New provider

Creates a therapist account. The password is hashed server-side.

New patient

Creates a patient and assigns a therapist. Consent is recorded as admin-created.

Invite direct patient

Self-referred patient with no Sessions Health chart. Owned by the program provider; they bring their own free-text context. Sends an invite email. The address is never stored. They accept, consent, and receive a study ID like any patient.

Add expressed content:

Free text the patient brought. It is de-identified and crisis-filtered server-side before it is embedded into this patient's private RAG stream. The raw text is never stored.

Confirm

Add user

A console user signs in with a passkey only: no password is set. They get an emailed invite to set one up.

Passkeys:

Invite

Emails this person a one-time link (24 hours) to create a passkey, for example on a second device. The link is also shown here once, as a fallback; it is not stored.