Roles and permissions
System roles for each job, and custom roles you build from fine-grained permissions.
Security and access control
Everyone sees only what their role allows
Meridova is built so that each person sees only the screens and records their job needs, every change is traceable, and one hospital’s data is never visible to another.
Core plan and up
app.meridovahealth.com
Audit log
| Who | Did | When | Status |
|---|---|---|---|
| Dr Iqbal | Opened a patient record | 09:12 | |
| Reception | Created an invoice | 09:20 | |
| Admin | Changed a role | 10:02 | Logged |
The screens
See it in the app
The screens below are illustrations drawn with invented sample data. They show how each part of the product is laid out and what it does.
01
Roles and fine-grained permissions
Every job has a role, and you can build custom roles from fine-grained permissions. Screens and permissions for products you have not bought simply do not appear.
- System roles for each job
- Custom roles built from permissions
- Products you have not bought are hidden
- The server refuses what the screen hides
app.meridovahealth.com
02
An audit trail you can read
Changes are logged with who and when, and so are reads of a patient’s record. New entries are chained together, so an entry changed or removed later can be detected.
- Who changed what, and when
- Reads of patient records logged
- Entries chained so edits and removals can be detected
- Filter by user, module, action and date
app.meridovahealth.com
03
Support you can see
When our team needs to look at your workspace, it happens in a logged support session and your administrators are told. Platform staff sign in with two-step verification.
- Support only in a visible, logged session
- Administrators are told
- Two-step verification is required for our own staff
- Available for your accounts too
app.meridovahealth.com
What you get
Package-aware
Screens and permissions of products you have not bought simply do not appear.
Audit trail
Who changed what, when. Reads of patient records are logged too.
Safer sign-in
Strong password rules, lockout after repeated failures, short-lived sessions, automatic sign-out of idle workstations, and two-step verification for the platform team.
Separate tenants
Every query is limited to your hospital, and cross-hospital access is tested automatically. Database-level row security is planned as a second layer.
Support you can see
When our team helps you, it happens in a visible, logged support session your admins are told about.
How it works
When a new person joins
- 01
Create the user
Choose their role.
- 02
Refine
Add or remove permissions for special cases.
- 03
They sign in
They see only what the role and your packages allow.
- 04
Review
The audit log shows what they did.
Who uses it
- Administrator
- IT support
Questions
Good questions
Do you hold a HIPAA certificate?
No such certification exists. We build to a HIPAA-style security baseline and publish what we do on our compliance page.
Where is data stored?
In managed cloud databases. Ask us for the current hosting regions.
Can we get our data out?
Yes. Your data is yours and can be exported.
Start with what you need today
Free for 14 days. No card. Add products when you are ready.