Health

The patient portal and the provider portal

The vertical publishes two external portals, one for the patient and one for the referring practitioner. Both are entered through a link sent by email, with no password, and both show only the data of whoever signed in. You authorize the email from the CRM, hand over the link and revoke it whenever you want: revoking cuts access immediately.

The two portals exist so the practice does not turn into a call center for questions the person concerned can answer by looking: when is my appointment, what is the video link, which referrals came in for me. Both are read only, and that is deliberate: neither one changes the schedule, the registry or consent.

How access works

There is no password. The person enters their email on the portal access page and receives a link by email. The link expires in 30 minutes and, once used, opens the session. Only people on the list of authorized emails that you maintain inside the CRM receive a link.

The answer on the access page is always the same, authorized or not: if your email is registered, you will receive a link shortly. That is intentional, so that nobody can use the page to find out whether a given person is a patient of that practice.

💡 The authorized list is checked on every request, not just at sign-in. Revoking an email drops access immediately, even with the page already open.

Authorizing the patient portal

Open Health, then Patients.
Click Open 360 on the patient row.
Go to the Patient portal access section.
Enter the patient's email and click Authorize.
Send the patient the address of the portal access page. They enter their email there and receive the link.
To cut access, use Revoke in the same section.

What the patient sees

The portal is called My portal and has two sections. Appointments lists their appointments, with the date and time, and when an appointment is telehealth the flag and the video link appear right there. Communication preferences shows the consents recorded for them, by purpose and channel, so they know what they authorized.

What they never see: a document, a legal guardian, an identifier value, another patient's data or any clinical content. The page footer states this to the user: secure portal, you see only your own data.

Authorizing the provider portal

Open Health, then Directory.
Go to the Practitioners tab.
In the Provider portal area, choose the Practitioner.
Enter the Email and click Authorize.
Use Copy on the Access link field and send that address to the practitioner.
The list shows each email as Active or Inactive, with a Revoke option.

What the provider sees

The provider portal has Referrals for you, with the specialty, the reason, the priority, an urgent flag and the status of each referral, and Schedule, with that practitioner's own appointments, telehealth included. It is the answer for the partner physician who refers patients and wants to follow what happened to them without calling the front desk.

As in the patient portal, the content is administrative. A referral here means who referred, to which specialty and what state it is in, not the patient's clinical picture.

Example: The Vida Plena Clinic authorizes helen.prado@example.com on Dr. Helen Prado's profile and sends her the access link copied from the screen. Dr. Prado enters her email, receives the link, signs in and sees seven referrals directed to her, two flagged urgent, alongside her schedule for the week. A month later she leaves the network: the clinic clicks Revoke, and the next page load already drops her out.

Isolation, in practice

Every portal session is tied to a single person. The patient session only returns data for that patient, and the provider session only returns data for that practitioner. There is no path inside the portal that shows the practice's patient list or another practitioner's data. Changing the address in the browser bar does not change that, because the filter lives on the server, not in the screen.

Common questions

The link expired, now what? The person goes back to the access page and asks for another. Each link is good for 30 minutes.
Can the patient book or cancel an appointment in the portal? No. Both portals are read only in this version.
Do I have to create a CRM user for the patient? No. Portal access is an email authorization, and it does not consume a system user.
What if I authorize the wrong email? Revoke it. Access drops on the spot, and nothing the person saw stays alive in an open session.
Is the portal in one fixed language for everybody? No. It follows the browser language of whoever opens it.

Open this article inside the system →