A complete product map for solo GPs, specialists, dental, aesthetic clinics, multi-branch chains, and SME medical groups — with PDPA, MyInvois, SST, TPA panels, WhatsApp, multilingual UX, and local payments as first-class capabilities.
Shared infrastructure with hard isolation so independent clinics and clinic groups can coexist safely.
Every clinical, billing, and file record is scoped by tenant/clinic with server-enforced filters.
RLS-style policies + automated isolation testsHQ owns multiple brands/branches with shared master data and local autonomy for P&L.
Cascading roles · shared formulary · branch brandingPer-tenant logo, colours, domain, WhatsApp sender, invoice letterhead.
Custom domain + themed patient portalEnable EMR, pharmacy, full HIS-lite modules by commercial plan.
Per-tenant kill-switch from super-adminShared appointment inventory, stock, and rosters across outlets.
WebSocket events per clinic and branchPrefer Malaysia-region storage; document residency in DPA.
Region pin + export restrictionsProvision, suspend, offboard, legal hold, encrypted export pack.
Automated offboarding checklistPlatform operator manages tenants, health, abuse, SaaS billing.
Time-boxed impersonation with full auditLongitudinal care records with Malaysian identity norms and PDPA-safe consent.
Single identity per tenant with merge/unmerge of duplicates.
Fuzzy match on name + IC + phone + DOBStructured ID fields; optional OCR from card photo.
Masked IC + access loggingParent–child and household relationships for paediatric and family panels.
Shared billing wallet with consentTimeline of visits, diagnoses, meds, labs, images.
Dental chart · aesthetic photo timelineActive problems, allergies, adverse reactions with hard stops on prescribe.
Override requires reason + auditPurpose-based consents: treatment, marketing, research, TPA.
Versioned text · e-sign · revokeReferrals, labs, imaging, consents with tagging and expiry.
Patient portal share linksMulti-visit aesthetic/dental journeys with progress tracking.
Auto-reminders on lagging plansFrom online booking to discharge — optimised for busy Malaysian front desks.
Doctors, rooms, chairs, lasers, hygienists with conflict engine.
Equipment-bound capacity for aesthetic/dentalPortal and WhatsApp deep-link booking with deposits.
E-wallet deposit holdLive board and phone status updates.
Estimated wait modelAuto-fill cancellations by priority.
WhatsApp claim with timeoutRegistration → triage → consult → procedure → dispense → payment.
Real-time kanban across countersNearest available slot in the group network.
Group competitive advantageVirtual visit types with video link and note skeleton.
Hybrid follow-up pathwaysSpeed without sacrificing medico-legal quality — AI is assistive and audited.
SOAP, dental charting, aesthetic procedure notes.
Specialty packs per tenantDictation in English, BM, and mixed code-switch.
PHI boundary controlsSummarise consult into structured draft.
Doctor accept required · full AI draft auditDose, duration, local SIG language, max-dose rules.
Interaction checks on formularyPDF with QR verification for employers.
Anti-tamper verify portalBefore/after and imaging markup with consent-gated portal gallery.
Aesthetic outcome trackingDrug–drug, pregnancy, renal dosing prompts.
Configurable strictness per tenantMalaysia-native revenue stack: MyInvois, SST, panels, FPX and e-wallets.
Generate/submit individual and consolidated e-invoices with rejection handling.
Mandatory compliance · multi-TIN groupsTax classification, exempt categories, tax-relief mapping for healthcare vs retail.
Product-level tax codesEligibility, guarantee letters, claim packs for GE, AIA, Prudential, Allianz, etc.
Panel fee schedules · settlement boardFPX, Touch ’n Go, GrabPay, Boost, cards with webhook reconciliation.
Unified payment ledgerPrepaid credits redeemable across branches with rules.
Aesthetic/dental business model nativeProcedure deposits and payment plans with dunning.
WhatsApp payment linksCompany accounts and monthly consolidated e-invoice.
Occupational health readySafety, expiry control, and high-value aesthetic lot tracking.
Store room, branch, and treatment-room ledgers.
Near real-time stockPick by expiry; quarantine expired lots.
Waste reduction alertsStronger audit and dual signature dispense.
Legal risk controlToxins, fillers, threads lot → patient implant log.
Traceability for high-value stockScan-to-receive and scan-to-dispense on mobile handhelds.
Accuracy at scaleLeast privilege across multi-branch teams and shared front-desk devices.
Roles plus attributes (branch, specialty).
Custom role builder per tenantEmergency elevate with reason and forced review.
Clinical emergency safetyAPC, indemnity, training expiry with auto block if lapsed.
Credentialing automationDoctor/therapist revenue share statements.
Aesthetic sales culture supportOwner dashboards for ops, quality, finance, and marketing funnel.
Today’s appointments, queue, revenue, no-shows by role.
Role-tailored widgetsRevenue by service/doctor/branch and AR ageing including panel lag.
Cash control for SME groupsLead → consult → package sold with WhatsApp campaign ROI.
Aesthetic growth analyticsTenant health, churn risk, module adoption.
Usage-based packaging insightsWhatsApp-first, multilingual, consent-aware outreach.
Reminders, results-ready, payment links, rebooking templates.
Default Malaysian patient channelBahasa Malaysia, English, Mandarin, Tamil.
Patient language preference on chartBook, pay, view summaries, upload documents.
Mobile-first self-serviceBroadcast only to opted-in segments.
PDPA-safe growthChronic meds, aesthetic top-ups, dental hygiene recalls.
Smart cadencePDPA programme, immutable trails, encryption, DR — built for procurement and trust.
DPA templates, ROPA-lite, retention schedules, DSAR workflow.
Enterprise procurement readyWho viewed/changed PHI, billing, exports.
Tamper-evident log streamTLS in transit; encrypted PHI at rest; optional field-level for IC.
Defence in depthFreeze deletion for disputes by patient/case.
Litigation readinessTenant-aware backups with published RPO/RTO.
Tested restore drillsOpen APIs so clinics are not locked out of labs, accounting, payments, and future HIE.
Partner ecosystem with replay protection.
Extensible platformLHDN channel with multi-TIN for groups.
Mandatory tax integrationFPX and major e-wallets into one reconciliation ledger.
Collections reliabilityOrder out, result in via HL7/FHIR adapters where available.
Clinical speedMap to Xero / AutoCount / SQL Account chart of accounts.
SME finance friendlyFHIR R4 resources and patient match for national exchange class systems.
Future MySejahtera / HIE pathSAML/OIDC for enterprise clinic groups.
IT policy complianceCompete beyond classic EMR: AI, telemedicine, interoperability, and revenue integrity.
Suggest urgency from symptoms with disclaimers — not a diagnosis engine.
Guardrails + auditVideo, e-script, e-payment in one pathway.
Hybrid care beyond KLRoom audio → draft note with strict consent.
Doctor productivity with redactionDetect under-coding / missed charges with explainable suggestions.
Leakage controlFHIR API gateway and SMART-on-FHIR apps per tenant.
Ecosystem platformShort-stay procedure tracking with OT checklist.
ASC-ready expansionWin themes vs MedicalMet, Curo, Relify, Clinica and peers.
Built for chains and platforms, not only single-clinic installs.
PDPA workflows + MyInvois + SST + TPA as first-class modules.
Multilingual templates, not email-centric UX.
FPX + major e-wallets with automated reconciliation.
Assistive notes, queue, and revenue integrity — never silent auto-file.
Inventory, roster, and booking for multi-outlet groups.
API, webhooks, FHIR readiness for labs, accounting, and future HIE.
ZiplyClinic · Malaysia multi-tenant CMS vision · 2026-07-25 ·
Back to login ·
Markdown source: docs/MY_MULTI_TENANT_CMS_PRODUCT_VISION.md