Skip to content

Release 1.0 · April 2026

Hospital-grade software.
Built for Malaysian healthcare.

ALESA MEDIX is an end-to-end Hospital Information System covering 24 clinical and operational modules. Standards-native, audit-ready, and designed for the reality of public and private facilities in Malaysia.

Request a private demo Explore the 24 modules

No obligation. Demo environment provisioned within 48 hours. Data stays in Malaysia.

Built against standards

HL7 v2.5.1 FHIR R4 DICOM PDPA 2010 MOH Malaysia LHDN e-Invoice ISO 27001 · aligned

Section 01 · Module matrix

Twenty-four modules. One coherent system.

End-to-end coverage across registration, clinical, ancillary and administrative domains. No third-party bolt-ons for the essentials. No feature parity claims without a production-verified implementation.

MD-01

Registration

Patient master index, visit creation, identifiers

STATUS SHIPPED

MD-02

Appointment

Schedule definition, slot booking, overbooking, colour coding

STATUS SHIPPED

MD-03

Emergency

Triage ESI, Early Warning, vitals, A&E worklist

STATUS SHIPPED

MD-04

Electronic Medical Record

CCHPI, allergies, conditions, care plans, discharge summary

STATUS SHIPPED

MD-05

Order Management (CPOE)

Lab, imaging, pharmacy, procedure orders with interaction checks

STATUS SHIPPED

MD-06

Pharmacy & eMAR

Drug master, dispensing, medication administration record

STATUS SHIPPED

MD-07

Laboratory

Test catalog, specimen, HL7 analyzer interface, critical alerts

STATUS SHIPPED

MD-08

Radiology

RIS worklist, DICOM/PACS, radiologist reporting

STATUS SHIPPED

MD-09

Inpatient & Nursing

Admission, bed management, nursing tasks, handover

STATUS SHIPPED

MD-10

Operating Theatre

OR scheduling, anaesthesia record, WHO surgical checklist

STATUS SHIPPED

MD-11

CSSD

Tray sterilisation, instrument tracking, cycle audit

STATUS SHIPPED

MD-12

Billing & Revenue

Charging, payors, refunds, cashier shift, MyInvois (LHDN)

STATUS SHIPPED

MD-13

Inventory

Stores, PR/PO/GRN, near-expiry, consignment, vendors

STATUS SHIPPED

MD-14

Medical Records (MRD)

ICD-10 coding, chart tracking, DMS, amendments

STATUS SHIPPED

MD-15

Dietary

Diet types, meal orders, patient allergy-diet alerts

STATUS SHIPPED

MD-16

Housekeeping

Bed cleaning, linen, laundry, room turnover

STATUS SHIPPED

MD-17

Blood Bank

Donor registry, crossmatch, transfusion log, adverse reactions

STATUS SHIPPED

MD-18

Mortuary

Body register, release authorisation, post-mortem

STATUS SHIPPED

MD-19

Queue & Kiosk

QMS, self-registration, self-payment, TV board, push

STATUS SHIPPED

MD-20

Patient Mobile & Portal

App, tele-consult WebRTC, results, e-receipt, DASS-21

STATUS SHIPPED

MD-21

Dashboard & Analytics

Executive, clinical, operational KPIs by role

STATUS SHIPPED

MD-22

Integration Layer

HL7 v2, FHIR R4, DICOM, MyInvois, MySejahtera, FPX

STATUS SHIPPED

MD-23

Specialty Modules

Dental, physio, OBGYN, paediatrics, ophthalmology

STATUS SHIPPED

MD-24

Security & Audit

2FA, WebAuthn, RBAC, ABAC, PHI encryption, PDPA

STATUS SHIPPED

Section 02 · Architecture

Seven layers. Inspectable boundaries.

A modular monolith with clean layer separation. Replace a layer — identity, analytics, device integration — without rewriting the others. Every clinical interaction is traced across layers in the audit log.

Section 03 · Comparison

How MEDIX differs from a typical HIS deployment.

Dimension Generic HIS ALESA MEDIX
Data residency Overseas cloud or undisclosed Malaysia only · disclosed region
Language of UI English only English + Bahasa Malaysia from day one
FHIR R4 server Add-on module, extra licence Native · 18 resources included
LHDN e-Invoice Manual CSV export MyInvois API · automatic submission
Audit trail scope Writes only Writes and PHI reads · per-record
Customisation model Vendor change order · weeks Owned source code · in-house velocity
Total cost over 3 years Licence + add-ons + mandatory support Transparent pilot → standard → enterprise
Support timezone Follows vendor HQ GMT+8 · Malaysia business hours

Section 04 · Interoperability

Standards-native, not standards-adjacent.

Every clinical table maps to a FHIR R4 resource. Every lifecycle event emits HL7 v2. PACS integrates via DICOMweb. Payment settles via FPX. Taxation files via MyInvois. When a new Malaysian standard ships, we ship an adapter — not a workaround.

FHIR R4
Patient · Encounter · Observation · MedicationRequest · Condition · Procedure · …
HL7 v2.5.1
ADT^A01 · ORM^O01 · ORU^R01 · MDM^T02
DICOM
Modality Worklist · DICOMweb · Orthanc bridge
Payments
FPX · ToyyibPay · SenangPay · Billplz
GET /fhir/Patient/0000042
200 OK · 14 ms 
// FHIR R4 · Patient resource · MRN-000042
{
  "resourceType": "Patient",
  "id": "0000042",
  "identifier": [
    { "system": "urn:oid:1.3.6.1.4.1.63264.mrn", "value": "MRN-000042" },
    { "system": "urn:oid:1.2.458.0.1.4.1",        "value": "850515-10-5678" }
  ],
  "active": true,
  "name": [{ "use": "official", "text": "Lim Siew Mei" }],
  "gender": "female",
  "birthDate": "1985-05-15",
  "address": [{ "city": "Kluang", "state": "Johor", "country": "MY" }],
  "communication": [{
    "language": { "coding": [{ "system": "urn:ietf:bcp:47", "code": "ms" }] },
    "preferred": true
  }],
  "managingOrganization": { "reference": "Organization/1" }
}

Authenticated SMART-on-FHIR OAuth2 · Bearer token · 256-bit TLS

Section 05 · Security

Clinical-grade controls by default.

Security is not a premium tier. Every facility — pilot or enterprise — receives the same baseline. PDPA 2010 readiness, per-record audit, and PHI encryption at rest are not optional.

S-01

Two-Factor Authentication

TOTP and WebAuthn passkeys enforced for clinical roles.

S-02

Audit Trail

Per-record writes and PHI reads, ten-year retention.

S-03

PHI Encryption

AES-256 at rest; column-level encryption for identifiers.

S-04

RBAC + ABAC

Role plus attribute policies; patient-assigned clinician rule.

S-05

Tenant Isolation

Per-organisation scope on every transactional table.

S-06

PDPA 2010 ready

Consent ledger, data subject rights, breach playbook.

Section 06 · Engagement model

Three engagement paths. One codebase.

We do not sell licences by seat. We size engagements by what your facility actually runs. Pricing is discussed after a scoping call — not in a public rate card.

Pilot

T01
Duration
4–8 weeks
Commercial
Fixed-fee

For facilities validating fit with a single department or clinic group.

  • ━ Registration, Appointment, EMR, Billing
  • ━ Demo organisation with seeded data
  • ━ Monthly checkpoint review
  • ━ Named engineering contact
Begin scoping call

Standard

T02
Duration
3–6 months
Commercial
Annual

For mid-size hospitals running the full clinical stack with in-house IT.

  • ━ All 24 modules
  • ━ HL7 and FHIR enabled
  • ━ Role-specific dashboards
  • ━ Quarterly release train
  • ━ Business-hour SLA
Begin scoping call

Enterprise

T03
Duration
6+ months
Commercial
Negotiated

For multi-facility groups, government tender awards, and regulated scenarios.

  • ━ Everything in Standard
  • ━ Multi-tenant group deployment
  • ━ Dedicated compliance officer
  • ━ 24 × 7 on-call clinical support
  • ━ Custom integrations and SLAs
  • ━ On-premise option
Begin scoping call

Speak with the team behind ALESA MEDIX.

Thirty-minute scoping call. Bring clinical, IT, and finance stakeholders. We arrive with prepared questions, not a pitch deck.

medix@alesa.my +60 12-345 6789