Web app

Clinica Meridian — medical clinic platform

A public medical portal, online appointment booking, a multi-role staff application and a mini-EMR for a multi-location private clinic (fictional demo): live free slots, booking with SMS confirmation, protection against double booking for doctors and rooms, mandatory two-factor sign-in for staff, encrypted clinical data and a tamper-evident audit log.

In development2026Healthcare
Clinica Meridian — medical clinic platform

Overview

Overview

Clinica Meridian is a complete platform for a private clinic with several locations: a public portal where patients find specialties, doctors and prices and book online, and a staff application for reception, doctors, nurses, finance and administrators. The clinic, doctors, patients and prices are fictional; the interface is Romanian-first.

For patients

  • Live "earliest free slots" on the homepage and search that tolerates typos and missing diacritics.
  • A seven-step booking flow with temporary slot holds, SMS confirmation code, consents and payment at the clinic or online.
  • A secure, expiring link to view, confirm, reschedule or cancel an appointment and upload documents.
  • Lab results protected by three identifying details plus an SMS code.

For the clinic team

  • Sign-in with mandatory two-factor authentication and permissions by role and location; doctors only see their own patients.
  • Day, week and month calendar with live updates and drag-and-drop rescheduling that the server validates.
  • A mini-EMR: encounters, versioned clinical notes (draft, final, amendment with reason), vitals, ICD-10 diagnoses entered by clinicians — no automated diagnosis — and documents released to patients.
  • Payments and partial refunds, schedules and leave, a versioned price catalogue, reports with CSV export, notification log and GDPR requests.

Safety by design

The database refuses to book a doctor or a room twice — in tests, 20 parallel requests for the same slot produced exactly one appointment. Clinical notes and identifiers are encrypted, finalised notes and the audit log cannot be altered, and every change is recorded in a hash-chained audit trail. 152 automated tests passed in the last run.

Status

A development build with fictional data, not in use by a real clinic. Payments, SMS and e-mail run in sandbox mode until contracts and credentials exist, and a legal review is still required.

Screenshots

Case study

Challenge

Private clinics lose time on phone bookings, double-booked rooms and scattered patient records — while handling some of the most sensitive personal data there is. The platform had to make booking effortless for patients and keep clinical data strictly limited to the people who need it.

Solution

A Next.js application on PostgreSQL. Availability is computed in the database from schedules, exceptions, holidays, room occupancy and buffers; exclusion constraints make double booking of a doctor or room impossible. Staff use mandatory TOTP two-factor sign-in with deny-by-default permissions scoped by role, location and clinical relationship. Sensitive fields and files are encrypted with AES-256-GCM, finalised notes are append-only at database level and the audit log is hash-chained. Notifications go through a transactional outbox and a worker with retries.

Results

Booking, self-service, the staff calendar, consultations, payments and refunds work end to end on demo data. 152 automated tests passed in the last run (unit, real-database integration and end-to-end with accessibility scans), including 20 concurrent bookings for one slot resulting in exactly one appointment. Real payment, SMS and e-mail providers and a legal review remain before any clinical use.

Our role

Product design, booking engine, database design, security and privacy architecture, staff application, mini-EMR, payments, notifications, accessibility, testing and documentation.

Related projects

Slipstream — bar platform with QR ordering, loyalty and browser games
Web appCase study

Slipstream — bar platform with QR ordering, loyalty and browser games

A complete digital platform for a motorsport-themed bar (demo with a fictional brand): QR table ordering with a live bar dashboard, reservations, events, loyalty points and rewards, race-weekend predictions, a pub quiz, community features and eight browser games.

  • HTML5
  • CSS
  • JavaScript
  • PostgreSQL
  • +4
Raftul — e-commerce marketplace platform
Web appCase study

Raftul — e-commerce marketplace platform

A production-oriented online store for the Romanian and EU market (shown under a fictional brand): storefront with typo-tolerant search, promotions, multi-warehouse stock, checkout with card, cash on delivery and bank transfer, returns, SEO built in, a REST API for mobile apps and a role-based admin panel.

  • Prisma
  • TypeScript
  • React
  • Next.js
  • +4
Casa Aurelia — hotel booking and property management
Web appCase study

Casa Aurelia — hotel booking and property management

A direct-booking website and back office for a small hotel (fictional demo property): live availability and dynamic pricing, room allocation that the database protects against double booking, online payments and refunds, guest self-service, front desk, housekeeping, maintenance, iCal sync with booking channels, PDF vouchers and reports.

  • Prisma
  • TypeScript
  • React
  • Next.js
  • +4

Need something similar?

We can build a project like this around your goals, content and budget.

Esc