Isolated departments by group
Mental Health
e.g. Psychology
Own patients
Own notes
Rehab & Function
e.g. Physiotherapy
Own patients
Own notes
Body & Wellness
e.g. Osteopathy
Own patients
Own notes
No shared patient list across boundaries
How the tenancy model works
In Sanstylo, each discipline department is modelled as a separate company. An osteopathy company has its own patients, appointments, notes and invoices. A physiotherapy company has its own. There is no shared patient list or search that crosses company boundaries.
This is structural isolation, not a permission checkbox bolted onto a shared database. Reception in one department cannot open patient records from another. Students on placement only see their assigned department. Supervisors get clean cohort boundaries.
Shared vs isolated: how it compares
| Shared account | Sanstylo isolation | |
|---|---|---|
| Patient records | Visible across all disciplines | Limited to the treating discipline |
| Reception access | Can browse any department | Company-scoped: only their discipline |
| Student placements | Risk of cross-department browsing | Assigned to one company only |
| Clinical notes | Single note pool, tag or filter needed | Naturally scoped to the company |
| Invoice numbering | One shared sequence | Per-company independent sequence |
| Compliance | Policy-based, easy to misconfigure | Enforced by architecture |
Isolation in practice
Left: a single shared account where all departments commingle patient data. Right: Sanstylo's isolated company model, with each discipline in its own tenancy.
Who benefits most
- University teaching clinics running multiple allied health programmes under one roof
- Private multi-discipline centres where osteopathy, physio and chiro share premises
- Practice groups that want clean financial separation between disciplines
- Any clinic that has been told their current vendor "can sort permissions" but never quite gets there