> ## Documentation Index
> Fetch the complete documentation index at: https://trust.denialbase.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Onboarding checklist

> Everything a new practice should do in the first 7 days for a clean launch.

<Info>
  Treat this as a working checklist. Most practices can finish it in 2–3 hours over the first week. Admins should own this; billing staff can help with the steps marked "all users".
</Info>

## Day 1 — Account basics

* [ ] Admin creates the practice account at [app.denialbase.com/signup](https://app.denialbase.com/signup)
* [ ] Admin verifies email and enables 2FA — passkeys recommended
* [ ] Admin completes the onboarding wizard (practice profile, first payer)
* [ ] Admin enables organization-wide 2FA policy ([Two-factor auth →](/admins/two-factor-auth))
* [ ] Admin reviews [Trust Center](/trust/overview) and (if a covered entity) [requests a BAA](/trust/baa)

## Day 2 — Team setup

* [ ] Admin invites billing staff and providers ([Team management →](/admins/team-management))
* [ ] All users accept their invites, enroll 2FA, and sign in
* [ ] Admin assigns roles and queue assignments
* [ ] Admin grants any delegated signing permissions

## Day 3 — Settings & integrations

* [ ] Add all providers (NPIs, specialties, supervising relationships) under **Settings → Providers**
* [ ] Add all active payers under **Settings → Payers**
* [ ] Configure notification preferences (email / Slack / in-app) per role
* [ ] Connect your EHR via FHIR if applicable ([EHR integration →](/integrations/epic-fhir))
* [ ] Configure scan-to-email forwarding address in your scanner/fax-to-email system

## Day 4 — First real uploads

* [ ] Upload a batch of historical denials (last 30 days) to see the AI on real data
* [ ] Review classifications; adjust any misclassifications to tune the model to your practice
* [ ] Check any low-confidence denials in the HITL review inbox
* [ ] Walk through one end-to-end appeal with your team as a live training

## Day 5 — Reporting & tracking

* [ ] Review your practice's baseline dashboard: denial rate, overturn rate, top denial types
* [ ] Set up a weekly email digest
* [ ] (Slack users) Route alerts to a shared channel

## Day 6 — Compliance

* [ ] Admin reviews the audit log — confirm PHI access is being recorded as expected ([Audit logs →](/admins/audit-logs))
* [ ] Admin exports a sample audit log for the last 7 days and archives it
* [ ] Admin configures session timeout policy to match the practice's security requirements
* [ ] Admin documents the offboarding procedure in your internal wiki

## Day 7 — Review

* [ ] Quick sync with the team: what's working, what's friction
* [ ] File a support ticket or email [support@denialbase.com](mailto:support@denialbase.com) for any issues
* [ ] Schedule a 30-day check-in with your team to review overturn rates and workflow

## Going further

<CardGroup cols={2}>
  <Card title="SSO / SAML" icon="key" href="/integrations/sso-saml">
    If you use Okta, Azure AD, or Google Workspace.
  </Card>

  <Card title="Webhooks" icon="bolt" href="/integrations/webhooks">
    Programmatic notifications for custom workflows.
  </Card>

  <Card title="Insurer-specific tips" icon="hospital" href="/insurer-guides/overview">
    Payer playbooks — Kaiser, UHC, and more.
  </Card>

  <Card title="API integration" icon="terminal" href="/api-reference/introduction">
    For EHR developers and custom integrations.
  </Card>
</CardGroup>