Security

Review access, approvals and operational evidence.

CLINVERUM includes features for roles, access logging and document approvals. The technical configuration, contracts and required security evidence must also be reviewed for each intended deployment.

Role profiles 6 illustrative role profiles
Audit events 18 sample events in the illustration
Secure links 8 sample links with status information
Open approvals 3 example of pending approvals
Product logic

Governance only matters when it stays readable in daily operation.

  • Role and permission changes remain traceable instead of being hidden in administration
  • Critical actions such as approvals or secure delivery are visible in context
  • Audit is created in live operation instead of only in export lists
  • Backup, restore and incident thinking are handled as part of the operating model
Evidence status

Product features and external evidence must be reviewed separately.

This website does not provide evidence of a C5 attestation, medical device conformity or KBV/gematik certification for CLINVERUM itself. The evidence and contractual basis required for your intended use must be clarified before deployment.

Illustrative views

Overview of roles, logs and portal access.

The following illustrations explain workflows using sample data; they are not evidence of live operation.

Governance

Audit, approvals and secure delivery are visibly controlled.

That strengthens credibility more than generic security language.

Role model

Front desk, treatment, billing and management work on separate responsibility surfaces.

Especially in medical environments, this visible separation is a hard trust factor.

Portal separation

Patient-facing logic and internal practice access remain technically and organizationally separated.

That explains portal and security as one shared product logic instead of two separate topics.

Privacy in the funnel

Contact and demo stay minimal, privacy-conscious and controlled.

  • No patient data, diagnoses or findings in marketing forms
  • Consent-based services remain off by default
  • Privacy confirmation is required up front and technically enforced
  • Legal notice, privacy policy and settings remain globally accessible