This page serves as a high level reference guide to what .decimal logs for user interactions with our software. There are 3 difference sections detailed here:

1. User Authentication for Auth0: .decimal uses Auth0 as it's user authentication service. As such Auht0 maintains the user login logs for every user.
2. Customer Applications: Customer Applications include .decimal developed applications used by end clinical users that are downloaded and installed on the customer's local computers.
3. decimal Direct: Users will interact with the decimal Direct website to perform certain tasks. These interactions are logged for each user. In addition, Customer Applications connect to decimal Direct and some actions of the application may be logged.

.decimal uses Auth0 as it's user authentication service. Auth0 provides users logs including:

• Successful & Failed Logins
• Successful Logouts
• Blocked Account (after too many login attempts)

See below for example logs for common Auth0 events:

Successful_login.json

{
    "date": "2022-05-11T12:13:02.783Z",
    "type": "Success Exchange",
    "client_id": "<REDACTED>",
    "client_name": "decimal Launcher",
    "ip": "<REDACTED>",
    "user_agent": "Electron 5.0.13 / Windows 10.0.0",
    "hostname": "dotdecimal.us.auth0.com",
    "user_id": "<REDACTED>",
    "user_name": "<REDACTED>",
    "isMobile": false,
}

Incorrect_password.json

{
    "date": "2022-05-11T13:24:10.066Z",
    "description": "Wrong email or password.",
    "connection": "decimal",
    "client_name": "decimal Launcher",
    "ip": "<REDACTED>",
    "user_agent": "Electron 5.0.13 / Windows 10.0.0",
    "details": {
    "error": {
      "message": "Wrong email or password."
    }
    },
    "user_id": "<REDACTED>",
    "user_name": "<REDACTED>",
    "isMobile": false
}

Blocked_user.json

{
    "date": "2022-05-11T13:54:35.190Z",
    "description": "User (<REDACTED>) attempted 10 consecutive logins unsuccessfully. Brute force protection is enabled for this connection, further attempts are blocked from this IP address for this user.",
    "connection": "decimal",
    "connection_id": "<REDACTED>",
    "client_id": "<REDACTED>",
    "ip": "<REDACTED>",
    "user_agent": "Electron 5.0.13 / Windows 10.0.0",
    "hostname": "dotdecimal.us.auth0.com",
    "user_id": "",
    "user_name": "<REDACTED>",
    "isMobile": false
}

Customer Applications include .decimal developed applications used by end clinical users that are downloaded and installed on the customer's local computers. These may include, but are not limited to: p.d, decimal3D, decimal Launcher, and decimal eRT. See each application below for an example activity log.

p.d logs the local user activity and records the following information to it's local patient database:

decimal3D logs the local user activity and records the following information to it's local patient database. This information is exportable from the Advanced menu option within the application.

decimal eRT logs the local user activity and records the following information to it's local patient database. This information is exportable from the Organization Configuration → Export Logs block within the application.

Users will interact with the decimal Direct website to perform certain tasks. For each logged interaction in Direct the following is recorded:

See below for the outline of what user interactions are recorded.

A normal user interaction includes any non-elevated user tasks that are performed. Normal user interactions that are logged include:

A manager user interaction includes any elevated user tasks that are performed by the site manager within the Management pages. Manager user interactions that are logged include:

Other .decimal applications that connect to decimal Direct and .decimal logs some integration connections for diagnostic trouble shooting. These interactions include and capture: