Access should follow the position, not the person.
Define the position once. JML is the roster and the proof for every joiner, mover, and leaver.
Position change · Maria Reyes
Medical Biller → Practice Manager
Effective
Mon, Jun 8
HealthCRM
PHIPIPatient records · clinic
Admin Console
Owner · Practice ops
Clearinghouse
FinancialPISubmitter (no longer needed)
Practice Mgmt (EHR)
PHIStandard user · unchanged
The employee lifecycle
See it work from first day to last day
Every joiner, mover, and leaver creates access work. JML keeps the roster and the proof so HR, managers, and IT know what to grant, what to remove, and when it was done.
The platform
Connected. Owned. Auditable.
One roster
Positions, packages, people, and joiner/mover/leaver files — all connected, always current.
Know what the system holds
Tag each app with the data it stores — PHI, PI, financial — so you can see access risk across employees and systems.
Clear ownership
HR, managers, and IT each see their own task list, so nothing falls through the cracks.
Complete audit history
Every grant and revoke is linked to a person, position, actor, and time — exportable when they ask.
Audit evidence
When they ask for five random onboardings and five offboardings
Export the pack: person, position, package, each system, grant/revoke, actor, time. No ticket archaeology.
Leaver + joiner sample
CSV export| Person | Position | Package | System | Grant / revoke | Actor | Time |
|---|---|---|---|---|---|---|
| Maria Reyes | Medical Biller | Clinic billing | EHR | Grant | A. Chen | Mar 3 09:14 |
| Maria Reyes | Medical Biller | Clinic billing | Clearinghouse | Grant | A. Chen | Mar 3 09:21 |
| Luis Ortega | Front desk | Reception | EHR | Revoke | J. Patel | Jun 12 16:02 |
| Luis Ortega | Front desk | Reception | Revoke | J. Patel | Jun 12 16:08 |
Pricing
Manual JML is free. The rest is next.
Free is available today. Application integrations, automation, SSO, and Enterprise are coming soon.
Free
Available nowRun joiners, movers, and leavers by hand. CSV in, CSV out.
Manual JML, no credit card
- Unlimited people in that org (flat, not per seat)
- CSV upload and download
- Full joiner / mover / leaver checklists
- Data-class tags — know which systems hold PHI, PI, financial
- Unlimited audit retention
- Evidence pack export (CSV)
- Email support
Plus
Coming soonConnect the applications you already use. Automate the checks. Sign in with SSO.
Integrations, automation, and SSO
- Everything in Free
- Integrations with the applications you already use
- Automation for automatic checks
- SSO
Enterprise
Coming soonCustom contracts, a BAA, and dedicated support when you need them.
For larger orgs and MSPs
- Everything in Plus
- BAA and custom contracts
- Multiple sites
- Dedicated support
MSPs
One standard across every client you manage.
Joiners, movers, and leavers are the same messy work at every organization. JML gives your team one process — so they stop reinventing access at each client and get the hours back.
Talk to usThe roster and the proof for who should have access.
FAQ
Questions, answered
The things clinic operators, MSPs, and auditors ask us most.
No. JML sits above them. We keep the roster of who should have what, and open joiner, mover, and leaver checklists with an owner and a timestamp. Your IdP and EHR still create and disable the login.
Most teams import their positions and applications in an afternoon. Because everything is metadata-driven, you describe the position once and every onboarding, change, and offboarding for that role inherits it.
Offboarding is one click in JML: every system on that position becomes a checklist with owner and timestamp. Techs still disable the EHR and Entra. You export the leaver pack when an auditor asks.
Yes. Managers can request additional access beyond the position package. Those requests flow through the same approval and audit pipeline so nothing happens off the books.
JML diffs the old position against the new one and opens only the changes that matter — what to grant, what to remove, what stays. No more re-onboarding someone who's already in the building.
Export the pack: person, position, package, each system, grant/revoke, actor, time. No ticket archaeology.
We treat access data as sensitive by default: row-level security, full audit history, and least-privilege roles for HR, managers, and IT. SSO is coming soon.
Manual joiners, movers, and leavers — CSV in, CSV out — are free. Application integrations, automation, SSO, and Enterprise are coming soon.