Members, applications and communications
Manage registrations and permissions, view data only with a recorded purpose, contact verified channels and process account-deletion requests. Ordinary members cannot access these controls.
Administrator authorization
Sign in through the existing admin, then supply your current time-based six-digit authenticator code for protected actions.
Invite a new member
Sends a one-time invitation code. The recipient must accept, set their password and acknowledge the privacy and purpose terms before the account activates.
Member directory
—Email addresses and other personal details are intentionally absent from the directory. Each explicit access request requires a recorded reason.
Selected member
Select a member to manage.
No personal data accessed.
Change permissions
Member, support and reviewer labels can be managed here. These labels do not grant legacy administrator API access or supersede MFA controls.
Send a manual service message
Only use a verified, opted-in channel. Avoid sending details of diagnoses, bank numbers or claims in email/SMS/WhatsApp messages.
Delete member account
Destructive operation. A documented legal hold blocks deletion. Audit events remain minimised; encrypted records and member sessions are removed with the account. Backup and messaging-provider retention must be handled operationally.