# Medimine: research and pathway design

Checked 14 October 2026, Asia/Dhaka. This report combines the supplied spreadsheet, the current page set, and official legal, clinical, privacy, banking, tax, and security sources. The classifications and architecture below are proposed product decisions, not findings that Medimine possesses a particular licence, approved offer, registered holding, or operational service.

## 1. What the source establishes

The source is [One Week Challenge](https://docs.google.com/spreadsheets/d/1k5CJiGU9B1n7Dc50WKyI0mALacLboceO7rniTGaBoBY/edit?gid=0), native tab `Sheet1`, `sheetId=0`, bounded range `A1:K42`. The file was freshly fetched and its cells, notes, hyperlinks and checkbox structure inspected. There are 34 actionable rows: one core idea, seven solution models, four roles, five services, eight programs, and nine regional project components. Group headings are excluded.

Later on 14 October 2026, the user directly requested Health Record Profiling and Health Awareness Test in Services. These two additions bring the current website to seven services and 36 review pathways. They are labelled user-requested additions in the matrix; no spreadsheet row or checkbox value is invented for them. Their proposed scopes are record organisation and educational awareness assessment respectively.

Row 3 names the visitor pathway: Registration Form, Profile, Ways of Payment, Money Receipt, and Share/Investment Certificate. Row 4 separately names content-production stages. Concept and Documentation are now true for the core idea at row 5 and Medimine Healthcare Limited at row 7. These recorded checkbox values are not proof of approved contracts, deployed account systems, banking arrangements, legal offering authority, or available healthcare. The other stages remain source values; this project does not alter the source sheet or infer completion from them.

The earlier Branch Investor label has changed to **Branch advisor** at row 16. The role and its financial/document treatment have been corrected in the pages. A branch adviser is not automatically a shareholder.

The range does not supply prices, beneficiary bank details, contractual durations/returns, approved share classes or quantities, issuer registration details, signatures, certificate templates, service availability, or the exact meanings/contracts behind DPS and HAO. No linked documents or notes in the inspected range resolve those gaps. The researched workflow therefore separates recommendations, source facts, and facts still needing company confirmation.

## 2. Recommended common pathway

**Application → purpose-specific profile → eligibility / terms / quote review → bank transfer → submitted evidence → independent administrator verification → automatic money receipt → applicable document approval → automatic document generation.**

The selected payment route is bank transfer with administrator verification. The evidence submission and the receiving-account check are different events. Bangladesh Bank's BEFTN rules describe credit, settlement, returns and reversals, supporting the need to reconcile the receiving account rather than treating an uploaded screenshot as settlement. [Official BEFTN rules](https://www.bb.org.bd/mediaroom/circulars/psd/oct282020psd08e.pdf).

Recommended implementation: create an approved order with an immutable amount/currency and unique reference; show only approved beneficiary instructions; collect minimal transfer metadata; let a finance verifier match the actual credit; record exceptions; generate a receipt in the same committed transaction as verified-payment posting. Duplicate proof, repeated bank entries, partial payments, unmatched credits, rejected evidence, refunds and reversals must be distinct states. A repeated click must return the existing document rather than creating another receipt.

The final ownership step is conditional. A money receipt records funds received. The Companies Act's membership/register and certificate provisions concern a different corporate event. [Membership, section 32](https://bdlaws.minlaw.gov.bd/act-788/section-32856.html), [members' register, section 34](https://bdlaws.minlaw.gov.bd/act-788/section-32858.html), [share certificate, section 31](https://bdlaws.minlaw.gov.bd/act-788/section-32855.html). The software should render an approved legal record; it must not create ownership merely by rendering a PDF.

## 3. Task families and the right ending

| Family | Application/profile | Payment | Ending |
| --- | --- | --- | --- |
| Core idea and company overview | Optional enquiry | No default fee | Information or enquiry acknowledgement |
| GP centre, GP point, mini hospital, regional clinical components | Patient pathway in the approved clinical system | Approved service/quote, when applicable | Money receipt plus booking/service entitlement; no ownership certificate |
| Emergency hospital concept | Essential administration when clinically appropriate | Later settlement where appropriate | Administrative receipt; care must not be gated by registration or prepayment |
| MHS and organisational consultancy | Authorised organisational contact, scope and agreed responsibilities | Approved quote/contract | Receipt plus service agreement/delivery records |
| Patient Profile Consultancy and Telemedicine | Appropriate patient identity and specific consent | Approved service and fee | Receipt plus consultation/booking record |
| HIDP | Learner eligibility and enrolment profile | Approved fee, if applicable | Receipt; completion certificate only after completion, not a share certificate |
| Company Adviser and Branch advisor | Experience, contribution and agreed role | No default joining/investment fee | Engagement/appointment acknowledgement; no ownership certificate |
| Company Shareholder and Branch Shareholder | Identity, actual issuing entity, share terms and eligibility | Only after lawful offer/terms review | Receipt, then authorised allotment/registered holding and executed share certificate |
| HAO, Monthly DPS, Short Term Investment, Scheme Investment | Expression of interest followed by classification and approved instrument | Hold collection until actual structure and lawful route are established | Document depends on the instrument; contractual investment acknowledgement is not equity ownership |
| Advance Health Deposit | Identified service contract and participant profile | Defined healthcare prepayment, if approved | Receipt and service-credit/entitlement statement |
| Social Responsibility Payment | Contributor and specified purpose | Approved contribution | Contribution receipt/acknowledgement, not equity or an assumed tax deduction |
| SHIP | School/authorised contact, participant/guardian consent as applicable | Approved school arrangement, if applicable | Receipt and programme participation records; no ownership certificate |
| Six Month / One Year Health Check-up management | Participant profile and professionally reviewed package | Approved contents/price | Receipt and schedule/entitlement records |

All 34 exact source titles and physical row references, plus the two explicitly labelled user-requested service additions, are supplied in `TASK-PATHWAY-MATRIX.csv` and the website's research page. This family table does not collapse the nine project components into three undifferentiated transactions. A diagnostic-centre patient booking, GP-point booking, branch adviser application and company share subscription remain different transaction purposes.

## 4. Legal distinctions that must remain configurable

Private-company public subscription invitations require review against the issuer's actual structure. A public website application is not automatically an authorised public share offer. [Companies Act definition, section 2](https://bdlaws.minlaw.gov.bd/act-788/section-32006.html).

BSEC's official 2019 equity exemption expressly repealed older threshold orders and has a particular equity scope. Do not hard-code the historical Tk 10 crore threshold or universally require BSEC consent for every equity transaction. Public offers, debt products and other applicable requirements still need route-specific assessment. [2019 official order](https://sec.gov.bd/slaws/Order_20.06.2019.pdf), [current equity routes](https://sec.gov.bd/equity-securities), [current debt routes](https://sec.gov.bd/debt-securities).

Track allotment filing and certificate preparation against the actual corporate events. The applicable Companies Act sections describe 60-day allotment-return and normally 90-day certificate-readiness rules with qualifications. This is not evidence that a Registrar must approve every certificate before issuance. [Section 151](https://bdlaws.minlaw.gov.bd/act-print-788/section-print-33367.html), [section 158](https://bdlaws.minlaw.gov.bd/act-print-788/section-print-33470.html).

Service advances and deposit-taking cannot be classified just by their names. Finance Company Act section 2 contains specified exclusions from the deposit definition, including genuine contracted goods/services advances; financing business requires its relevant legal basis/licensing. DPS/HAO/investment products need review of the actual repayment, return, operator and contract. [Finance Company Act section 2](https://bdlaws.minlaw.gov.bd/act-1478/section-53704.html), [Act including section 4](https://bdlaws.minlaw.gov.bd/act-print-1478.html).

The authorised execution/signatory process must be approved for each document. A decorative signature, seal or QR code supplies no missing authority. See the more detailed `LEGAL-RESEARCH.md` for primary links, current amendment cautions, unresolved offering facts and per-instrument recommendations.

## 5. Clinical and privacy implementation

BMDC guidance supports explicit recorded telemedicine consent, identification, appropriate guardian involvement and verified practitioner credentials. A registration checkbox does not replace consent to a particular clinical encounter. [Official BMDC guideline](https://www.bmdc.org.bd/docs/BMDC_Telemedicine_Guidelines_July2020.pdf).

The current DGHS 2026 telehealth guideline includes clinical platform/authentication and Bangladesh patient-data hosting provisions. Confirm licensing, clinical governance, hosting location and vendor arrangements before enabling actual medical profiles/uploads. [DGHS publication](https://dghs.gov.bd/pages/publications/national-telehealth-guideline-for-bangladesh-pag7eb-6a2abe744bbf12a41ac7369e).

The official Personal Data Protection Act 2026 is the current source rather than a superseded 2025 ordinance. It addresses sensitive health information, consent, guardians and data-subject rights; commencement is staged for some provisions. [Official Act](https://bdlaws.minlaw.gov.bd/act-print-1692.html). Verify applicability/commencement with the responsible team instead of assuming every provision started simultaneously.

Recommended separation: a participant owns an account; each role gets a separate purpose-specific profile; clinicians access assigned clinical data; finance reviewers see transfer data; corporate officers see relevant ownership records. Marketing consent is separate. Minimise fields, define retention, record consent versions, support corrections and requests, keep documents private, and expose only minimal validity metadata on public verification links. This Sites version accepts only fictional review records, requires `.invalid` example emails, keeps state in page memory and enables no medical or bank-proof upload.

## 6. Receipts and document generation

A verified money receipt should snapshot the actual receiving legal entity, payer/order, amount/currency, purpose, bank reference, credited/value date, verifier and issue time, balance and status. It is not automatically a statutory tax invoice. NBR identifies the prescribed tax-invoice route; applicable tax registration and treatment must be confirmed. [NBR VAT FAQ](https://nbr.gov.bd/faq/vat-faq/eng). No tax rate, exemption or BIN is invented here.

Share documents should snapshot the legally approved issuer, member/register/holding reference, authorised share details, issue event and executed template. Contractual investment confirmations should identify their approved agreement and must not state share ownership when the instrument is not equity. Training certificates require reviewed completion records. A source record correction or refund must create a linked audit/version event, not quietly overwrite an issued document.

The review app automatically generates receipt specimens after a matched synthetic credit. It generates share, contractual-investment or training specimens only after the corresponding simulated approvals. Every PDF has a large SPECIMEN watermark and repeated NOT VALID notices, with no real signature, seal, registration number, share quantity, return promise or bank account. These are functional demonstrations of generation, not issued financial documents.

## 7. Later backend and launch acceptance

Use the separate `BACKEND-CONTRACT.md` to integrate into the main application. The actual backend must authenticate/authorise every operation, enforce allowed state transitions, maintain durable ledgers and unique bank-credit/receipt constraints, audit maker/checker decisions, and protect evidence/documents. Client-side flags cannot establish payment or corporate approval. [OWASP transaction authorisation](https://cheatsheetseries.owasp.org/cheatsheets/Transaction_Authorization_Cheat_Sheet.html), [access control](https://cheatsheetseries.owasp.org/cheatsheets/Authorization_Cheat_Sheet.html), [upload controls](https://cheatsheetseries.owasp.org/cheatsheets/File_Upload_Cheat_Sheet.html).

Launch inputs still needed: the receiving legal entity and approved bank account/instructions; fee/package/contribution schedules; product classification and offering basis; approved agreements and refund terms; issuer/signatory/certificate template; clinical/data-hosting arrangement where relevant; and authorised finance/corporate roles. The main website/VPS and source spreadsheet have not been modified by this preview work.

Acceptance must demonstrate unmatched/partial/rejected funds never produce a full receipt; repeated verification never duplicates it; advisers/patient services never issue ownership certificates; share issuance waits for authorised register/allotment records; training waits for completion; and refunds/reversals preserve history. The public preview controls are simulations, not an administrator login or secure production authorisation layer.