🔒
Security & Compliance
10ySOC2 Auditor • KVKK/GDPR
Threat model (STRIDE), OWASP Top 10 checklist, auth/session hardening, data classification, GDPR/KVKK compliance map (data inventory, retention periods, deletion flow), audit log schema.
VERTICAL5 experts8 features8-step Mega Chain
Master build prompt for a telemedicine / online health platform
A privacy-first build prompt for a telemedicine product with appointments, video visits, patient records, e-prescriptions and payments.
Built for: Health startups, clinic chains and digital health teams
In health products, data privacy and access control sit at the center of the design. Appointments, video call quality and the accuracy of clinical records determine whether users trust you.
The prompt defines patient and doctor roles, the appointment and consultation flow, record encryption, an access audit trail and GDPR/KVKK obligations for special-category health data.
The experts who write this prompt
Each expert adds its own task block, constraints and success criteria to the prompt. Default selection for HealthTech Telemedicine:
📦
Product Manager
8yex-Linear • PRD & Roadmap
Write a flawless PRD. User stories (Jobs-to-be-Done), acceptance criteria, edge cases, metrics (North Star, activation, retention); prioritize the roadmap with RICE. Scope an MVP that ships in 7 days.
🎨
Design Director
10yAwwwards Jury • Design System
Build the design system: Tailwind tokens, shadcn/ui, dark mode only, Linear-like density, command palette, keyboard-first. Describe wireframes for the 3 critical flows.
👨💻
Staff Engineer / CTO
12yex-Stripe, ex-Vercel • System Architecture
Design the system architecture. Edge-first, 100ms p95. DB schema, API contract, caching strategy, multi-tenancy, RLS, idempotency. Explain why the chosen backend + DB combination is the right call, and write the scaling plan.
🧪
QA Automation
8yex-Chromatic • Testing Strategy
Testing strategy: test pyramid (unit/integration/e2e), Playwright e2e scenarios for the critical flows, visual regression, contract tests, quality gates in CI, flaky-test policy.
Recommended stack
Preloaded in step 2 of the Studio; change any of the 7 layers.
- Next.js 16 (App Router)
- Hono + CF Workers
- Supabase
- Supabase Auth
- Resend
Payments & revenue model
- Commission %
- Subscription (MRR)
- Stripe2.9% + 30¢
Compliance
- KVKK/GDPR
- SOC2
Features in the prompt
Every feature appears in the prompt as a "Spec + API + UI + Tests" line.
- Email/Pass + Magic Link
- 2FA & Passkeys
- RBAC + Permissions
- Calendar & Scheduling
- Chat + Video Call
- Audit Logs
- Notifications Center
- File Upload + CDN
Sample prompt (shortened)
Sample idea: "A video consultation platform with online booking for dietitians and psychologists". Below are the master prompt's header and the first expert's block; the Studio generates the full text as 5 experts × 8 steps.
HEALTHTECH TELEMEDICINE — MASTER BUILD PROMPTClaude XML • EN
# HealthTech Telemedicine - MASTER BUILD PROMPT Stack: Next.js 16 (App Router), Hono + CF Workers Goal: A video consultation platform with online booking for dietitians and psychologists This prompt builds a full-stack HealthTech Telemedicine in 8 steps. Each step consumes the previous step's output. 5 experts' knowledge combined. Steps: 1. PRD & User Stories 2. Design System (Figma tokens) 3. DB Schema & API Contract 4. Auth & Billing Implementation 5. Core Features Build 6. AI Integration (RAG + Agents) 7. SEO/AEO & Analytics 8. Launch & Growth Checklist --- <prompt> <role name="Security & Compliance" org="SOC2 Auditor" specialty="KVKK/GDPR" experience="10y"> You are a Security & Compliance with 10 years of experience. Specialty: KVKK/GDPR. You have shipped world-class products at the level of Stripe, Linear and Vercel. </role> <context> Project: HealthTech Telemedicine - A video consultation platform with online booking for dietitians and psychologists Type: HealthTech Telemedicine Vision: Practitioner profiles and calendars, booking and payment, video calls (WebRTC), session notes and file sharing, reminders, and encryption plus access logging for special-category data. Target user: Health startups, clinic chains and digital health teams - Pain: - Budget: Competitors: USP: Monetization: Commission %, Subscription (MRR) | Payments: Stripe Tech Stack: Next.js 16 (App Router), Hono + CF Workers, Supabase, Supabase Auth, Resend Features: Email/Pass + Magic Link, 2FA & Passkeys, RBAC + Permissions, Calendar & Scheduling, Chat + Video Call, Audit Logs, Notifications Center, File Upload + CDN Compliance: KVKK/GDPR, SOC2 Lang: EN </context> <task> Threat model (STRIDE), OWASP Top 10 checklist, auth/session hardening, data classification, GDPR/KVKK compliance map (data inventory, retention periods, deletion flow), audit log schema. General: production quality, copy-paste ready level of detail. </task> <technical_architecture> - Frontend: Next.js 16 (App Router) - App Router, Server Components, partial prerendering - Backend: Hono + CF Workers - Edge runtime, RPC, zod validation - DB: Supabase - pgvector for semantic search, type-safe ORM, RLS policies - Auth: Supabase Auth - Passkeys first, org/team model - Search: - typo-tolerant, faceted - Realtime: Resend - presence, CRDT-ready Payment flow: Stripe -> Webhook -> Background job -> Entitlement update -> Audit log </technical_architecture> <feature_matrix> - [ ] Email/Pass + Magic Link -> Spec + API + UI + Tests - [ ] 2FA & Passkeys -> Spec + API + UI + Tests …
The rest is in the Studio: every expert block, the feature matrix and the Mega Chain.Generate the full prompt
Mega Chain: a full-stack HealthTech Telemedicine in 8 steps
- 1. PRD & User Stories
- 2. Design System (Figma tokens)
- 3. DB Schema & API Contract
- 4. Auth & Billing Implementation
- 5. Core Features Build
- 6. AI Integration (RAG + Agents)
- 7. SEO/AEO & Analytics
- 8. Launch & Growth Checklist
FAQ
How is special-category health data protected?
Application-level encryption, the principle of least privilege, an access audit trail and data retention periods are mandatory in the constraints section.
What's recommended for video calls?
WebRTC providers such as Daily or Twilio, or self-hosted LiveKit; the prompt lays out the quality/cost trade-off with its reasoning.
Which tools can I paste the generated prompt into?
Claude Code, Cursor, Windsurf, v0, Lovable, Bolt and ChatGPT. You pick the output format (Claude XML, ChatGPT Markdown, Cursor Rules, v0, Lovable/Bolt) in step 4 of the Studio, and you can also download it as .cursorrules or CLAUDE.md.
Is it free?
Yes. On the Free plan you generate unlimited prompts with 3 experts and 2 formats — no card required. 18 experts, the Mega Chain and Export to Builders come with Monster Pro ($29/mo).
Similar project types
EdTech LMS
The build prompt for an LMS with course creation, video lessons, quizzes, progress tracking, certificates and subscriptions.
PropTech Real Estate
The build prompt for a real estate platform with property listings, map search, virtual tours, an agent CRM and a rental flow.
Logistics Tracking
The build prompt for a logistics product with shipment creation, courier/vehicle tracking, route optimization, proof of delivery and customer alerts.
On-Demand Uber-like
The build prompt for an on-demand app with customer, provider and operator roles: matching, live tracking, payments and ratings.
Booking SaaS
The build prompt for a booking SaaS with calendars, availability rules, an online booking page, reminders and payments or deposits.
CRM/ERP
The build prompt for a CRM/ERP with customer records, a sales pipeline, a quote-to-order-to-invoice flow, tasks and reports.
Turn your HealthTech Telemedicine idea into a master prompt in 4 steps.
Experts, stack and features come preloaded like on this page — you add the name and the idea. Free, no card required.