Reports
The numbers, without handing over the chart.
Twenty-four reports across income, attendance, documentation and claims. A report is a bulk operation, and bulk output is the usual way a sensitive record leaks — so most of the thinking here went into who sees which rows.
Minimum necessary
Being allowed to see the money is not being allowed to see everybody.
Permission to run financial reports and permission to see a client are different grants, and software that treats them as one lets a clinician confined to their own caseload export the name, address, telephone number and insurance member ID of every client in the practice. So the line is drawn at rows that name a person.
Rows that name somebody
Narrowed to your caseload
Fourteen of the twenty-four name a client on every line — the roster, attendance, outstanding balances, claims, unbilled sessions. Each runs through the same narrowing the client list and the calendar already use, so a report cannot show you somebody the rest of the product will not.
Clients with restricted access are excluded from all of them by construction, rather than by whoever runs the report remembering.
Rows that name nobody
Left whole on purpose
Income, the appointment mix, claim and remittance totals: these name no individual, and seeing them is the entire point of being given the permission. Narrowing them would answer a different question than the one asked and would quietly misreport the practice.
The headline figure is computed with the same filters as the table beneath it. A total over the whole practice above rows narrowed to one payer is a number the table cannot support.
The audit
Two different events, not one
The queries
Nothing is assembled from input
The list
You are not offered what you cannot run
The caller
Never a default that widens
What the twenty-four actually cover.
Income and how it is allocated, outstanding balances and invoice aging, the appointment mix and attendance, documentation compliance, provider productivity, the client roster and demographics.
And the claims side in its own right: outstanding and filed claims, claim aging, underpaid claims, insurance payments, unbilled and unpaid sessions, authorization utilization, revenue cycle, and a Washington L&I compliance report.
The rest of it
Start with the week you are already having.
Set up a practice, put a real week in the calendar, and see whether it fits before you move anything across.