The security of clinical information is non-negotiable, but not every IPS operates the same way. The inactivity session timeout is now configurable per tenant from Settings, and if an administrator decides to raise it, the app shows an explicit warning about the security implications of that decision before saving.
