How treatment-room consent signing works, even when you're logged out

What actually happens when you request a form

When you (or an automatic pre-appointment reminder) send a form, the platform generates a unique, unguessable token tied to that specific patient, that specific form and the exact version of its wording. The patient receives it as a link by email or SMS. Opening the link shows the form with the patient’s known details pre-filled, ready to complete and sign with a drawn signature.

Because the token does all the authenticating, it does not matter whose device the link is opened on:

• The patient’s own phone, before they arrive. This is the usual route, and the reason most patients walk in already signed.
• A clinic tablet in the treatment room. Open the same link on the front-desk iPad or a treatment-room tablet and hand it over. The device does not need to be signed in to AesthetiClinic at all, which matters on a busy morning when the desk machine is occupied or a colleague is mid-diary on it.
• The practitioner’s phone, in a pinch, without exposing the rest of the platform. The link opens the form and only the form: no diary, no patient list, no records.

Why “logged out” is a security feature, not a gap

It can feel counter-intuitive that a clinical document is signed on a device with nobody logged in. The security model is the same one banks use for document links:

• The token is long, random and single-purpose. It opens one form for one patient and nothing else.
• Once the form is submitted, the link shows a “completed” page rather than the form. It cannot be reused to re-sign or to read back clinical answers.
• The signature is timestamped and locked to the exact version of the wording that was on screen, so what was agreed is never in doubt.
• The completed form writes back to the patient’s record instantly, with the full audit trail recording what happened and when.

Compare that with the alternative: staying logged in on a shared front-desk device so patients can sign, which leaves your whole diary and patient list open at the desk. The tokenised link is the safer arrangement, not the compromise.

The busy-morning workflow

In practice, treatment-room signing tends to follow one pattern:

1. The booking triggers the pre-appointment forms automatically, so most patients sign at home.
2. Anyone who has not signed shows as outstanding on the day’s diary.
3. At check-in or in the treatment room, staff open the patient’s form link on the clinic tablet and hand it over. Thirty seconds later the signed form is on the record.

No printing, no scanning, no “we’ll get that signed next time”. And because the link works logged out, any device in the clinic can be the signing device.

Want to see it on your own forms? Start a free 14-day trial. Card required. Charged after 14 days unless cancelled. Read the full consent forms software overview.