Start with the workflow you need to run

A platform decision starts with a patient journey, not a feature count. Write the sequence from first visit through intake, payment, clinical review, pharmacy handoff, delivery updates, support and renewal. For each step, name the person responsible and the evidence needed to move forward. Include declined consultations, incomplete intake and failed payments. A product that handles the happy path but leaves your staff guessing at exceptions may require more operating work than the demo suggests.

Limit your first requirements list to the launch programs and locations your clinical partners have agreed to support. Label each requirement mandatory, useful later or optional. Do not pay for a custom system because of an imagined future product line. Use the order workflow guide to turn that list into a testable sequence.

Separate software, clinical services and operating work

White-label describes how a service can appear under your brand. It does not describe every responsibility included in a contract. Bask markets customizable software with patient, doctor and admin portals. WellieMD markets branded intake, provider review, pharmacy fulfillment and refills. Those descriptions are starting points for questions, not proof that every requested workflow or program is included in your agreement.

Buying software also does not assign all the daily work. Someone still needs to monitor queues, maintain product information, reconcile invoices, respond to support issues and coordinate vendors. Put those tasks next to the technical requirements. Decide whether your employees, the platform, separate vendors or an operating team will handle them. Request written boundaries for clinical decisions and nonclinical administration.

Source context: Bask Health: The Platform for Telehealth, WellieMD: White-Label Telehealth Platform

Compare three architectures

A white-label stack generally places more configuration and maintenance with a vendor. Judge that option by demonstrated fit, change-request terms, visibility into queues and the ability to leave. A custom stack puts more engineering decisions with your team. Budget for maintenance, security work, monitoring and integrations after launch, alongside initial development. An unfinished custom build is not a substitute for a functioning care workflow.

A hybrid uses a separately controlled brand website or storefront with vendor systems for agreed functions. Before choosing it, test the connection between systems. Identify the authoritative record for order status, the identifier used to reconcile an order and the person who investigates a mismatch. More components can offer flexibility and also add handoffs. A hybrid should solve a defined limitation, not merely move it somewhere less visible.

Compare the cost of running the same scenario

Give every candidate the same planning assumptions: expected consultation volume, order mix, support hours, reporting needs and launch programs. Request setup, monthly, per-event, integration, support and exit charges separately. For a custom option, add the people who maintain it and the external care, fulfillment and payment services it still needs. Avoid comparing a vendor subscription with a developer's initial quote and calling the difference a saving.

Then estimate the cost of an ordinary change, such as adding an approved product or revising a nonclinical notification. Who makes it, who approves it, how is it tested and what does it cost? Use the vendor quote worksheet for commercial inputs. Leave an unknown blank rather than turning it into a zero.

Treat access and security as decision gates

A branded portal does not establish your right to copy or use every clinical record. Have the relevant entities and advisers define authorized access, record custody and permitted transfers before committing to an architecture. HHS describes role-appropriate access and safeguards for electronic protected health information under the Security Rule. A founder's preference for control does not replace that responsibility mapping.

Your decision memo should record the chosen option, the requirements it satisfies, the unresolved terms and the trigger for reconsidering it. For example, an integration requirement that cannot be demonstrated may justify further engineering review. A concern about changing vendors may justify contract changes first. Ask for evidence at the point of uncertainty before paying to rebuild the whole system.

Source context: HHS: Summary of the HIPAA Security Rule

Architecture decision worksheet

Complete one row per launch requirement. Record evidence, not an overall impression. A mandatory requirement remains open until demonstrated and assigned.

On small screens, scroll the table sideways to view every column.

Architecture decision worksheet
RequirementWhite-label evidenceCustom or hybrid workDecision gate
Intake and clinical handoffRun the agreed test journeyList interfaces and care partner approvalsClinical partner accepts workflow
Support queue visibilityShow statuses and permissionsName the source of each statusSupport can identify the next owner
Brand changesTest configuration limitsEstimate maintenance and deployment workRoutine changes have an owner
Data and departureRequest permitted export sample and termsDefine migration and custody responsibilitiesWritten exit path exists
Download this worksheet as CSV

Before you move forward

  • Document launch requirements before collecting proposals.
  • Run the same exception scenarios for every candidate.
  • Cost ongoing engineering and operating work.
  • Resolve mandatory access and contract questions.
  • Write a decision memo with conditions for reconsideration.

Sources and scope

Source check: October 10, 2026. Primary sources support the rules and vendor descriptions cited above. Worksheets are original planning tools, not provider commitments or forecasts. Requirements can change; confirm current terms for your program.

  1. Bask Health: The Platform for Telehealth

    Vendor's public description of customizable software and portals. Marketing claims, not independent validation. Checked October 10, 2026.

  2. WellieMD: White-Label Telehealth Platform

    Vendor's public description of branded intake, care and fulfillment workflows. Scope requires contract confirmation. Checked October 10, 2026.

  3. HHS: Summary of the HIPAA Security Rule

    Supports role-appropriate access and safeguards for regulated entities' ePHI. Summary is not a complete legal assessment. Checked October 10, 2026.