Consent that lives on the record
Captured, enforced, and ready for audit
Consent scattered across paper and memory
When consent lives in a filing cabinet, the moment of photography cannot check it
The form is not where the camera is
A signed consent form in a chart or a drawer is invisible at the moment a photograph is taken. Whether this patient consented, and to what, is answered from memory or not at all.
Policy without enforcement
A practice can write a photography consent policy, but a general-purpose camera roll will never refuse an upload. Enforcement depends on every person remembering, every time.
Revocation that goes nowhere
When a patient withdraws consent, the change has to reach the record their photographs live in. A note in a chart stays a note; the imaging system never learns about it.
Consent as part of the clinical record
Captured where photographs live, enforced where they enter, and auditable end to end
Three enforcement levels
Disabled, Advisory, and Required match the setting to practice policy. Under the strictest level, image uploads for a patient without consent are blocked until consent is recorded.
Digital consent capture
A guided flow records consent with patient name attestation: the patient reviews the consent agreement, confirms it, and enters their full name as the digital signature.
External consent verification
Paper and verbal workflows stay valid: record that consent was obtained outside Atlas, with the method documented, and the patient record carries the same consent state.
Revocation and re-acquisition
Revoke consent behind a typed confirmation, and record consent again when it is granted anew. Every consent action is logged with the user and the time.
Consent is built in, not bolted on
Consent management is built into Dermi Atlas alongside patient records, annotations, comparisons, and configurable export, all running on-premise in your practice.
Built for the person who answers the audit
Select a category to see how consent is captured, enforced, and evidenced
Enforcement that matches policy
The enforcement level is an account-wide setting, not a habit. Disabled bypasses consent checks entirely, Advisory shows consent reminders during capture without holding up an upload, and Required enforces documented authorization before clinical images can be captured.
Consent is a record, not a checkbox. Dermi Atlas keeps the consent decision beside the photographs it governs, with the history to show how it got there.
Consent features in detail
How consent is captured, enforced at upload, and evidenced in logs and reports
Consent Management
Flexible consent records configured to your practice requirements.
Set enforcement mode
Illustrative demo with synthetic data. Learn more
- Three enforcement levels: Disabled, Advisory, or Required
- Digital consent with patient name confirmation
- External verification: verbal, written, or other documented methods
- Optional detailed notes documenting consent method
- All consent actions logged and auditable
- Consent revocation and re-acquisition support
- Integrated with patient activity logs
Audit Logging
A configurable record of who did what and when, across the account and inside each patient record.
Filter the audit log
Illustrative demo with synthetic data. Learn more
- Two logging levels: Essential for authentication and account events, Comprehensive for user interactions across the system
- Comprehensive is the shipped default and covers consent, exports, patient access, and data operations
- Each entry carries the timestamp, the account that acted, the operation, the resource, and the details of the change
- PDF generation is recorded with its export options, and image downloads are recorded as export events
- Patient Activity Logs open from the patient details page with Action, Resource, and Period filters that combine
- Logs are held in the local database and travel with the system backups made from Dermi Atlas Manager
PDF Reports
Formatted reports generated straight from the patient record, rendered as a print-ready preview and saved as a PDF.
Generate a report
Illustrative demo with synthetic data. Learn more
- Report scopes for a clinical entry, patient details, the image pool, full body photography, a single full body session, and the complete patient record
- The Patient Details and Complete Patient reports carry the Clinical Image Consent section with its authorization status, method, and timestamp
- The PDF Export Options drawer sets how annotations appear in the exported document
- Every page carries a header with the provider name and a footer with a unique export ID and the generation time
- Each export is written to the audit log with the export ID, the physician, the patient, the report type, and the options in effect
Common questions about consent management
How consent is captured, enforced, revoked, and evidenced in Dermi Atlas
Three levels are available, chosen once for the account on the Preferences page. Disabled bypasses consent checks entirely and is the default. Advisory shows consent reminders during clinical image capture without holding up an upload. Required enforces documented patient authorization before clinical images can be captured.
Yes, under the Required level. Uploads to that patient's Image Pool are blocked until consent is recorded, for both drag-and-drop and file picker uploads, and the pool shows the authorization message in place of the usual upload area. Under Advisory the same patient carries a consent banner while uploads continue as normal.
No. Digital Consent is captured in the app, where the patient reviews the consent agreement, confirms it, and enters their full name as the digital signature. External Verification covers consent obtained outside Atlas on paper or verbally, recorded with the method used and any notes. Either route leaves the patient record in the same consented state.
Revocation starts from the consent card on the patient details page and is confirmed by typing REVOKE CAPTURE CONSENT, so it cannot happen by accident. The consent record is removed from the patient profile, the consent prompt returns unless enforcement is Disabled, and new image uploads are blocked again while enforcement is set to Required. The revocation is written to the patient activity logs, and consent can be recorded again at any time.
Consent management is designed to support the authorization workflow your practice already runs. The practice owns its consent forms and its policy; Atlas records where consent stands for each patient, applies the configured enforcement level at the moment images are captured, and keeps a timestamped audit trail attributed to the user who acted. Meeting HIPAA and PIPEDA obligations remains the responsibility of the practice.
Consent lives on the patient record inside your own Dermi Atlas deployment, on the on-premise infrastructure the practice operates. There is no third-party consent service holding it, and the consent history kept in the patient activity logs sits in the same local database.
Need more details?
Our support team can answer specific questions about consent workflows and practice policy configuration.
Put consent on the record
Consent management is included in Dermi Atlas Professional at a flat $50 USD per month, with the first 30 days free. Setup is done for you at no charge.
Resources and further reading
Documentation and articles about consent, audit logging, and patient data security in Dermi Atlas
Related capabilities
Try Dermi Atlas today
Start with Dermi Atlas Cloud for free, or run Dermi Atlas Professional in your practice for a flat $50 USD per month, first 30 days free.
Dermi Atlas Cloud Demo
No time limit
Explore Dermi Atlas features instantly in your browser with our hosted demo environment. Free forever, no commitment required.
- Launch instantly in your browser
- Upload and test with your own sample data
- Access core features and workflows
- No credit card or signup required
Dermi Atlas Professional
Flat, per license · First 30 days free · Cancel anytime
Runs on the computers your practice already has, with complete feature access, real patient data support, and dedicated technical support. Photos stay in your practice.
- Full 30 days of unrestricted access
- No new hardware: runs on your existing server or workstation
- Use with real patient data securely
- Multiple users per system license
- Setup done for you at no charge, with technical support included
Need help choosing?
Learn more about Atlas Professional features, explore Atlas Manager for deployment and infrastructure management, or speak with our team about your practice needs
Purpose-built for med spas, aesthetic clinics, plastic surgery, and dermatology practices · HIPAA, PIPEDA & Australian Privacy Act compliance-ready architecture · Complete data sovereignty
Synthetic Data Notice
All demonstrations, screenshots, and media on this page use synthetic data only. No real patient information is shown.
The following are synthetic and do not correspond to real patients:
- All human faces and individuals are synthetic and do not represent real people
- All clinical and medical images, including photographs and scans, are synthetic or simulated
- All patient names, dates, identifiers, and other details are fictional
- All clinical notes and documentation are sample content for demonstration only
Media is provided solely to illustrate platform functionality and workflows.