xMed is engineered to satisfy the Punjab Healthcare Commission's Minimum Service Delivery Standards (MSDS) for diagnostic labs, hospitals, clinics, and pharmacies. This page details the controls we put in place so your facility is always inspection-ready.
Why PHC compliance is non-negotiable for Pakistani healthcare
The Punjab Healthcare Commission (PHC) regulates healthcare service delivery across Punjab. Its Minimum Service Delivery Standards (MSDS) are the benchmark for licensing, renewal, and ongoing inspections of diagnostic labs, hospitals, clinics, blood banks, and pharmacies. Falling short on the MSDS is not just a paperwork issue — it can mean license suspension, financial penalties, and reputational damage.
xMed was built to make PHC compliance the default state, not a project. From sample collection to result delivery, every step leaves a trace, every result is signed off, and every record is auditable. When PHC inspectors walk in, you show them the system, not a folder of printouts.
PHC MSDS areas we cover
The PHC's MSDS is organized into functional areas. xMed provides the underlying controls, reports, and workflows for each.
1. Patient identification & registration
CNIC, mobile, or MR# based booking — single source of patient identity.
Patient photo, demographics, allergies, and prior-visit history captured at registration.
Repeat-patient detection prevents duplicate records.
2. Sample collection & traceability
Barcode-driven chain of custody from collection to result, with timestamps at every handoff.
Per-sample container mapping. No unlabeled tubes reach the analyzer.
Reject/recollect flow with reason codes for any sample that doesn't pass acceptance criteria.
3. Test performance & analyzer interfacing
Direct LIS interfacing with hematology analyzers and most lab machines over Serial, USB, or LAN.
Standard protocols (HL7, ASTM, vendor-specific) supported.
Calibration and QC runs scheduled per analyzer and locked when overdue.
4. Result review & approval (two-step)
Technologist saves the result, pathologist approves — two distinct sign-offs with timestamps and identity.
Auto-highlight of abnormal values against age- and gender-specific reference ranges.
Critical-value detection with mandatory notification to the doctor and patient.
5. Quality control (internal QC module)
Levey-Jennings charts and Westgard rules.
QC-per-batch with reviewer sign-off.
QC trend reports across machines and time.
6. Report delivery & traceability
Live QR code on every printed report. Scanning resolves to a verifiable report page.
Delivery via patient portal, email, SMS, and WhatsApp — all logged.
Methodology comments and per-test remarks, with the option to show on the report.
7. Records, retention & audit
Every record has a creation user, timestamp, and a complete change history.
Tamper-evident audit logs exportable as PDFs for inspections.
Configurable retention policy (default 7 years, longer for blood bank records).
8. Security & access control
Role-based access control (RBAC) — phlebotomist, technologist, pathologist, admin, receptionist.
2FA via authenticator app, SMS, or email.
Location-locked authentication for on-prem and hybrid deployments.
9. Inventory, consumables & equipment
Reagent batches with expiry and short-expiry alerts.
Per-test consumable deduction.
Equipment maintenance log, calibration history, and downtime tracking.
10. Notifiable diseases & public health reporting
Notifiable test results flagged in the report and on the dashboard.
Aggregated reports for the diseases PHC requires to be tracked.
Export formats compatible with provincial health information systems.
Beyond PHC: HIPAA-aligned data protection
While PHC regulates service delivery, the security of patient data is what we obsess over day to day. xMed applies HIPAA-aligned controls: AES-256 encryption at rest, TLS 1.2+ in transit, encrypted backups, and access logs for every patient record. For on-prem and hybrid deployments, data never leaves your data center unless you choose to.
Frequently asked questions from PHC inspectors
Yes. xMed's sample-tracking view shows every handoff, with user, timestamp, and location, from collection to result. Exportable as PDF.
The technologist saves the result. The result is held in "pending approval" status until a pathologist reviews and approves. Both sign-offs are recorded with timestamps and user identity. Reports cannot leave the system without the second sign-off.
The QC module stores daily QC runs per analyte, with Levey-Jennings charts and Westgard rule violations. QC results are linked to the analyzer and the time window they cover.
Critical values are auto-detected against analyte-specific thresholds. The system blocks approval until the technologist or pathologist has confirmed that the referring doctor and the patient (or next of kin) have been notified. The notification method (phone, SMS, WhatsApp) and the recipient are logged.
Every report has a unique verification ID and a live QR code. The QR resolves to a server-side render of the released report. Any subsequent edit is captured in the audit log with the editor's identity, reason, and timestamp.
Yes. xMed is multi-tenant by design: branches, collection centers, and B2B labs can share one instance with isolated data and pricing, or remain consolidated depending on how PHC has structured your registration.
PHC MSDS — Aligned
Always inspection-ready.
Walk an inspector through xMed. Show the sample chain, the QC chart, the two-step approval, and the audit log. Done.