ZiplyClinic Product Vision

Advanced multi-tenant Clinic Management System for Malaysia

A complete product map for solo GPs, specialists, dental, aesthetic clinics, multi-branch chains, and SME medical groups — with PDPA, MyInvois, SST, TPA panels, WhatsApp, multilingual UX, and local payments as first-class capabilities.

1. Core multi-tenant architecture & platform

Shared infrastructure with hard isolation so independent clinics and clinic groups can coexist safely.

Tenant isolation (row + policy)

Every clinical, billing, and file record is scoped by tenant/clinic with server-enforced filters.

RLS-style policies + automated isolation tests

Clinic groups & franchises

HQ owns multiple brands/branches with shared master data and local autonomy for P&L.

Cascading roles · shared formulary · branch branding

White-label branding

Per-tenant logo, colours, domain, WhatsApp sender, invoice letterhead.

Custom domain + themed patient portal

Feature flags / packages

Enable EMR, pharmacy, full HIS-lite modules by commercial plan.

Per-tenant kill-switch from super-admin

Multi-branch real-time

Shared appointment inventory, stock, and rosters across outlets.

WebSocket events per clinic and branch

Data residency controls

Prefer Malaysia-region storage; document residency in DPA.

Region pin + export restrictions

Tenant lifecycle

Provision, suspend, offboard, legal hold, encrypted export pack.

Automated offboarding checklist

Super-admin control plane

Platform operator manages tenants, health, abuse, SaaS billing.

Time-boxed impersonation with full audit

2. Patient management & EMR

Longitudinal care records with Malaysian identity norms and PDPA-safe consent.

Unified patient master index

Single identity per tenant with merge/unmerge of duplicates.

Fuzzy match on name + IC + phone + DOB

MyKad / passport capture

Structured ID fields; optional OCR from card photo.

Masked IC + access logging

Family / dependent linking

Parent–child and household relationships for paediatric and family panels.

Shared billing wallet with consent

Longitudinal chart

Timeline of visits, diagnoses, meds, labs, images.

Dental chart · aesthetic photo timeline

Problem list & allergies

Active problems, allergies, adverse reactions with hard stops on prescribe.

Override requires reason + audit

Consent register

Purpose-based consents: treatment, marketing, research, TPA.

Versioned text · e-sign · revoke

Document vault

Referrals, labs, imaging, consents with tagging and expiry.

Patient portal share links

Care plans & packages

Multi-visit aesthetic/dental journeys with progress tracking.

Auto-reminders on lagging plans

3. Appointment, queue & patient flow

From online booking to discharge — optimised for busy Malaysian front desks.

Multi-resource scheduling

Doctors, rooms, chairs, lasers, hygienists with conflict engine.

Equipment-bound capacity for aesthetic/dental

Online booking + walk-in

Portal and WhatsApp deep-link booking with deposits.

E-wallet deposit hold

Digital queue / token

Live board and phone status updates.

Estimated wait model

Smart waitlist

Auto-fill cancellations by priority.

WhatsApp claim with timeout

Care pathway stages

Registration → triage → consult → procedure → dispense → payment.

Real-time kanban across counters

Cross-branch booking

Nearest available slot in the group network.

Group competitive advantage

Tele-consult slots

Virtual visit types with video link and note skeleton.

Hybrid follow-up pathways

4. Clinical documentation & AI-assisted features

Speed without sacrificing medico-legal quality — AI is assistive and audited.

Structured templates

SOAP, dental charting, aesthetic procedure notes.

Specialty packs per tenant

Voice-to-note (MY languages)

Dictation in English, BM, and mixed code-switch.

PHI boundary controls

AI note assist

Summarise consult into structured draft.

Doctor accept required · full AI draft audit

e-Prescription

Dose, duration, local SIG language, max-dose rules.

Interaction checks on formulary

MC / medical certificates

PDF with QR verification for employers.

Anti-tamper verify portal

Image annotation

Before/after and imaging markup with consent-gated portal gallery.

Aesthetic outcome tracking

Clinical decision support

Drug–drug, pregnancy, renal dosing prompts.

Configurable strictness per tenant

5. Billing, invoicing, payments & insurance claims

Malaysia-native revenue stack: MyInvois, SST, panels, FPX and e-wallets.

LHDN MyInvois e-Invoice

Generate/submit individual and consolidated e-invoices with rejection handling.

Mandatory compliance · multi-TIN groups

SST engine

Tax classification, exempt categories, tax-relief mapping for healthcare vs retail.

Product-level tax codes

Panel / TPA workflows

Eligibility, guarantee letters, claim packs for GE, AIA, Prudential, Allianz, etc.

Panel fee schedules · settlement board

FPX & e-wallets

FPX, Touch ’n Go, GrabPay, Boost, cards with webhook reconciliation.

Unified payment ledger

Packages & memberships

Prepaid credits redeemable across branches with rules.

Aesthetic/dental business model native

Deposits & instalments

Procedure deposits and payment plans with dunning.

WhatsApp payment links

Corporate panels

Company accounts and monthly consolidated e-invoice.

Occupational health ready

6. Pharmacy / inventory & dispensary

Safety, expiry control, and high-value aesthetic lot tracking.

Multi-location stock

Store room, branch, and treatment-room ledgers.

Near real-time stock

Batch & expiry (FEFO)

Pick by expiry; quarantine expired lots.

Waste reduction alerts

Controlled drugs register

Stronger audit and dual signature dispense.

Legal risk control

Aesthetic consumables

Toxins, fillers, threads lot → patient implant log.

Traceability for high-value stock

Barcode / QR scan

Scan-to-receive and scan-to-dispense on mobile handhelds.

Accuracy at scale

7. Staff, roles & access control

Least privilege across multi-branch teams and shared front-desk devices.

RBAC + ABAC hybrid

Roles plus attributes (branch, specialty).

Custom role builder per tenant

Break-glass access

Emergency elevate with reason and forced review.

Clinical emergency safety

Credential vault

APC, indemnity, training expiry with auto block if lapsed.

Credentialing automation

Commission rules

Doctor/therapist revenue share statements.

Aesthetic sales culture support

8. Analytics, reporting & business intelligence

Owner dashboards for ops, quality, finance, and marketing funnel.

Ops dashboard

Today’s appointments, queue, revenue, no-shows by role.

Role-tailored widgets

Financial BI

Revenue by service/doctor/branch and AR ageing including panel lag.

Cash control for SME groups

Marketing funnel

Lead → consult → package sold with WhatsApp campaign ROI.

Aesthetic growth analytics

Super-admin SaaS metrics

Tenant health, churn risk, module adoption.

Usage-based packaging insights

9. Patient engagement & communication

WhatsApp-first, multilingual, consent-aware outreach.

WhatsApp Business API

Reminders, results-ready, payment links, rebooking templates.

Default Malaysian patient channel

Multilingual UI & messages

Bahasa Malaysia, English, Mandarin, Tamil.

Patient language preference on chart

Patient portal / PWA

Book, pay, view summaries, upload documents.

Mobile-first self-service

Consent-filtered campaigns

Broadcast only to opted-in segments.

PDPA-safe growth

Care reminders

Chronic meds, aesthetic top-ups, dental hygiene recalls.

Smart cadence

10. Security, compliance & audit

PDPA programme, immutable trails, encryption, DR — built for procurement and trust.

PDPA programme pack

DPA templates, ROPA-lite, retention schedules, DSAR workflow.

Enterprise procurement ready

Immutable audit trails

Who viewed/changed PHI, billing, exports.

Tamper-evident log stream

Encryption

TLS in transit; encrypted PHI at rest; optional field-level for IC.

Defence in depth

Legal hold

Freeze deletion for disputes by patient/case.

Litigation readiness

Backup & DR

Tenant-aware backups with published RPO/RTO.

Tested restore drills

11. Integrations & extensibility

Open APIs so clinics are not locked out of labs, accounting, payments, and future HIE.

REST + signed webhooks

Partner ecosystem with replay protection.

Extensible platform

MyInvois connector

LHDN channel with multi-TIN for groups.

Mandatory tax integration

Payment gateways

FPX and major e-wallets into one reconciliation ledger.

Collections reliability

Lab / imaging interfaces

Order out, result in via HL7/FHIR adapters where available.

Clinical speed

Accounting export

Map to Xero / AutoCount / SQL Account chart of accounts.

SME finance friendly

HIE / FHIR readiness

FHIR R4 resources and patient match for national exchange class systems.

Future MySejahtera / HIE path

SSO / SCIM

SAML/OIDC for enterprise clinic groups.

IT policy compliance

12. Advanced / future-ready features

Compete beyond classic EMR: AI, telemedicine, interoperability, and revenue integrity.

AI triage assistant

Suggest urgency from symptoms with disclaimers — not a diagnosis engine.

Guardrails + audit

Telemedicine suite

Video, e-script, e-payment in one pathway.

Hybrid care beyond KL

Ambient clinical listening (optional)

Room audio → draft note with strict consent.

Doctor productivity with redaction

AI revenue integrity

Detect under-coding / missed charges with explainable suggestions.

Leakage control

Interoperability mesh

FHIR API gateway and SMART-on-FHIR apps per tenant.

Ecosystem platform

Day-care / ambulatory lite

Short-stay procedure tracking with OT checklist.

ASC-ready expansion

Competitive positioning

Win themes vs MedicalMet, Curo, Relify, Clinica and peers.

1. True multi-tenant + white-label

Built for chains and platforms, not only single-clinic installs.

2. Malaysia-native compliance

PDPA workflows + MyInvois + SST + TPA as first-class modules.

3. WhatsApp-first engagement

Multilingual templates, not email-centric UX.

4. Modern payments

FPX + major e-wallets with automated reconciliation.

5. Auditable AI

Assistive notes, queue, and revenue integrity — never silent auto-file.

6. Cross-branch real-time

Inventory, roster, and booking for multi-outlet groups.

7. Open integration surface

API, webhooks, FHIR readiness for labs, accounting, and future HIE.

ZiplyClinic · Malaysia multi-tenant CMS vision · 2026-07-25 · Back to login · Markdown source: docs/MY_MULTI_TENANT_CMS_PRODUCT_VISION.md