Skip to main content

​
Getting started

This checklist helps administrators and IT bring Veridian Motion online at a jail or correctional facility. Complete items in order where dependencies apply.
Use synthetic or de-identified data in pilot until BAAs and agency hosting requirements are satisfied.

​
Phase 1 — Contract and compliance

1

Execute agreements

Sign facility agreement with Veridian Health Partners. Execute a BAA before production PHI flows.
2

Confirm hosting posture

Decide whether the agency requires CJIS-aligned, FedRAMP, or GovCloud hosting. Veridian Motion runs on Lovable Cloud / Supabase; dedicated environments may be arranged under contract. The app is not CJIS-authorized or FedRAMP-authorized by itself.
3

Identify contacts

Designate agency contacts for clinical operations, IT, and security incident notification.

​
Phase 2 — IT and kiosk setup

1

Network allowlist

Allow outbound HTTPS (443) to the Veridian Motion app host and Supabase endpoints. Block unnecessary egress per agency policy.
2

Install the PWA

On each kiosk device, install Veridian Motion via the browser Add to Home Screen / Install flow. See Deployment and kiosk.
3

Apply MDM lockdown

Configure agency MDM for single-app or supervised mode, disable external browsers, and assign physical supervision procedures. App-level hardening alone is not sufficient for custody kiosks.
4

Test connectivity

Run a test sign-in and photo capture with Veridian support before inmate use.

​
Phase 3 — Staff accounts

1

Create staff accounts

An Veridian or agency admin provisions staff emails in the dashboard.
2

Enroll MFA

Each staff member completes TOTP MFA enrollment at /mfa on first login. MFA is mandatory for dashboard access.
3

Grant roles

At /staff, assign roles: pt, admin, officer, warden, it_admin as appropriate. See Role permissions.

​
Phase 4 — Clinical configuration

1

Configure allowlisted email (optional)

If using PDF email export with real PHI, configure allowlisted addresses and confirm a BAA-covered email provider is in place. Until then, use PDF download only within the secured dashboard.
2

Train PTs

Walk through Provider dashboard and AI and clinical safety — especially the red-flag-first review order and PT-review gate.
3

Train custody staff

Cover kiosk escort, PIN handoff, idle auto-reset, and when to interrupt for safety concerns. See Inmate kiosk flow.

​
Phase 5 — First live case

1

Enroll a patient

Admin uses Enroll patient → record inmate number + initial PIN → hand credentials to custody staff.
2

Inmate intake

Inmate signs in at /inmate-login, completes body map, complaint, and four photos, then submits.
3

Assign and review

Admin assigns the submission from the unassigned queue to a PT. PT reviews, edits plan, marks reviewed.
4

Confirm inmate release

Inmate opens My plan / progress and confirms Reviewed status shows the approved plan and any shared PT notes.

​
After go-live

​
What’s next

For evaluators

One-page summary for decision-makers.

Status and workflow

Status labels and who acts when.

Deployment and kiosk

PWA, hardening, and MDM split.

FAQ

Common facility questions.