Home / Platform / Patient Portal

Module 08 · Patient portal

Not a read-only mirror. The actual record.

A patient is a user. The note the clinician signs is the note the patient reads — one record, your brand, not ours.

Riverside Family Medicine M Good morning, Maria Everything in one place — your record, your phone. UPCOMING APPOINTMENT Annual physical · Dr. Rivera Thu, Jun 12 · 9:15 AM · in person Check in DR Dr. Rivera “Your labs look great — keep it up. Let’s…” NEW MESSAGE Lab results ready A1c 6.1% · Lipid panel · all in range View BALANCE · after insurance $30.00 Pay My Health Records 3 treatment plans · labs · meds · notes Open Home Messages Records Bills

Try it · Self-scheduling

Patients book themselves — in four taps, at 9pm.

This is the live wizard, end to end. Notice what happens on the last step: rev.health verifies coverage and shows a real cost estimate before the appointment is booked — not as a surprise bill weeks later. Only resource-feasible slots ever appear, because the scheduler solves against rooms, staff, and equipment in real time.

app.rev.health/portal — Book appointment
1 Provider 2 Date 3 Time 4 Confirm
Choose a provider to begin

The signature mechanic

One identity, every practice — and a who-viewed-my-chart trail.

Because the Patient and User entities share a primary key, the patient carries one portable record across every rev.health practice they visit. And because there's no separate “patient view” that quietly skips access controls, the same audit that protects the chart is the one the patient can read.

Portable patient record across practices with a read-access audit trail A central patient identity connects to three practices (a family medicine clinic, a cardiology practice, and an urgent care), each contributing facts to one global record. To the right, a who-viewed-my-chart access-audit trail lists each read with the viewer, their authority, and the timestamp — including a flagged outside-org access. ONE PORTABLE RECORD — Patient = User, shared primary key Maria Garcia global record PatientID = UserID Rivera Family Medicine problems · meds · notes Bay Cardiology consult note · echo QuickCare Urgent visit · Rx (source-stamped) each fact keeps its SourceOrganizationID WHO VIEWED MY CHART — read-access audit (patient-visible) Dr. Rivera — treating clinician care relationship · today 9:14 am · full chart Tasha O. — MA, rooming care relationship · today 9:02 am · vitals + meds ? Dr. Chen — Bay Cardiology (outside org) authorization chain: active referral · Apr 12 · problems + labs Sam P. — billing, claim 84412 operational scope · Apr 14 · demographics + coverage only Sensitive categories — mental health, 42 CFR Part 2, HIV, genetic, reproductive — each gate on an independent consent flag, enforced at the API layer. The trail is tamper-resistant and immune to soft-delete.

A new patient arriving from another rev.health practice shows up with live structured history — not a faxed PDF dump — and every read of their chart, by anyone, writes an entry the patient can see. Full View-Download-Transmit rights ship as C-CDA, FHIR Bundle, and SMART on FHIR app launch.

The problem

Today's portals are bolted-on afterthoughts.

Stale subsets of the chart. Phone-tag messaging. A separate login from scheduling and billing. Sensitive categories either overexposed or hidden entirely — never consent-gated. And the legally required view-download-transmit rights reduced to a manual export button.

Whitelabeled for your practice

The patient's trust relationship is with their care team, not a technology company — so every surface the patient sees is branded for the practice. Your domain, your logo, your colors. Notifications come from your practice name. Bill-pay receipts come from your merchant account. rev.health appears once: “Powered by rev.health” in the footer.

A record that follows the patient

Because rev.health spans every practice the patient visits, the portal presents one unified longitudinal view — contributions from every consented practice converge into a single record, with each fact's source preserved in the audit trail. Switching practices doesn't reset a patient's history; it travels with them.

Key capabilities

Everything a patient needs, nothing they have to call for.

Secure messaging

Threaded patient-practice messaging with attachments (the rash photo, the wound-healing progress), routed into staff queues with SLA tracking. Median response target: one business day.

Self-scheduling

Slot picker filtered by provider, visit type, and insurance status. Booking creates the appointment and fires the eligibility check automatically.

Plain-language AVS

The after-visit summary arrives with an AI-generated plain-language version at a 6th-grade default reading level and multi-language translation — diagnoses, meds, follow-ups, and care-plan tasks a person can actually act on.

View, Download, Transmit

The longitudinal record viewable in full, downloadable as C-CDA or FHIR Bundle, and transmittable to third-party apps via SMART on FHIR. Every VDT action logged with its authorization chain.

Bill pay & payment plans

Outstanding statements, online payment, and self-service payment-plan enrollment — under the practice's brand, settled to the practice's account.

Sensitive-class consent gating

Mental health, substance use (42 CFR Part 2), HIV, genetic, and reproductive health categories each require explicit patient consent before display — enforced at the API layer, not the UI.

Family & proxy access

Parents, guardians, and authorized caregivers get consent-chain proxy access with state-by-state minor-consent rules enforced — and every proxy read writes an audit entry.

Pre-visit digital intake

Patients complete intake, verify imported data, and update medications before the visit — feeding the clinical intake flow instead of a clipboard.

Document upload

Insurance cards, advance directives, outside records, consent forms — uploaded to the patient-owned document store and routed to the practice's intake queue.

Rx tracking & CheapRX

Every active prescription with real-time status (Written → Filled → Due for Renewal). CheapRX finds the lowest price at nearby pharmacies and embeds coupons in the eRx. One-click reorder on due-for-renewal meds — no phone tag, no separate discount app.

Workflow

A Tuesday evening, from the patient's couch.

Message the practice

“The new med is making me dizzy.” It lands in the clinical queue with an SLA — not in a voicemail box.

Book the follow-up

Three feasible openings for Dr. Lee this week, cost estimate included. Booked in four taps at 9:04 pm.

Re-read the AVS

The plain-language version explains the dose change the way the doctor said it — because it was generated from what the doctor said.

Pay the balance

$30 copay from the last visit, paid in the same session. The practice's statement cycle never has to print an envelope.

Check who's seen the chart

The access log shows every read, by whom, under what authorization. Trust, verifiable.

Who benefits

Patient

Messages, results, scheduling, bills, and their full record — one login, their doctor's brand, their phone.

Caregiver / proxy

A parent sees their 14-year-old's immunizations and visits through a real consent chain — not a shared password.

Front desk

Self-scheduled appointments arrive in the queue; document uploads route themselves; call volume drops.

Clinician

Clinical messages triaged in the inbasket, AVS delivery confirmed, patient-uploaded documents in the reconciliation queue.

WCAG 2.2 AA, 100% of portal pages. Accessibility is a release gate with automated plus manual audit — not a backlog item.

Rx dashboard · Phase 3 in development

Your meds. Your prices. One tap to reorder.

The patient's Rx tab shows every active prescription with real-time status from Surescripts fill notifications. CheapRX compares cash prices and insurance copays across 70,000+ pharmacies. When the cash price wins, the coupon is already in the eRx. One tap renews. No phone call. No GoodRx card to show at the counter.

Active Rx with live status

Every prescription tracked: Written → Sent → Filled → Active → Due for Renewal. You see what your doctor prescribed, whether the pharmacy has it, and how many days of supply remain. No more calling the pharmacy to ask.

CheapRX price comparison

Tap "Find cheaper" on any medication to see cash vs copay at nearby pharmacies, with CheapRX coupons pre-applied. If cash is cheaper than your insurance copay, the coupon is embedded in the prescription automatically. No separate app needed.

One-click reorder

When a prescription is due for renewal, the Reorder button sends a renewal request straight to your doctor's task queue. Your doctor approves with one click — same drug, same pharmacy, same CheapRX coupon. No fax, no phone tag, no 48-hour callback window.

Rx tracking and CheapRX are Phase 3 in development. Basic prescription status and messaging ship in Phase 2. The full price-comparison, one-click reorder, and adherence-nudge experience is shown in the demo now so you can see where we're headed.

My Health Records

Treatment plan PDFs, front and center.

When patients open their health records, the first thing they see is their treatment plan — as a shareable, printable PDF. Not a maze of tabs. Not buried in a clinical note. A clear document that says: here's what we're doing, here's where you are, here's what's next.

Treatment plan PDFs

Every active treatment plan rendered as a patient-friendly PDF: condition, goals, current medications, milestones reached, and next actions. Shareable with specialists, caregivers, and family. Always current — regenerated from the live chart on every view.

Progress at a glance

Each plan shows a visual timeline: milestones completed (green checks), milestones upcoming (open circles), and the next action with a due date. Patients see exactly where they stand without reading clinical jargon.

One-tap share & print

Share a treatment plan PDF with a new specialist, a caregiver, or a family member directly from the portal. Or print it for the waiting room. No portal login required for the recipient — it's a standard PDF, not a tethered link.

Treatment plan PDFs are the #1 item in My Health Records. Below the plans: lab results, medication list, encounter summaries, imaging, and the full longitudinal record. Plans come first because that's what patients actually need.

Performance targets

The numbers this module is built to hit.

MetricTarget
Portal adoption (login ≥ 1×/quarter)≥ 60% within 12 months — vs. ~30% industry baseline
Patients completing a VDT action within 6 months≥ 80% of registered users
Practice-to-patient message response (non-urgent)≤ 1 business day median
New appointments booked via portal within 12 months≥ 40%
Patient responsibility collected via portal within 12 months≥ 25%
WCAG 2.2 AA conformance100% of pages, automated + manual audit
Sensitive-category consent gating100% coverage, API-enforced

Standards & patient-rights plumbing

The access rights, as product surfaces.

SMART on FHIR app launch VDT — C-CDA & FHIR Bundle export USCDI v3 21st Century Cures (no info-blocking) 42 CFR Part 2 consent gating Read-access audit (patient-visible) WCAG 2.2 AA State minor-consent & proxy rules

View-Download-Transmit is a first-class product surface, not a compliance checkbox — every VDT action is logged with its authorization chain, and proxy access runs on a real consent chain rather than a shared password.

Give your patients their record — under your brand.

A portal patients actually use: 60% quarterly adoption is the design target, not the dream.

Join the waitlist