Access should follow the position, not the person.
Define the position once. JML is the roster and the proof for every joiner, mover, and leaver.
Position change · Maria Reyes
Medical Biller → Practice Manager
Effective
Mon, Jun 8
Clearinghouse
FinancialPISubmitter (no longer needed)
Admin Console
Owner · Practice ops
Practice Mgmt (EHR)
PHIStandard user · unchanged
HealthCRM
PHIPIPatient records · clinic
Joiner file
The first day opens every grant.
A new hire sits in a position. JML reads that package and opens the joiner file — every grant, owner, and due date.
Then the next hire starts the file again.
The platform
Connected. Owned. Auditable.
One roster
Positions, packages, people, and joiner/mover/leaver files — all connected, always current.
Know what the system holds
Tag each app with the data it stores — PHI, PI, financial — so you can see access risk across employees and systems.
Clear ownership
HR, managers, and IT each see their own task list, so nothing falls through the cracks.
Complete audit history
Every grant and revoke is linked to a person, position, actor, and time — exportable for HIPAA, state, and finance audits.
Compliance
HIPAA, state, finance — the access trail is already there
Person, position, package, system, grant or revoke, actor, time. Built for auditors, not a hunt through tickets.
Sample access trail
CSV export| Person | Position | Package | System | Grant / revoke | Actor | Time |
|---|---|---|---|---|---|---|
| Maria Reyes | Medical Biller | Clinic billing | EHR | Grant | A. Chen | Mar 3 09:14 |
| Maria Reyes | Medical Biller | Clinic billing | Clearinghouse | Grant | A. Chen | Mar 3 09:21 |
| Luis Ortega | Front desk | Reception | EHR | Revoke | J. Patel | Jun 12 16:02 |
| Luis Ortega | Front desk | Reception | Revoke | J. Patel | Jun 12 16:08 |
Pricing
Pilot is free. Always.
Run joiners, movers, and leavers on us. Automation, support, and wholesale for multi-site teams and MSPs are next.
Pilot
Always freeRun joiners, movers, and leavers by hand. No credit card. This plan stays free.
Free access, always
- Unlimited people in that org (flat, not per seat)
- Import and export your roster
- Full joiner / mover / leaver checklists
- Data-class tags — know which systems hold PHI, PI, financial
- Unlimited audit retention
- Evidence pack export
- Email support
Plus
Coming soonThe version with integrations, automatic checks, and support — so the file runs itself.
Automation and support
- Everything in Pilot
- Integrations with the applications you already use
- Automation for automatic checks
- SSO
- Priority support
Enterprise
Coming soonMultiple sites, or wholesale if you run JML for every client you manage.
Multi-site and MSPs
- Everything in Plus
- Multi-site organizations
- Wholesale for MSPs
- BAA and custom contracts
- Dedicated support
Know who should have access — and prove it.
FAQ
Questions, answered
The things clinic operators, MSPs, and auditors ask us most.
No. JML sits above them. We keep the roster of who should have what, and open joiner, mover, and leaver checklists with an owner and a timestamp. Your IdP and EHR still create and disable the login.
Most teams import their positions and applications in an afternoon. Because everything is metadata-driven, you describe the position once and every onboarding, change, and offboarding for that role inherits it.
Offboarding is one click in JML: every system on that position becomes a checklist with owner and timestamp. Techs still disable the EHR and Entra. You export the leaver pack when an auditor asks.
Yes. Managers can request additional access beyond the position package. Those requests flow through the same approval and audit pipeline so nothing happens off the books.
JML diffs the old position against the new one and opens only the changes that matter — what to grant, what to remove, what stays. No more re-onboarding someone who's already in the building.
Export the access trail: person, position, package, each system, grant/revoke, actor, time. Built for auditors, not a hunt through tickets.
We treat access data as sensitive by default: row-level security, full audit history, and least-privilege roles for HR, managers, and IT. SSO is coming soon.
Joiners, movers, and leavers by hand — free, always. Automation, support, and Enterprise (multi-site and MSP wholesale) are coming soon.