---
title: "Team & access — HyperCRM features"
description: "Team access in HyperCRM: owner and assistant roles, single-use expiring invitations, a last-owner safeguard, and passkey sign-in for everyone."
canonical: "https://hypercrm.app/features/team"
lang: "en"
updated: "2026-07-25"
---

_Features / Team_

# Bring on staff without losing control

A practice has owners and assistants, invited by a single-use email link that expires after three days, protected by passkey sign-in and a rule that the last owner of a practice can never be removed or demoted by accident.

[Start the free trial](/dashboard) · [See all features](/features)

## Related features

### [Reporting](/features/reporting)

The audit log records every staff and role change alongside everything else.

### [Patient records](/features/patient-records)

Roles decide who can see and change which parts of a patient's record.

### [Security](/security)

How passkeys, encryption and audit logging protect a practice's whole account.

## Watch: Your team and settings

Access, security and your own account.

- [Your team and settings (1:38)](https://youtu.be/W5_5Z-61tqs) — Access, security and your own account.

## Two roles, clearly separated

Every practice member is either an owner or an assistant. Owners can manage staff, change roles and reach owner-only surfaces like [reports and the audit log](/features/reporting); assistants get the day-to-day tools without the administrative ones. A member's role can be changed by an owner at any time, subject to the safeguard below.

## Invitations that expire, not links that linger

Adding someone to a practice sends a single-use invitation to their address that expires after three days. If email is not sending for any reason, the invitation still exists and you can hand the accept link over directly — getting a new receptionist working on a Monday morning never waits on an email that has not arrived.

## The last owner cannot disappear

A practice can never be left without an owner: removing or demoting the last remaining owner is rejected outright, so a mistaken click cannot lock everyone out of the account that manages everyone else.

## Passkeys instead of shared passwords

Staff sign in with WebAuthn passkeys rather than a password anyone could write down or share, and a practice can require that second factor for every member. Every membership and role change is written to the [audit log](/features/reporting), so who changed what is never a guess.

## Common questions

### How is patient data protected?

Patient records are encrypted in transit and at rest, files are stored privately and served through short-lived signed links, and every change is written to an audit log. Staff accounts sign in with passkeys rather than shared passwords.

### How much does HyperCRM cost?

HyperCRM is paid software. Every practice starts with a 30-day free trial of the full Complete plan, with no card required. After that, plans start at €19 and €29 a month excluding VAT, banded by how many practitioners you have. Every price is printed on the pricing page rather than quoted on a call.

### What is the difference between an owner and an assistant?

An owner can manage staff and roles and reach administrative surfaces like the audit log and reports. An assistant gets the everyday tools — patients, calendar, billing, forms — without those administrative ones. An owner can change a member's role at any time, other than removing the last remaining owner.

### How does inviting a new staff member work?

An owner sends a single-use, email-addressed invitation that expires after three days. The invited person accepts it with a matching, verified email address to join the practice. If email delivery is not configured, the invitation still exists and its link can be shared directly instead.

## Grow your team without losing the reins

See it working on your own practice's data. Free trial on the full plan, no card, nothing to cancel.

[Start the free trial](/dashboard)