The right access for everyone, GDPR sorted
Give admins, doctors and reception exactly the access they need — and meet your data-protection duties with export, erasure and an audit log built right in.
Roles & GDPR compliance in one place
Control who can see and do what, and keep patient data handled the way the law expects — without bolting on extra plugins.
Admin, Doctor & Receptionist roles
Give every team member exactly the access they need to do their job — and nothing they do not.
Read docsDoctor self-service login
Doctors sign in to their own profile and diary and see only their own appointments — and run their own services and their own forms, while anything the clinic shares with them stays read-only.
Read docsA full GDPR toolkit, built in
Data export, right-to-erasure and an audit log come as standard — no separate compliance plugin to buy and wire up.
Read docsHonor erasure requests cleanly
Remove a patient’s data verifiably when they ask, with the deletion recorded so you can prove it was done.
Read docsConsent captured & logged
Booking consent is recorded with a timestamp, so you can always show what a patient agreed to and when.
Read docsYour data stays yours
Records live in your own WordPress database — you decide where patient data is hosted and who can reach it.
Read docsThe encryption key can leave the database
Records are encrypted, but by default the key that opens them sits in the same database — so a copy of the database is a copy of the data. Alnora shows you the one line to paste into your site’s configuration and then removes the database copy, using your existing key.
Read docsAccess at a glance
A quick view of how the three built-in roles differ. Doctors are scoped to their own patients and diary — “Own” means exactly that, and it is re-checked on the server when the action happens rather than only hidden on screen.
| Capability | Admin | Doctor | Receptionist |
|---|---|---|---|
| Settings, doctors, services & integrations | — | — | |
| Add & edit appointments | Own | ||
| View patient medical records | Own | — | |
| Manage services | Own | — | |
| Build & share forms | Own | — | |
| Email your patient list | Own | — | |
| Take payments & send pay-by-links | |||
| Issue refunds | — | ||
| Export or erase patient data (GDPR) | — | — |
Compliance that comes in the box
Handling patient data brings real obligations, and Alnora is built to help you meet them rather than sending you shopping for another plugin. Export a patient’s data on request, erase it verifiably when they ask, log the consent they gave, and keep an audit trail of what happened — all from inside WordPress, on your own server.
Run your team the right way.
Staff roles, doctor logins and the GDPR toolkit come with Alnora Pro — 30-day money-back.
Setting it up? Read the roles guide.