HIPAA-aligned patient engagement platform

The problem

Patients complained about everything: scheduling required three phone calls, lab results arrived by mail two weeks late, and there was no way to message a clinician without a portal account that nobody could log into. The existing vendor portal had 14% adoption after 4 years.

How we approached it

• Started from the patient journey, not the EHR. Mapped 23 friction points end-to-end before writing a line of code.
• Built an integration layer that abstracts Epic, the three legacy LIS systems, and the billing platform into a single FHIR-aligned API.
• Designed for HITRUST from day one — not retrofitted. Every code path has data classification, audit, and access policy attached at the type level.
• Phased rollout by service line: internal medicine, then ambulatory surgery, then oncology.

Top Kingwin's compliance posture was the reason we picked them — but the reason we extended was that the patients actually use it.

— CIO, client-side sponsor

What changed

• Portal adoption hit 61% within 9 months of launch — 4× the previous vendor.
• Appointment no-shows dropped 28% from automated reminders + self-rescheduling without phone friction.
• HITRUST certified on first audit attempt. SOC 2 Type II followed 9 months later.

Engagement details

Stack: Go, PostgreSQL, FHIR, React, iOS / Android, Twilio, AWS GovCloud
Duration: 16 months from kickoff to phase-3 launch
Team: Architect + 9 engineers + clinical UX lead + compliance officer + 2 SREs
Engagement model: Full-cycle delivery with ongoing managed-operations agreement

Names and identifying details have been redacted where contractually required. The unredacted case packet — including architecture diagrams, commercial structure, and reference contacts — is available under mutual NDA.

Request the full packet →