Security

Every user sees what their role permits, and nothing more.

Role-aware access controls, per-clinic and per-brand scoping, and SSO-ready authentication give your organisation the least-privilege access model that regulated prescribing demands.

The access problem in private prescribing

A prescriber, an operator and a pharmacist should not see the same things.

Private prescribing operations bring together several distinct roles: prescribers with clinical responsibility, clinic operators managing intake and administration, pharmacists conducting clinical checks, and administrators handling operational oversight. Each role has a defined scope of responsibility, and the data and actions available to each should reflect that scope.

When access controls are too broad, patient data is exposed to people who have no clinical need to see it. When they are too narrow, workflows are blocked and clinical governance suffers. OxygenRX implements a role-aware access model that matches each user's permissions to their actual responsibility, scoped to the clinic or brand context they are operating in.

What access and authentication controls OxygenRX provides.

A least-privilege access model built for the operational realities of UK private prescribing, with authentication options that meet enterprise and compliance requirements.

How it works in the product

Access is defined once and enforced consistently across every workflow.

When a user is added to OxygenRX, they are assigned a role and a set of clinic or brand contexts. From that point on, the platform enforces those boundaries consistently. A prescriber in one clinic cannot see patient records from another. A clinic operator cannot initiate a prescription. A pharmacist cannot edit the intake questionnaire.

For organisations running multiple brands or operating with enterprise identity management, OxygenRX supports SSO integration so that authentication is managed centrally. When a member of staff leaves, revoking their access in your identity provider revokes it in OxygenRX.

  • Roles and scopes assigned at user level and enforced platform-wide
  • SSO integration for centralised identity management
  • MFA supported across all account types
Regulated patient record

Every action captured in one place

Connected workflow

Forms, prescribing, payment and fulfilment

Audit-ready timeline

Versioned, role-aware access throughout

Request a demo

See OxygenRX wrapped around a realistic private prescribing workflow.

A 30‑minute walkthrough across patient intake, consultation, prescribing, payment routes, repeat care and pharmacy fulfilment, tailored to how your team works.

  • A guided product walkthrough on real screens
  • A workflow Q&A with our clinical operations lead
  • A scoped recommendation for your team and fulfilment route

Book a walkthrough

Tell us a little about your team and we'll prepare a tailored session.

By submitting you agree to OxygenRX contacting you about the requested demo. We won't share your details.