5. User Management & Permissions
Overview
To ensure compliance, data security, and ethical practice, Rewaken Life® enforces strict role-based permissions for all users of the platform. Each individual granted access is responsible for maintaining the confidentiality and proper use of sensitive medical, personal, and business data.
1. Role-Based Access Control (RBAC)
Each user is assigned a role within the system. Their level of access is restricted to only the functions required for their duties.
Role | Access Includes | Access Restrictions |
|---|---|---|
Patient Coordinators | View and submit patient consultation forms, manage intake progress, schedule follow-ups | Cannot access prescriptions, health records, or clinical decision tools |
Medical Providers | Full access to medical histories, lab results, prescription tools | Not involved in marketing, client outreach, or commission processes |
Clinic Admins (if applicable) | View high-level reports, monitor coordinator activity, track commissions | Cannot modify patient records or override provider medical decisions |
Support Team (Internal) | Platform troubleshooting, training access, onboarding support | No access to personal health information (PHI) or financials unless explicitly authorize |
2. Credentialing & Login Security
All users must create a secure login.
Sharing login credentials with unapproved clinics is strictly prohibited and will result in termination.
3. HIPAA Compliance & Patient Data Access
Patient Coordinators do not have access to private medical records.
All personal health information (PHI) is handled exclusively by the licensed medical provider assigned to the patient.
Data access is monitored and logged. Any breach, misuse, or unauthorized access is grounds for immediate removal and potential legal action.
4. Permissions Review & Auditing
Rewaken Life® conducts regular audits of platform access to ensure integrity and compliance. Any user found accessing data outside of their assigned permissions will be reviewed and potentially suspended.
Automatic permission updates may occur:
Upon completion of certification upgrades
Upon change in contract status
After a defined period of inactivity
5. Termination of Access
When a Patient Coordinator’s contract is suspended, terminated, or expired, access to the Rewaken Life® system is automatically revoked within 24 hours. Access can also be manually revoked in cases of suspected misconduct or security violation. Refunds will not be granted.