Security baseline for a dental clinic
The minimum security configuration we recommend for every Faurenis clinic.
AdminIT / SecurityClinic owner· 10 min · Updated 9 May 2026
Summary
The defaults Faurenis ships with are safe. This guide lists the explicit configuration choices we recommend you make on top — and why each one matters.
Checklist
- Require MFA for Admin and Owner roles.
- Require MFA for Clinician roles after the first 30 days.
- Set session timeout to 30 minutes for shared-workstation clinics.
- Enable audit-log export to your clinic's secure storage.
- Set residency to your home region.
- Review the sub-processor list with your DPO once per year.
Authentication
MFA on Admin and Owner is required by default. Extending MFA to Clinicians after a 30-day grace period balances onboarding friction with steady-state security.
Session policy
Default session timeout is 60 minutes. Clinics using shared workstations should shorten to 30 minutes.
Audit log retention
Faurenis keeps audit logs for 7 years inside the product. Clinics that want their own copy should export weekly to a clinic-controlled storage destination.