Review and Approve a Clinic Registration
Video
At a glance
| Field | Details |
|---|---|
| Who should use this guide | Platform staff who review clinic registration requests and create clinic staff access. |
| Required access | CMS access with permission to view ClinicApplications and edit Clinics, BasicUsers, and ClinicStaff. |
| Result after completion | The clinic request is approved or rejected. Approved requests have linked clinic, user, and staff records. |
| Public impact | High. Approved clinic data and clinic staff access can affect public clinic information and external account access. |
| Compliance risk | High. The workflow uses clinic contact data, request metadata, approval decisions, and staff account setup. |
| Last verified | Preview, Admin role, June 12, 2026. |
| Search terms | clinic registration, clinic application, ClinicApplications, Clinics, BasicUsers, ClinicStaff, approval, rejected, staff access. |
Guardrail Reference
Use the Notion page Content-/Claim-Guardrails when clinic data, public clinic status, verification wording, staff access, or clinic profile claims are involved.
- Stop: Do not create or publish verified clinic, trusted clinic, certified clinic, quality-approved, medical-excellence, best clinic, or top doctor claims without a documented process.
- Confirm: Visible status wording such as verified, reviewed, approved, certified, or transparent pricing needs documented proof, review date, responsible owner, and defined review process.
- Safe: Neutral clinic-source information is okay when it is copied from checked clinic data and does not imply medical quality or findmydoc certification.
Goal
You review a new clinic registration, decide what to do with the request, and create the real clinic data and staff access in the CMS.
Before You Start
- You have
Platform Staffaccess in the CMS. - You work in the CMS under
/admin. - The public registration flow was checked at
https://preview.findmydoc.eu/register/clinic. - The CMS steps were checked locally with demo data and a
Platform Staffsession.
Step-by-Step Guide
Open
/register/clinicas a clinic.In
Register your clinic, enterClinic nameandWebsite.Click
Continue.In
Choose focus areas, select at least one focus area.Click
Continue.In
Your contact, enter the contact person:First name,Last name,Email address, andPosition / role. Stop: Do not enter patient data, medical documents, passwords, or extra private notes into the public registration flow.Click
Submit request. The clinic now seesRequest submitted.In the CMS, open the
ClinicApplicationscollection.Open the new request with
StatusSubmitted.Check the submitted data:
Clinic name,Clinic website,Contact email,Contact role, andMedical specialties. Confirm: Medical specialties should describe clinic focus areas. They must not become a findmydoc recommendation or quality rating.Check whether a matching clinic already exists in
Clinics, or a matching user already exists inBasicUsers. Do not create a duplicate if the clinic or contact person already exists.
Do not continue if
- The clinic, website, or contact data is still incomplete or looks like a duplicate.
- You would need to add private data, health data, or a long explanation to
Review Notes. - You cannot confirm whether the clinic may become public yet.
If the request is not valid, set
StatustoRejected. InReview Notes, only add the short reason for the decision. Stop: Do not store passwords, full email threads, patient data, health data, or long private explanations inReview Notes.If the request is valid, set
StatustoApproved. This approves only the request. No real clinic, user, or staff access is created automatically. Confirm:Approvedhere is an internal workflow decision. Do not describe the clinic publicly as verified, certified, trusted, or quality-approved unless a separate documented proof process exists.
If something went wrong
- If you approved the wrong request, change
Statuson the sameClinicApplicationsrecord before you create the clinic, user, or staff record. - Do not delete the request or overwrite an existing clinic unless the owner confirms the correction.
- If clinic, contact, or staff data is already public or active, keep the current state stable and ask the platform owner or privacy/legal owner before you change more records.
Open the
Clinicscollection and create the real clinic.Copy the checked data from the request: clinic name, website, contact email, contact person, and matching focus areas.
Add the required clinic data:
Address,Internal Primary Contact, andSupported Languages. Safe: Copy only checked clinic-source information. Do not add quality badges, medical scores, or unsupported trust wording to the clinic record.Set the clinic
StatustoApprovedonly when the clinic may become public. Until then, keep the clinic asDraftorPending. Confirm: Before public status, check that clinic data, source ownership, visible status wording, and any claim-like fields have owner approval.Open the
BasicUserscollection and create the login for the contact person.Enter
First Name,Last Name, andEmail. SetUser TypetoClinic Staff. Stop: Do not create staff access for a personal email, unknown contact, or unconfirmed clinic representative.Save the user. This starts the invite for the external login and prepares a related
ClinicStaffrecord.Open the
ClinicStaffcollection.Open the new staff record for the contact person.
In
Clinic, link the real clinic.Set
StatustoApproved. The clinic staff access is active only after this step. Confirm: Staff approval grants external account access. Check the clinic link and contact identity before saving.Go back to the original request in
ClinicApplications.Under
Created records, linkClinic,BasicUser, andClinicStaff. Also setprocessedAtif the field is visible.
Compliance Notes
- Do not store login credentials, full email threads, health data, or extra personal details in
Review Notes. - The registration stores contact data and technical request data such as IP address and browser information. Use only demo data in screenshots and examples.
- The public form note mentions
legitimate interestfor contact. If the text, purpose, or follow-up process changes, ask the privacy/legal owner to confirm that/privacy-policystill fits. - Before you set
Approved, check that the clinic data may become public. - The clinic login is complete only when
ClinicStaffis linked to the real clinic and set toApproved. - Treat analytics as optional for this guide. The operator flow must not depend on analytics.
- If it is unclear how long to keep a request, how to delete it, or how to handle a later rejection, mark this as an open privacy/legal check.
Success Check
The task is complete when the request in ClinicApplications is approved or rejected. For an approved request, there must also be a real clinic in Clinics, a matching BasicUsers entry, a linked ClinicStaff entry with Status Approved, and complete Created records in the original request.