A stray click on Delete next to the wrong note, or the wrong patient, shouldn't cost you a clinical record. In Goji, deleting something hides it and files it in Trash, and it stays there until you bring it back.
Where Trash lives
Open the account menu in the sidebar and choose Trash. The page lists everything deleted across your practice, grouped under Patients, Sessions, Notes, Protocols and Forms, with how many are in each group. Every row shows what it is and when it was deleted, newest first, with a Restore button. Those five are the only things that go to Trash.
Every delete asks you to confirm first, and the dialog says it can be restored from Trash. Sessions and notes are labelled with the patient and the visit or note date; protocols and forms use their name.
Deleting a patient takes the chart with it
Deleting a patient also hides their sessions and notes, and the confirmation says so. Trash lists only the patient, not each child item, because restoring the patient brings back everything that was deleted along with them.
It is careful about the rest. A session or note you had deleted on its own before deleting the patient keeps its own entry in Trash after the patient is restored, so a deliberate earlier deletion isn't quietly undone.
Signed charts and the audit log
Deleting a chart doesn't change its signature. A signed session restored from Trash is still signed, with the same signer and time. See Sign and lock for how the lock behaves.
Deleting and restoring patients, sessions and notes are recorded in the access log with who did it and when, and the log holds only record ids, never names or note text. Protocols and forms hold no patient data and aren't logged.
Who can restore, and for how long
Anyone on your team with access to the practice can restore from Trash; there is no separate permission. Nothing is purged automatically, so an item can be restored months later. Goji has no button for permanently deleting a record. If you need one removed for good, that is outside what the app does today.
If a restore fails, the row stays in place with a Couldn't restore message so you can try again.