Security

Access that follows your organization’s structure

MedNexa is organized around organizations, branches and roles. Here is a high-level view of how access is controlled.

Access control

Access depends on the role a person is given.

  • Roles such as organization administrator, branch manager, doctor, nurse, receptionist or accountant
  • Administrators review and change the permissions tied to each role
  • People work with what their jobs require

Organization isolation

Each organization operates in its own separate space.

  • Patients, appointments, invoices and staff belong to a single organization
  • Staff work only within their organization’s records

Branch-level permissions

Staff can be restricted to the branches they’re authorized for.

  • Organization administrators see across all of their branches
  • Users switch only between branches they’re authorized for

Secure authentication

Every user signs in with an individual account.

  • Application pages require sign-in; others are sent to the sign-in page
  • New accounts can use a temporary password replaced at first sign-in
How access is layered

Organization, then branch, then role

Every request is checked against all three, so a receptionist in Lalitpur never sees Pokhara’s billing.

Security questions?

Security and compliance requirements vary between organizations. Send specific questions to the MedNexa team.

Contact us

This page is a high-level overview of access and is not a statement of compliance or certification.

See how access works in MedNexa.

Request a demo to see how roles, branches and organizations work together.