Verification Protocol for Two-Factor Authentication Reset Requests

To protect clinic data and ensure only administrators can request a two-factor authentication reset, the following verification protocol must be followed. Support may only disable two-factor authentication after all required steps are completed.

Verification Requirement

The administrator must provide a photo of themselves standing and holding their government-issued clinic identification card. The card must display:

• Their full name
• The clinic identification number
• The issuing authority

The person’s face must be visible in the photo and must match the photo on the identification card. This confirms the individual’s identity and confirms their active association with the clinic.

Additional Clinic Verification

Along with the photo, the requester must provide one clinic-specific verification item to confirm their authorized access to the clinic account:

• Last four digits of the payment method on file
• Most recent subscription invoice amount
• Clinic address as listed in account settings
• Names of active practitioners connected to the clinic