User Management & Audit
Compliant by Design
Role-based access, biometric / MFA login, full audit trail of every clinical and financial action — ODPC compliant by design, not by checklist.
Patient data is the most sensitive asset your hospital holds. ClinixCore is built ground-up for the Kenya Data Protection Act 2019 and ODPC requirements — granular role-based access, biometric and multi-factor authentication, encrypted storage, and a full audit trail of every record view, edit, dispense and claim.
User management scales with your team — whether you have 10 clinicians at a single facility or 1,000 staff across a hospital chain. Permissions are role-based, scoped per branch and department, and fully auditable. When a staff member leaves, a single click revokes their access everywhere — and exports a record of everything they ever did.
- Role-Based Access Control (RBAC)
- Biometric (Fingerprint) Login + MFA
- Audit Trail of Every View, Edit, Dispense, Claim
- ODPC-Compliant Consent Management
- IP Whitelisting per Branch
- Automatic Session Timeout & Re-Authentication
- One-Click Revoke for Departing Staff
How ClinixCore Keeps You Compliant
Compliance with the Kenya Data Protection Act and ODPC requirements is not a feature you turn on at the end — it is a property of how the entire system is built.
Granular RBAC
Permissions are role-based and scoped per branch, department, ward, and even individual record category. A receptionist sees registration; a paediatrician sees paediatric charts; a CEO sees aggregate dashboards.
Biometric & MFA Login
Fingerprint capture at registration is reused for clinician login — faster than passwords, harder to share. Multi-factor authentication (SMS / TOTP) is available for sensitive actions and remote access.
Full Audit Trail
Every record view, edit, dispense and claim is logged with user, timestamp, IP address and reason. The audit trail is immutable, exportable, and admissible for ODPC investigations.
Consent Management
Patient consent (treatment, data sharing, AI assistance, research participation) is captured at registration, versioned, and respected automatically by every downstream system.
When Staff Leave
Staff turnover is one of the highest data-protection risks for any hospital. ClinixCore handles departures cleanly: a single click revokes access across every branch and module, exports a complete record of everything the user ever did, and (optionally) automatically transfers their open work (drafts, prescriptions, lab orders) to a covering colleague.

