SCIM provisioning wired up.
Records consolidated
Per-site exports merged into a single vault, with duplicate patient detection and a clinician-reviewed merge queue.
Live with scoping
Access is scoped to the active care episode. Practitioners see what they need at the site they are working from, and nothing more.
The things you are
actually worried about.
- How do cover arrangements work?
- A practitioner can be granted delegated access for a defined period. The delegation is recorded, time-boxed and expires automatically without administrator action.
- Can sites see each other's records?
- Only where a care relationship exists or the patient has consented. Group membership alone does not grant cross-site visibility.
- What about locums?
- Locums are provisioned with a contract end date. Access terminates on that date automatically, whether or not anyone remembers to deprovision them.
- Duplicate patients
- Consolidation surfaces probable duplicates for clinician review. We never auto-merge patient records — the clinical risk of a wrong merge is too high.
Not quite
your situation?
Scope it against
your real numbers.
Send us your site count, record volume, existing systems and governance requirements. We come back with a written scope, a timeline and a price — or an honest reason why we are not the right fit.
Klinik or Spital, by record volume