What matters most: who accessed what
Health data is special-category personal data; access must be narrow and provable. Permissions are granted by unit, role and document type, documents with a confidentiality level need extra approval, and every view is written to the audit trail.
An audit-ready archive
The documents most often requested in accreditation and internal audits, gathered in one structure:
- Procedures and instructions: the current version is clear, earlier versions remain accessible
- Consent forms and attachments to patient files
- Equipment, calibration and procurement documents
- Training and staff records
An end to version confusion
The real risk with procedures is not that a document goes missing but that an outdated version stays in use. Version control makes the current copy obvious, and you can also show which version was in force on any past date.
Retention periods
Document types are linked to a retention schedule; expired records move into the disposal flow and disposal is recorded in minutes. The process is configured alongside the retention obligations set by legislation.
