One secure network for every practice, clinician, patient and device
Identity-based WiFi for clinical and reception staff, a private key for every connected device and filtered WiFi for patients in the waiting room. Run from one dashboard across every practice, on the access points you already own.
- Microsoft Entra ID, Okta and Google Workspace sign-in
- xPSK for practice devices
- DNS content filtering for patients
- ISO 27001 and Cyber Essentials certified

Your practice handles patient records on a network built for a coffee shop
A GP surgery or dental practice runs clinical systems, card terminals, imaging kit and a full waiting room on the same few access points, usually with no network engineer on site. Groups that grow by acquisition inherit a different setup with every practice they buy. That gap usually shows up in four places.
A typical practice today
- One staff WiFi password, shared with every locum, associate and agency nurse
- People who left months ago whose phones still join the practice network
- Card terminals, printers, check-in screens and imaging kit on one flat network
- An open waiting-room network with no consent record and no content filtering
With Purple
- Every member of staff signs in with their own directory account, so there is no password to leak
- Access ends the moment an account is disabled, and locum keys expire on their own
- Each device gets its own key and VLAN, revocable one at a time
- Patients get a filtered, branded sign-in with a UK GDPR consent trail
Staff, devices and patients, each on the right network, in every practice
Four networks that would normally mean four suppliers, run from a single pane of glass by a central IT team or one practice manager.
Sign in with the practice account
Identity-based WiFi through Microsoft Entra ID, Google Workspace or Okta. Joiners, movers and leavers handled for you.
02 · DevicesA private key for every device
xPSK gives card terminals, printers, check-in screens and imaging kit their own key and VLAN.
03 · PatientsFiltered WiFi for the waiting room
A branded sign-in with UK GDPR consent and DNS content filtering, kept apart from clinical systems.
04 · Multi-practice groupsEvery practice from one dashboard
One policy for the whole group, on whatever access points each practice came with.
One login for email, clinical systems and WiFi
Dentists, GPs, nurses, hygienists and receptionists connect with the account they already use every day. Purple syncs with Microsoft Entra ID, Google Workspace, Okta and JumpCloud over SCIM, and group membership decides which network and policy each person gets.
- Leavers lose access automatically when their account is disabled
- Locums and visiting associates get time-limited keys with no MDM required
- Practice laptops get EAP-TLS certificates through Intune, Jamf, Kandji or Hexnode
- Personal phones are onboarded in about 60 seconds with the Purple app
Every session is logged against a named person, device, time and location, which gives you evidence for your NHS Data Security and Protection Toolkit submission.
Explore staff WiFi
Staff WiFiA private key for everything that cannot sign in
Card terminals, label printers, self check-in screens, waiting-room displays, door entry and connected imaging kit cannot use a username and password. xPSK gives each one its own key and its own VLAN, so a leaked key affects one device, not the whole practice.
- Revoke a single key without re-keying every other device
- MAC binding ties each key to the first device that uses it
- Works under your vendor’s name: iPSK on Cisco, DPSK on Ruckus, MPSK on HPE Aruba and Juniper Mist, PPSK on Extreme and UniFi
- No per-device licence and no cap on devices per key
xPSKWiFi that keeps the waiting room calm and your records out of reach
Patients and the people who come with them get a branded sign-in that is kept entirely separate from clinical and admin networks. The same moment lets you ask for feedback, promote a flu clinic or a hygiene appointment, and grow a consented patient list. Black Country NHS raised its opt-in rate from 81% to 91% in the first week after moving to Unified Accounts.
- DNS content filtering blocks malicious and unsuitable sites on the patient network
- UK GDPR consent captured at sign-in, with a full audit trail
- Short surveys and targeted messages, such as flu clinic reminders, shown only to the patients they apply to
- Patient contacts sent to your CRM or messaging platform through 400+ data connectors
Patient WiFiEvery practice you own or acquire, on one platform
Dental groups and GP partnerships grow a practice at a time, and every practice arrives with its own access points and its own shared password. Purple layers on top of what is already there, so you set staff, device and patient policy once and apply it to the whole estate. El Chopo runs one patient WiFi experience across 506 sites from a single platform.
- Works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet
- Bring a newly acquired practice onto group policy without replacing its access points
- Staff who work across several practices sign in once and connect at all of them
- Cloud RADIUS with a 99.9% uptime SLA and no server to install in any practice
Multi-practiceWhat it takes to build it yourself, and what it takes with Purple
Everything a hospital network team builds and runs, delivered as a service on the hardware your practices already have.

Fewer IT tickets, more patients you can reach
Practices rarely have an IT person on site. Purple takes network access off the practice manager’s list and turns waiting-room WiFi into a consented way to stay in touch with patients.
Figures from Purple customer results (Black Country NHS, El Chopo) and Purple platform data and service terms.

Free brochure
Take this page into your next budget meeting
Everything on this page as an eight-page PDF brochure, ready to share with the people who sign off your network spend.
Get the brochure
Your name and email is all we need. The download appears straight away.
Live without new hardware
- 1
Connect your directory
Link Microsoft Entra ID, Google Workspace or Okta. Clinical, reception and locum groups sync over SCIM.
- 2
Point your access points at Purple
We configure the staff, device and patient networks on the access points each practice already owns.
- 3
Switch on, practice by practice
Start with one practice and roll out across the group with our onboarding team.
See your practices on one network platform
Tell us how many practices you run and what is in them, and we will show you how staff, device and patient access would work on your hardware.
- Works with Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet
- Single sign-on with Microsoft Entra ID, Google Workspace and Okta
- ISO 27001 and Cyber Essentials certified, UK GDPR compliant, UK RADIUS region
Book a practice demo
A 30-minute call with someone who knows healthcare networks.
Dental and GP practice WiFi questions, answered
What practice managers and group IT teams ask us most
Do we need to replace our access points?
No. Purple runs on the access points you already own, including Cisco Meraki, HPE Aruba, Ruckus, Juniper Mist, Ubiquiti UniFi, Cambium, Extreme and Fortinet. There is no RADIUS server to install in any practice.
How do locums and visiting clinicians get online?
Give them a time-limited key that expires on its own, with no device management needed. Staff who are in your directory sign in with their own account instead.
What happens when someone leaves the practice?
When their account is disabled in Microsoft Entra ID, Google Workspace or Okta, SCIM revokes their WiFi access automatically. They cannot reconnect, and there is no shared password to change.
How do card terminals, printers and imaging kit connect?
With xPSK. Each device gets its own key and VLAN, bound to the first device that uses it. You can revoke one key without touching any other device.
Is the patient WiFi kept apart from clinical systems?
Yes. Patients join their own network with DNS content filtering, separate from the staff and device networks. Every patient sign-in carries a UK GDPR consent record.
Does it help with the Data Security and Protection Toolkit?
Every staff session is logged against a named person, device, time and location, and leavers lose access as soon as their account is disabled. That gives you clear evidence for the network access questions in your submission.
Where is our data held?
Purple has RADIUS regions in the UK, EU and US, is ISO 27001 and Cyber Essentials certified and UK GDPR compliant, and has had zero data breaches since 2012.
Featured products for Dental and GP practices
The Purple platform pieces most Dental and GP practices venues deploy on day one.
Guest WiFi platform for Dental and GP practices
Captive Portals, analytics, and marketing automation as a cloud overlay.
Captive Portal software for Dental and GP practices
Modern Captive Portals with social login, SSO, and marketing consent.
Passwordless WiFi for Dental and GP practices
EAP-TLS, iPSK, and Passpoint - replace shared passwords with identity.
Recommended solution for Dental and GP practices
WiFi for IT & network teams. Cloud Captive Portals, RADIUS, and analytics layered on top of Cisco, Aruba, Juniper Mist, Meraki, and Ubiquiti.
See WiFi for IT & network teams →Related pillar guides
The topical pillars most relevant to Dental and GP practices. Each guide is the canonical hub for that area of the platform.
Related industries
Other verticals running on the same Purple platform.
Speak to an expert
Tell us about your venues and we'll show you how Purple fits.