Documentation/System & Audit

Module guide · Admin

System & Audit

A settings directory for administrators, a compliance-grade audit trail of every access and action in the system, the hospital's own regulatory profile, and personal appearance controls.

01

What this module is for

Every screen here is admin-tier; the audit trail additionally opens to compliance, quality, and safety-officer roles.

Who uses it

The Settings hub, Hospital Profile, and Appearance are limited to super admins, admins, and IT admins. The Audit Trail is also open to compliance, quality, and safety-officer roles, reflecting that audit review is a compliance function as much as an IT one.

Where to find it

Open System & Audit from the sidebar, or the Settings hub, which links out to My Account, Organization, and System sections. This guide covers the Settings hub, Audit Trail, Hospital Profile, and Appearance.

  1. 1

    Configure the hospital

    Identity, regulatory identifiers, address, bed capacity, and accreditation live on the Hospital Profile page.

  2. 2

    Personalize your own account

    Appearance controls theme and sidebar layout, applying instantly and only to you.

  3. 3

    Review activity

    The Audit Trail's five tabs cover your own activity, PHI access, login history, a summary, and the full system log.

A few terms you'll see throughout

PHI is protected health information. The audit trail flags any record that involved PHI access with an eye icon, regardless of which tab you're viewing.
02

Settings hub

A directory page linking out to every settings screen, grouped into three sections. It doesn't edit anything itself.

Sections

FieldWhat it means
My AccountMy Profile, Security, Notifications, Appearance — personal preferences.
OrganizationHospital Profile, Departments, Facilities & Buildings, Bed Capacity, Compliance — hospital-wide configuration.
SystemAudit Logs — platform-level oversight.
03

Audit trail

Who did what, when, where from, and whether it touched patient health information.

Five tabs

FieldWhat it means
My ActivityYour own access-log entries: time, action, resource, method, status, IP, and a PHI flag.
PHI AccessAnyone's PHI-flagged access events within a date range.
Login HistoryYour own logins plus an org-wide login-failures list for the chosen range.
SummaryTotal Events, PHI Accesses, Unique Actors, and the period, for a chosen date range.
System LogsThe full, filterable, paginated request log: staff ID, module, action (CREATE/READ/UPDATE/DELETE/LOGIN/LOGOUT/EXPORT/PRINT/OVERRIDE_ALERT/UNLOCK_RECORD/ACCESS_DENIED/PASSWORD_CHANGE/MFA_CHANGE), method, and outcome, exportable to CSV or Excel.

Success — status code under 400

Error — status code 400 or above

GET / POST / PUT-PATCH / DELETE — System Logs method pills, blue/green/amber/red respectively

04

Hospital profile

Identity, regulatory identifiers, address, bed capacity, and accreditation for your own hospital.

Editable sections

FieldWhat it means
IdentityHospital Name, Legal Name, Hospital Type, Ownership Type, Trauma Level, Operational Status.
IdentifiersNPI, CMS Certification Number, and EIN are read-only after creation; State License Number is editable.
Address & ContactAddress, city, state, ZIP, phone, fax, email, website.
CapacityLicensed, Certified, and Staffed Bed Capacity, ICU Beds, Surge Capacity, feeds occupancy calculations across the dashboard and analytics.
AccreditationPrimary Accreditation Body and Status are editable; Last Survey Date and Accreditation Expiry are read-only.
DesignationsToggle switches: Teaching Hospital, Magnet Status, Disproportionate Share (DSH), STEMI Center.

Bed capacity numbers feed live occupancy calculations

Keep them accurate, they're not just reference data, they drive the Facility dashboard's occupancy percentages elsewhere in the app.
05

Appearance

Personal theme and sidebar layout, applies instantly and only to your own account, no save button.

Pick Light or Dark theme, and Expanded or Collapsed sidebar. The active choice is marked with an "Active" badge; clicking a card applies it immediately.

06

Good practices

Use PHI Access to answer 'who looked at this patient's chart'

It's scoped specifically to protected-health-information events, faster than scanning the full System Logs.

Export System Logs for compliance record-keeping

Filter by module, action, or staff first, then export to CSV or Excel so the filtered set matches what you actually need to retain.

NPI, CMS Certification Number, and EIN are locked after creation

Only the State License Number stays editable on the Hospital Profile screen; the rest are fixed identifiers.