3 September 2026 · 5 min read · By Junaid, founder · Clinical and legal review pending
A consent form is only evidence if you can still produce it three years later
Most clinic software sells "digital consent forms" as a feature and moves on. The harder question, the one nobody puts on a pricing page, is what happens to that form a year in, or three. A complaint arrives. An inspector asks. A solicitor's letter names a specific date. A signature captured on an iPad in 2022 is worth nothing if nobody can find it, or if it has quietly become whatever the template looked like the last time someone edited it.
That isn't hypothetical. In a public, verified review of a UK aesthetics consent platform, a practitioner of more than two years wrote that she couldn't access old consent forms, which she called "extremely serious if I have any kind of complaint", and that she'd gone back to doing them by hand. The same reviewer said she'd love to switch but the thought of learning new software that might be worse was too off-putting. "So we struggle on." (Capterra, aesthetic doctor, 2+ years' use)
There are two failures in that one review, and they're worth separating. The record became unreachable. And switching felt too risky to attempt, even after that. Neither is a bug, exactly. They're both what happens when consent is treated as a form to collect rather than a record to keep.
What "informed consent" actually asks of you
The GMC is explicit that a signed form documents a decision. It does not replace the conversation that led to it. Its guidance on decision-making and consent says records should capture the information exchanged, the decision made and who was involved, not that a box was ticked. Legal analysis applying Montgomery and McCulloch to aesthetics goes further: you need to be able to show the patient's goals were understood, that material risks and reasonable alternatives were explained, and that not treating was on the table.
So a defensible record is more than a signature. It's the patient's stated goals, the history and contraindications you considered, the specific risks you discussed for this treatment, the alternatives you raised, the questions she asked, and the exact version of the document she saw. Tied together. Retrievable. Never silently overwritten.
How Appointbox is built around that
- Consent is versioned to the treatment record. A later change creates a new version and keeps the one before it, permanently.
- Every consent action sits in a hash-chained audit trail, so tampering is detectable rather than merely discouraged.
- Templates are a library, not one document that mutates under everyone using it. What a patient signed in 2023 still reads exactly as it did in 2023.
- Treatment consent, photography consent and marketing permission are stored as separate records, because they answer different questions and a regulator will ask about them separately.
None of this has the conversation for you. That is still your job, and no software changes it. What changes is whether the evidence that the conversation happened lasts long enough to matter.
Three things to check in your own system this week
- Can you open a consent form from two years ago in the version the patient signed?
- If you edit a template today, does last year's signed copy change?
- Are photography and marketing consent stored separately from treatment consent?
How this was prepared: GMC guidance and the Capterra review are quoted directly and linked. Legal commentary on Montgomery and McCulloch is referenced generally; take advice specific to your clinic. Not legal or clinical advice.