Academy / Week 2 / Integrations System Overview & DOV / DOV — Data Owner Verification & Multi-Office PMS

DOV — Data Owner Verification & Multi-Office PMS

Lesson 11.2 ⏱ ~10 min Week 2

💡 Why This Matters

DOV is a non-obvious but critical concept for multi-office PMS scenarios. Large PMS vendors often give Weave a single API token that can access data for dozens of offices. Without DOV, a new SyncApp could inadvertently access another office's patient data. Understanding DOV protects both data integrity and legal compliance.

🎯 What You'll Learn

  • Why DOV exists: large PMS vendors give Weave access to multi-office databases, requiring verification of which offices we're authorized to sync
  • The scenario: Weave has 70+ PMS partnerships, and enterprise PMS vendors provide single-token access to multiple offices
  • How DOV works: when connecting a new SyncApp, the system verifies the office is in the authorized list before syncing
  • What 'multi-office PMS' means and how it relates to the SourceTenantId concept from Week 1
  • The services involved in the DOV verification flow

Watch Video

Open in Google Drive 💡 Open in Drive for AI-powered transcript search and summaries

📋 Lesson Summary

When Weave partners with large enterprise PMS vendors, those vendors often provide access tokens that cover multiple dental/medical offices in their database. Without Data Owner Verification (DOV), Weave could sync data for offices that didn't sign up for Weave — a compliance and privacy violation. DOV is the process that checks, when a new SyncApp is created, whether the office being onboarded is in the authorized list from the PMS vendor. This connects directly to the multi-source location architecture covered in Week 1 Module 3.

🏷 Key Concepts

DOV (Data Owner Verification)Multi-Office PMSAuthorized Office ListPMS Partnership TokenData Access AuthorizationPrivacy ComplianceMulti-Source Architecture Connection

Key Takeaways

01DOV exists to prevent Weave from accessing patient data for offices that haven't authorized the integration
02Enterprise PMS vendors commonly provide single tokens covering multiple offices — DOV is essential for these
03Always check whether a new integration involves a multi-office PMS — if so, DOV must be part of the implementation
04DOV connects back to the SourceTenantId architecture from Week 1 — each authorized office gets its own source tenant ID
05If an office's DOV check fails, their SyncApp cannot sync data — check the authorized list before debugging further