Admin tools
Administrative pages are restricted to Admin accounts. Module-backed tools appear only when the corresponding feature is enabled.
Clinic Settings
Clinic Settings contains the clinic's self-service configuration:
- Profile — clinic name and contact address fields.
- Branding — public-site accent color and optional logo. Personal dashboard themes remain user-specific.
- Visibility — whether the clinic itself appears in the public marketplace.
- Find care — whether the clinic landing page lists practitioners who have opted their profiles in.
- Client intake — self-registration and optional administrator approval.
- Blog — clinic-wide public publishing, on by default. Turning it off hides public and management routes without deleting publications or images.
- Policies — open or strict chart access and, when strict, a break-glass duration from 1 to 720 hours.
Changing strict access immediately affects practitioner visibility, so review client care-team assignments before enabling it.
When Blog is enabled, administrators can moderate tenant publications from the Blog management page. Authors are listed first, with search, publication counts, and a separate paginated page for each author's posts. This keeps moderation usable as the number of publications grows and includes authors whose profiles are private, inactive, archived, or no longer practitioner accounts.
Moderation permits Unpublish and Delete for another author's post, but never editing it as that author. Publicly visible titles open the public post; hidden titles remain plain text. These actions are audited. A practitioner's own public-visibility switch can also hide all of their published posts without deleting them.
Clinic Schedule
Set opening windows for each day. Once at least one day is published, days without hours are closed. Practitioner availability and client booking slots must fit inside clinic hours. Before any clinic schedule is published, the workspace behaves as always open so initial setup is not blocked.
CSV import and export
Import accepts account rows and assigns randomly generated temporary passwords;
passwords are not read from the CSV. Export downloads users.csv for the
clinic's user list. Review per-row import errors and distribute temporary
credentials securely.
Download Data Backup
On Backup, choose Download Data Backup. The browser downloads a file
named like backup-<clinic>-<timestamp>.tar.gz; the application server does
not retain a copy. The archive contains JSON exports of these selected
tenant-scoped models:
- specialities, symptoms, and locations;
- accounts and activity actions;
- appointments and messages;
- prescriptions, medical information, and medical tests; and
- statistics.
Password hashes are excluded from account serialization.
Store the downloaded archive securely because it can contain sensitive clinical data. This manual tenant export is separate from operator-managed platform/database backups.
This archive is an administrative data export, not a complete disaster- recovery backup. It currently omits newer document uploads, generated forms, templates, notes, and other data outside the selected model list. There is no restore button or supported archive-import workflow in the UI. Keep production database, media, configuration, encryption-key, and infrastructure backups as separate operational safeguards.
Statistics and Activity Log
Statistics shows date-filtered totals such as logins, logouts, appointments, medical tests, registered users, and tracked actions. Activity Log lists recorded actions with timestamp, user, type, and description. Both are read-only reporting tools.
Break-glass Log
Under strict chart access, practitioners can record a reason for temporary emergency access. Break-glass Log shows the practitioner, client, reason, grant time, expiry, and active or expired state. Review this report regularly; the audit record is the accountability control for emergency access.