Terms of Service & Clinical Data Governance

ASSISAM Dental Clinic Operating System (DCOS) provides specialized practice management, interactive odontogram documentation, treatment planning, appointment scheduling, and CRM workflows. The platform is licensed strictly to verified healthcare practices, clinicians, and authorized staff.

Users agree to maintain secure credentials, adhere to assigned Role-Based Access Control (RBAC) permissions, and never share clinical authentication tokens across unverified devices.

All patient demographic records, medical questionnaires, allergies, odontograms, radiographs, and billing transactions constitute protected electronic health information (ePHI).

• Tenant Isolation: Every query is verified against the authenticated user's tenant identifier through PostgreSQL Session Variables (app.current_tenant_id).
• Staff RBAC: Receptionists and administrative personnel are restricted to scheduling and billing; clinical procedures and tooth modifications require certified clinical credentials.
• Digital Consent: Patient photographic or social media consent is stored as an explicit legal boolean and cryptographic audit record.

All automated odontogram state transitions, treatment recommendations, and speech-to-text inputs must be reviewed and confirmed by the attending dentist prior to final clinical persistence.

ASSISAM guarantees a 99.9% monthly service level objective (SLO) for core clinical recording endpoints. Automated database snapshots and transaction logs are maintained daily with encrypted point-in-time recovery.

Practices retain full ownership of their clinical records. Export facilities are provided via structured JSON and CSV endpoints upon practice termination.