Patient Records Portal
Patients get a PIN-protected link to their own visits, diagnoses, prescriptions, and files
The Records Portal lets a patient see their own medical history, and share it with any doctor, through a personal link protected by a 4-digit PIN. No app or account is needed.
How it works
Patient asks on WhatsApp
The patient asks for their file, for example "ممكن ملفي". If the phone number has family members, the AI asks whose file they want.
Patient sets a PIN
The first time, the AI asks the patient to choose a 4-digit PIN.
Patient gets the link
The AI sends a personal link on patients.docistra.com.
Open and enter the PIN
Anyone with the link and the PIN can open the records in a browser.
What the portal shows
| Section | Contents |
|---|---|
| Patient info | Name, gender, date of birth or age, insurance details |
| Appointments | Past and upcoming visits (not cancelled ones) with date, doctor, symptoms, diagnosis, and prescription, including the prescription PDF when there is one |
| Files | Documents and images saved to the patient's file |
The portal is read-only. Records are only changed by the clinic in the dashboard. Doctor notes and private notes are never shown to the patient.
Link with the PIN included
Adding ?pin=1234 to the link verifies automatically when it opens, then removes the PIN from the address bar:
https://patients.docistra.com/ar/<patient-id>?pin=1234The portal is available in Arabic (/ar/) and English (/en/). Links from WhatsApp open in Arabic.
Forgotten PIN
The patient sends something like "نسيت الكود" to the clinic on WhatsApp. The AI clears the old PIN and asks for a new 4 digits. Anyone already viewing with the old PIN is signed out.
Security
Docistra stores a one-way hash of the PIN, tied to that patient.
After a correct PIN, the browser stays signed in for 24 hours. Resetting the PIN ends all sessions.
After 5 wrong PINs, the portal locks for 30 minutes. Repeated guessing from one device is also blocked.
The link itself doesn't change. To stop someone you shared it with, the patient resets their PIN.