Live demo · 100% synthetic data

An EMR designed around the clinic day

EMR21 is a physician-designed EMR for Ontario family medicine. It handles the whole clinic day — schedule, inbox, charting, prescribing, billing, referrals, recalls, and a patient portal. The AI is there to help when you want it, and it never sends patient data off-site.

FHIR R4–aligned · PHIPA-conscious · on-prem AI — built by a practising family physician.

Jump straight in

Pick your seat in the clinic.

The best way to judge an EMR is to use one. Pick a role and you'll land in the running system as that person. Every screen is live and all the data is synthetic, so there's no sign-up and nothing to set up.

Physician

The full workstation: schedule, triaged inbox, chart + CPP, AI scribe, immutable signing, eRx, billing, panel management.

Enter as Physician →

Nurse

Vitals, immunizations, recalls and reminders, encounter prep — the clinical support view of the same charts.

Enter as Nurse →

Staff

The staff inbox, document handling, messaging, and referral chasing — the day-to-day engine of the clinic.

Enter as Staff →

Secretary

Scheduling and booking, patient requests, front-desk workflow — what arrives before the physician ever sees it.

Enter as Secretary →

Admin

Practice settings, user and role management, AI posture, security policy, billing defaults — governance made visible.

Enter as Admin →

Patient (portal)

Book, self-triage, submit intake, grant or decline AI consent — and watch it land pre-sorted in the physician's inbox.

Enter the Portal →
Live demo · 100% synthetic data · resets periodically

Why it's different

What makes it different.

These aren't really features. They're the decisions the whole system is built on, and you can see each one in the demo.

Designed by a family doctor

The workflows, the order of the modules, and the compliance requirements all come from how a family doctor actually runs a clinic day, not from a billing system with a chart screen bolted on. It was designed by someone who has to use it, not just consulted about it.

The core idea

The AI is optional, always

One switch on each patient's chart turns off every AI feature for that patient, and the EMR still does everything by hand. If consent is declined or hasn't been set, the AI stays off. Every AI feature has a manual path behind it. It answers the thing doctors and regulators worry about most with AI in medicine: staying in control.

The AI runs in the clinic

The ambient scribe and the clinical assistant both run on a machine inside the clinic. No audio and no chart text ever leave the building. Most AI-EMR products can't say that.

Nothing invented into the chart

When the AI suggests a change to the chart, it has to quote the exact words from the signed note it's drawing on. If it can't point to the source, the suggestion never appears. The AI proposes, the clinician accepts, and every action is logged.

Built on FHIR from the start

The data is stored in FHIR shapes, the status codes match FHIR, and the standard terminologies (LOINC, SNOMED, RxNorm, CVX) are carried inline. Sharing data is a matter of exporting it, not rebuilding the system — which is where certification and the provincial strategy are headed.

Feature tour

A full clinic day, end to end.

It's a full workstation, not a chart viewer. The tour below follows a clinic day rather than a feature list.

AI-triaged physician inbox showing results sorted by urgency

AI-triaged inbox

Results and correspondence arrive already sorted by urgency and category. The manual inbox is always one click away.

Tabbed patient chart workstation with clinical banner

The chart workstation

Tabbed chart with persistent clinical banner: Summary/CPP, notes, Rx, labs, vitals, imaging, forms, billing — one surface for everything about the patient.

AI scribe drafting a SOAP note from dictation on-prem

AI scribe — on-prem Whisper

Dictate; a structured SOAP note appears. The audio never leaves the machine it was recorded on.

Signing a clinical note, locked with verbatim-quoted chart suggestions

Immutable note signing

Signed notes are snapshotted and locked — corrections are amendments, not edits. Medico-legally correct by construction.

SKIPPY proposing an OHIP billing code with rationale at encounter end

SKIPPY billing suggestions

End the encounter and the local assistant proposes the OHIP code with a rationale. It suggests; the clinician decides.

Referral tracker with status and chase follow-up workflow

Referral tracking with chase UX

The full referral lifecycle, with a directory and a built-in "chase" step, so nothing gets sent and then forgotten.

Unified Reminders and Recalls worklist with category and provider filters

Recalls & reminders

One unified worklist: preventive recalls, free-form tasks, recurrence, per-provider ownership, "mine only" view.

Panel management stats and cohort builder finding diabetic patients

Panel management + cohort builder

Practice-wide and per-provider stats, care gaps, high-risk lists — and a cohort builder that finds patients by disease, lab, or keyword.

Patient portal — My Health, requests, and pre-visit questionnaire

Patient portal — booking & intake

Patients book, self-triage, and submit intake (including electronic AI consent) — and it lands in the physician's inbox pre-sorted.

The build

Built by one physician.

One practising family physician designed and directed the whole thing, using AI coding tools under close supervision, and logged every architectural decision along the way.

~37,400
lines of application code
25
backend services
51
database migrations
467
git commits
107
logged architectural decisions
Building clinical software used to take a funded team and years. With today's AI tools, one motivated clinician can put together a working version in months. That changes how the province might specify and evaluate EMRs — and EMR21 is a concrete example of it.

What it is, and what it isn't

EMR21 is a proof that this is feasible, not a finished, certified product. It runs a whole clinic day, but only on synthetic data — no real patient information has ever gone near it. The technical safeguards are built in: role-based access on every endpoint, an append-only audit trail, encrypted identifiers, account lockout and a password policy.

What's left for certification is mostly organizational — a formal risk assessment, a security audit, connectivity onboarding — and that isn't something one person can or should finish alone. That's the conversation this is meant to start.

See for yourself

Have a look yourself.

A few minutes in the live system will tell you more than any write-up. Pick a role and run through a clinic day.

Jump into the demo