Medical Portal Development
Medical portal is a web platform for a medical organization or clinic aggregator: appointment scheduling, patient personal account, medical documentation storage, telemedicine. The industry is strictly regulated: Federal Law 152-FZ on personal data, Federal Law 323-FZ "On the Basics of Health Protection", Ministry of Health requirements for medical information systems.
Patient-Facing Features
Appointment Scheduling:
- Specialty selection → doctor selection → date and time selection
- Doctor's schedule with available slots (synchronized with MIS)
- Confirmation via SMS or email
- Reminders 24 hours and 2 hours before
Personal Account:
- Visit and appointment history
- Test results (if MIS supports export)
- Referrals, discharge summaries, prescriptions — in PDF
- Attached medical documents
Telemedicine:
- Video consultations with doctor (WebRTC/Livekit)
- Chat consultations
- Consultation recording storage
Doctor-Facing Features
- Schedule: view and manage slots
- Today's patients list
- Specific patient's call history
- Document attachment to visit (referrals, certificates)
- Remote consultations
Security and Data Protection
Medical data is a special category of personal data. Requirements:
- Encryption at rest: data in database encrypted (PostgreSQL column-level encryption or TDE)
- Encryption in transit: TLS 1.2+ for all connections
- Access audit: every access to medical data logged (who, when, what viewed)
- Role-based access: doctor sees only their patients or patients from their department
- Data deletion: procedure on patient request (considering 25-year medical documentation retention period)
Hosting: only on servers certified in RF for medical personal data. Clouds: Yandex Cloud (152-FZ Tier 1), Sber Cloud, MTS Cloud — have certifications.
MIS Integration
MIS (Medical Information System) — clinic's main accounting system. Popular: 1C:Medicine, Mediolog, Infoclinic, BARS.Health.
Integration via:
- REST API MIS (if supported)
- HL7 FHIR — medical data exchange standard (R4 — current version)
- Direct database connection (not recommended, but happens)
HL7 FHIR allows requesting and transferring resources: Patient, Appointment, Observation (results), DiagnosticReport:
GET /fhir/Patient?identifier=123456789
GET /fhir/Appointment?patient=Patient/456&status=booked
POST /fhir/Appointment
ESIA and Authentication
For government and federal medical services — mandatory ESIA (Госуслуги) integration for patient identification. Private clinics can use standard email/SMS authentication with mandatory personal verification (passport or SNILS upload).
Online Payment
- Prepayment on online booking (Stripe/YuKassa)
- Payment after visit
- Refunds on cancellation — per clinic policy
Timeline
MVP (appointment scheduling, patient account, basic notifications, single MIS integration): 3–5 months. Full-featured medical portal with telemedicine, FHIR integration, analytics, ESIA: 6–10 months.







