Client workspace

Sign in

The workspace is the operational record of your deal: your executed documents, the items still outstanding on each side, the signature queue, the payment schedule and the two clocks. It is not a document library with a login on it.

What each seat can do

Workspace admin: Manage users, sign, pay, submit forms, upload
Signatory: Sign only, plus everything a member can do
Member: View documents, fill forms, upload

5 seats per hospital

A workspace holds at most 5 active credentials. The cap is a partial unique index in the database, not a rule somebody remembers to apply: a sixth active seat cannot be created even by us.

At the cap, your workspace admin either deactivates a seat that is no longer used (which is instant) or requests an additional one on FRM-GL-509, which is decided in four business hours. Deactivating and reissuing later costs nothing.

Plan participants do not need a seat

Your chartered accountant, your advocate, an IT consultant, the Medical Superintendent, the nursing head and a records owner can all read the plan and the documents through a scoped, expiring link, without consuming one of the 5 seats.

Viewing is uncapped on purpose. Signing, paying and managing users are the acts that need a seat, because those are the acts that bind the hospital.

Administrators

Pensieve Labs staff do not sign in here. Administrator sign-in is passkey-only: there is no password and email is deliberately not a reset path for it.

If the code does not arrive

Hospital mail servers are aggressive filterers. Check the quarantine, then write to info@pensievelabs.org. Every message we send is written to an outbox before it is sent, so we can tell you exactly what left here and when.