Department
HR
Nursing attrition in Indian hospitals is high enough that the joiner and leaver list is a weekly document rather than a monthly one. Every name on it is also an access decision, and in most hospitals those two lists are kept by two different people.
The lifecycle
Joining, moving, leaving.
An identity, once.
A person is invited, onboarded and given one identity in the hospital’s own structure. Nexus holds that structure as a digital twin of the hospital: the sites, the wards, the teams and the assets.
A role, and what it may do.
The role carries the permissions. Cirith decides per action whether a specific person may take it, and an administrator can look up everything one person can reach.
A roster that the system reads.
Shifts, leave and swaps live with the people they belong to, so the platform always knows who is on duty and where.
A move is a change of role.
Transferring a nurse from one ward to another moves her access with her rather than adding a second set to the first.
Leaving is one action.
Offboarding ends the role, and the access ends with it, in the same transaction and in the audit trail.
Impact and action
Rosters in a spreadsheet.
- The duty roster lives in a file on one computer, so the software has no idea who is actually working tonight and a due task lands with a name rather than a person.Nexus holds the roster with the teams and the sites, and Quest coordinates with it so a due task lands with whoever is genuinely on shift.Quest
- A last-minute swap is agreed verbally, so the person covering is invisible to every system in the building.Swaps and leave are changes to the roster, and every roster change is recorded in the same transaction as the change.Cadence
Access granted system by system.
- A new clinician needs access requested separately in four systems, so the first week is spent chasing logins.Onboarding runs as a repeatable procedure, and access is assigned in one action against a role the hospital defined.Cadence
- Somebody leaves and the access stays. Nobody discovers it until an audit does.Ending the role ends the access. An administrator can simulate a permission change before making it and can look up who holds access to any record.Cadence
Credentials that expire quietly.
- Registration, credentialing, privileging and mandatory training are tracked in a folder, and the gap is found during an assessment.Vigil tracks training, credentials and competency records as standing evidence rather than as a file assembled before a review.Vigil
- A consultant is privileged for a procedure nobody re-checked this year.A privilege is a permission with an expiry, and an expiry approaching raises an owned alert with an escalation chain.SentinelVigil
The tools this office runs on.
Each row is what the tool does for HR, with the example an HR manager would recognise.
| Tool | What it does here | Example |
|---|---|---|
| Cadence | Runs onboarding, transfer and offboarding as tracked procedures with owners and due times. | A leaver checklist that ends access on the last working day, on the record. |
| Quest | Puts each person’s own due list in front of them, against the roster. | A nurse opens her shift and sees what is due, for the patients she actually has. |
| Vigil | Holds training, credentials, competency and policy acknowledgement as standing evidence. | Every consultant’s privileging file is current on the day an assessor asks. |
| Sentinel | Raises an owned alert on the hospital’s own rules and escalates it. | A registration due to expire in thirty days reaches the department head. |
| Falcon | Reads staffing, roster coverage and training completion from the governed data. | Coverage by ward and by shift, with the roster behind each figure visible. |
| Durin | Builds the HR screen a vendor never shipped, with no code and no ticket. | A joining formalities tracker built by the HR team on the same permissions as everything else. |
Governance
Access is an HR record before it is an IT record.
In most hospitals the list of people and the list of permissions are two documents that agree only immediately after an audit. Hold them as one, and offboarding stops being a request that IT may or may not receive.
The hospital defines the roles.
Cirith manages the roles and the underlying permission rules, and an administrator can simulate a change before making it. The hospital decides who may see what; Pensieve enforces the decision and records that it was enforced.
The twin is what makes the roster mean something.
Nexus maintains a digital twin of the hospital: the physical locations, the human teams, the assets and which of them is in use. A roster against that twin is an operational fact rather than a document.
Interdepartmental
Who depends on the roster being right.
- Nursing services.Every due dose, every task and every escalation resolves against who is on shift.
- The quality cell.Credentialing, privileging and training files are core accreditation evidence, and they are HR records.
- Finance.Consultant revenue-share payouts are computed off the finalised bill and are a chronic source of dispute.