> ## Documentation Index
> Fetch the complete documentation index at: https://help.clinikehr.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Legal

> Read the agreements between your clinic and Bettar Platforms, Inc., see who accepted which version and when, download the record, and respond to an update.

export const StillStuck = ({topic}) => <div className="ck-callout ck-callout--note" role="note">
    <p className="ck-callout__body">
      <strong>Still stuck{topic ? ` with ${topic}` : ''}?</strong>{' '}
      Check <a href="/platform/help/troubleshooting">Troubleshooting</a> first —
      it covers the failures we see most often. If that does not resolve it,{' '}
      <a href="/platform/help/contact-support">contact support</a> and include
      your workspace name and the time the problem happened, so we can find the
      matching entry in your audit log.
    </p>
  </div>;

export const TaskHeader = ({before, time, after}) => <div className="ck-task">
    {before ? <div className="ck-task__cell">
        <div className="ck-task__title">Before you start</div>
        <p className="ck-task__body">{before}</p>
      </div> : null}

    {time ? <div className="ck-task__cell">
        <div className="ck-task__title">Takes about</div>
        <p className="ck-task__body">{time}</p>
      </div> : null}

    {after ? <div className="ck-task__cell">
        <div className="ck-task__title">When you're done</div>
        <p className="ck-task__body">{after}</p>
      </div> : null}
  </div>;

export const Path = ({steps = []}) => <span className="ck-path">
    {steps.map((s, i) => <span key={i} className="ck-path__step">
        {i > 0 ? <span className="ck-path__sep" aria-hidden="true">
            ›
          </span> : null}
        {s}
      </span>)}
  </span>;

export const Availability = ({editions = ['all'], plans, roles, note}) => {
  const list = editions.includes('all') ? ['clinic', 'pharmacy', 'lims'] : editions;
  return <div className="ck-avail" role="note" aria-label="Feature availability">
      <span className="ck-avail__label">Available in</span>

      {list.map(e => <span key={e} className={`ck-pill ck-pill--${e}`}>
          {EDITION_LABELS[e] || e}
        </span>)}

      {plans ? <span className="ck-avail__label">Plan</span> : null}
      {plans ? <span className="ck-pill ck-pill--plan">{plans}</span> : null}

      {roles ? <span className="ck-avail__label">Who</span> : null}
      {roles ? <span className="ck-pill ck-pill--role">{roles}</span> : null}

      {note ? <span className="ck-avail__note">{note}</span> : null}
    </div>;
};

<Availability editions={['all']} plans="All plans" roles="Owner and manager accept and download. Other staff can read" />

**Legal** is where your clinic keeps its agreements with **Bettar Platforms, Inc.**, the company behind ClinikEHR. Each agreement shows the version, who accepted it and when, and you can read the full wording, compare it with an earlier version, and download a PDF record.

<Path steps={['Sidebar', 'Settings', 'Legal']} />

<TaskHeader before="You are the clinic's owner or a manager to accept; any staff member can read" time="A few minutes" after="A recorded acceptance of the current version, and a PDF you can keep" />

## What the page shows

| Section | What is in it |
| - | - |
| **Your agreements with Bettar Platforms, Inc.** | The **Business Associate Agreement**, **Terms of Service**, **Privacy Policy** and **Security**. Each row says whether it is accepted, who accepted it, their role, the date and the version |
| **Data processing outside the United States** | The **Data Processing Agreement**, for clinics outside the United States. Set your clinic's country under **Settings → General**. Until you do, the agreement is listed as available and nothing asks you to accept it. Once the country is somewhere other than the United States, owners and managers are asked to accept it in the update notice, which appears as soon as you save the country. ClinikEHR never guesses your country, and sign-up never asks you to choose one for this |
| **Feature agreements** | The agreements you accepted to turn on a feature: the API data agreement, the AI note assistant consent, the medication dataset terms and the external calendar acknowledgment. Each has a button that takes you to where that feature is managed. Owners and managers only |
| **Your clinic's own documents** | Your **Notice of Privacy Practices** and your **Booking terms**. These carry your clinic's name, not Bettar Platforms, Inc. See [Your Notice of Privacy Practices](#your-notice-of-privacy-practices) below |

Staff who are not an owner or manager see the agreements and your Notice of Privacy Practices to read. They do not see the accept buttons, the PDFs or the feature agreements. Developer, IT admin and CTO roles open the same read-only view.

## What a row says

* **Accepted** *date* **by** *name* **(owner or manager), version** *x*. This is the record of the acceptance.
* **Agreed at sign-up on** *date* **(version not recorded).** Clinics that signed up before acceptances were recorded show this. It states the day the account was created. It is not a recorded acceptance, and you can accept the current version at any time to create one.
* **Important update** or **Minor update.** A newer version has been published since the version you accepted.

An acceptance is a record. It cannot be withdrawn. Ending the agreements means closing the account, which you do from Account settings.

## Read, compare and accept an agreement

<Steps>
  <Step title="Select Read, or Review and accept">
    The agreement opens in a panel. If a newer version replaced one you accepted, the top of the panel gives a short plain-language summary of what changed and whether it is an **Important update** or a **Minor update**.
  </Step>

  <Step title="Select Compare with the version you accepted, if you want to see exactly what changed">
    Added text is marked **Added** and underlined. Removed text is marked **Removed** and struck through. The words that changed inside a revised sentence are marked too.
  </Step>

  <Step title="Read the wording, then select Accept version">
    A confirmation names your clinic, your role and the version, and says that the acceptance is recorded with your name, the time and the version. Select **Accept** to record it.
  </Step>
</Steps>

Accepting the same version twice changes nothing. If a newer version is published while the panel is open, you are asked to reload so you read the one you accept.

## Download a record

**Download PDF**, beside an agreement, gives you that agreement's full wording with an acceptance record at the top: your clinic, who accepted it, their role, the date and time with the time zone, how it was accepted and the version. It also carries a fingerprint of the exact wording, so the PDF can be matched to the version.

**Download all** gives one PDF with every current agreement and your clinic's acceptance history.

These PDFs are a **record of acceptance. They are not a countersigned copy.** The footer says so. Every download is recorded in your audit log.

## When we update an agreement

All updates arrive the same way: one small notice at the bottom right of the screen, above the help button. It never blocks your work.

* It appears a few seconds after you open ClinikEHR, and only inside your clinic's pages and your own home dashboard. It does not appear on public pages, in a telehealth room or at the pharmacy till.
* Several updates share one notice: **We've updated 2 documents**.
* Select **Review** to open the updated documents. Each has its summary, **Compare with the version you accepted**, the full wording and its own **Accept**. **Accept all** turns on once you have opened each document.
* **Not now** hides the notice. For a **Minor update** it does not come back. For an **Important update** it returns the next time you open ClinikEHR, until the update is accepted.
* **Remind me tomorrow** hides an **Important update** for 24 hours. It is offered until 7 days before the date the update is required. In the last 7 days, and after that date, the notice shows every time you open ClinikEHR and cannot be postponed.
* An **Important update** has a date from which it is required, at least 30 days after it is published. After that date the notice can no longer be hidden, but it never stops you working. Nothing in ClinikEHR is blocked.
* On a phone the notice is one short line above the bottom menu, such as **Terms of Service updated**, with **Review**. Select **Review** and the same panel opens.
* Reading the whole text is never forced. The panel opens on the plain summary, and **Read the full text** is one tap away. ClinikEHR records whether you opened the full text when you accepted, as part of the record.
* Owners and managers see the notice for the clinic's agreements. Everyone sees it for their own Terms of Service and Privacy Policy.
* For an **Important update**, owners and managers also receive an email when it is published and a reminder 7 days before the required date. Your clinic's email switch and system notification setting apply. The email never contains patient details.

## Your Notice of Privacy Practices

The **Notice of Privacy Practices** card is where you publish the notice your patients see.

<Steps>
  <Step title="Select Publish a notice, or Publish a new version">
    A panel opens. Choose the **Language**. Each language is its own version, and earlier versions are kept.
  </Step>

  <Step title="Write the notice, paste it, or select Start from a template">
    The template is filled in with your clinic's name, address, phone and email. It is marked **Draft — review with your adviser before publishing**. It is not legal advice, and ClinikEHR never publishes it for you. Anything it could not know is left in \[square brackets] for you to complete.
  </Step>

  <Step title="Add a link if the notice also lives on your website, then select Publish new version">
    Publishing the same text again changes nothing.
  </Step>
</Steps>

Three switches decide where patients and visitors see the notice. All three are on by default, and each one works as soon as it is set:

* **Show in the client portal** (below).
* **Link it in the booking page footer.** Your public booking page shows a **Notice of Privacy Practices** link under the page. It opens your current notice in a new tab. It appears only once you have published a notice.
* **Offer it in intake forms.** Your public intake forms show the same link beneath the form, so the person filling it in can read it first.

Switching one off removes the link from that place within a few minutes. The other places are not affected.

In the client portal, patients also find a standing **Notice of Privacy Practices** link in the menu, where they can read your current notice and download it as a PDF on your letterhead. It follows the same **Show in the client portal** switch.

**Download PDF** appears for your current notice and, in the version list, for every earlier version. The PDF is on your clinic's own letterhead, with your clinic's name, and prints exactly what you published (or the link to it, if you published only a link). Any member of the clinic can download it.

**Show in the client portal** is on by default. When it is on, patients are asked to acknowledge your current notice the first time they sign in to the client portal, and again whenever you publish a new version. They can choose **Later**: the portal is never blocked. When it is off, patients are not asked.

**Patient acknowledgments**, for owners and managers, shows how many patients acknowledged each version and the most recent acknowledgments, with the patient's name. Viewing it is recorded in your audit log. If your clinic requires two-factor authentication, you must have completed it to see the names.

If a person who accepted an agreement for your clinic later leaves or deletes their account, the acceptance stays on the record with the name and role they had when they accepted. An acceptance is evidence of what the clinic agreed to, so it is not erased or anonymised.

## Security: what we say about audits

The **Security** document and the Privacy Policy say that a SOC 2 Type II audit of our security controls is **in progress** and that we do not yet hold a SOC 2 report. An earlier version said the controls were already audited. This was corrected and is shown as a minor update: a quiet notice, nothing you are required to accept. The controls the document describes did not change.

## Your own agreements

Your personal settings have a **Legal** tab. It shows the Terms of Service and Privacy Policy versions you accepted as a user, with **Read**, and **Agreements you accepted for a clinic**. Each of those has **Open Legal**, which goes to that clinic's Legal page. If you joined a clinic by invitation, setting your first password also records your agreement to the Terms of Service and Privacy Policy, and the page above the **Set password** button names both.

## Check it worked

* The row reads **Accepted**, with your name, your role, today's date and the version.
* **Download PDF** shows the same acceptance in its record at the top.
* The update notice no longer appears for that document.
* Your acceptance appears in the audit log as an **admin** change to the clinic.

<StillStuck />


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.