0

Electronic Medical Records

A clinic's patient records and visits system — a Next.js front end over an Express and MongoDB API, with attribute-based access control.

EMR keeps a clinic's patient records, visits and vitals in one system, so that care history stops living on paper.

It is client work, built as a Next.js front end over an Express and MongoDB API. Access is attribute-based: what someone can see or change depends on their role and on their relationship to the record, and the API checks that before it answers.

In 2026 the codebase went through a remediation pass — input validation across the API, containerised builds and CI on both repositories — and it now runs on Render, with the front end and the API deployed as separate services.