đ Internal IT Policies
Standard operating procedures for staff regarding data privacy, access controls, and system interaction.
Access & Authorization
Strict Role-Based Access Control (RBAC) is enforced. Practitioners may only view their specific schedules; back-office admin require explicit executive permission to alter ledger entries.
Data Privacy (POPIA / GDPR)
All customer data is encrypted at rest. Staff are prohibited from exporting raw client lists without logged, audited approval.