Hospital Administrator Standards

• Add and pause therapists only for documented reasons. Every roster action leaves an audit line — trivial or malicious actions are visible.
• Reconcile clinic finances weekly. Discount audits, refund records, and receptionist cash drawers are your responsibility.
• Ensure every therapist at your clinic holds a valid license before activating their seat.
• Respond to patient data-export or deletion requests within 5 business days — this is a legal obligation, not a courtesy.
• Use one active login per person. Sharing credentials with anyone — including a colleague or family member — is grounds for immediate termination.
• Report a suspected account compromise to security@therakonnect.com within 24 hours of noticing it.
• Keep your recovery email and phone up to date. Access is granted on those channels, not through the front desk.
• Follow Pakistani law and the specific licensure requirements of your role in the market you operate in.
• Never attempt to bypass, reverse, or otherwise defeat platform security (encryption, JWT, access controls). Even successful attempts on your own record are a violation.

Admin permissions include everything your clinic needs and nothing more. Cross that line and it's a termination-track violation.

• You have no access to SOAP notes, treatment plans, or assessment content. These are patient-and-therapist material, encrypted at rest, and off-limits to admins.
• You may see appointment metadata, financial reports, and staff information for your clinic only. Cross-clinic queries — even for hospitals in the same holding company — go through TheraKonnect support.
• Patient identity plus payment history is visible. Do not export this data outside the platform without a signed data-processing agreement.

• Refund requests to patients must be signed off jointly by the treating therapist and you. Solo admin refunds are prohibited except for written safeguarding cases.
• Fee splits with therapists are published in the therapist's contract. Altering the split retrospectively is a breach.
• Pay TheraKonnect's annual license on time. Late payment beyond 30 days triggers a service pause; beyond 60 days may trigger termination per /refund-policy.

• Fabricating a therapist's credentials or activating a seat without seeing the license certificate.
• Suspending a therapist as retaliation for reporting a safeguarding or safety concern.
• Signing on-behalf-of a therapist to bypass supervision requirements.
• Sharing internal reports (finances, therapist performance, patient counts) publicly, in marketing, or with a competing clinic.
• Bulk-exporting patient records for any purpose other than data-portability requests from the patients themselves.
• Harassment of any kind directed at another platform user — including patients, therapists, staff, or the TheraKonnect team.
• Attempting to scrape, mirror, or bulk-export platform content that is not yours.
• Uploading malware, executables, or files disguised as clinical documents.
• Falsifying identity documents (CNIC, license certificates) or claiming credentials you do not hold.
• Using TheraKonnect infrastructure for anything outside the scope of therapy delivery — political campaigning, unrelated commerce, spam.

• Minor first-time violations receive a written warning and a 7-day window to correct the issue.
• Repeated or severe violations trigger immediate account suspension and a case review.
• Terminations for policy violations are final. Refunds are governed by the refund policy — violation-based terminations receive no refund.
• Fraud, safeguarding failures, or credential misrepresentation may be reported to the relevant regulator (Pakistan Medical Commission, PMC provincial councils, and law enforcement where applicable).

• Voluntary termination follows the /refund-policy schedule (100% before approval, 50% within 6 months, pro-rata thereafter).
• Violation-based termination is final and forfeits any refund. The named admin is barred from reapplying under a different clinic for 24 months.
• Patient records at your clinic remain on TheraKonnect for the mandatory retention period. Read-only access is granted to the outgoing therapists for continuity of care.