01Collaboration starts with a personal review
The public request does not create an app account. Activity, organisation and intended use are personally reviewed. Administratively created accounts initially remain disabled until the review is approved. Administration assigns role and organisation; users cannot expand these permissions through their profile.
02Responsibility determines access and editing
The access model accounts for the assigned dispatch organisation, client, participating partner organisations and assigned drivers. The backend checks case changes against role, assignment and allowed fields. For example, a partner can assign active drivers from its organisation, but cannot thereby grant arbitrary organisation rights to the case.
03A tender is not a complete case record
The backend creates a reduced tender view: deceased persons’ names and certain participant details are omitted, and locations are made less precise. This does not automatically anonymise free text. Avoid unnecessary personal or medical details in tender notes as well.
04Changes stay linked to a responsible actor
For certain case changes, awards and corrections, the backend creates records with time, user identity, role, organisation and case reference. These entries cannot be directly edited through the intended client access. After award, a correction workflow supports requests, responses and decisions instead of unrestricted client changes.
05Handovers need more than a status change
The final handover records recipient, organisation, time, document list, confirmations and signature. The assigned driver and appropriate transport status are checked. Certain receipts use a separate handover link without an app account. Share this only with the intended recipient.
06Careful use is part of the protection model
Use personal accounts, do not share passwords and have unused accounts disabled. Document views support work by role and status; this is not a blanket promise of technical restrictions on every individual document. Do not submit case details, health data or deceased persons’ data through the public access form.