QSS Technosoft builds custom patient portals and extends the one your EHR came with: records and results, scheduling, intake, secure messaging, bill pay, proxy access and telehealth on web and mobile, connected through HL7 and FHIR and designed to Cures Act, HIPAA and accessibility rules.
100+ healthcare projects | 16+ years in healthcare | FHIR R4 · SMART on FHIR · WCAG 2.2 AA
FHIR R4 · SMART on FHIRWCAG 2.2Access and accessibility standards
100+Healthcare projectsProven healthcare expertise
CMMILevel 3ISO 27001 · ISO 9001
16+ yearsIn healthcareUS-headquartered in Bloomington, MNTrusted Partners
A patient portal is the front door most patients actually use, and it is only as good as the systems behind it. We build the screens patients see and the interfaces they depend on: the EHR, the scheduling engine, the billing system, the lab feed and the identity layer.
CHALLENGES PORTAL PROJECTS FACE
Most portals don't fail because a feature is missing. They fail because patients can't get in, can't find what they need, or call the front desk anyway. Here is where we see healthcare organizations get stuck, and how we build portals that get them unstuck.
Problem
How we solve itSelf-service enrollment with identity proofing, passwordless and passkey sign-in, invitations sent at booking and at discharge, and a home screen that opens on the next thing the patient needs to do.
A portal patients return to, not a password they forget.ProblemHow we solve itWe extend Epic MyChart-style vendor portals through their supported APIs and SMART on FHIR apps, or build a custom portal on top of the EHR where workflows, branding or multiple EHRs make the default a poor fit.
The portal your patients need, without replacing the EHR.ProblemHow we solve itConfigurable release rules mapped to the Cures Act information-blocking exceptions, patient-requested delays, plain-language context next to every result and an audit trail of what was released and when.
Timely access you can defend in an audit.ProblemHow we solve itOnline booking against real provider availability, digital intake and consent with e-signature, insurance capture, cost estimates and card, wallet and payment-plan options inside the portal.
Fewer calls and cleaner check-ins.ProblemHow we solve itProxy and caregiver accounts with role-based permissions, adolescent confidentiality rules by age and state, and separate handling for sensitive records such as 42 CFR Part 2 data.
The right people see the right record.ProblemHow we solve itDesign and testing to WCAG 2.2 AA, screen-reader and keyboard support, plain-language content and multilingual interfaces with language-assistance notices, built in from the first sprint rather than retrofitted.
A portal that meets Section 504 and Section 1557 expectations.
Facing similar challenges?Tell us what your patients call the front desk about most, and we'll show you which portal features would take those calls.Talk to Our US Team →OUR SERVICES
Build a custom portal, extend the one your EHR provides, or add the missing pieces to what you already run. We deliver all three, on web and mobile.
Custom patient portal software development
Branded web and mobile portals for hospitals, medical groups, specialty practices and healthtech companies, built around your patient journeys and connected to every system that holds part of the record.
Health record accessVisit summaries, problems, medications, allergies, immunizations and documents.
Results and imagingLab and imaging results with release rules and plain-language context.
Multi-EHR, one loginOne portal across facilities or acquired practices on different EHRs.
White-label optionsMulti-tenant architecture for vendors and networks serving many clinics.
2Channels: web, mobile
20+EHR/EMR/HIS integrations delivered
16+ yearsIn healthcareEHR patient portal integration and extension
Most organizations already license a portal with their EHR. We extend it where it falls short, through the vendor's supported APIs, SMART on FHIR apps and HL7 interfaces, and we connect it to the systems the EHR does not cover.
Vendor portalsExtensions alongside Epic MyChart, Oracle Health, athenahealth, eClinicalWorks, NextGen and Allscripts (Veradigm) portals.SMART on FHIR appsSpecialty tools launched from the portal with the patient already in context.HL7 interfacesADT, SIU and ORU feeds through Mirth Connect or Iguana.Single sign-onOne login across the EHR portal, the custom portal and partner apps.6EHR vendor portals extended3HL7 feed types: ADT, SIU, ORU1Login across portals and appsPatient access, FHIR APIs and Cures Act compliance
The interfaces that let patients get and share their own data, built to the standards regulators and app developers expect.
FHIR patient-access APIsFHIR R4 with US Core and USCDI data classes, SMART App Launch and OAuth 2.0.Record exportC-CDA download and transmit, and Bulk FHIR for population-level requests.Third-party appsApp registration, consent screens and token management for patient-chosen apps.Network accessRecords from HIEs, national networks and payers presented in one view.3Export formats: FHIR, C-CDA, Bulk FHIR2Standards: US Core, SMART App Launch1View of records from every sourceScheduling, digital intake, bill pay and estimates
The transactions that fill the front-desk phone line, moved into the portal and written back to the practice management and billing systems.
Self-schedulingReal-time booking, waitlists, rescheduling and reminders by SMS, email and push.Digital intakeForms, consent and insurance card capture, with e-signature, written back to the record.Bill payStatements, card and wallet payments, payment plans and PCI DSS-scoped processing.EstimatesCost estimates and Good Faith Estimates for self-pay and uninsured patients.3Reminder channels: SMS, email, push4Front-desk tasks moved online2Payment options: one-time, planSecure messaging, telehealth and mobile apps
Two-way communication with the care team, video visits and native mobile apps, all inside the same secure session.
Secure messagingMessage routing by topic and pool, attachments, auto-replies and response-time tracking.TelehealthVideo visits with virtual waiting rooms, launched from the appointment.Mobile appsNative iOS and Android or cross-platform, with biometric sign-in and push notifications.Remote monitoringDevice readings from our Remote Patient Monitoring platform shown in the portal.2Mobile platforms: iOS, Android4Communication modes in one app24/7Patient accessAccessibility, multilingual design and engagement analytics
The work that decides whether every patient can use the portal, and whether you can prove it is working.
AccessibilityWCAG 2.2 AA design, automated and manual audits, and testing with assistive technology.MultilingualTranslated interfaces and content, language preference stored on the profile.Proxy and caregiver accessParent, guardian and caregiver accounts with granular permissions.Engagement analyticsEnrollment, activation, message volume, self-scheduling and payment dashboards.2.2 AAWCAG level we design to5Engagement measures tracked3Proxy types: parent, guardian, caregiverA portal is judged on what happens behind the button: the appointment that books into the real schedule, the result that arrives on time, the payment that posts to the right account, the caregiver who sees only what they should. QSS builds patient portal software on the interoperability and compliance backbone we have engineered for healthcare clients for 16+ years, with dedicated HL7, FHIR, Mirth Connect and Iguana practices behind every project.
Dedicated HL7 v2, FHIR R4, Mirth Connect and Iguana teams and 20+ EHR, EMR and HIS integrations delivered. We build the data layer first, so the portal shows what is in the record, not a copy that drifts.
Learn more →
We will tell you when extending your EHR's portal is enough, and build custom only where your workflows, brand or multi-EHR estate need it.
Learn more →
Cures Act information-blocking rules, ONC patient-access API requirements, USCDI, HIPAA and 42 CFR Part 2, with release rules and audit trails you can explain to an auditor.
Learn more →
WCAG 2.2 AA design and testing, plain-language content and multilingual interfaces, so the portal works for patients with disabilities and limited English proficiency.
Learn more →
A shipped eSignature product for intake and consent, a Remote Patient Monitoring platform and a DICOM/PACS Viewer for imaging mean these portal features start from tested modules.
Learn more →
Fixed-scope build, a dedicated portal team or build-operate-transfer, run under CMMI Level 3 and ISO 27001 processes with 4.9/5 client satisfaction on Clutch.
Learn more →The building blocks we draw on most often. Select the ones that matter and we'll map them to your patients and systems in the discovery call.
Self-service sign-up, identity verification and invitations at booking or discharge
Passkeys, biometrics, one-time codes and single sign-on
Problems, medications, allergies, immunizations, visit summaries and documents
Configurable release timing with plain-language context and audit
Real-time booking, waitlists, rescheduling and cancellations
SMS, email and push for visits, results, bills and messages
Routed patient-to-care-team messaging with attachments
Forms, questionnaires and e-signature written back to the record
Statements, card and wallet payments, PCI DSS-scoped processing
Refill requests routed to the care team and pharmacy
Parent, guardian and caregiver accounts with granular permissions
Video visits launched from the appointment, with a virtual waiting room
US Core and SMART App Launch for patient-chosen apps
C-CDA, PDF and SMART Health Links for sharing with other providers
Price estimates and Good Faith Estimates for self-pay patients
Card photo capture and real-time eligibility checks
Arrival from the phone, copay and updated history before the visit
Condition and procedure content linked to the patient's record
Device readings and care-plan tasks in the patient's view
Reports and images through a browser-based DICOM viewer
Translated screens and content with stored language preference
WCAG 2.2 AA components, screen-reader and keyboard support
iOS and Android with biometric sign-in and push notifications
Enrollment, activation, usage and channel-shift dashboards
Content, user, proxy and release-rule management with audit logs
HOSPITALS
From admission to the follow-up visit
Pre-admission forms, inpatient education, discharge instructions, results and bills in one place, so patients leave knowing what happens next.
Learn More →
Discharge Instructions
Inpatient Education
Billing AccessHEALTH SYSTEMS & NETWORKS
One front door across every facility
A single portal across hospitals, clinics and acquired practices, even where they run different EHRs, with one login and one patient identity.
Learn More →Single LoginMultiple EHRsUnified IdentityMULTI-SPECIALTY GROUPS
Every specialty, one patient experience
Specialty-specific scheduling rules, intake forms and messaging pools under one brand, so patients don't need a different app for each department.
Learn More →Specialty SchedulingShared BrandingRouted MessagingCLINICS & PHYSICIAN PRACTICES
Fewer calls, faster check-ins
Self-scheduling, digital intake, reminders and online bill pay that take routine work off the front desk.
Learn More →Online BookingDigital IntakeOnline PaymentsMENTAL & BEHAVIORAL HEALTH
Confidential access, carefully controlled
Portals with 42 CFR Part 2 consent handling, session scheduling, assessments such as PHQ-9 and GAD-7, and telehealth for ongoing therapy.
Learn More →Confidential RecordsOutcome AssessmentsTherapy TelehealthSPECIALTY PRACTICES
Built for oncology, cardiology or orthopedics
Treatment calendars, symptom check-ins, device data and imaging access for specialties where patients stay in care for months or years.
Learn More →Treatment CalendarsSymptom TrackingImaging AccessTELEHEALTH & VIRTUAL CARE
The whole visit, online
Booking, intake, video visit, prescription and follow-up in one session, for telehealth providers and hybrid care models.
Learn More →Video VisitsOnline IntakeRemote Follow-upOrganizations We Build For
Healthtech
Payers
Pediatrics
Community
Senior
Labs
ImagingReal results. Real impact. Empowering better care through technology.
We enhanced a personal health record (PHR) app that stores an individual's complete wellness data in one accessible place. Patients search for doctors, view lab results and communicate with providers on the go.
Tech Used
React Native · Node.js · MongoDB · AWS · HL7 FHIR
Results
A mobile healthcare platform offering medical services and doctor consultations in partnership with top hospitals and diagnostic centers. Users book health checkups, consult virtually, view digitized health records and follow up with doctors.
Tech Used
Kotlin · Swift · Laravel · MySQL · Google Cloud · HealthKit APIs
Results
A home-care solution where doctors prescribe treatment plans and medication while caregivers deliver therapies to elderly or differently-abled patients at home, improving coordination and continuity of care.
Tech Used
React Native · Express.js · MySQL · Node.js · REST APIs
Results
We add AI where it shortens the wait for an answer and takes routine work off staff, and keep a clinician or staff member in control of anything that reaches a patient as clinical advice.
Patient Input
Messages, forms, questions, bookings
AI Engine
Route, draft, translate, explain
Care Team Review
Human oversight + audit trail
Action
Faster answers, fewer calls
Message triage & draft repliesRoute messages by urgency and draft replies for staff to edit and send
Plain-language explanationsExplain results and instructions in everyday terms, reviewed before release
Scheduling & intake assistantBook, reschedule and complete forms by chat, with handoff to staff
Translation supportTranslate messages and content, with human review for clinical textA patient portal is the one healthcare system every patient can reach from the internet, which makes it a target as well as a front door. We design every portal to the access, accessibility, privacy and security rules that apply, and can show you how, control by control.
Release rules, record export and FHIR patient-access APIs built to the Cures Act information-blocking rules and ONC API criteria, with every release and delay logged.
WCAG 2.2 AA design and testing, which exceeds the WCAG 2.1 AA standard in the HHS Section 504 rule (compliance dates now May 11, 2027 for organizations with 15 or more employees and May 10, 2028 for smaller ones), plus Section 1557 and ADA expectations.
Identity proofing at enrollment, multi-factor and passwordless sign-in, session timeouts and account-recovery controls that resist takeover.
Proxy permissions by role, adolescent confidentiality by age and state, and 42 CFR Part 2 consent for substance-use records.
AES-256 at rest and TLS 1.2+ in transit for records, messages, documents, payments and APIs.
Logs of every sign-in, view, download, message, proxy action and API call, exportable for OCR audits and internal review.
HIPAA-eligible environments on AWS, Azure or Google Cloud with BAAs in place; payment processing scoped to PCI DSS through a certified gateway.
Third-party vulnerability assessments and penetration tests tracked to closure, and accessibility audits before every major release.
Best for a set launch. A defined scope, such as a portal MVP or a set of EHR portal extensions, with fixed price, milestone-based delivery and a clear go-live date.
Best when the portal is an ongoing product. Named engineers, UX designers, integration specialists and QA who work as an extension of your team.
Best when you want to own the capability long term. We build and run the team and platform, then transfer both to you on an agreed timeline.
We choose the stack for your requirements, not the other way round. These are the tools and standards our portal teams use most.
Front-end & mobileReact · Next.js · Angular · React Native · Flutter · Swift · Kotlin
Back-endNode.js · .NET · Java / Spring Boot · Python / Django
DataPostgreSQL · MySQL · SQL Server · MongoDB · Redis · Elasticsearch
Healthcare standardsFHIR R4 · US Core · SMART App Launch · Bulk FHIR · HL7 v2 · C-CDA · USCDI · X12 270/271 · DICOM
Integration & EHRsMirth Connect · Iguana · HAPI FHIR · Epic · Oracle Health (Cerner) · athenahealth · eClinicalWorks · NextGen · Allscripts (Veradigm) · OpenEMR
Identity & securityOAuth 2.0 · OpenID Connect · SAML · Passkeys (FIDO2) · MFA · Auth0 · AWS Cognito · Azure AD B2C
Communication & paymentsTwilio · SendGrid · Firebase Cloud Messaging · Zoom Video SDK · Stripe · Authorize.net
Cloud, DevOps & testingAWS · Microsoft Azure · Google Cloud · Docker · Kubernetes · GitHub Actions · axe · JMeter · SeleniumEvery portal is scoped to its patients, features and integrations, but buyers deserve a straight answer. These are typical ranges based on our delivery history and current market rates.
Enrollment, records, results, scheduling and messaging on one EHR, or a defined set of extensions to your EHR's existing portal
8–12 weeks
$28,000–$60,000
Typical investment
Adds intake and e-signature, bill pay and estimates, proxy access, telehealth, iOS and Android apps and FHIR patient-access APIs
3–5 months
$70,000–$160,000
Typical investment
Multi-facility and multi-EHR, single sign-on, multilingual content, AI-assisted messaging, engagement analytics and white-label options
6–10 months
$180,000–$380,000+
Typical investment
Investment is scoped to your features, EHRs and patient channels. Hosting, payment processing and messaging fees are separate. You leave the discovery call with a range specific to your project.
Get an Estimate for Your Project →Talk to a healthcare solutions architect about your patients, your EHR and the calls you want off the phone, and leave the call with a build-or-extend recommendation, an integration map and a cost range.
ExpertGuidance
TailoredRecommendations
Clear Cost& TimelineAnswers about our patient portal development services, EHR integration, patient access rules, accessibility, timelines and costs.
Patient portal software is a secure website or mobile app that lets patients see their health records and test results, book appointments, complete forms, message their care team, request refills and pay bills. It connects to the EHR, scheduling and billing systems so information stays current, and it is the main way most providers meet the 21st Century Cures Act requirement to give patients timely electronic access to their health information.
Typical ranges are $28,000–$60,000 for a portal MVP or a set of extensions to your EHR's existing portal, $70,000–$160,000 for an integrated web and mobile portal, and $180,000–$380,000+ for an enterprise, multi-facility platform. The biggest cost drivers are the number of EHR and billing integrations, mobile apps, proxy and accessibility requirements, and how many languages you support. Hosting, payment processing and SMS fees are ongoing costs on top.
A portal MVP or EHR portal extension usually takes 8–12 weeks, an integrated web and mobile portal 3–5 months, and an enterprise platform 6–10 months. EHR vendor access and app-review processes often set the pace more than development does, so we start those requests in the first week.
Use your EHR's portal, such as Epic MyChart, when it covers most of what your patients need and your organization runs on that one EHR. Extend it with SMART on FHIR apps and integrations when a few workflows are missing. Build custom patient portal software when you run several EHRs, when your service lines need workflows or branding the vendor portal can't support, or when you are a healthtech company and the portal is your product. We'll give you an honest recommendation in the discovery call, including when the answer is "don't build".
Yes. We integrate through each vendor's supported interfaces: FHIR R4 APIs and SMART on FHIR app launch, HL7 v2 feeds (ADT, SIU, ORU) through Mirth Connect or Iguana, and vendor-specific APIs where required. We have delivered 20+ EHR, EMR and HIS integrations, and we work with Epic, Oracle Health (Cerner), athenahealth, eClinicalWorks, NextGen, Allscripts (Veradigm) and OpenEMR.
The information-blocking rules expect electronic health information, including most results, to be available to patients without unnecessary delay. Delays are allowed only where an exception applies, for example a documented Preventing Harm determination or a patient's own request to wait for a clinician's call. We build configurable release rules mapped to those exceptions, show plain-language context next to results and log every release and delay. Your compliance and legal teams set the policy; the portal enforces it consistently.
Yes. We build FHIR R4 APIs to the US Core profiles and USCDI data classes, with SMART App Launch and OAuth 2.0, so patients can connect the apps they choose. For payers, we build the CMS Patient Access API, including the prior authorization information impacted payers must add to it from January 2027.
The HHS Section 504 rule requires web content and mobile apps of federally funded healthcare organizations to meet WCAG 2.1 AA, with compliance dates now set at May 11, 2027 for organizations with 15 or more employees and May 10, 2028 for smaller ones. Section 1557 and the ADA add non-discrimination and language-access expectations. We design and test to WCAG 2.2 AA, which covers 2.1 AA and adds requirements around focus, target size and accessible authentication.
Parents, guardians and caregivers get their own login linked to the patient's account, with permissions set by role, for example scheduling and billing only, or full record access. For adolescents, access changes automatically by age and follows your state's confidentiality rules, so some records stay private to the teen. Every proxy action is logged.
We build portals to HIPAA and HITECH requirements: encryption at rest and in transit, multi-factor and passwordless authentication, role-based access, session controls, audit logs of every view and download, and hosting on HIPAA-eligible cloud services with BAAs in place. HIPAA has no official certification, so we document each control so you can show auditors how it is met.
Most organizations need both. A responsive web portal reaches every patient without a download; a native or cross-platform app adds biometric sign-in, push notifications for results and appointments, and faster repeat use. We often launch the web portal first and add iOS and Android apps on the same back end.
Yes. We build multilingual interfaces with the patient's language preference stored on their profile, translated forms and education content, and language-assistance notices in line with Section 1557. AI translation can speed up messaging, but clinical text is reviewed by a qualified person before it reaches the patient.
Yes. We add statements, card and digital-wallet payments, payment plans and Good Faith Estimates for self-pay and uninsured patients, connected to your billing or RCM system. Payments run through a PCI DSS-certified gateway so card data never touches your servers.
We track enrollment rate, active use, self-scheduled appointments, online payments and message volume, and compare them with front-desk call volume and no-show rates before and after launch. The dashboards are live from day one, so you can see which features patients use and which need work.
Yes, with a human in the loop. We use AI to route messages by urgency, draft replies for staff to edit, explain results in plain language and help patients book or complete forms by chat. Anything that reaches a patient as clinical advice is reviewed by your care team, and every AI action is logged.
Yes. We migrate accounts, proxy relationships, message history and documents, run the old and new portals in parallel where needed, and redirect patients without forcing everyone to re-enroll. Where the old portal is part of a legacy system, we modernize the back end at the same time.
Yes. Behavioral health portals need 42 CFR Part 2 consent handling for substance-use records, careful proxy rules, telehealth for ongoing therapy and assessments such as PHQ-9 and GAD-7. We build those controls into the portal from the first sprint.
Because the portal is only as good as its interfaces. QSS has 16+ years in healthcare, 100+ healthcare projects, dedicated HL7, FHIR, Mirth Connect and Iguana practices and 20+ EHR, EMR and HIS integrations delivered. We bring our own eSignature, Remote Patient Monitoring and DICOM/PACS Viewer products as accelerators, deliver under CMMI Level 3 and ISO 27001 processes, and will tell you when extending your EHR's portal is the better choice. Button: View All FAQs
