V VMMS
GCC Employment Visa Medical Examinations

One system, every station of the visa medical

From reception to certificate โ€” registration, doctor exams, lab, X-ray, blood, and vaccination in a single, auditable workflow built for high-volume clinics.

9

Role-based stations

6

Exam stations tracked

AES-256

Field-level encryption

100%

Audit-logged changes

Built around the clinic floor

Every station โ€” from the front desk to certificate issuance โ€” has a dedicated, permission-scoped view.

๐Ÿงพ

Reception & Registration

Token-based registration, returning-patient detection, and vaccine selection per country rules.

๐Ÿฉบ

Doctor Examination

Structured medical exam entry with FIT / UNFIT decisioning and full patient history at a glance.

๐Ÿงช

Lab & Serology

Biochemistry, serology, urine and stool results with role-separated write access.

๐Ÿฉป

X-Ray & DICOM

DICOM upload and radiology status tracking, kept separate from clinical write access.

๐Ÿฉธ

Haematology

Dedicated blood-panel station enforcing strict separation of duties from serology.

๐Ÿ’‰

Vaccination & Stock

Per-branch vaccine stock deduction with live low-stock alerts on the admin dashboard.

๐Ÿ“ก

Live Status Tracker

Real-time station-by-station patient board so every desk knows what's next.

๐Ÿ“Š

Reports & Exports

Filterable, cached reporting for revenue, throughput and fitness outcomes.

๐Ÿ“ฑ

SMS Notifications

Automated registration, result and certificate SMS alerts to every patient.

One patient, five stations, one token

A registration flows through the same stations every clinic already runs โ€” just tracked end to end.

๐Ÿงพ

Reception

๐Ÿฉบ

Medical

๐Ÿงช

Lab

๐Ÿฉธ

Blood

๐Ÿฉป

X-Ray

Category 1 data, treated like it

Passport numbers, phone numbers and clinical results never sit in the database as plain text. Every access and every change is accountable.

  • โœ“ Field-level AES-256 encryption for passport, phone and lab values
  • โœ“ Searchable blind-index (HMAC-SHA256) โ€” no plaintext scans, ever
  • โœ“ Role-based access control enforced server-side on every route
  • โœ“ Insert-only audit trail: every view and every change is logged
  • โœ“ Argon2id password hashing, rate-limited login and exports

Access is role-scoped

Super Admin Admin Reception Doctor Lab X-Ray Blood Nurse Report Viewer

Reception can register a patient but never write a medical result. Blood staff can never touch serology. Every boundary is enforced in middleware, not just hidden in the UI.

Verify a fitness certificate

Employers and agencies can confirm a certificate's authenticity using the certificate number printed on it.