🚐

HaloRide

HIPAA-Compliant Patient Transport

Page 1 of 8 — Onboarding & Secure Sign-In
01 β€” Splash Β· Trust Line
9:41
●●●
🚐

HaloRide

HIPAA-Compliant Patient Transport

πŸ”’HIPAA-secure Β· your health data is encrypted

AVEOSOFT

02 β€” Secure Sign-In Β· MFA
9:41
●●●
🚐

Welcome back

Sign in to book and track medical transport.

βœ‰οΈ
πŸ”’
πŸ“²
Multi-factor authentication
A one-time code will be sent to your phone
ON

Forgot password?

πŸ›‘οΈEncrypted in transit & at rest Β· US-hosted
03 β€” Choose Your Role
9:41
●●●

Who are you booking for?

Choose how you will use HaloRide. You can switch later.

πŸ§‘
I am the patient
Book and track my own rides
βœ“
πŸ‘₯
I am a caregiver
Book and track for a family member
β€Ί
πŸ”
Your role controls what health information you can see. Access is role-based and every view is audit-logged.
01 β€” Trip Details
9:41
●●●
←

Book a ride

✨
Ask HaloRide
"Book my dialysis rides this week"
Ask
●
Pickup
1420 Maple Ave, Springfield
β—†
Destination
DaVita Dialysis Center
Date
Mon, Jul 6
Pickup time
7:30 AM
Ride type
🚢
Ambulatory
β™Ώ
Wheelchair
πŸ›οΈ
Stretcher
Appointment reason
Dialysis treatment
πŸ”
Recurring ride
Repeat every Mon Β· Wed Β· Fri
02 β€” AI Booking Assistant
9:41
●●●
←
HA

HaloRide Assistant

AI Β· secure & PHI-safe

Hi Margaret. How can I help with your transport this week?
9:12
Book my dialysis rides this week
9:12
You have dialysis Mon, Wed, Fri at DaVita Dialysis Center. I can book round trips, wheelchair-accessible, 7:30 AM pickups.
9:13
Yes, all three days
9:13
Done β€” 3 recurring rides scheduled. Return pickups will auto-request when your treatment ends. You will get a secure reminder the night before each ride.
9:13
03 β€” Booking Confirmed
9:41
●●●
βœ…

Rides confirmed

3 recurring dialysis rides are scheduled. A driver will be assigned before each pickup.

Mon Β· Jul 6 Β· 7:30 AM
SCHEDULED
β™Ώ Wheelchair Β· to DaVita Dialysis Center
Wed Β· Jul 8 Β· 7:30 AMScheduled
Fri Β· Jul 10 Β· 7:30 AMScheduled
01 β€” En Route Β· Map & ETA
9:41
●●●
β—†
●
🚐
←
✨AI ETA · 9 min
DL
David L.
White Ford Transit · ABC-4821 · ⭐ 4.9
πŸ“ž
πŸ’¬
πŸ”’ Calls & messages are routed securely β€” your number stays private (PHI-safe)

Trip status

7:12 AM
Driver assigned
David L. Β· Wheelchair-equipped van
7:24 AM
En route to pickup
AI-predicted arrival 7:33 AM
β€”
Arrived at pickup
Upcoming
02 β€” Full Status Timeline
9:41
●●●
←

Ride status

Ride #HR-20847 Β· to DaVita Dialysis Center

6:58 AM
Scheduled
Recurring dialysis ride Β· confirmed
7:12 AM
Driver assigned
David L. · ⭐ 4.9 · Wheelchair van
7:24 AM
En route to pickup
AI-predicted arrival 7:33 AM
β€”
Arrived at pickup
Upcoming
β€”
In transit
Upcoming
β€”
Dropped off
Upcoming
✨
On time
Traffic is light on Route 9 β€” arrival holding at 7:33 AM.
01 β€” Today's Trips
9:41
●●●

Driver Β· David L.

Today's trips

On duty
5
Assigned
2
Completed
61
Miles

Upcoming

7:30 AM Β· Pickup
NEXT
M
Margaret T. Β· β™Ώ Wheelchair
1420 Maple Ave β†’ DaVita Dialysis Center
πŸ”’ Minimal record shown Β· mobility needs only
9:15 AM Β· Pickup
Ambulatory
J
James P.
88 Oak St β†’ Mercy Medical Clinic
11:00 AM Β· Pickup
Wheelchair
R
Robert H.
Grove Senior Living β†’ VA Clinic
02 β€” Active Trip Β· Status Update
9:41
●●●
←

Active trip

M
Margaret T.
β™Ώ Wheelchair Β· needs ramp assistance
πŸ”’ First name + mobility needs only β€” full medical record is not shared with drivers
●
Pickup
1420 Maple Ave, Springfield
Start nav β€Ί
β—†
Drop-off
DaVita Dialysis Center
Update status
Trip note
Add a note (e.g. "met at side entrance, ramp used")…
01 β€” Live Operations Board
app.example.com/dispatch
🚐
HaloRide
Dispatch Console
πŸ—ΊοΈ Live Operations
πŸ“‹ Ride Requests
πŸ“… Scheduling
🚐 Drivers
πŸ›‘οΈ Compliance
SK
Sarah K.
Coordinator
Region Β· Springfield Metro

Live operations

18
Active trips
4
Unassigned
11
Drivers on
🚐
🚐
🚐
🚐
β—†
Live vehicle map Β· 11 vans
● On time● SLA risk
Unassigned queue4
Margaret T. Β· β™Ώ
7:30 AM β†’ DaVita Dialysis
Assign
Robert H. Β· β™Ώ
11:00 AM Β· pickup window tight
Assign
✨AI scheduling assist
Demand spikes 2–4 PM β€” you are 3 drivers short. Suggest reassigning van #7 and shifting James P.'s break to 4:15 PM.
Apply suggestion β†’
01 β€” Weekly Schedule Board
app.example.com/scheduling
Week of Jul 6

Scheduling & recurring rides

+ New standing order
✨
AI demand forecast: Wednesday shows the heaviest recurring load (dialysis + PT). Pre-assign 2 extra wheelchair vans by Tue 6 PM to stay within SLA.
Plan week
Standing order
Mon
Wed
Fri
Margaret T.
Dialysis 3Γ—/wk Β· β™Ώ
7:30 Β· David L.
7:30 Β· David L.
7:30 Β· Unassigned
Robert H.
Physical therapy Β· β™Ώ
10:00 Β· Ana R.
β€”
10:00 Β· Ana R.
James P.
Wound care Β· Ambulatory
1:15 Β· Marco D.
1:15 Β· Marco D.
1:15 Β· Marco D.
Recurring rides this week
42
Fully assigned
38
Needs a driver
4
01 β€” Compliance Posture & Encryption
app.example.com/compliance
Admin Β· Security & compliance

HIPAA controls & access

All controls active
πŸ”’
Encryption in transit
TLS 1.3 Β· enforced
βœ“ Active
πŸ—„οΈ
Encryption at rest
AES-256 Β· KMS keys
βœ“ Active
πŸ“
BAA signed
AWS Β· effective Jun 2026
βœ“ On file
πŸ‡ΊπŸ‡Έ
US data residency
AWS us-east-1 Β· no offshore
βœ“ Enforced
Role-based access control
Role
Book
Full PHI
Assign
Patient
βœ“
Own
β€”
Caregiver
βœ“
Linked
β€”
Driver
β€”
Min
β€”
Coordinator
βœ“
Op-min
βœ“
Admin
βœ“
βœ“
βœ“
πŸ” PHI minimization: drivers receive first name + mobility needs only. "Op-min" = operational minimum needed to dispatch.
PHI audit logImmutable
πŸ‘€
Sarah K. viewed trip #HR-20847
Coordinator Β· 9:14 AM Β· IP logged
🚐
David L. accessed minimal record
Driver Β· 7:28 AM Β· name + mobility only
✏️
Margaret T. updated pickup address
Patient Β· 8:02 AM Β· self-service
🚫
Driver access to full PHI denied
RBAC blocked Β· logged & alerted
πŸ“²
MFA enforced for all staff & admin sign-ins

HaloRide V1

A HIPAA-compliant, non-emergency medical transport platform that connects patients, drivers, and dispatchers around one secure booking, scheduling, and real-time tracking flow. PHI is protected end to end β€” encrypted, role-scoped, audit-logged, and hosted in a US region under a signed BAA. Original UI/UX built for the calm, clinical trust a healthcare buyer expects.

βš™οΈ

Tech Stack

Flutter (iOS + Android)
Node.js / TypeScript
REST + WebSockets
PostgreSQL (encrypted, US)
Maps & Routing API
OpenAI / Anthropic
AWS (HIPAA-eligible + BAA)
🧠

Core Technologies

  • Flutter β€” Single codebase for the patient + driver mobile apps (React Native is a viable alternative)
  • Node.js + TypeScript β€” REST API + WebSocket gateway for live trip tracking and status
  • PostgreSQL β€” Encrypted at rest, US region, PHI store isolated from operational data
  • Maps / Routing β€” Live vehicle tracking, geofenced pickup/drop-off, route optimization
  • OpenAI / Anthropic β€” Booking assistant, predictive ETA, and dispatcher demand forecasting
  • AWS β€” HIPAA-eligible services in a private VPC under a signed BAA, US data residency
πŸ“¦

V1 Deliverables

βœ“
Patient & caregiver app β€” secure sign-in, book, and track rides
V1
βœ“
Driver app β€” assigned trips, minimal-PHI trip view, status updates
V1
βœ“
Dispatcher web console β€” live map, assign / reassign, alerts
V1
βœ“
Real-time trip tracking (WebSockets + maps) with status timeline
V1
βœ“
Booking, scheduling & recurring standing orders (dialysis, PT)
V1
βœ“
AI booking assistant + predictive ETA + demand forecasting
V1
βœ“
HIPAA controls β€” encryption, RBAC, audit logging, MFA, PHI minimization
V1
βœ“
Backend API + WebSocket services + encrypted PostgreSQL (US region)
V1
βœ“
Original, bespoke UI/UX (no template kits)
V1
β†’
Insurance & Medicaid NEMT billing / claims export
V2
β†’
Transport provider marketplace & multi-agency dispatch
V2
β†’
Deeper AI β€” no-show prediction, dynamic route batching, voice booking
V2
πŸ›

Architecture Layers

CLIENTS
Patient app Β· Driver app (Flutter) Β· Dispatcher web console β€” role-scoped UI, MFA at sign-in
GATEWAY
API gateway Β· Auth + MFA Β· RBAC policy enforcement Β· request audit hooks
SERVICES
Booking Β· Real-time trip-tracking (WebSockets) Β· Routing + AI (ETA / demand) Β· Notifications Β· Audit
DATA
PostgreSQL (encrypted, US) Β· isolated PHI store Β· immutable audit log Β· KMS-managed keys
PLATFORM
AWS HIPAA-eligible services Β· private VPC Β· US data residency Β· signed BAA Β· CloudWatch + Sentry