Medical practice management software in Tunisia: the complete guide
How to choose medical software fit for the Tunisian reality: mobile, bilingual, and compliant.
In Tunisia, mobile isn't an accessory: it's the primary tool.
A medical application that exists only at the desk covers only the part of the week a doctor spends at it. Web and mobile applications for all three roles are included on every Doctopass plan; so is the place where the product hedges.
Web and mobile applications exist for all three roles — doctor, patient, secretary — and are included on every plan. A mobile application, here, means an application built for the handset for each role, not a website narrowed to a phone.
An ordinary day: a result checked between two patients, a report signed off after the clinic closes, tomorrow's calendar read from the car, a question from the secretary answered in a break. None of it happens at the desk machine; all of it happens already — in a messenger, on a call, or from memory. Outside the record, and with no trace.
A mobile application does not create that habit; it brings it back inside the record. To be worth a migration it has to carry what the desk carries: on all three plans, the consultation workspace, patient records with an eleven-section medical history, the staff-side calendar with drag-and-drop and conflict detection, and Outlook synchronisation.
Roles differ by what they can see and do, never by a different application: the doctor holds the clinical authority, the secretary works inside the permissions granted to them, and the patient sees their own care in a language they understand. One product, three doors into it.
The doctor gets the record, the calendar, the consultation, and the drafts they sign. That last word is load-bearing: every AI output is a draft, reviewed and explicitly signed, with no automatic finalisation and no silent write.
The secretary gets the calendar, the walk-in queue, invoices and messaging, inside permissions granted one at a time and each individually logged. Four appear in the interface: Manage calendar, Create invoices, View clinical notes, Message patients. We name four and assert no total.
The patient gets a trilingual portal — Arabic, French and English — secure chat, family accounts with caregiver shared access, and vitals from Apple Health, Google Fit and Withings, all on every plan. Patients connect five ways: email, SMS, a link, a Patient ID, or a QR code. The full split sits on the practice management platform page.
Mobile is not the gated part. Web and mobile applications for all three roles, and appointment reminders as push plus in-app, are included on Essential at 69 DT, Pro at 159 DT and Premium at 269 DT, per doctor, per month, collected annually.
| Capability | Essential | Pro | Premium |
|---|---|---|---|
| Web and mobile apps, three roles | Included | Included | Included |
| Reminders, push and in-app | Included | Included | Included |
| SMS and WhatsApp reminder credits | Add-on | 200 per month | 500 per month |
| Universal dictation, every field | No | Included | Included |
| Full audit trail | No | Included | Included |
| Desktop application, three roles | No | No | Included |
| Offline consultation mode | No | No | Included |
| Audit log search | No | No | Included |
| Secretary seats | 1 | 3 | 5 |
What Premium adds in this table — the desktop application for all three roles, offline consultation mode, and audit log search — is about the hardware, the network and the after-the-fact record, not about the medicine. The trial is fourteen days.
The objection is correct, and the answer is architectural, not a four-digit code on the lock screen. The record does not live on the device; it lives behind a session, and a session can be revoked.
Concretely: TOTP two-factor available and encouraged for privileged access; access tokens short-lived, roughly fifteen minutes; refresh tokens opaque and rotated, roughly thirty days. Every access to patient data passes two authorisation layers — a role-based guard, then a per-record ownership check in the service layer. Passwords are hashed with argon2id, session anomaly detection covers the rest, and stored files are reachable only through short-lived signed URLs.
Data is encrypted in transit and at rest, with field-level encryption keyed separately on the most sensitive categories, and patient data is never hard-deleted. Physical hosting for the Tunisian service is within Tunisia. All AI processing runs on a model self-hosted within the applicable jurisdiction, no personal data reaches any external AI provider, and personal identifiers are stripped before a prompt leaves the servers. Cross-doctor access is consent-gated, granted per doctor, revocable, and audited — detail on the security architecture page and in the computerised patient record hub.
One caveat, on the incident itself. Access can be revoked when a handset goes missing; knowing afterwards what it saw is a separate question. That needs the full audit trail, which starts at Pro, and audit log search, which is Premium only.
We will not publish a device-security checklist, and we will not tell a doctor what Tunisian law requires of a phone holding health data. That question belongs to the INPDP. Doctopass's INPDP declaration is submitted: a fact about us, not a ruling about your handset.
Nor will we leave a tension unwritten. The comparison table carries web and mobile applications on every plan; the Terms define the Platform as the web application and, where later released, mobile and desktop applications. We would rather write that down than let it be discovered after signature.
Three further limits. A phone screen is a real constraint for a full first consultation, and no amount of interface design removes it. Offline consultation mode is Premium only — on Essential and Pro, ask for a network cut to be simulated during the demonstration rather than trusting a promise. And telemedicine is not a Doctopass feature: it is not sold on this page.
Judge a mobile medical application on whether the record stays behind a session rather than on the device. Enter it once, reach it from whichever role's door you hold, and know that access can be revoked when a handset goes missing. Doctopass puts every role on the phone; it does not put the record there.
For a short follow-up, yes: the consultation workspace is on all three plans and opens on a handset as anywhere else. For a full first consultation the screen is a real constraint, and we would rather write that limit down than let it be discovered after signature. Universal dictation starts at Pro.
Offline consultation mode, with automatic synchronisation on reconnect, is a Premium exclusive. On Essential and Pro there is no offline mode, so ask for the connection to be cut mid-consultation during the demonstration rather than trusting a promise.
Web and mobile applications exist for all three roles, the patient included, on every plan, and patients connect in the five ways listed above. Reminders are push plus in-app on all three plans, with SMS and WhatsApp credits gated by plan. On what a patient must or must not install to reach you, we will not settle it in a text: ask to see a patient's first day on a real handset.
Yes. Web and mobile applications for all three roles are included on Essential at 69 DT, Pro at 159 DT and Premium at 269 DT, per doctor, per month, collected annually. The desktop application and offline mode are Premium only — full detail on the plan comparison and pricing page.
Designing for the desk first is designing for the smallest part of the week. To judge whether each role's door opens in a hand, request a 30-minute demo — run it on your own handset, on clinic wifi, not on the salesperson's screen.
New writing on clinical AI and practice management. No noise, no selling, unsubscribe any time.