Medical reviewers
The named clinicians who set grades. These are the people whose judgement the site rests on, so they are published individually with credentials and external identifiers.
No reviewer profiles are published yet
Until a reviewer record exists, no graded page can publish at all — the pipeline requires an attributed reviewer and a review date, and a page missing either returns a 404 rather than rendering unsigned.
The full board, with what each reviewer is accountable for, is on the review board page.
The roles, and what each one cannot do
These are not job titles. They are the permission sets in the system, and the negative half is the interesting half.
- Medical reviewer
Can: Set and change evidence grades, perform medical review, publish grade changes, issue corrections.
Cannot: Move a grade without a linked named profile, or without a written justification that passes a validator and is published verbatim.
- Editor
Can: Commission and edit prose, run SEO review, publish content changes, issue corrections.
Cannot: Set a grade or publish a grade change. The permission is not granted to the role at all, and the check runs before the general permission lookup.
- Writer
Can: Research and draft.
Cannot: Publish anything, or touch a grade.
- Verification auditor
Can: Decide whether a clinic passes a verification audit, and read the audit log.
Cannot: See what a clinic pays us. Billing is not visible to the role that decides whether the badge is awarded.
- Trust and safety
Can: Moderate reviews, handle safety reports and red flags, read the audit log.
Cannot: See commercial data, or touch content and grades.
- Commercial and partnerships
Can: Sell listings, placements, verification audits and data access.
Cannot: Reach a grade, a review, or a ranking. The partner-facing role carries no content permission of any kind.
- Engineering and operations
Can: Build and run the platform.
Cannot: Read patient health data. There is no staff role with a path to a patient record: access requires a patient-created clinical relationship, multi-factor authentication and a logged reason. One role has an audited break-glass path for data repair, and using it alerts a human every time.
The full matrix, including why the grade-change check is separate from the general permission lookup, is in the editorial policy.
Individual profiles
We publish a named profile for every medical reviewer, because a grade with no signature is worthless and you need to be able to check who signed it.
We do not publish a page of staff headshots and invented job titles here. Non-clinical staff profiles go up as people join and agree to be listed, and a name only appears once the person actually holds the role. If you need to reach a specific function, the routes on the contact page go to real inboxes monitored by real people, and press enquiries go to hello@longlifelist.com.