User guide

Corporate workflows in pictures

Sign in, invite employees and manage submitted medical leave without opening private health records.

Use this guide to enter the right company workspace, invite employees and review medical leave they submitted. Owners and HR administrators have different permissions. Company access does not grant access to an employee's private Health Passport.

The access screenshots below were captured from the public portal on 5 October 2026. Signed-in screenshots are pending an approved sample workspace; the task steps link to the detailed guides.

1. Sign in on the correct portal

Open Corporate workspace. New users should open their invitation first, verify the invited inbox, review the access being offered and explicitly accept. If asked to create a first password, enter it twice. Existing accounts keep their password.

Corporate workspace sign-in page with empty email and password fields.
Public browser capture · 5 October 2026 · no account details. Select the image to read it at full size.
  1. Choose a method. Use Password when you already have a password, or Email code for a verified account.
  2. Work email. Enter the email attached to your invited MedBuk+ account.
  3. Password. Use your existing password. Show password only when the screen is private.
  4. Forgot password? Start inbox-verified recovery. A reset ends existing sessions; sign in again afterwards.

Expected result: the portal opens the workspace or Platform areas your current role allows. Signing in does not accept an invitation or grant a new role. A sensitive action may ask you to authenticate again within its five-minute action window.

If you cannot continue: check the email and portal, wait for the resend timer, then use the newest code. For an expired or revoked invitation, ask the inviter to review the status. If access is missing, ask the authorized owner to check your role; another portal's session cannot restore it.

2. Invite an employee or HR administrator

Invite a corporate teammateCorporate owners can invite HR administrators or employees, while HR administrators can invite employees. A pending invitation becomes membership only after inbox verification and explicit acceptance, without exposing health records.
Corporate owners can invite HR administrators or employees, while HR administrators can invite employees. A pending invitation becomes membership only after inbox verification and explicit acceptance, without exposing health records.
Open full-size diagramFollow the arrows. Scroll sideways if needed.
Read workflow as text
  1. Open the intended company workspace and its invitations area.
  2. Choose the employee or HR administrator role allowed by the current role.
  3. Review the company, invited email and role before sending.
  4. Check invitation and delivery states separately; provider acceptance is not inbox delivery or membership.
  5. The recipient verifies the invited inbox and explicitly accepts; owners and HR use the portal, while employees may use the app handoff.
  6. If sending is uncertain, refresh status before replacing the unused invitation.
  1. Check the company shown in the workspace selector. If changing it, choose the destination and confirm Switch workspace.
  2. Open Employees and the invitation drawer, or Invitations. Enter the recipient's email.
  3. Choose the employee role. A company owner can also invite an HR administrator; HR administrators invite employees only.
  4. Select Review invitation, check company, address and role, then Send invitation.
  5. Check the invitation list. Provider acceptance is separate from inbox delivery and membership acceptance.
  6. Employees continue in the personal app using Open in MedBuk+, verify the invited email and explicitly accept. Owners/HR continue through the portal invitation flow.

Expected result: a pending invitation is visible first; membership appears only after acceptance. Sending does not share the employee's personal health records.

If sending is uncertain: refresh status before retrying. For a replacement, review the address first; replacing revokes the previous unused link. See individual and bulk invitation steps and the employee app handoff.

3. Review submitted medical leave

Review medical leaveAuthorized corporate reviewers handle submitted leave requests from current members. The workflow exposes only submitted details and separately shared certificate photos, never the employee's wider Health Passport.
Authorized corporate reviewers handle submitted leave requests from current members. The workflow exposes only submitted details and separately shared certificate photos, never the employee's wider Health Passport.
Open full-size diagramFollow the arrows. Scroll sideways if needed.
Read workflow as text
  1. Open Medical leave in the intended company workspace.
  2. Select a request submitted by a current company member.
  3. Read the submitted dates, status and optional note or certificate reference.
  4. View an unexpired certificate photo only when the employee explicitly shared it and the reviewer is authorized.
  5. A reviewer cannot handle their own request; another authorized reviewer must act.
  6. Record and confirm the review status; if the decision is unclear, refresh before repeating it.
  7. This operational workflow does not establish medical validity or leave entitlement.
  1. Open Medical leave in the intended company workspace.
  2. Select a request submitted by a current company member. Read only the information included in that request.
  3. Follow the available review action and confirm the recorded status before moving on.
  4. If the request changed or the response is unclear, refresh its status before repeating a decision.

Expected result: the submitted request has a confirmed review status. Company membership is not consent to open the employee's Health Passport or mood history.

See medical-leave review for the permitted information and role restrictions.

4. Check company settings and participation

Owners use Workspace settings to edit permitted display/contact details and explicitly save. Participation shows membership and invitation operations. Analytics uses permitted company summaries; it is not an employee health score.

If a report is unavailable, retry after checking the workspace and connection. A blank or unavailable result must not be read as zero. For account recovery, see Corporate sign-in.

On this page