Role-aware access control
More backend policy work in exchange for clearer clinical boundaries.
Clinify
A role-aware clinic system for appointments, consultations, records, and real-time patient communication.
- React / Vite
- Node / Express
- MongoDB
- Agora
A clinic has
more than
one viewpoint.
Patients, doctors, and administrators need different things from the same system. Clinify brings appointments, clinical records, and consultation tools into workflows shaped around those roles.
Clinify · connected workflows
PatientDoctorAdmin
One clinic.
Connected.
The patient’s way in
Clinify’s patient-facing build for Gynae Care Center in Lahore: booking, services, and clinic information. Capturing this build does not measure production usage.
Local release build, captured September 2026
The public surface
Everything a patient can reach without an account. The clinical workflows sit behind role-aware authentication and are deliberately not pictured here.
Production build, captured September 2026One appointment, end to end
Booking a slot, traced through the running system.
The SPA is served from Vercel's edge. The frontend and backend ship through two independent pipelines — Vercel auto-deploys on push, the API is released by hand onto EC2.
Decisions.
And their cost.
Token-authenticated real-time consultation tooling
External SDK complexity in exchange for managed video and chat sessions.
Separate patient and practitioner workflows
More interface states to maintain in exchange for a focused experience for each role.
What's
in the system.
- Role-based access for patient, doctor, and admin workflows
- Agora chat and token renewal integrated
- MongoDB persistence with input-safety middleware
What this
proves. And
what it doesn't.
- A running patient-facing build for Gynae Care Center
- Role-aware access enforced in backend policy
- Real-time consultation with token refresh and a REST fallback
- Rate limiting, Helmet, and NoSQL sanitization in the request path
- Scale, uptime, and latency
The next
hard question.
The next iteration should make operational observability as deliberate as the application architecture.
Next: Materna