Hi Anne-Marie,
A re-useable account is fine, with a few caveats.
<1>Hopefully you have, or will institute a bound journal of the practice that is written in a linear fashion, much like the deck log of a vessel. Make a note of the date/time they start, and the date time that they last use the account.
<2>Change the password after each use of the account and record the change (keep actual credentials separate)
<3>optional - deactivate the account when not in use
Other recommendations
- clear messages each time the account is closed out
- don't have a temp set reminders
- if they use Updox, have them send from the practice, and not themselves