Roles, permissions and access log: who sees what, who changed what

Everyone sees their own work

Reception does not need to see a diagnosis, and a doctor need not enter billing settings. You define the roles.

A new employee is simply assigned a role rather than having each right set separately.

Traceability

When a record is opened, changed or exported, user and time are recorded. In a doubtful case you can look back.

An extra verification step can be set up for manager login.