You sign in with your VOSKPO Microsoft 365 account — the same one as your email. HELIX never sees it and holds no password of yours. Access is by department and by the clients you are assigned to, so signing in does not mean seeing everything.
Multi-factor is handled by Microsoft 365, on your own device — never a shared phone. HELIX has no reset link to send you, because there is nothing of yours to reset.
One emergency account exists for reaching HELIX when Microsoft 365 cannot be reached. It is not a staff account, it needs a second factor of its own, and every attempt on it is recorded.
BEFORE YOU START WORKING
Three rules that are never broken
Patient data stays where it lives
Never into a chat, a spreadsheet, an email or a screenshot. Not once, not for convenience.
One client is never told about another
You see the clients you are assigned to. That is trust, not permission, and it is not yours to repeat.
A red rule is not a rule yet
Anything marked Needs checking never goes on a live claim until someone verifies it.
Staff-only. No client of VOSKPO or USPB has access to this system, and none ever will.