Hospital Discount PIN Software in Nigeria: What to Demand Before Staff Cut an Invoice

Saturday at the window is where margin disappears. A “staff relative” cut, a mission waiver, a round-down so the POS matches cash, and nobody can say who authorised it. Hospital discount PIN software is the gate on that cut: a labelled PIN the owner or clinic admin creates, a server check before the invoice changes, and a usage log. It is not a courtesy code taped to the till.

This guide is for medical directors, administrators, and billing officers buying HMS or EMR in Nigeria. Pair it with the cashier queue, staff roles, and HMO reconciliation. Score the PIN on a live invoice.

What is a hospital discount PIN in Nigerian HMS software?

A discount PIN is a clinic-owned authorisation token that staff who can bill must enter before a percentage or fixed Naira cut lands on an invoice. The product should store many labelled PINs, not one shared owner password everyone already knows.

At minimum you should be able to:

• Create labelled PINs as owner or clinic admin (staff discount, senior citizen, mission waiver).
• Choose percentage (optional Naira cap) or a fixed amount. A 100% PIN is how many hospitals operationally write off a bill.
• Bound a PIN with an expiry date and a maximum number of uses, or leave it open until you deactivate it.
• Store the digits hashed. Staff who bill verify a PIN; they should not see the secret again.
• Recalculate the cut on the server from the PIN type and the invoice subtotal. Do not trust a number the browser sent.
• Log who applied it, which invoice, the original amount, the cut, and an optional reason.

Buyers mash four products into “we have write-off control”:

1. A discount field on the invoice. Anyone with a billing login types 50%. That is a leak.
2. A labelled PIN plus a server check. The cut is refused until a valid PIN (or owner/admin approval) is presented. This is the DawaHQ public claim.
3. A queue waive. Lab or pharmacy billing status flipped to waived so the service desk can proceed. Useful. Not an invoice discount.
4. A finance write-off in the ledger. Aged HMO residuals, impairment, or “gross plus write-off” reporting. Do not buy that from a till PIN.

If a vendor says “discounts need a PIN,” ask which of those four they opened. Then make a cashier try a 20% cut without the PIN.

DawaHQ treats this as money control on the hospital billing path (billing is a core module). Owner or clinic admin manages PINs under Settings, Billing. Cashier, billing officer, pharmacist, owner, and admin can verify a PIN at invoice create or payment. Do not buy a POS discount app that cannot see the same patient as the chart.

How is a discount different from a write-off or a queue waive?

Vendors blur these because all three reduce what the patient pays today.

Invoice discount. A labelled PIN applies a percentage or fixed Naira cut. DawaHQ recalculates VAT and amount due from that server-verified amount. One invoice-level discount: if a cut is already on the invoice, a second PIN is refused. Partial payments still accumulate after the new total.

Write-off, in till language. Often a 100% PIN, or a cut that leaves ₦0 due. That is still an invoice discount with a usage log. It is not a separate Write Off button, and it is not HMO gross plus write-off reporting. DawaHQ’s HMO desk bills the tariff that moves (net or split). The cash-versus-tariff gap is not a contractual write-off line. Pharmacy expiry write-off is a stock movement. It does not use the billing PIN. See pharmacy and store inventory.

Queue waive. Billing roles can mark a pending lab or prescription waived so results release or a script dispenses. In this build that waive does not ask for a discount PIN. Keep the user list short. Do not market “every write-off needs a PIN” unless you watched the waive path ask for one. Emergency lab release (owner, admin, doctor, or lab scientist plus a mandatory reason) is a third path: care first, invoice still open. See the cashier queue.

Same verifier, different exceptions. Off-tariff HMO pricing needs a reason and owner/admin or a PIN. When the clinic requires pre-authorisation, a net-zero HMO checkout with no approved pre-auth needs the same (rejection risk remains yours). Those are HMO claim workflows, not an NHIA portal. See HMO claims. First-ward Day-1 waive on transfer is only for a same-day administrative reassignment, with owner/admin or a PIN. See inpatient beds.

Charity discounts are hospital policy. Software records who authorised the Naira.

Who should create discount PINs, and who may use them?

Separate minting from using. If the cashier who collects cash can invent a 100% PIN, you do not have a control.

| Action | Who | What to confirm | |--------|-----|-----------------| | Create, list, deactivate PINs | Owner or clinic admin | Settings, Billing. Soft-deactivate. Usage counts visible. Digits not shown again. | | Verify / apply a PIN | Staff who can bill | Cashier, billing officer, pharmacist, owner, admin. Server re-checks the PIN. | | Bypass the PIN on invoice or line create | Owner or clinic admin | So the owner is not locked out of their till. Still their login. | | Queue waive (lab / pharmacy status) | Billing roles | Not PIN-gated in this build. | | Reception / nurse / doctor at the till | Should not | A nurse should not list every invoice. A cashier should not open ICU notes. See staff roles. |

A PIN is 4 to 8 digits. Create several: 10% staff (capped), 100% mission waiver (max uses this month), a promo that expires Sunday. Deactivate the one that leaked on WhatsApp.

You can store a “require reason” flag on a PIN. Confirm a blank reason is refused if that is your policy. Do not assume the flag is a hard server block until you see the refusal. Verify attempts are rate-limited per login. Rotate and do not share PINs. If two cashiers share one account, the usage log is fiction.

What should the server do when staff enter a PIN?

A browser-only check is not a control. The invoice that prints must match what finance can defend.

1. Staff open an unpaid invoice or build one from the visit.
2. They enter a PIN. Verify returns the label and a server-calculated Naira cut (percentage or fixed, plus cap).
3. On pay, the payment route re-verifies the same PIN against the invoice subtotal. It does not accept a client-sent discount amount.
4. The invoice updates only if no discount is already present. VAT and amount due are recalculated.
5. Usage increments. The log stores who, invoice, patient, original amount, cut, and optional reason.
6. If payment recording fails after the cut, the invoice and the usage count should roll back so a crash does not leave a phantom waiver.

DawaHQ does that on invoice create (PIN required unless the caller is owner/admin) and on the payment modal. Line-item discounts on create use the same gate. Editing a line on an existing invoice still requires a PIN on the server for staff without owner/admin approval. If the row editor does not collect a PIN, a cashier save is refused. Confirm that refusal, not identical prompt copy.

Re-verify on the action that changes money. Do not accept a PIN remembered for the shift.

Does a discount PIN make the hospital NDPA or NHIA compliant?

No. A PIN is money control. It is not a privacy badge and it is not a claims portal.

NDPA. Invoice amounts and patient identifiers are hospital data. Prefer NDPA-oriented consent logging and a patient-access audit trail. DawaHQ is built to align with the Nigeria Data Protection Act 2023 on those controls. We do not sell “NDPA certified,” “fully NDPA compliant,” or “HIPAA billing EMR.” Filing, a DPO where required, and a rule against curiosity browsing remain yours. See patient consent.

NHIA / NDHI / FHIR. Internal HMO claim workflows and a pre-auth PIN override are not “NHIA integrated,” not a national e-submit API, and not NDHI certification.

PCN / NAFDAC. A till PIN does not license the premises and does not replace a controlled-drug register. Expiry write-offs on the shelf are stock discipline.

A usage log is an audit-worthy commercial exception. Demand who, when, which invoice, and how much. Empty logs mean the cuts missed the PIN path.

What should we test in a discount-PIN demo?

Bring the administrator who owns till policy and a cashier without owner rights. Use a throwaway PIN you will deactivate before you leave.

1. As owner, open Settings, Billing. Create a 10% staff PIN with a Naira cap and a 100% mission PIN with max uses = 2. Confirm a cashier cannot open that manager.
2. As cashier, raise a cash invoice. Wrong PIN must refuse. Real 10% PIN must show a server-calculated cut. Record cash, POS, or transfer. Confirm the receipt shows the discount label.
3. Same PIN again on that invoice must refuse. A 100% PIN on a second invoice may leave ₦0 due; usage should show 1 of 2.
4. As cashier, type a line-item cut on an existing invoice without a PIN. The server should refuse if you are not owner/admin.
5. On the cashier queue, waive an unpaid lab. In this build no PIN is asked. Write that down.
6. If you run HMO: off-tariff without owner login needs PIN or owner/admin plus a reason. A net-zero checkout with no approved pre-auth (when the clinic requires it) is the same path, not NHIA e-submit. First-ward Day-1 waive is only a same-day administrative transfer.
7. Ask for gross-plus-write-off HMO reporting or a standalone Write Off button. DawaHQ does not ship them. Ask who exports this month’s usage log if you leave.

If step 2 does not re-check the PIN on payment, you have a toast. If step 4 lets any billing user invent a line cut, you have the old leak. If step 5 surprises the medical director, fix the policy before go-live.

What to do next

List this month’s informal cuts: staff relatives, mission waivers, “make it ₦5,000 even,” and HMO off-tariff favours. If two people share the cashier login, the usage log is already fiction.

Then book a demo or request access. Walk one 10% PIN, one 100% PIN, one refused cashier cut, and one queue waive the same morning. Explore hospital billing, HMO workflows, HMS for Nigeria, and EMR for Nigeria. Pricing is sales-led from ₦25,000/month, then a scoped quote. If the product cannot refuse the cut until someone enters a PIN the owner minted, it will not help after the Saturday you cannot explain.