How can we help you run your clinic?

From the sign-in page choose 'Forgot password?' and enter your work email. You'll receive a reset link valid for one hour. If you have MFA enabled, keep your authenticator nearby — you'll be asked for a code after the reset. Patients sign in via their clinic's branded portal subdomain, not the main ClinicFlow site.

Sign in to your ClinicFlow account, then visit the AppSumo redemption page from your dashboard. Paste the code from your AppSumo deal — your tenant is upgraded to the matching plan immediately, and you'll see the new entitlements on the billing screen.

ClinicFlow ships every technical safeguard a HIPAA auditor expects: PHI encryption at rest (KMS-ready), audit logs on reads and writes, MFA, account lockout, RBAC + per-user overrides, BAA gating per AI/SMS/email provider, and GDPR access + erasure flows. The legal side — signed BAAs, workforce training, your incident-response plan — is operator work. Our HIPAA Notice and Security Practices pages list the full control matrix.

No. By default, every clinical write, every patient message, and every billing change requires explicit human approval. Tenants can opt in to auto-send for low-risk reminders only. The 'never-autonomous' categories — diagnosis, prescription, locked-note edits — are hard-coded and cannot be overridden.

Patients can self-serve GDPR Art. 15/20 access from their portal — they download a JSON of every record we hold. Erasure requests (Art. 17) flow into a clinical task for staff review; once an admin approves, the hard-delete preserves audit logs and rewrites object references. Tenant-wide exports are available from platform admin during your subscription and for 30 days after cancellation.

First, confirm the patient and provider are using a supported browser (latest Chrome, Edge, Safari, or Firefox) and that camera/microphone permissions are granted. If you've configured a self-hosted Jitsi instance, check that the room JWT secret matches the value stored under your tenant's telehealth settings. If the issue persists, send us the session ID and we'll pull the audit trail.

Yes. ClinicFlow is provider-agnostic. Tenant admins can set the model and provider per skill from Settings → AI. You bring your own API keys; we never train on your data. The stub provider is available for staging environments so you can test approval flows without spending tokens.

From your admin dashboard, open Staff → Invite. Enter the email and pick a role — Admin, Provider, Clinician, Front Desk, Billing, or Read-only. The invitee gets a one-time setup link and is required to enable MFA on their first sign-in. You can later override individual permissions on the user's profile.

Starter and Growth plans: replies within one business day. Enterprise plans with a signed BAA: priority queue with a four-hour first-response target during business hours. Patient-impacting outages on any plan are treated as urgent and routed to on-call within 30 minutes.