Every module, explained
Trionix Clinic is organised into four areas. Each module works on its own and shares one patient record, one audit trail and one permission model.
Patients
Central patient file with demographics, contact details, documents, visit history and linked consent records. Search by name, phone or file number in either language.
Visits & Appointments
Book, reschedule and document visits per branch and per practitioner. Each visit carries its treatments, consent, invoice and notes.
Consent Forms
Bilingual, versioned consent templates signed on-screen with an HTML5 signature pad and stored permanently against the visit.
Signature Requests
Send a secure signing link or display a QR poster so patients complete consent on their own device before the consultation.
Treatments
Maintain a treatment catalogue with pricing, then attach treatments to a visit so billing is generated from what was actually delivered.
Roles & access
Access is role-based and scoped. Platform roles operate across tenants; clinic roles never leave their own clinic_id.
| Role | Scope | Typical access |
|---|---|---|
| super_admin / admin | Platform-wide | Tenant provisioning, subscriptions, platform settings, Support Mode |
| tenant_admin | One clinic | Full access to their clinic: staff, branches, settings, all modules |
| finance | One clinic | Invoices, payments, day collection, day closing, financial reports |
| billing | One clinic | Invoice creation and payment capture, without financial reporting |
| patient_management | One clinic | Patients, visits, appointments, consent forms and signature requests |
| marketing | One clinic | Communication campaigns and non-clinical patient contact data |
Security & tenant isolation
clinic_id isolation
Every row belongs to a clinic. Queries are scoped before they reach the database.
Row-level security
Isolation is enforced at the data layer, not only in application code.
Audit logging
Sensitive actions are written to an immutable log with user and timestamp.
Support Mode
Support access is explicit, time-boxed and logged — no persistent access to your data.