Access Management

This section describes how ClaraRx grants, tracks, reviews, and revokes access to company systems and data. It applies to employees, contractors, and other individuals authorized to access ClaraRx resources.

Procedures and policy

• Access Control Policy — principles, responsibilities, access records, exceptions, and compliance.
• Access Requests and Approvals — how to request, approve, provision, and document access.
• Onboarding and Offboarding — access changes when people join, change roles, or leave.
• Access Reviews — review frequency, review steps, and evidence requirements.
• Privileged Access — production, administrative, and emergency access.
• Service Accounts — requirements for service accounts and other non-human identities.

All access must follow the Access Control Policy. Actual system configurations are authoritative for determining current access; the Access Management Register is the consolidated record and must be reconciled against those configurations.