Project 09 of 39 · Backend and web
Healthcare Diagnostic API
Multi-tenant FastAPI backend for healthcare records covering patients, test requests, and lab results. Authorization follows the AWS IAM shape, where atomic permissions compose into permission sets and then into roles. Records use soft deletes to keep an auditable history, and credentials are hashed with Argon2.
01Overview
A multi-tenant backend for healthcare organisations such as hospitals, clinics and diagnostic laboratories, covering patient records, test requests and results.
The standout piece is the permission model, which borrows its shape from AWS IAM: atomic permissions compose into permission sets, and permission sets compose into roles.
02How it is built
- Tenant isolation between facilities is structural rather than a convention, so a clinic cannot reach another clinic's records.
- Authorization is data rather than hardcoded checks, so a facility can define what a role means without a code change.
- Records use soft deletes, which keeps an auditable history instead of destroying it.
- Credentials are hashed with Argon2.