The verdict in three sentences
For a network of 6 diagnostic laboratories in Dubai printing 1,500 reports a day, a secure patient portal costs about 300,000 to 750,000 AED on the local market (2026 order of magnitude), including LIS integration and SMS authentication. The project takes 4 to 6 months, with an unavoidable share for compliance with Federal Law No. 2 of 2019 on health data and Dubai Health Authority (DHA) requirements. Direct savings on printing, envelopes and couriers reach 15,000 to 30,000 AED a month, before counting front-desk time freed up.
Security requirements for a results portal
A lab result is health data. Under Federal Law No. 2 of 2019, health information must in principle be stored and processed inside the UAE, with limited exceptions, and Dubai providers connect to the NABIDH health information exchange. The expected security level is far above that of a corporate website.
| Requirement | Recommended implementation | Why |
|---|---|---|
| Authentication | ID from the sample slip + SMS one-time code, or UAE PASS | blocks access with a bare file number |
| Encryption | TLS 1.3 in transit, PDF files encrypted at rest | protects against backup leaks |
| Hosting | UAE data centre, encrypted daily backups | meets data localisation rules |
| Access window | result online for 90 days, then archived | limits exposure |
| Audit trail | log of every view and download, kept at least 1 year | evidence in case of dispute |
| Referring doctor access | secure link with patient consent | stops PDFs being shared on WhatsApp |
| Penetration testing | before launch, then yearly | aligned with DHA and ADHICS-style controls |
Integration with the laboratory information system (LIS) is the hardest part: the portal must only publish biologically validated results, never one still under review.
Where the 300,000 to 750,000 AED goes
| Line item | Essential version | Full version | 2026 range (UAE market) |
|---|---|---|---|
| LIS integration | export of validated results | real-time sync, statuses | 70,000 to 190,000 AED |
| Patient area | view and PDF | history, trend charts, bookings | 80,000 to 200,000 AED |
| SMS or UAE PASS authentication | one-time code | two-factor, trusted device | 25,000 to 70,000 AED |
| Doctor area | no | patient list, critical value alerts | 50,000 to 130,000 AED |
| Security and compliance | data mapping, encryption | audit, pen test, continuity plan | 50,000 to 110,000 AED |
| English and Arabic | translated interface | full right-to-left layout | 25,000 to 50,000 AED |
Plan recurring costs from day one: SMS at about 0.15 to 0.30 AED each, UAE health-grade hosting at 3,000 to 9,000 AED a month, and application maintenance.
At Kolonell, a patient portal connected to an LIS falls under the complex application tier of our grid, 10,670 to 22,870+ EUR (7,000,000 to 15,000,000+ FCFA), with exact scope and amount set on quote after reviewing your LIS. Maintenance is 53, 114 or 183 EUR per month depending on service level. See our custom applications and cybersecurity offers.
The 4 to 6 month timeline
Need a professional website?
Kolonell builds websites that attract clients, optimized for the Sénégalese market. Free quote in 2 minutes.
Month 1: LIS audit, data mapping, DHA and NABIDH requirements review, hosting choice. Months 2 to 4: connector, patient area and authentication. Month 5: penetration test and acceptance on one pilot lab. Month 6: rollout to the 5 other sites and patient communication, with an SMS sent as soon as each result is validated.
Mini case study
Dr Omar Haddad runs a network of 6 labs across Dubai and Sharjah. His teams print 1,500 reports a day, 26 days a month, so 39,000 reports monthly, part of them couriered to partner clinics.
- Printing, paper and envelope: about 0.8 AED per report.
- Couriers for 20 % of reports: about 3 AED per delivery.
- With 70 % of patients online after 6 months: 27,300 reports not printed × 0.8 = 21,840 AED, plus 5,460 deliveries avoided × 3 = 16,380 AED.
- Direct savings: 38,220 AED a month, minus 9,000 AED of SMS and hosting, so 29,220 AED net.
- For a 550,000 AED project, payback comes in about 19 months, sooner if you count the 2 hours per day per site saved at reception.
FAQ
Can patient results be hosted outside the UAE? As a rule no: Federal Law No. 2 of 2019 requires health data to stay in the country, with narrow exceptions set by ministerial decision. UAE hosting adds only about 1,000 to 3,000 AED a month compared with a foreign cloud region.
Do we need to connect to NABIDH? Licensed Dubai facilities are expected to share data with NABIDH, so the portal should reuse the same validated results flow. Budget 20,000 to 60,000 AED if your LIS vendor charges for the interface.
Will older patients use the portal? Networks that have made the switch see 60 to 75 % adoption within 6 months, driven by working-age patients. Printed reports stay available on request, so nobody is excluded.
Which LIS can be connected? Most LIS products used in the UAE support HL7 or FHIR exports or structured file drops. Integration through FHIR usually shortens the project by 2 to 4 weeks.
How are critical results handled? They must never be published before the pathologist calls the patient or doctor. The portal automatically holds out-of-range values until manual release.
Let's scope your project. We audit your LIS, map compliance requirements with you and plan a pilot on one lab before network rollout, over 4 to 6 months. Detailed quote within 48 h. WhatsApp +221 77 596 93 33.
Mohamed Bah
Fondateur, Kolonell
Passionate about digital and entrepreneurship in Africa, Mohamed has been helping Sénégalese businesses with their digital transformation since 2020. Founder of Kolonell, he believes every SME deserves a professional and accessible online présence.
