# Collaboration

ChartInsight enables secure collaboration on medical records through team workspaces, flexible sharing options, and invitation management.

## Sharing Options

### Privacy Levels

| Level              | Description                             |
| ------------------ | --------------------------------------- |
| **Private**        | Only the uploader can access the record |
| **Team-wide**      | All members of your team can access     |
| **Specific users** | Share with selected team members only   |

### Setting Sharing

* Choose sharing level when uploading a new record
* Modify sharing at any time via the Share panel
* Changes take effect immediately

***

## Share Management

### User Selection

* **Autocomplete search** for team members
* **Avatar display** for easy identification
* **Add/remove users** with simple clicks

### Visual Indicators

* **Shared with badges** show who has access
* **User avatars** in record header
* **Team badges** for team-wide sharing
* **"+X more" indicator** when many users have access

### Uploader Attribution

* Record always shows who uploaded it
* Uploader retains access regardless of sharing settings
* Upload date and last modified date displayed

***

## Team Workspaces

### Multiple Teams

* Users can belong to **multiple teams**
* Each team is a separate workspace
* Records are isolated between teams

### Team Switching

* **Dropdown selector** to switch between teams
* **Persistent selection** remembered across sessions
* **Recent records** tracked per team

### Team Settings

Each team has its own:

* Templates and processing defaults
* Billing settings
* Member list and roles
* API keys and integrations

***

## Invitations

### Invite Methods

**Email Invitations:**

* Enter email addresses to send invites
* Personalized invitation emails sent automatically
* Track pending invitations

**Invite Links:**

* Generate shareable URLs
* Anyone with the link can request to join
* Links can be revoked at any time

### Invitation Flow

1. Admin sends invitation (email or link)
2. Recipient receives notification
3. Recipient accepts or declines
4. Upon acceptance, user gains access to team

### Invitation Management

* **View pending invitations** in team settings
* **Resend invitations** if email was missed
* **Revoke invitations** before they're accepted
* **See invitation status** (pending, accepted, expired)

***

## Roles & Permissions

### Available Roles

Team members can have different permission levels:

| Permission            | Description                      |
| --------------------- | -------------------------------- |
| `manage_files`        | Upload, edit, and delete records |
| `manage_organization` | Team settings and templates      |
| `manage_billing`      | Payment methods and billing      |
| `manage_api`          | API keys and integrations        |

### Role Assignment

* Admins assign roles to team members
* Users can have multiple permissions
* Permissions can be updated at any time

### Permission Checks

* UI elements hidden for users without permission
* API endpoints enforce permission checks
* Clear messaging when permission is denied

***

## Shared Record Access

### What Shared Users Can Do

* View the record and all generated outputs
* Access AI Research for the record
* View source PDF files
* Download exports (if enabled)

### What Shared Users Cannot Do

* Delete records they didn't upload
* Change sharing settings (unless they have manage\_files)
* Access billing or team settings

***

## Best Practices

### Team Setup

* Use team-level templates for consistency
* Assign appropriate roles to team members
* Regularly review team membership

### Sharing Decisions

* Default to "Private" for sensitive records
* Use "Specific users" for case-by-case collaboration
* Use "Team-wide" for records everyone needs access to

### Security

* Revoke access when collaboration ends
* Regularly audit who has access to records
* Use invite links cautiously – revoke when not needed