Build Secure Emirates ID Upload Portal — UAE Healthcare/ADHICS

Title: Full-Stack Developer for Secure Emirates ID Upload Portal — UAE Healthcare/ADHICS We are an Abu Dhabi telemedicine provider using Cortex HIS. We need a secure, mobile-friendly web application allowing patients to upload Emirates ID and insurance-card images instead of sending them through WhatsApp. Required development * Patient-facing frontend * Secure backend/API * Encrypted database and document storage * Receptionist/admin dashboard * SMS OTP integration * UAE cloud deployment * Future-ready REST API for Cortex HIS integration Workflow 1. Receptionist creates a unique, expiring link. 2. Patient opens it through WhatsApp. 3. Patient verifies their UAE mobile number by SMS OTP. 4. Patient enters basic demographic information. 5. Patient uploads: * Emirates ID front/back * Insurance card front/back 6. Patient accepts version-controlled electronic consent. 7. Receptionist receives the submission in a secure dashboard. 8. Receptionist reviews it and marks it verified, incomplete, rejected or entered into Cortex. Security and ADHICS requirements * Application, database, files, logs and backups hosted in the UAE * Hosting account owned by ALOTEB * HTTPS and encryption at rest * Individual staff accounts with MFA * Role-based access control * Non-guessable, single-use, expiring links * Secure password hashing and session management * File-type verification, size limits and malware scanning * Immutable audit logs for logins, views, downloads and changes * Automatic session expiry * Configurable data retention and secure deletion * Consent record containing wording, version, timestamp, IP and OTP result * No documents sent through email or WhatsApp * No overseas data storage or support access * No analytics trackers or use of patient data for AI * Protection against OWASP Top 10 vulnerabilities * ADHICS security-control mapping and vulnerability testing before launch Technical preferences Use a maintained full-stack framework such as: * Laravel/PHP * Django/Python * ASP.NET Core * Node.js with a secure backend framework Frontend may use React, Vue or server-rendered pages. WordPress, Wix, basic CMS plugins, Firebase outside the UAE, shared hosting and no-code form builders are not acceptable. Deliverables * Complete frontend and backend * Receptionist/admin dashboard * Database and secure document storage * SMS OTP integration * English and Arabic interface * Deployment to an ALOTEB-owned UAE cloud account * Complete source code * Database schema and API documentation * ADHICS control-mapping document * Security and data-flow documentation * Backup and restoration procedure * Staff training and handover * Minimum 60 days of bug support Timeline: 2–3 weeks Please provide: 1. Relevant secure portal or healthcare projects 2. Proposed technology stack 3. UAE hosting recommendation 4. Fixed development price 5. Expected monthly hosting/SMS costs 6. Security and ADHICS approach 7. Confirmation that ALOTEB will own all source code, data and hosting accounts Start your application with “Secure ALOTEB Portal” and answer all seven points.