PeopleCare 2.0

Kurzmedi, a German healthcare services company, needed to modernize their patient management system to handle 50,000+ patient records while maintaining strict GDPR compliance. Their existing infrastructure was fragmented across multiple tools, causing friction for both patients and staff.

The primary challenge: create a system accessible to elderly patients (60–90 years old) who struggle with traditional username/password authentication, while implementing enterprise-grade security and comprehensive audit trails required by German healthcare regulations.

My role was to architect and build the complete platform from database design to user interface, focusing on zero-friction authentication and bulletproof compliance.

The Challenge

90% login failure. Elderly patients (average age 75+) were abandoning the old system. Support calls for "password reset" represented 60% of all inquiries.

Compliance risk. Lack of proper consent management, audit trails, and data isolation created significant legal exposure for sensitive medical data.

Manual work. Staff spent 15+ hours per week on manual contract generation and email notifications, with no single source of truth.

The Solution

Token-based magic links. 90-day validity with self-service regeneration — eliminating passwords entirely. Result: zero login-related support calls.

GDPR by design. Row-Level Security enforcing patient data isolation, explicit consent tracking, and complete audit logging from day one.

Automated patient journey. Workflow automation for welcome emails, confirmations, and reminders — saving 15 hours per week.

Key Features

The patient status portal presents a clean, card-based interface with three clear states: pending, active, completed. The medical questionnaire is a 7-step intake form capturing conditions and daily routine, auto-generating a German-language summary for staff.

A role-based coordination dashboard handles patient management, contracts, transport, and finance. Medical documents live in private storage with patient-scoped access, virus scanning, and a full audit trail. The contract system generates PDFs into a private bucket with signed URLs, and email automation delivers branded templates via n8n.

What I Learned

Usability is security. When users cannot access a system, they invent unsafe workarounds — writing passwords down, sharing accounts. Simplification was the security win, not a trade-off against it.

GDPR first. Regulatory requirements cannot be an afterthought; they must dictate database architecture from day one. Retrofitting row-level isolation is far more expensive than designing for it.

Automation ROI is concrete. 15 hours per week saved equals roughly €23,400/year in operational cost — the system paid for itself within months.