Public Patient Portal Overview

The public patient portal exposes branded, unauthenticated experiences for patients and partners outside the staff login — online report lookup, home sampling requests, and marketing pages on optional custom domains.

Portal components

flowchart TB
    P[Public visitor] --> R[Report lookup]
    P --> H[Home sampling booking]
    P --> M[Marketing pages]
    R --> API[Public API]
    H --> API
    M --> CDN[Static content]
    API --> TEN[(Tenant DB)]

Staff workflows remain in the authenticated tenant portal. Public routes do not require lab user credentials.

Public routes (lab portal app)

Route	Feature
/public/report or branded path	Report lookup
/home-sampling	Home sampling
Marketing	Pricing, services, contact

Exact paths may vary with custom domain routing.

Branding

Public pages inherit tenant branding:

Asset	Source
Logo	Lab settings upload
Lab name	Tenant profile
Colors	Theme configuration
Contact phone	Settings footer

Consistent branding builds patient trust on report lookup pages.

Security model

Principle	Implementation
No staff session	Public endpoints only
Tokenized report access	Invoice/report number + secret
Rate limiting	Platform reverse proxy
Tenant isolation	Slug or domain resolves tenant
HTTPS	Required in production

Public APIs are listed under Public API.

Minimum disclosure

Report lookup reveals only the requesting patient's results — never directory search across all patients.

Relationship to notifications

When staff send report ready SMS (SMS module), messages often include a public lookup URL:

sequenceDiagram
    participant Lab
    participant Patient
    Lab->>Patient: SMS with link
    Patient->>Lab: Public lookup form
    Lab->>Patient: PDF / result view

Ensure URL matches active custom domain to avoid phishing suspicion.

Home sampling funnel

1. Patient submits booking on public form.
2. Request queues in lab portal home sampling.
3. Staff confirms phlebotomist visit.
4. Invoice created with home collection charges.

Custom domains

Enterprise plans may map results.yourlab.com to EaseLab-hosted public pages — see Custom Domain.

Read-only mode

Public lookup and home sampling intake generally remain available when lab subscription is in read-only mode — patients can still access historical reports. Confirm deployment policy for new booking acceptance.

Compliance

Topic	Guidance
Consent	Privacy policy link on forms
Data retention	Match lab regulatory requirements
Cookies	Cookie policy page in marketing site
Accessibility	Mobile-friendly report view

Related documentation

• Report Lookup
• Home Sampling Booking
• Custom Domain
• How-To: Send Report to Patient