Evidence Registry
Clickwrap Document Registry
Registry of document keys, versions, URLs, acceptance stages, and the acceptance records kept when a document is accepted.
Last updated September 28, 2026
Status: Draft for legal and backend review Document key: clickwrapDocumentRegistry Version: 2026-09-28
This registry identifies the documents that may be presented through clickwrap, dashboard acknowledgements, onboarding checkboxes, or partner signup flows.
The frontend registry should provide document keys, versions, titles, URLs, and display labels. The backend should store acceptance evidence with the exact document key, version, content hash, and checkbox text snapshot.
Active Draft Registry
| Document Key | Title | Version | Path / Source | Stages |
|---|---|---|---|---|
termsOfService | Terms of Service | 2026-09-28 | /legal/terms-of-service | signup, clinic onboarding, billing, activation |
privacyPolicy | Privacy Policy | 2026-05-31 | /legal/privacy-policy | signup, clinic onboarding, partner signup |
affiliatePartnerTerms | Affiliate / Partner Program Terms | 2026-05-31 | /legal/affiliate-partner-terms | partner signup, referral dashboard |
businessAssociateAgreement | Business Associate Agreement | 2026-05-31 | /legal/business-associate-agreement | clinic onboarding, activation |
clinicOrderForm | Clinic Order Form | 2026-09-28 | /legal/clinic-order-form plus generated billing snapshot | clinic onboarding, billing |
recurringPaymentAuthorization | Recurring Payment Authorization | 2026-09-28 | /legal/recurring-payment-authorization | billing, clinic onboarding |
activationRefundPolicy | Activation and Refund Policy | 2026-05-31 | /legal/activation-and-refund-policy | clinic onboarding, activation |
openDentalApiAuthorization | Open Dental API Authorization | 2026-05-31 | /legal/open-dental-api-authorization | clinic onboarding, activation |
telephonyForwardingDisclosure | AI Phone Number and Forwarding Disclosure | 2026-05-31 | /legal/ai-phone-number-forwarding-disclosure | clinic onboarding, activation |
acceptableUsePolicy | Acceptable Use Policy | 2026-05-31 | /legal/acceptable-use-policy | signup, clinic onboarding |
stripeServicesAgreement | Stripe Services Agreement | external-current | https://stripe.com/us/legal/ssa | billing |
promoteKitTerms | PromoteKit Terms | external-current | https://promotekit.com/terms | partner signup |
Additional provider legal links are published in /legal under External Providers as reference links. They are not all direct customer clickwrap documents.
Content Hashing
For internal documents, generate a SHA-256 hash from the exact final rendered markdown, HTML, or PDF accepted by the user. Store the hash in the backend acceptance evidence.
Do not fake hashes. If a document is external and its content is not controlled by Happy Light Tech, store:
- external document URL;
- provider name;
- retrieval timestamp if available;
- external version if provided;
- exact checkbox text the user accepted.
Backend Acceptance Record
The backend should store immutable acceptance records. A later document update should create a new version and should not mutate historical acceptance records.
Activation Gate
Clinic activation should be blocked until required documents are accepted:
- Terms of Service
- Privacy Policy
- BAA, if ePHI workflows are enabled
- Order Form or billing snapshot
- Recurring Payment Authorization
- Activation and Refund Policy
- Open Dental API Authorization
- AI Phone Number and Forwarding Disclosure
Partner portal activation should be blocked until:
- Affiliate / Partner Program Terms
- PromoteKit Terms, if PromoteKit is used
- Privacy Policy
Data Safety
Clickwrap records should not store raw PHI, raw Open Dental CustomerKeys, raw card data, full IP addresses, raw user-agent strings, recordings, transcripts, or support email bodies.