Skip to content
All case studies
HealthcareSecurity & ComplianceFull-Stack · Access Control

Finishing & Launching a Hospital Product Portal for The Xen Group

The Xen Group

First version imported August 2026 · in production September 2026 · delivered

The Xen Group, a medical-device distributor, had built a working first version of an invite-only product catalogue for hospital staff. We took it from that first version to a production deployment in 20 days: reviewing and fixing it, moving it to PostgreSQL, adding automated tests around the access rules, and shipping it with a user manual.

Next.jsPostgreSQLAccess ControlAutomated TestingAccessibilityDocumentation
The Xen Group — Healthcare case study by The Parthenon
20 days
First version to production
63
Automated test cases
6
User roles
2
Markets separated by access rules
// The problem

The Xen Group distributes medical devices through Xenith in the UAE and Qudra Medical in Oman. It had built a working first version of a login-gated catalogue, where sales reps decide which products each hospital user can see. It worked as a prototype, but it needed a production database, a proper deployment and a full review of its access rules before it was ready for real use.

// The process
  1. 01

    Imported the client's first version and reviewed it for security, code quality and accessibility before changing anything.

  2. 02

    Fixed what the review found, and added automated tests around the access rules, which are the core of the product.

  3. 03

    Moved the application from SQLite to PostgreSQL, and added in-app notifications and access-gated file storage.

  4. 04

    Deployed it to production, then restructured the catalogue and added Hospital Codes and list filters.

  5. 05

    Wrote a 10-page user manual, and later added super-admin delete controls with their own guide.

// What it does
  • Invite-only, login-gated catalogue for hospital staff
  • Access granted by specialty folder, with per-product exceptions
  • Country and entity separation between UAE and Oman
  • PostgreSQL migration and access-gated file storage
  • In-app notifications for sales reps and hospital users
  • 10-page user manual and a super-admin guide
// The result

The portal went from a client-built first version to a production deployment in 20 days. Catalogue grants cascade by specialty folder with per-product exceptions, access is separated by country and entity, and there are six roles from Super-admin to hospital Purchaser. There is no pricing in the app, by design: commercial conversations stay with the sales team.

// Takeaway

Finishing a build someone else started is its own kind of work. We kept what the client had built, fixed what stood between it and production, and left them with tests and documentation.

// Want a system like this for your business?

FAQ

Frequently Asked Questions

// The service behind this
Project Rescue