ASP.NET Healthcare Patient Management Website

I am building a secure, browser-based healthcare application in ASP.NET focused solely on patient management, with the core functionality centered on storing, updating, and retrieving each patient’s medical history and clinical records.

You will architect and code the solution from scratch in ASP.NET (MVC or Core—whichever you feel delivers better performance and maintainability) backed by SQL Server. The interface should be clean, responsive, and role-based so physicians and authorised staff can view or edit records while all access is logged for audit purposes. HIPAA-friendly coding practices, encrypted data at rest, and HTTPS are expected.

Because the initial scope is limited to medical history and records, I do not need appointment scheduling, billing, or external EHR/LIMS integrations right now, but the codebase should be modular enough to let me add those modules later without a full rewrite.

Deliverables
• Full Visual Studio solution with readable, well-commented C# code
• Normalised SQL Server schema (migrations or .sql scripts)
• Basic authentication/authorisation module (local accounts or Identity)
• Responsive Razor pages (or Blazor/React views if preferred) for CRUD of patient records
• Unit tests for the data layer and key business rules
• Deployment guide for IIS or Azure App Service

Acceptance Criteria
1. I can create, edit, and archive a patient’s complete medical history in under three clicks.
2. All validation errors surface client-side and server-side.
3. An audit log captures who changed what and when.
4. Source builds without errors on a clean machine following your README.

If you have prior experience with healthcare data compliance and secure ASP.NET builds, please mention it when you bid together with a sample of similar work.