Home Features Specification Launch Platform
Product Specification & System Design

MED360 RPM

Remote Patient Monitoring Platform — Designed for Canada’s Healthcare Environment. Full system specification covering architecture, alert logic, clinical workflows, and investor summary.

Version 1.0
Date March 2026
Status Confidential
Region Canada
1
Executive Summary

MED360 is a comprehensive, cloud-native Remote Patient Monitoring platform built specifically for Canada’s healthcare ecosystem. The platform enables patients to submit daily health readings from connected home devices, receive automated intelligent alerts, and connect in real time with their clinical care team through secure video consultations.

The platform addresses a critical gap in Canadian healthcare: the management of high-risk patients between clinical visits. By combining smart alert logic, escalation workflows, role-based access, and telehealth capabilities, MED360 reduces emergency admissions, improves outcomes, and supports clinicians across primary care, cardiology, respirology, and endocrinology.

Target Conditions
ConditionKey ParametersPrimary UsersAlert Priority
Heart FailureBP, weight, HR, SpO2Cardiologist, NurseHIGH
HypertensionSystolic / Diastolic BPGP, NurseMODERATE
COPDSpO2, HR, symptomsRespirologist, NurseHIGH
DiabetesWeight, BP, symptomsEndocrinologist, NurseMODERATE
Key Value Propositions
  • Continuous monitoring of patients with chronic conditions from home
  • Intelligent 3-level alert engine that routes the right message to the right person
  • Clinician-configurable thresholds per patient and per care pathway
  • Real-time secure video consultations between patient and care team
  • Full audit trail compliant with Canadian privacy legislation (PIPEDA / provincial health acts)
  • Interoperable architecture ready for integration with provincial EMRs and wearable APIs
2
System Architecture
Architecture Layers
LayerComponents
Client LayerFlutter Mobile App · React/Next.js Web Dashboard · Connected Devices (Bluetooth/Wi-Fi)
API GatewayHTTPS REST API · OAuth 2.0 + JWT · Rate limiting · Request validation
Application LayerLaravel/ASP.NET Core · Alert Engine · Notification Service · Video Call Service · Auth Service
Data LayerPostgreSQL (primary) · Redis (cache/queues) · Encrypted blob storage
Integration LayerSMS Gateway (Twilio/Vonage) · WebRTC/Agora Video · Wearable APIs · HL7 FHIR adapter
InfrastructureAWS Canada (ca-central-1) or Azure Canada Central · Docker/Kubernetes · CI/CD · WAF
Technology Stack
Laravel / ASP.NET Core 8
Backend API
React 18 + Next.js 14
Web Dashboard
Flutter 3.x
iOS & Android App
PostgreSQL 16
Primary Database
Redis 7
Cache & Job Queues
Twilio / Vonage
SMS Gateway
WebRTC + Agora.io
Video Calls
AWS ca-central-1
Canadian Cloud
HL7 FHIR R4
Interoperability
Data Flow (9 Steps)
  1. Patient submits reading via mobile app or device Bluetooth sync
  2. API Gateway validates JWT token and request schema
  3. Reading stored in PostgreSQL with patient ID, timestamp, and device type
  4. Alert Engine compares reading against patient-specific thresholds
  5. If threshold exceeded, Alert Engine classifies Level 1, 2, or 3
  6. Notification Service enqueues SMS job(s) in Redis queue
  7. Queue worker sends SMS via Twilio/Vonage within 30 seconds
  8. Dashboard flag updated in real time via WebSocket push
  9. Full audit log entry created for every action taken
3
Smart Alert Engine
Vital Signs Thresholds
Vital SignNormalLevel 1 — MildLevel 2 — ModerateLevel 3 — Critical
Systolic BP< 140 mmHg140–159 mmHg160–179 mmHg≥ 180 OR < 90 mmHg
Diastolic BP< 90 mmHg90–99 mmHg100–109 mmHg≥ 110 mmHg
SpO2≥ 95%92–94%88–91%< 88%
Heart Rate60–100 bpm101–110 / 55–59111–130 / 50–54> 130 OR < 50 bpm
Weight Gain< 1 kg / 24h1–2 kg / 24h2–3 kg / 24h> 3 kg / 24h (HF)
Emergency Symptom Flags

The following reported symptoms trigger a Level 3 Emergency Alert immediately, regardless of vital sign values:

Emergency SymptomSystem Action
Chest pain or pressureImmediate Level 3 → Call 911 instruction
Severe shortness of breathImmediate Level 3 → Call 911 instruction
Confusion or altered consciousnessImmediate Level 3 → Call 911 instruction
Fainting or loss of consciousnessImmediate Level 3 → Call 911 instruction
Blue lips or fingertips (cyanosis)Immediate Level 3 → Call 911 instruction
Inability to speak comfortablyImmediate Level 3 → Call 911 instruction
Three-Level Escalation Framework
Level 1
Patient Alert Only
  • Single mild abnormal reading
  • No severe symptoms reported
  • SMS to patient with self-care guidance
  • Dashboard flag: YELLOW
  • Auto-escalates if repeated in 24h
Level 2
Doctor / Nurse Alert
  • Repeated or moderate reading
  • Worsening trend detected
  • Symptom + abnormal combination
  • SMS to nurse AND doctor
  • Dashboard flag: ORANGE — 4h
Level 3
Emergency Alert
  • Critical reading or danger symptom
  • Patient: “Call 911 NOW” SMS
  • Urgent SMS to doctor & nurse
  • Dashboard flag: RED — locked
  • Escalate to on-call in 15 min
4
User Roles & Permissions
Role-Based Access Control (RBAC)
RolePrimary ResponsibilitiesKey Permissions
PatientSubmit readings, answer symptom checks, attend video callsView own records · Submit readings · Receive alerts · Join video calls
NurseMonitor assigned patients, respond to Level 1–2 alerts, video check-insView assigned patients · Acknowledge alerts · Initiate video call · Add notes
DoctorClinical oversight, configure thresholds, respond to Level 2–3All nurse permissions + configure thresholds + prescribe actions
Clinic AdminManage clinic users, assign patients, view analyticsManage users within clinic · View aggregate reports · Clinic settings
Super AdminPlatform-wide administration, multi-tenant managementFull platform access · All clinics · System config · Audit logs
Patient Journey
  1. Patient enrolled by clinic admin — receives onboarding SMS/email
  2. Patient downloads mobile app and completes profile setup
  3. Patient connects home devices via Bluetooth or manual entry
  4. Each morning patient submits daily readings (BP, weight, SpO2, HR)
  5. Patient answers daily symptom check-in (5 questions, under 2 minutes)
  6. Alert Engine evaluates readings against personal thresholds
  7. Patient receives SMS feedback: all-clear, guidance, or emergency instruction
  8. If Level 2+, patient notified that care team has been alerted
  9. If nurse/doctor initiates video call, patient receives push notification and SMS
  10. Patient joins video call — clinician reviews readings live and adds notes
Doctor / Nurse Workflow
  1. Clinician logs in to web dashboard
  2. Dashboard shows prioritised patient list: RED > ORANGE > YELLOW > GREEN
  3. Clinician selects a flagged patient to view full reading history and trend charts
  4. Clinician acknowledges alert — logs timestamp and name
  5. Clinician can send message, initiate video call, or adjust thresholds
  6. Video call window opens — patient vitals panel visible alongside video
  7. Post-call notes saved to patient record with timestamp
  8. If escalation needed, clinician triggers Level 3 manually from dashboard
5
Communication & Notification System
SMS Templates
Level 1 — Patient Self-Care
SMS to Patient
[MED360] Your blood pressure reading of [VALUE] mmHg is slightly elevated. Please rest, reduce salt intake, and recheck in 2 hours. If you feel unwell, contact your clinic. Reply STOP to unsubscribe.
Level 2 — Care Team Notification
SMS to Nurse
[MED360 ALERT] Patient [NAME] (DOB [DATE]) has a moderate BP reading: [VALUE] mmHg. Trend: [TREND]. Please review dashboard and contact patient within 4 hours. Case #[ID].
SMS to Doctor
[MED360 ALERT] Dr. [NAME] — Your patient [PATIENT] has a Level 2 alert. Nurse [NURSE] has been notified. Dashboard: [LINK].
SMS to Patient (Level 2)
[MED360] Your care team has been notified about your recent reading. A nurse will contact you within 4 hours. If symptoms worsen, call 911 immediately.
Level 3 — Emergency
SMS to Patient
[MED360 EMERGENCY] Your reading indicates a medical emergency. CALL 911 NOW or go to your nearest emergency room immediately. Your care team has been alerted.
SMS to Doctor & Nurse
[MED360 CRITICAL] URGENT: Patient [NAME] has a Level 3 emergency alert. Reading: [VALUE]. Symptom: [SYMPTOM]. Please respond immediately. Dashboard: [LINK]. Case #[ID].
Video Call Workflow (11 Steps)
  1. Clinician clicks “Video Call” button on patient card in dashboard
  2. System checks patient availability status (online/offline in app)
  3. WebRTC/Agora session initiated — unique encrypted room ID generated
  4. Patient receives in-app push notification and SMS with join link
  5. Patient clicks link or notification to join from mobile app
  6. Video session begins — clinician sees patient vitals panel alongside video
  7. Session is end-to-end encrypted per PIPEDA requirements
  8. Clinician can capture screenshots of abnormal readings during call (with consent)
  9. On call end, clinician adds structured notes (reason, assessment, plan, follow-up date)
  10. Call record saved: duration, timestamp, participants, notes, recording consent status
  11. Patient receives post-call summary via in-app message
6
Dashboard Requirements
Doctor / Nurse Clinical Dashboard
PanelContent & Function
Alert Summary BarReal-time count of RED / ORANGE / YELLOW alerts with one-click filters
Patient Priority ListSorted by severity. Shows name, condition, latest reading, alert level, last contact
Trend Charts7-day / 30-day sparklines for BP, SpO2, HR, weight per patient. Highlights threshold breaches
Active AlertsUnacknowledged alerts sorted newest first. Acknowledge button with mandatory note
Pending Follow-upsPatients requiring callback, post-call note completion, or threshold review
Video Call ButtonOne-click initiation per patient. Shows availability status. Call history accessible
Patient NotesChronological note feed per patient. Clinician can add text, attach file, or flag for review
Escalation HistoryFull log of all alerts, acknowledgements, escalations, and actions with actor and timestamp
Patient Mobile App — Screen List
Home Dashboard
Today’s readings summary, alerts, next reminder, care team quick-contact button
Submit Reading
Manual entry or BLE sync for BP, SpO2, HR, weight. Timestamp auto-captured
Symptom Check-In
Daily 5-question symptom survey (yes/no + severity scale). Triggers alert if danger flag selected
Alerts & Messages
Inbox of all in-app alerts, self-care guidance, and care team messages
Video Call Screen
Incoming call notification with accept/decline. Full-screen video with mute/camera controls
Readings History
7-day and 30-day charts for each vital sign. Export to PDF for GP visits
Medication Reminders
Clinician-configured medication schedule. Push reminders. Confirmation tap
Emergency Card
Always-accessible: emergency contacts, 911 instruction, nearest ER locator
Profile & Devices
Connected device management, notification preferences, language selection
7
Database Design

PostgreSQL 16 is used as the primary relational database with row-level security enforced for patient data isolation. All PHI columns are encrypted at the application layer using AES-256.

TableKey FieldsPurpose
usersid, name, email, role, clinic_id, status, created_atAll platform users — polymorphic role
patientsuser_id, dob, health_card, province, care_pathway, assigned_doctor_id, assigned_nurse_idPatient demographics and care assignments
readingsid, patient_id, type, value, unit, device_id, submitted_at, alert_triggeredAll vital sign submissions
thresholdspatient_id, reading_type, level1_min/max, level2_min/max, level3_min/max, set_byPersonalized configurable thresholds
alertsid, patient_id, reading_id, level, type, triggered_at, acknowledged_by, acknowledged_atFull alert lifecycle tracking
notificationsid, alert_id, recipient_id, channel, message, sent_at, delivered, delivery_receiptSMS and push notification log
video_callsid, initiator_id, patient_id, room_id, started_at, ended_at, duration, notes, consentVideo consultation records
symptom_checkinsid, patient_id, submitted_at, chest_pain, shortness_of_breath, confusion, fatigueDaily symptom survey responses
audit_logsid, user_id, action, resource_type, resource_id, ip_address, timestamp, metadataImmutable audit trail — append-only
medicationsid, patient_id, name, dose, frequency, start_date, end_date, prescribed_byMedication schedule for reminders
clinicsid, name, province, health_authority, admin_id, sms_config, video_configMulti-tenant clinic configuration
8
Clinical Safety & Compliance
Canadian Privacy Compliance
  • PIPEDA (Personal Information Protection and Electronic Documents Act) — federal baseline
  • PHIPA (Ontario) / HIA (Alberta) / PIPA (BC) — provincial health privacy acts
  • Data residency: all patient data stored in Canadian AWS/Azure regions
  • Explicit informed consent captured at onboarding with full audit record
  • Right to access, correct, and delete personal health information built in
Security Controls
ControlImplementation
Encryption in transitTLS 1.3 enforced on all endpoints. HSTS headers. Certificate pinning in mobile app
Encryption at restAES-256 for PHI database columns. Key management via AWS KMS / Azure Key Vault
AuthenticationOAuth 2.0 + JWT (15-min expiry). MFA mandatory for clinicians. Biometric unlock for patient app
AuthorizationRBAC enforced at API level. Row-level security in PostgreSQL for patient data isolation
Audit loggingImmutable append-only log. Cannot be deleted by any role including Super Admin
Penetration testingAnnual third-party pen test. Automated DAST/SAST in CI/CD pipeline
Incident response72-hour breach notification SLA per PIPEDA. Documented runbook. On-call rotation
Clinical Threshold Governance
  • Default thresholds set by clinical advisory board at platform level
  • Clinic medical directors can override defaults for their organisation
  • Individual doctors can set patient-specific thresholds — changes logged with rationale
  • Threshold change history preserved and cannot be retroactively altered
  • Pathway templates: Heart Failure, COPD, Hypertension, Diabetes — pre-configured and peer-reviewed
  • System will not allow thresholds outside physiologically plausible ranges
9
Complete UI Page List
PageRole AccessKey Features
Login / MFAAllEmail + password + TOTP/SMS MFA. SSO via provincial IdP
Main DashboardDoctor, NurseAlert summary, patient priority list, trend sparklines, video call buttons
Patient DetailDoctor, NurseFull reading history, trend charts, alert log, notes, medications, video call
Alert ManagementDoctor, NurseAll active/resolved alerts with filters. Acknowledge with note. Bulk actions
Video CallDoctor, NurseWebRTC call window with patient vitals panel. Notes capture. Recording consent
Threshold ConfigDoctorPer-patient threshold editor. Pathway templates. Change history
Patient EnrolmentClinic AdminOnboard new patient. Assign doctor/nurse. Configure devices. Send welcome SMS
User ManagementClinic AdminAdd/edit/deactivate users. Role assignment. Clinic-wide settings
AnalyticsClinic AdminAggregate trends. Alert response times. Reading compliance rates. Export
Audit LogSuper AdminImmutable log viewer with filters. Export to CSV
System ConfigSuper AdminSMS gateway config. Video provider keys. Default thresholds. Maintenance mode
10
Investor & Grant Summary

MED360 addresses one of the most pressing challenges facing Canada’s healthcare system: the management of chronically ill patients between clinical visits. With more than 3.2 million Canadians living with heart failure, COPD, hypertension, or diabetes, and with an ageing population accelerating demand for home-based care, the need for intelligent remote monitoring has never been greater.

Market Opportunity
  • Canadian digital health market projected at $3.8 billion CAD by 2027
  • RPM reimbursement pathways established or emerging in ON, BC, AB, QC
  • Average cost saving: $2,400 CAD per avoided hospital readmission
  • Target: 100 clinics, 50,000 patients in Year 3
Competitive Differentiation
FeatureMED360Typical Competitors
Canadian data residencyYES — mandatoryOften US-based
3-level smart alert engineYES — configurableBasic threshold alerts
Integrated video callsYES — built-inThird-party only
Per-patient thresholdsYES — clinician-setGlobal defaults only
Bilingual EN/FRYES — Charter compliantEnglish only typically
FHIR-ready APIYES — HL7 FHIR R4Proprietary / siloed
Canadian Funding Streams
  • Canada Health Infoway — Digital Health Solutions fund
  • CIHR — Health System Impact Fellowships & Digital Health grants
  • NRC IRAP — Industrial Research Assistance Program for health tech SMEs
  • OTF (Ontario Trillium Foundation) — Community health technology grants
  • SDTC — Sustainable Development Technology Canada
  • MaRS Health — Toronto-based digital health accelerator program
Clinical Validation Pathway
  1. Phase 1: Pilot with 2 clinics, 200 patients — 6 months
  2. Phase 2: Efficacy study measuring readmission reduction — 12 months
  3. Phase 3: Multi-province rollout with provincial health authority partnership
  4. Phase 4: COTS submission and national scale with Infoway partnership
Contact
For partnership inquiries, pilot program applications, or investor information — contact the MED360 team. Platform built in Canada, for Canada.
Launch Platform Demo → Download Full Spec (.docx) ← Back to Home