# Healthvocate
User-agent: *
Allow: /

# Authenticated tools & account areas (not for indexing)
Disallow: /dashboard
Disallow: /onboarding
Disallow: /profile
Disallow: /account
Disallow: /admin
Disallow: /upgrade
Disallow: /documents
Disallow: /bills
Disallow: /submissions
Disallow: /submission-review
Disallow: /affiliate
# The affiliate DASHBOARD stays blocked by the prefix rule above; the public
# recruiting lander must not be. Longest-match wins (RFC 9309 2.2.2), so this
# Allow (18 octets) beats "Disallow: /affiliate" (10) for this one URL only —
# /affiliate, /affiliate/export, /affiliate/feed.json, /affiliate/login and
# /affiliate/register all remain disallowed.
Allow: /affiliateprogram
Disallow: /benefits
Disallow: /ss-optimizer
Disallow: /medicare
Disallow: /prior-auth
Disallow: /rx-optimizer
Disallow: /bill-auditor
Disallow: /visit-summary
Disallow: /medical-records
Disallow: /concierge
Disallow: /equipment

# Auth / transactional endpoints
Disallow: /login
Disallow: /register
Disallow: /verify
Disallow: /forgot-password
Disallow: /reset-password
Disallow: /2fa-setup
Disallow: /2fa-verify
Disallow: /2fa-disable
Disallow: /logout
Disallow: /unsubscribe
Disallow: /stripe-webhook
Disallow: /healthz

Sitemap: https://healthvocate.com/sitemap.xml