Habitus Admin — CYBERVIS

Habitus admin console

Pharmacies

Pharmacy	Identity check	Report email	Webhook	Retention	Records	Status

Pharmacy

Pharmacy name

GPhC premises number

Superintendent pharmacist

Record retention (days)

Each pharmacy is its own data controller. Records are Fernet-encrypted at rest and erased automatically when retention ends. No image is ever stored for any tenant.

Send each opinion by email to

Up to five addresses. Every completed triage or assessment emails the written opinion plus a time-limited link to the full report with the body outline. The outline itself is never attached.

Push each opinion to a webhook (HTTPS)

Signed with the pharmacy secret in X-Habitus-Signature (HMAC-SHA256) so the receiver can prove where it came from. Carries the opinion and outcome, never the outline or raw answers.

Start every scan with a Vultus identity check

The patient verifies their face (with liveness) before the questionnaire and body scan. Habitus records the result on the assessment and states it in the opinion.

Require it

Refuse any scan that arrives without a verified Vultus token. Off means the check is offered and the opinion says whether it was completed.

Vultus application ID

Vultus application secret

Create the application in the Vultus console with this pharmacy's domains as allowed origins. The app ID is public and goes in the patient page; the secret stays on this server and is used only to verify tokens. Neither Habitus nor Vultus stores a facial image.

Pharmacy secret

—

Rotating invalidates the old secret immediately: update the tablet and any PMR integration.

Patient & console links

Share the at-home link with a requester (by SMS or from your booking page). Open the console link on the branch tablet. Both carry the secret, so treat them as you would a password.

Allowed origins (one per line)

Where the scan pages may be embedded or called from. Empty means any origin — development only.

Most recent consultations for this pharmacy. Contents are encrypted and are not shown here; the pharmacy reads them in its console with its own secret.

Manage pharmacies & the API

Pharmacies