Clinical portal onboarding
Full patient and prescriber self-registration requires a HIPAA Business Associate Agreement, encrypted PHI storage (for example Supabase with correct region and RLS), identity proofing, and legal review. This site ships a hardened MFA-backed login prototype so engineering can wire those services without storing real PHI today.
- Select role on login and authenticate with MFA (TOTP or fixed demo code).
- Session timeouts and audit hooks are scaffolded server-side.
- Replace demo credentials with Supabase Auth or Clerk + Supabase profiles when your BAA is executed.