Provider and Patient Portals
Self-Service Is Only
Self-Service If It Finishes
The Challenge
Enrollment is not adoption, and adoption is not completion
Requests that generate work rather than remove it
Two audiences bundled into one project
Identity proofing where activation dies
Message volume nobody resourced
A second place to look
Portal-first widening the gap it should close
A portal can retrieve information from the EHR perfectly and still leave the user unable to act on it.
Our Approach
Design from the completion path backwards
Step 1
Identify the tasks worth moving
Step 2
Trace each task to completion
Step 3
Define the transaction boundary
Step 4
Assess feasibility honestly
Step 5
Separate the two audiences
Step 6
Design identity and access proportionately
Step 7
Design message and request triage before launch
Step 8
Design for reach
Step 9
Build and integrate
Step 10
Launch, measure completion and iterate
A portal offering six things that complete reliably outperforms one offering twenty where half generate a callback. Scope by what can complete, not by what can be displayed.
Capabilities
Extend, wrap or build, decided deliberately
Most organizations already have a vendor portal. The question is rarely whether to have a portal and almost always what to do about the one you have.
| Option | When It Fits | What It Costs You |
|---|---|---|
| Extend the Vendor Portal | The vendor covers most tasks and the gaps are configuration or content rather than capability. | Constrained by vendor roadmap and design, and some experiences cannot be achieved at all. |
| Wrap and Unify | Multiple portals or systems exist and the problem is a fragmented experience rather than missing function. | An integration and identity layer to build and operate, and a dependency on every underlying system. |
| Build a Custom Experience | A differentiating experience is genuinely required and the tasks cannot complete within the vendor product. | A permanent product commitment with its own roadmap, support model and security obligations. |
Design
Task and Journey Analysis
Experience and Interface Design
Accessibility and Inclusive Design
Content and Language Strategy
Build and Integrate
Portal Development and Modernization
EHR and System Integration
Identity, Access and Proxy
Payments and Financial Experience
Operate
Message and Request Triage
Completion Instrumentation
Adoption and Enablement
Content and Task Lifecycle
We will frequently recommend against building a custom portal. If the tasks can complete inside the vendor product with configuration and workflow change, that is cheaper to build, cheaper to run and does not create a second place patients have to look. Where we do recommend building, we will be explicit that you are taking on a product with a permanent roadmap, support and security obligation.
Where It Applies
The third column decides whether it is worth building
| Task | Completes Without Staff When | Otherwise It Becomes |
|---|---|---|
| Appointment Booking | Real availability, provider rules, visit type and duration are exposed and bookable directly. | A request in a queue, and a callback the patient did not want. |
| Rescheduling and Cancellation | The same rules apply and the slot is genuinely released back. | A message someone processes, usually after the slot could have been refilled. |
| Results Access | Release rules are configured and the result is comprehensible without interpretation. | An anxious phone call, which is worse than not publishing it. |
| Prescription Refill Requests | The request routes into the clinical authorization workflow with everything needed. | Another item in an inbox with information missing. |
| Bill Payment and Plans | Balance is accurate, payment posts back automatically and plans are set within policy. | A payment that posts days later and a patient who calls to check. |
| Forms and Pre-Visit Intake | Responses land in the record as structured data, not as a PDF someone re-keys. | Digital data entry followed by manual data entry. |
| Records Access and Sharing | The request is fulfilled within expected timeframes without manual assembly. | A release of information queue, and a possible compliance exposure. |
| Messaging | A triage model exists and routine questions are answered without a clinician. | Inbox volume on people who were not resourced for it. |
Provider and referrer tasks
| Task | Completes Without Staff When | Otherwise It Becomes |
|---|---|---|
| Referral Submission | Required clinical information is captured at submission and validated before it is accepted. | An incomplete referral and a chase, which is the current problem in a new format. |
| Referral Status | Status is genuinely visible end to end, including scheduling and outcome. | A phone call from the referring office, which is what the portal was meant to prevent. |
| Scheduling into Your Capacity | Referrers can book directly against real availability within defined rules. | A request queue, and the referral going elsewhere next time. |
Every Journey Needs an Exception Path
Self-scheduling breaks on existing appointments, inactive plans, referral or authorization requirements, scheduling restrictions, uncertain identity, clinical triage needs and no suitable availability. The portal should know what happens next.
Status Transparency Is Workflow Automation
Referrer Experience Is a Growth Question, Not an IT One
Experience
Personalization means showing less, not more
The next action first
Plain language, tested with real readers
Measure Each Journey as Its Own Funnel
Started
Completed
Abandoned / Corrected
Called / Re-routed
Identity Proofing Is Where Reach and Security Collide
Match verification strength to the sensitivity of what the task exposes, so a low-risk action is not gated behind the same barrier as accessing a full record.
Integration
The portal is a surface. The work happens behind it.
Real scheduling depth
Structured write-back
Financial round trip
Identity resolution
Proxy and caregiver access
Referrer identity and scoping
Adolescent records, behavioural health, substance use, reproductive health and results with significant findings can carry release considerations that vary by category, jurisdiction and sometimes clinical judgement. Configure and review these rules deliberately, with legal and clinical oversight.
Trust
A portal is a product, and products need owners
Security and privacy
- Authentication, session handling and account recovery designed for a population that includes shared devices and shared email addresses
- Verification strength proportionate to what the task exposes, decided as policy rather than inherited from a default
- Proxy and caregiver access with defined lifecycle, including the age transitions that change what a proxy may see
- External provider access scoped to organization, role, affiliation and purpose, and removed when the underlying relationship ends rather than persisting indefinitely
- Access and disclosure logging capable of answering who viewed which patient information and under what authority
Accessibility and reach
- Recognized accessibility standards met and tested with assistive technology, not asserted from a component library
- Language coverage matched to your population, including content maintenance rather than a one-time translation
- Performance on older devices and poor connections treated as a requirement, since that is the reality for many users
- A usable non-digital path that is not a deliberately degraded channel, so a portal-first strategy does not become an access barrier for the people who need access most
Product governance
- A named product owner accountable for adoption and completion, not only for uptime
- A task lifecycle process for adding, improving and retiring, so the interface does not accumulate features nobody uses
- Clinical leadership involvement in anything touching messaging, results release or triage
Operational readiness
- Task-level monitoring that detects a broken completion path, since a task can fail silently after an upstream change
- A support model for users who cannot get in, which is a meaningful share of the population and usually unresourced
- Message and request volume monitored against the triage model, with escalation when clinician load rises
Task-level completion monitoring catches the scheduling rule change or upstream dependency that makes a task fail at the final step even while the page itself still loads.
Outcomes
Completed tasks, effort removed, and who was left out
| Category | What We Measure | Why It Matters |
|---|---|---|
| Completion | Share of started tasks finishing without staff involvement, and drop-off point by task. | The measure that changes how the portal gets designed. |
| Effort Removed | Calls, messages and manual steps eliminated per task, in staff hours. | The business case, and the number a CFO funds from. |
| Adoption Depth | Sustained use at 30, 90 and 180 days and tasks used per active user, not accounts created. | Enrollment is the vanity metric in this category. |
| Clinician Load | Message volume reaching clinicians, response burden and triage effectiveness. | The cost side of the ledger, and the thing that decides whether clinicians support the next release. |
| Reach and Equity | Activation and completion by language, age, geography and coverage. | Whether a portal-first strategy is closing a gap or widening one. |
| Referrer Performance | Referral submission completeness, time to schedule, and referral capture retained. | The growth case for the provider portal, which is usually funded as infrastructure. |
That is a permanent operating change and it needs a resourcing decision before launch, not a review afterwards.
Build a portal people actually use
Start with the clinical workflow, not the ambient AI platform.
Bring us a specialty or clinical setting where clinicians are spending too much time creating notes. We will assess where ambient documentation fits, what must remain clinician controlled, how it should integrate with your EHR, and how to measure whether it is actually reducing burden.
- AI Agents and Workflow Automation
- Voice and Conversational AI
- Document AI and Intelligent Processing
- Generative AI and Enterprise Copilots
- AI Strategy and Governance
- HCC and Risk Adjustment Analytics
Security & Compliance
