Clinical evidence, privacy & audit
Attach necessary prescription/counselling evidence, restrict its audience and keep patient data out of demos/support.
On this page · Jump to a section
Before you begin
Shop evidence policy, Pharmacy Evidence access and a shop-controlled device.
Where to go
Pharmacy Queue → Clinical evidence / Counter authorization log
Visible menus may vary with language, permissions, app version and shop configuration.Follow these steps
- Choose the correct case and evidence kind: prescription image/PDF, reference or counselling note. Attach only what the pharmacist deems necessary.
- A POS cashier may upload evidence for the case under sale authorization but must not browse other patients' files. Authorized viewers use only the dedicated evidence route.
- Verify tenant ownership, private/no-store delivery and no public file id/URL. Never use a generic file route.
- Audit/events keep kind, source and actor, not health text, prescription number or image in metadata. Use the permissioned case view for content.
- Use soft delete with shop policy/reason. Never download real patient data into guides, support tickets or test fixtures.
How to verify success
Unauthorized accounts cannot open files, authorized users remain tenant-scoped and audit contains no raw health data.
Limits & things to check
Clinical evidence has no automatic retention period; the shop must decide and govern its legal retention policy.
Ready to try it in your shop
Lessons are free to read. Actual operations require sign-in and the appropriate permission. Use test data for training.