Telehealth Patient Portal Modernization
Legacy Salesforce-based patient portal → modern Next.js app with Contentful CMS, React Native mobile, and GraphQL support request handling.
Company
K HealthRole
Fullstack Developer
Tech Stack
Product in one sentence
A complete modernization of a legacy Salesforce-based patient portal to a contemporary Next.js web app powered by Contentful CMS, with React Native mobile support and a robust GraphQL backend for managing patient support requests.
My role
Led the full migration from Salesforce to a modern Next.js + Contentful stack, enabling non-technical teams to manage portal content independently. Owned both frontend architecture and the NestJS GraphQL backend service handling support requests. New partner clinics can now get a fully branded, accessible portal within an hour instead of several days.
What I did
- •Built a Next.js frontend integrated with Contentful CMS, enabling content updates via SSR without requiring programmer intervention—medical teams can publish changes instantly.
- •Implemented medical-grade accessibility (WCAG AAA compliance) including keyboard navigation, screen reader optimization, color contrast ratios, and semantic HTML—critical for healthcare portals.
- •Created a NestJS GraphQL backend service for managing patient support requests with full validation pipeline before submission.
- •Integrated GCP Cloud Storage for secure photo uploads in support requests, with server-side validation, file type checking, and encryption at rest.
- •Built a reusable React/Next.js component library for medical dashboards and complex forms, with Jest/Playwright tests and performance metrics.
- •Implemented JWT-based auth and role-based access control (RBAC) across Next.js and NestJS services, ensuring patient data privacy.
- •Designed secure infrastructure with HTTPS, CORS policies, Content Security Policy (CSP), and HIPAA-aligned data handling practices.
Impact & Results
Enabled self-service content management via Contentful CMS.
Medical teams can now update portal content, FAQs, and clinic information in real-time via SSR without waiting for developer releases. New clinics launch in ~1 hour vs. several days.
Achieved medical-grade accessibility and HIPAA compliance.
Raised accessibility from basic WCAG A to AAA compliance, critical for medical software. Passed all healthcare security audits and accessibility certifications.
Streamlined patient support requests with validation and secure photo uploads.
Patients can attach photos to support requests with client/server-side validation. Files stored securely in GCP with encryption. Support team receives organized, validated submissions.
Built reusable component library and raised performance metrics.
Cut duplicated UI by ~40%, reduced development time from days to hours. Lighthouse scores from low 80s to 95+, improving user experience across all clinics.
Implemented enterprise-grade security and RBAC.
Hardened with JWT auth, role-based access control, CORS, CSP, and data encryption. Passed penetration testing and security audits for healthcare environments.
Next Project
Maps & Data
Advanced Geospatial Editor & Map Tools