From Excel to Multi-Tenant SaaS: Building a CCM/PCM Operations Platform

A US-based Chronic Care Management (CCM) and Principal Care Management (PCM) company was running their entire operation out of Excel spreadsheets: patient rosters, employee paycodes, invoicing, and payment tracking all lived in disconnected files with no access control, no audit trail, and no compliance posture.

The engagement started with a single goal — replace the spreadsheets. It evolved into a multi-phase platform build that eventually became a fully multi-tenant SaaS product other care coordination companies can subscribe to.

Phase 1 — Internal Operations Platform

The first version was a private internal system. The core architecture introduced RBAC (Role-Based Access Control) so each employee could only see and act on patients assigned to them. Managers had elevated access to their team's patient list. Administrators had organization-wide visibility. HIPAA compliance was engineered from day one: encrypted PostgreSQL storage, strict IAM policies, and API-level access controls enforced by FastAPI middleware.

Employee and manager dashboards were built on a React frontend with role-conditional rendering — the same codebase showed a different interface depending on who logged in. PDF invoice and report generation was introduced early, giving operations leadership the first structured view of billing activity and employee output they had ever had.

Phase 2 — Time Tracking and Workforce Intelligence

CCM and PCM billing operates on documented time. CMS requires a minimum of 20 minutes of care coordination per patient per month for standard CCM (CPT 99490). Every minute a care coordinator spends on a patient is a billable asset — or a compliance risk if it's undocumented.

The second phase introduced per-patient time tracking at the employee level, surfacing real data on how much time each coordinator was putting into each patient. Manager dashboards were built to show team-level time distribution, identify patients consuming disproportionate time, and flag employees who were consistently underutilizing or over-extending.

Phase 3 — Predictive Scoring and Patient Reassignment

The third phase tackled a hard operational problem: by the time a manager realizes an employee isn't going to hit their monthly care minutes target, it's often too late to do anything about it. We built an individual employee scoring system that tracks progress against monthly targets on a rolling basis and generates a projected end-of-month coverage estimate. Employees falling behind threshold trigger alerts and surface into a reassignment workflow where managers can temporarily or permanently move patients to another coordinator to protect billing compliance.

Phase 4 — SaaS Conversion

After the internal platform proved its value, the decision was made to convert it into a product other CCM/PCM companies could use. The architecture was refactored from a single-tenant internal tool into a fully multi-tenant SaaS: organization registration, employee onboarding, patient roster management, and all dashboards now operate in isolated per-tenant data environments. A care coordination company can register, add their employees and patients, and be running the same operational infrastructure within minutes.