User Responsibility Agreement

Each staff member is responsible for actions performed under their account. Users must log out when leaving a shared workstation and must not allow another person to use their session.

Users must immediately report suspected credential exposure, unauthorized access, incorrect role assignment, or device loss to clinic administration.

Users must access patient information only for authorized care, operations, billing, reporting, legal, or administrative purposes.

Screens, printouts, exports, attachments, and notifications must be handled to avoid accidental disclosure in reception areas, shared rooms, public spaces, messaging channels, and unmanaged devices.

Users must verify PatientID, visit context, doctor, department, branch, queue token, billing status, stock batch, and lab order context before saving or finalizing actions.

Users must not use offline mode to bypass approvals, hide activity, delay required updates, or work outside authorized clinic processes.

By using DR.CORD, users acknowledge that workflow actions and security-relevant activity may be logged and reviewed by authorized clinic or FRIMROOT administrators.