Gwalior Hospital — Patient Portal
A secure, cloud-hosted patient portal and online appointment system that transformed front-desk operations for a 120-bed multi-specialty hospital in Gwalior — cutting wait times and giving patients 24×7 self-service access to appointments and reports.
The Challenge
The hospital's front-desk was the daily bottleneck. From 8 AM onwards the reception phone lines would jam, walk-in queues for appointments would spill into the lobby, and patients with no way to book or reschedule online would line up just to confirm a slot. Records lived on paper registers and a fragmented on-premise EMR — there was no single source of truth for appointments, patient demographics or report distribution.
Each consultant's daily OPD slot list was maintained manually, leading to frequent double-bookings and patient disputes. Lab and radiology reports were handed out physically — patients made repeat trips just to collect a printout. Reception staff spent the bulk of their day on the phone rather than attending to in-person patients, and the hospital's own patient-satisfaction survey showed the front-desk experience was the lowest-rated touchpoint.
Hospital leadership also flagged a growing compliance risk. Patient data sat on a single on-premise server with no off-site backup, shared logins between staff, and no audit trail — exposing the institution to data-breach liability under India's Digital Personal Data Protection (DPDP) Act, 2023. They needed a portal, but they also needed it to be defensible from a security and compliance standpoint.
"Our reception counter was chaos by 9 AM. Patients waited 45 minutes just to confirm an appointment. We knew we needed a portal, but we had no idea where to start — and we couldn't risk patient data." — Dr. R____, Medical Director
Our Solution
Curio began with a two-week on-site discovery — shadowing front-desk staff, OPD coordinators and the billing team, mapping every appointment, registration and report-distribution workflow, and auditing the existing EMR's API surface. The goal was not to bolt a portal onto a broken process, but to fix the process and then digitise it.
We designed and built a Next.js patient portal with OTP-based authentication, role-based access for patients, staff and consultants, and a read-only integration layer over the existing EMR through a secure API gateway. Patients can book, reschedule or cancel appointments, download lab and radiology reports, view bills and make payments — all online, in English or Hindi, from any device.
The architecture was built for India's mobile-first reality: SMS and WhatsApp notifications, OTP login (no passwords to forget), lightweight pages that load on 2G connections, and full Hindi/English bilingual UI. The portal was deployed on AWS ap-south-1 (Mumbai) for low latency across Madhya Pradesh, with TLS 1.3 everywhere, encrypted PostgreSQL storage at rest, automated daily snapshots replicated to a second AWS region, role-based access with full audit logging, and a third-party penetration test before go-live.
-
DiscoveryTwo-week on-site workflow audit, EMR API assessment and security baseline.
-
DesignPortal + mobile-first UX, OTP auth flow, EMR integration blueprint, bilingual UI design.
-
ImplementationNext.js build, secure OTP authentication, AWS ap-south-1 deployment, encrypted PostgreSQL.
-
TestingThird-party penetration test, load test simulating peak OPD hours, accessibility audit.
-
LaunchStaff training for 40+ users, phased department-wise rollout, printed SOP handbook in English & Hindi.
Results & Impact
Within the first month of go-live, the hospital onboarded over 7,500 patients onto the portal; the 15,000-patient milestone was crossed at the 90-day mark. OPD wait times at the front desk dropped from an average of 22 minutes to under 9, and reception phone-call volume fell by 40% as patients shifted to self-service booking and rescheduling. The double-booking disputes that used to consume the medical superintendent's mornings all but disappeared.
From a compliance standpoint, the audit log, encrypted storage and off-site backups closed every gap flagged in the initial assessment — giving leadership defensible peace of mind under their DPDP Act obligations. Consultants now open their morning OPD list on a tablet instead of a printed register, and the billing team processes payments through the portal instead of over the counter.
"The portal paid for itself in three months. Our front desk is finally calm, our patients love the SMS confirmations, and for the first time we have a real audit trail on who accessed what record. Curio's team understood healthcare — not just technology." — Dr. R____, Medical Director
Services Used
Web Development
The Next.js patient portal — fast, mobile-first, bilingual and built to handle peak OPD traffic.
Explore serviceInformation Security
OTP auth, TLS 1.3, encrypted storage, audit logging and a pre-launch penetration test.
Explore serviceCloud Deployment
AWS ap-south-1 hosting with cross-region backups and 99.9% uptime SLA.
Explore service