Access follows the current relationship
Permissions, patient ownership or delegated access, Provider relationships and record state determine authorized access. A previous delivery or notification does not override a later restriction.
ShifaTH guide
Security and access controls
Sensitive records and actions are subject to authentication, current authorization and permissions.
Private files remain permission-controlled
Private files require authorization when opened or downloaded. File validation, quarantine, deletion or revoked access can prevent availability. Uploading a file does not give every Provider access.
Additional checks for sensitive actions
Some actions require recent authentication or a single-use security challenge, including first passport delivery and account closure. Users can review and revoke their account sessions through the supported controls.
If access is blocked
A temporary lock, suspended account, expired session or missing permission can prevent an action. Follow the displayed verification or recovery path. If the problem remains, use the appropriate support route without adding unnecessary sensitive information.