Enterprise Pharmacy Workflow Solution

Secure, compliant, and extensible pharmacy management platform built on Google Cloud

SOC2 Type 2 Compliant GCP Hosted
View Architecture

Platform Architecture

Complete system overview showing secure Kroll integration, cloud processing, and extensible API connections

flowchart TB subgraph CLIENT["YOUR PHARMACY STAFF"] USER["Pharmacy Users
Technicians | Pharmacists | Admins"] end subgraph SECURITY["SECURITY & COMPLIANCE"] direction LR AUTH["SSO + JWT Auth
Role-Based Access"] ENCRYPT["AES-256 Encryption
TLS 1.2+"] COMPLIANCE["SOC2 Type 2
Full Audit Trail"] end subgraph PHOX["PHOX WORKFLOW PLATFORM"] direction TB FRONTEND["Web Application"] BACKEND["Backend API Services"] subgraph WORKFLOWS["Workflow Modules"] direction LR W1["Phox Audit"] W2["Phox Narc"] W3["Phox Dash"] W4["Python Care"] end end subgraph GCP["GOOGLE CLOUD"] direction TB subgraph DATABASES["Databases"] direction LR POSTGRES["PostgreSQL"] MONGODB["MongoDB"] REDIS["Redis"] end STORAGE["Cloud Storage"] end subgraph KROLL["KROLL + PARTNERLINK"] KROLLSYS["Kroll PMS"] PARTNERLINK["PartnerLink API"] end subgraph INTEGRATIONS["INTEGRATIONS"] direction TB SMS["SMS"] DELIVERY["Delivery"] FUTURE["+ More"] end USER --> FRONTEND FRONTEND --> BACKEND BACKEND --> WORKFLOWS AUTH -.-> FRONTEND AUTH -.-> BACKEND BACKEND --> DATABASES BACKEND --> STORAGE BACKEND <--> PARTNERLINK PARTNERLINK <--> KROLLSYS BACKEND --> SMS BACKEND --> DELIVERY BACKEND -.-> FUTURE

Platform Foundation

Enterprise-grade architecture built for scale, extensibility, and long-term growth

API-First Architecture

Secure RESTful APIs for controlled integration. Connect with third-party systems, future PMS vendors, and enterprise applications through authenticated endpoints.

Multi-Tenant by Design

Built from ground-up for multi-pharmacy, multi-banner operations. Complete data isolation between tenants with shared infrastructure efficiency.

Modular Workflows

Plug-and-play workflow modules. Deploy only what you need: Phox Audit, Phox Narc, Phox Dash, Python Care, and more.

PartnerLink Integration

Secure connection via Kroll's PartnerLink gRPC API. TLS 1.2+ encrypted. Access to pharmacy data through TELUS Health's SOC 2 Type 2 certified infrastructure.

White-Label Ready

Fully customizable branding, themes, and workflows. Deploy under your brand with your identity. No PHOX branding required.

Future-Ready Roadmap

Continuous development pipeline. Planned integrations: eRx networks, insurance adjudication, lab systems, and additional PMS vendors.

Security & Compliance

Enterprise-grade security via Kroll PartnerLink API - the official TELUS Health Kroll integration

flowchart TB subgraph KROLL["KROLL INTEGRATION"] KROLLPMS["Kroll PMS"] PARTNERLINK["PartnerLink gRPC API
Official TELUS Health Integration
TLS 1.2+ Encrypted"] end subgraph SECURITY["SECURITY LAYERS"] AUTH["Auth
SSO | JWT | RBAC"] TRANSPORT["Transport
HTTPS | gRPC"] DATA["Data
AES-256 Encrypted"] AUDIT["Compliance
SOC2 Type 2"] end subgraph PHOX["PHOX PLATFORM"] BACKEND["Backend Services"] GCP["GCP Databases"] end KROLLPMS <--> PARTNERLINK PARTNERLINK <--> TRANSPORT AUTH --> BACKEND TRANSPORT --> BACKEND DATA --> GCP BACKEND --> DATA AUDIT -.-> DATA

SOC2 Type 2 Certified

Annual third-party audits verify our security controls, availability, and confidentiality practices meet enterprise standards.

Canadian Data Residency

All patient data stored and processed in Canadian data centers. Full compliance with provincial health data regulations.

Encryption Everywhere

AES-256 encryption at rest. TLS 1.2+ in transit. All database connections encrypted. No plaintext patient data.

Disaster Recovery

Automated daily backups with 30-day retention. Cross-region replication. RTO < 4 hours, RPO < 1 hour.

Complete Audit Trail

Every action logged with user, timestamp, and context. Immutable audit logs for compliance reporting and incident investigation.

Security Validation

Annual third-party security assessments. Continuous monitoring and proactive defense measures. Industry-standard security practices.

Role-Based Access

Granular RBAC with principle of least privilege. SSO integration. Multi-factor authentication available.

Incident Response

Documented incident response procedures. 24/7 security monitoring. Regulatory-compliant notification protocols.

Key Security Features

Essential security information for healthcare institutions

Topic Key Message
Kroll Integration PartnerLink gRPC API via TELUS Health. TLS 1.2+ encrypted. SOC 2 Type 2 certified infrastructure.
Platform Architecture API-first, multi-tenant, modular workflows. White-label ready. Future PMS support planned.
Security SOC2 Type 2 certified. AES-256 encryption. Annual third-party security assessments. RBAC with MFA.
Data Residency All patient data stored in Canadian data centers. Full provincial health data compliance.
Disaster Recovery Daily backups, 30-day retention, cross-region replication. RTO < 4 hours, RPO < 1 hour.
Compliance Complete audit trail. Immutable logs. Incident response procedures. Regulatory-compliant notifications.
Infrastructure Google Cloud Platform. PostgreSQL, MongoDB, Redis. 99.9% uptime SLA.
100%