The verdict in three sentences
A custom patient portal for a private clinic in Miami costs USD 45,000 to 90,000 in 2026, driven mainly by how deep the integration with the electronic health record (EHR) goes. HIPAA-eligible hosting with a signed Business Associate Agreement adds USD 450 to 1,300 a month and is not optional once protected health information is stored. The project pays back through shorter front-desk waits and freed admin time, provided FHIR and patient identity matching are scoped from day one.
What a patient portal costs in 2026
The typical scope covers three moments: pre-admission before the procedure, signature of informed consent, and delivery of discharge documents (summary, prescriptions, follow-up appointments).
| Component | Scope | Cost 2026 |
|---|---|---|
| Online pre-admission | Form, documents (ID, insurance card), anesthesia questionnaire | USD 13,000 to 22,000 |
| Electronic consent | Timestamped e-signature, document versioning | USD 7,000 to 13,000 |
| Discharge documents | Push from the EHR, notification, secure download | USD 9,000 to 17,000 |
| Strong authentication | SSO for staff, OTP or identity verification for patients | USD 4,500 to 9,000 |
| EHR integration | HL7 v2 feeds or FHIR API (ADT, documents) | USD 9,000 to 22,000 |
| Front-desk dashboard | Complete files, missing documents, reminders | USD 3,500 to 7,000 |
| Total project | Depending on scope | USD 45,000 to 90,000 |
The gap between the low and high end comes mostly from integration: an EHR that already exposes clean FHIR APIs, as required by the ONC Cures Act rules, costs about half as much to connect as a system that only speaks HL7 v2 through an interface engine.
HIPAA hosting and security: the recurring lines
Any vendor storing or processing PHI on behalf of the clinic is a business associate and must sign a BAA. AWS, Azure and Google Cloud offer HIPAA-eligible services, but configuration remains your responsibility.
| Recurring item | Monthly range 2026 | Comment |
|---|---|---|
| Shared HIPAA-eligible hosting | USD 450 to 800 | Fits under 5,000 active patients |
| Dedicated hosting | USD 900 to 1,300 | Redundancy, disaster recovery, more volume |
| Encrypted off-site backups | USD 90 to 220 | 30 to 90 day retention |
| Secure SMS and email | USD 110 to 330 | Depends on admissions volume |
| Application maintenance | USD 650 to 1,600 | Fixes, version upgrades |
| Annual penetration test | USD 5,500 to 10,000 per year | Expected by the security officer |
| HIPAA risk analysis | USD 3,500 to 6,500 one-off | Required under the Security Rule |
On compliance, the HIPAA Security Rule requires a documented risk analysis, access controls and audit logs. Matching patient identity reliably at pre-admission avoids duplicate records that are costly to clean up later.
Custom build or vendor portal?
Patient portal vendors often charge USD 1 to 3 per encounter or a subscription of USD 1,600 to 4,500 a month for a mid-sized clinic. Custom makes sense when the clinic wants a branded journey, specialty-specific questionnaires or a tight link to an EHR the vendor does not support. Over 5 years, with 9,000 encounters a year, USD 2 per encounter costs USD 90,000, roughly the size of a maintained custom project.
Mini case study
Daniel, CIO of a 140-bed surgical clinic in Miami, handles 9,000 admissions a year. Paper pre-admission takes 18 minutes per patient on average and ties up 3 front-desk staff. He launches a portal at USD 68,000 with FHIR integration, plus USD 1,000 a month of hosting and USD 1,100 of maintenance.
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
After 6 months, 65 % of patients complete pre-admission online. Front-desk waiting falls by 30 % and 0.8 FTE is redeployed, about USD 42,000 a year fully loaded. Recurring costs total USD 25,200 a year. The net gain of about USD 16,800 a year, plus fewer incomplete files reaching the OR, pays back the project in about 4 years on staffing alone, faster when avoided cancellations are counted.
FAQ
Is standard cloud hosting enough?
No, the host must sign a BAA and services must be HIPAA-eligible and correctly configured. Budget at least USD 450 a month for a shared setup.
How long does the project take?
Usually 4 to 6 months, including 6 to 8 weeks for EHR integration and testing with clinical teams.
Do patients need a special login?
Not necessarily, a one-time SMS code is common. Adding third-party identity verification costs around USD 3,500 to integrate and reduces fraud risk.
Who is liable in case of a breach?
The clinic remains the covered entity, the host and developer are business associates. The BAA and risk analysis, about USD 3,500 to 6,500, set each party's obligations.
Can we start with pre-admission only?
Yes, a first phase at USD 22,000 to 33,000 validates adoption before adding consent and discharge documents.
Let's scope your project. Tell us your EHR, admissions volume and the steps you want to digitize, and we will scope a budget between USD 45,000 and 90,000 including compliant hosting and a testing plan. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.

