What is the patient portal?
The Ceveta patient portal is a secure, web-based area where your patients can view documents and invoices that you have shared with them. It sits on a dedicated subdomain of your Ceveta account and requires no app download or software installation — patients simply open a link in their browser.
For private healthcare practices, a patient portal addresses several important needs. Patients increasingly expect digital access to their health information. Rather than printing letters, posting invoices, or sending sensitive files over email, the portal provides a single, secure location for everything. This reduces administrative overhead, speeds up communication, and gives patients confidence that their data is handled professionally.
The portal is entirely optional. You can continue to share documents manually if you prefer. However, once enabled, it becomes a powerful channel for delivering a modern patient experience that reflects well on your practice.
Enabling the portal for your organisation
The patient portal is managed at the organisation level. To enable it, navigate to Settings → Organisation → Patient Portal in your Ceveta dashboard. You will see a toggle to activate the portal for your organisation.
Once enabled, Ceveta generates a unique portal URL for your organisation. This is the address your patients will visit to access their shared documents and invoices. You can include this URL in your email footers, appointment confirmation messages, or on your practice website.
Note: Only organisation owners and staff with the secretary role can enable or configure the patient portal. Standard clinician accounts do not have access to portal settings.
After activation, you can start sharing documents and invoices immediately. Patients will receive magic link emails when there is something new for them to view.
How magic link authentication works
Ceveta uses magic link authentication for patient portal access. This means patients never need to create a password, remember credentials, or go through a traditional registration flow. Instead, they verify their identity through their email inbox.
Here is how the process works:
- A patient visits your portal URL and enters the email address your practice has on file for them.
- Ceveta sends a one-time authentication link to that email address. The link is valid for a limited time and can only be used once.
- The patient clicks the link in their email, which automatically signs them in and takes them directly to their portal dashboard.
- Their session remains active for a reasonable period, so they do not need to re-authenticate every time they navigate between pages.
This approach is both more secure and more convenient than password-based authentication. Patients cannot choose weak passwords, there is no risk of password reuse across services, and there is nothing for them to forget. The email address serves as both the identifier and the verification channel.
Important: Magic links are sent to the email address stored in the patient's record. Make sure patient email addresses are accurate and up to date to avoid access issues.
Organisation branding on the portal
The patient portal should feel like an extension of your practice, not a third-party application. Ceveta allows you to customise the portal with your organisation's branding so that patients see a familiar and professional interface.
From Settings → Organisation → Branding, you can configure:
- Practice logo — displayed in the portal header and on magic link emails.
- Practice name — shown prominently throughout the portal.
- Accent colour — applied to buttons, links, and other interactive elements to match your visual identity.
- Contact details — your practice phone number, email, and address are shown in the portal footer so patients can easily reach you.
These branding settings also carry through to the email notifications sent to patients, ensuring a consistent experience from inbox to portal.
Patient experience walkthrough
Understanding what your patients see helps you support them effectively. Here is a step-by-step walkthrough of the patient experience.
Receiving the invitation
The patient receives an email from your practice (branded with your logo and name) containing a link to the portal. This might be triggered by a shared document, a shared invoice, or a general invitation you send from the dashboard.
Signing in with a magic link
On the portal login page, the patient enters their email address. They receive a magic link, click it, and are signed in instantly. There are no passwords to create or remember.
Viewing the dashboard
Once signed in, the patient sees a clean dashboard with two main sections: Documents and Invoices. Each section lists items in reverse chronological order with clear titles, dates, and status indicators.
Reading documents and paying invoices
Patients can open any document to read it in full or download it as a PDF. For invoices, they can view the itemised breakdown and, if Stripe is configured, pay directly using a credit or debit card.
The portal is fully responsive and works equally well on desktop, tablet, and mobile devices. Patients do not need to install anything — it runs entirely in the browser.
Security and privacy
Patient data security is paramount, especially when dealing with sensitive health information. The Ceveta patient portal is built with several layers of protection.
Encrypted connections
All portal traffic is encrypted with TLS. Data is never transmitted in plain text between the patient's browser and our servers.
Single-use magic links
Authentication links expire after a short window and cannot be reused. This limits the risk even if an email is intercepted.
Scoped access
Patients can only see documents and invoices that have been explicitly shared with them. There is no way for a patient to access another patient's data.
Session management
Sessions expire automatically after a period of inactivity. Patients are required to re-authenticate with a new magic link to regain access.
You retain full control over what is shared. Revoking a document or invoice from the portal removes it instantly. No patient data is cached on the client side beyond the active session.
For practices handling particularly sensitive information, the portal's passwordless model is an advantage: there are no stored credentials that could be compromised in a breach, and no passwords for patients to inadvertently share.
Tips for communicating the portal to patients
Enabling the portal is only half the story. To get real value from it, your patients need to know it exists and feel comfortable using it. Here are practical tips for driving adoption.
Mention it during consultations
A quick mention at the end of an appointment goes a long way. Let patients know that their letter, report, or invoice will be available online and explain how to access it. Most patients appreciate not having to wait for post.
Include the portal link in your communications
Add the portal URL to your email signature, appointment confirmation emails, and your practice website. The more visible the link is, the more likely patients are to use it.
Emphasise simplicity
When introducing the portal, highlight that there is no password to remember. Patients just enter their email and click a link. This is especially reassuring for older patients or those less confident with technology.
Check email addresses are correct
The most common reason a patient cannot access the portal is a mismatched or outdated email address. Make it part of your registration and check-in process to verify email addresses.
Prepare your reception team
Brief your reception and administrative staff so they can help patients who have questions. Common queries include “I did not receive the email” (check spam folder) and “The link has expired” (request a new one from the login page).
Related guides
Continue learning about Ceveta with these related guides.