The Elo Cloud family
Platform & Security

Setup, Roles, Security & Platform

A hospital system is only as trustworthy as its foundations: who can do what, where the data lives, and whether every action can be accounted for. EloHIMS is built to be configured to your hospital and locked down tight — from the facility profile to per-specialty permissions, a full audit trail and complete tenant isolation — with no server for you to run.

Book a demo Start free trial
Roles & access
Least-privilege
CardiologistCath-lab · EMR
Lab technicianLab only
AdministratorFull setup
CashierBilling · shifts
Complete multi-tenant isolation · cloud, no server to run

Configured to fit. Locked down by role. Audited on every action.

Setup lets you shape the system around your hospital: define the facility profile, lay out your departments and specialties, and populate the master data that everything else references. Access is governed by doctor logins with per-specialty, role-based permissions, so a cardiologist, a lab technician and an administrator each see and do exactly what their role allows. Every printout carries a universal document header, every action is captured in a full audit trail, and underpinning it all is complete multi-branch and multi-tenant data isolation — delivered in the cloud with no infrastructure for your team to maintain.

What you get

Enterprise-grade foundations, cloud-simple delivery

Configurable facility profileThe system reflects your hospital's identity and structure from setup.
Departments & specialties setupModel the hospital's real clinical organisation, department by department.
Full master-data managementMaintain the reference data every module draws on, in one place.
Doctor loginsClinicians get individual, accountable access to the system.
Per-specialty role-based permissionsEach role sees and does exactly what it should, and nothing more.
Least-privilege access controlSensitive functions stay restricted to the right people.
Universal document headerApplied to every printout for consistent, professional branding.
Full audit trail on every actionA defensible record for governance and regulators across the system.
Multi-branch data isolationA hospital group runs many facilities cleanly, each fully partitioned.
Complete multi-tenant isolationEvery hospital's data is partitioned from every other.
A4 & 80mm printingSupported across documents out of the box, office and thermal alike.
Cloud delivery, no server to runEnterprise-grade infrastructure with no back-office burden on your team.
Record access logWho opened which patient's file, from which screen, viewed or changed, and how often — with an Access log button on the patient profile.
Consultant co-sign rightConsults by the junior roles you list wait for a consultant's co-sign; nobody co-signs their own, and prints show both names.
Patient-merge rightOnly holders of the merge right can fold an unidentified Emergency file into the real patient's, with a reason, and every merge is logged.
Cashier scopesLimit where each cashier takes money — by money point, department or doctor. A company admin is never limited.
Protected system ledger codesBuilt-in accounts keep their code; the name can change. The hospital's own ledgers stay fully editable.
Approval rightsDiscounts above your limit, balance waivers and welfare levels each need a reason and the right approver — a named right or a manager's PIN.
Every opening recorded
staff member, patient, screen, record number, viewed or changed, IP address and time.
Across the clinical record
the profile, lab and imaging orders, admissions and charts, consults, ER, OT, bills, prescriptions and more.
Record Access Log page
filter by patient, staff, opened or changed, and date.
Switched on per hospital
a failure to log never stops the screen from opening.
Record access log

Who opened this patient's file, and how often?

When a well-known patient is admitted, or a family complains that their records were looked at, the question is never what was changed — it is who looked. With record access logging switched on, EloHIMS writes an entry each time a member of staff opens a patient's file or a record that belongs to it, and whether they only viewed it or changed it.

Lists of many patients are not logged, and the same screen reopened within five minutes counts as one entry, so the log stays readable. For any patient, the Record Access Log leads with who opened the file and how often — one click from the Access log button on the patient profile.

Rights and approvals

Sign-offs that follow the hospital's own chain of authority

Once discount rules are set, a discount needs a reason, and one above your limit needs an approver: a holder of the discount-approval right, or a manager's PIN that becomes a single-use approval. Waiving a balance works the same way, with the hospital's own waiver reasons. Welfare concessions climb a ladder of up to three levels — for example welfare officer, medical superintendent, committee — each level with its own right; the assessor never approves their own case, and nobody signs twice.

Clinical rights are just as specific. Consults signed by the junior roles you name wait for a consultant's co-sign. Merging an unidentified Emergency patient into their real file needs the merge right and a reason. Cashiers can be limited to the money points, departments and doctors they collect for, and the ledger codes the system posts to cannot be renumbered from the chart of accounts.

Discounts
once discount rules are set, a reason; above the limit, an approver right or a manager's single-use PIN — on every bill, including the final IPD bill.
Waivers
a reason from the hospital's list and the waive right or a manager's PIN; reason and approver are stamped on the bill.
Welfare levels
up to three levels by concession amount; cover applies only after the last signature.
Co-sign and merge
consultant co-sign for named junior roles; merge only an unidentified file into a real one.
Cashier scopes and ledger codes
where each cashier takes money; built-in ledger codes fixed.
Why EloHIMS wins

One platform, a real financial backbone, enterprise-grade cloud

A registration tool, an EMR, a pharmacy package, a billing program and offline accounting — replaced by a single system where the record is whole and the books are always balanced. Beneath every clinical action sits payment-method-aware cash with X/Z shift reconciliation, void and refund with proper GL reversal, automatic bed-charge accrual, and a real double-entry ledger — the discipline most clinical systems simply don't have.

All of it is multi-branch and multi-tenant with complete data isolation, a full audit trail and per-specialty role-based access, A4 and 80mm printing, and nothing to install on a back-office server — so it scales from an OPD-led clinic into wards, theatres, ICUs and multiple branches without ever changing systems.

One platform instead of five
the record whole, the books always balanced — not integrations that drift apart.
A financial backbone you can trust
cash integrity, GL reversal and a real double-entry ledger under everything.
Management by live data
an executive command centre and benchmarked KPI cockpit, not lagging reports.
Enterprise-grade, cloud-simple
multi-tenant isolation and full audit, with nothing to install on a server.
It scales with the institution
from an OPD clinic to wards, theatres, ICUs and multiple branches — one system throughout.
The outcome

The hospital is configured to fit, locked down by role, audited on every action and fully isolated per facility — all delivered in the cloud with nothing for your team to maintain.

Built on the same foundations

Run the whole hospital on one secure system.

Configured to fit, locked down by role, audited end to end and fully isolated — in the cloud, with nothing to run.

Book a demo Start free trial
Schedule a demo