We are updating how patients access intake forms and white‑label workflows to improve security and simplify the login experience. These changes will be available in UAT on Friday, September 18.

What’s changing

• White‑label partners will transition from two‑factor authentication to magic‑link–based access. API endpoints will no longer return 2FA codes.
• All links sent to patients or returned via API will use opaque, non‑identifiable tokens. No voucher IDs, patient IDs, or emails will appear in URLs.
• Embedded workflows require no changes—existing partner implementations will continue to work.

Why this matters

Current URLs expose identifiable information and can be reused without verification. The new model prevents link leakage, protects patient data, and ensures links cannot be decoded or reused across devices.

How the new flow works

• Partners or our system generate a single-use magic link containing only a secure hash.
• When the patient opens the link, we verify the request (browser checks, usage signals, headers).
• If valid, the token is invalidated, a session cookie is set, and the patient is redirected to the correct voucher or workflow.
• If the link is reused without a valid session, the patient will see an error and can request a new link.
• If a patient tries to use the same link on a different device, they will be prompted to request a new token.

Consistent destination

Any newly requested link will always take the patient to the same voucher or workflow as the original.