TL;DR — key facts at a glance
Healthcare software cost depends far more on software type and compliance scope than total feature count. EHR integration runs $20k–$80k per system; a telemedicine platform runs $70k–$350k; a patient portal runs $40k–$180k. HIPAA/GDPR work adds 15–25% on top, and HL7/FHIR integration is typically the largest line item after the core application. Discovery through launch runs 4–14 months.
This is a cost and process deep dive, not a general introduction — for the broader picture on what custom healthcare software covers and how to choose a partner, start with our custom healthcare software development guide. Here we cover real price ranges by software type, what compliance actually costs, and the timeline to plan around.
Cost by software type: EHR integration, telemedicine, patient portals
Healthcare budgets vary less by company size than by which of these three product types — or which combination of them — you are building. The ranges below reflect delivery-complete builds by a senior team in 2026, including the compliance and integration work each type requires, not a stripped-down prototype.
EHR integration cost
| Scope | Typical cost (2026) | Timeline |
|---|---|---|
| Single HL7 v2 interface (labs, ADT feed) | $15k–$35k | 4–8 weeks |
| FHIR R4 API integration with one certified EHR | $25k–$70k | 6–12 weeks |
| Multi-EHR / bidirectional integration hub | $80k–$220k+ | 4–7 months |
Cost scales with the number of source systems and their API maturity, not the size of your own app. A SMART on FHIR connection to Epic, Oracle Health (Cerner) or Athenahealth is comparatively cheap; bridging a legacy system that only exposes HL7 v2 is a project of its own. See our EHR integration guide (HL7, FHIR and APIs) for the interoperability detail.
Telemedicine platform cost
| Scope | Typical cost (2026) | Timeline |
|---|---|---|
| MVP: video visits, scheduling, basic e-prescribing | $70k–$150k | 4–7 months |
| Full platform: RPM ingestion, multi-provider scheduling, eligibility checks | $150k–$350k | 7–12 months |
| Enterprise multi-site telehealth network | $350k–$700k+ | 12+ months |
Video infrastructure is a commodity in 2026 — cost sits in multi-provider scheduling logic, e-prescribing integrations (Surescripts-class networks), insurance-eligibility checks and RPM device ingestion where in scope.
Patient portal cost
| Scope | Typical cost (2026) | Timeline |
|---|---|---|
| Standalone portal: login, scheduling, secure messaging, results | $40k–$90k | 3–5 months |
| Portal with FHIR-based record access, bill pay, intake forms | $90k–$180k | 5–8 months |
| Enterprise patient-engagement suite, multi-facility | $180k–$400k+ | 8–14 months |
Patient portals look simple and rarely are: identity verification (NIST SP 800-63 or eIDAS assurance levels), consent management and FHIR-based record access are the real engineering, not the scheduling calendar.
These three types cover most real projects; for a broader build, see our custom software development cost guide and the software development cost benchmark. A team with genuine custom healthcare software development services experience will scope these numbers in a paid discovery, not quote from a one-line brief.
Budgeting for HIPAA and GDPR compliance
Compliance is architecture, not a bolt-on fee — it belongs in the budget from the first estimate. Plan for roughly 15–25% of total project cost, rising to 25–35% for Software as a Medical Device (SaMD). Below is what that percentage actually buys.
| Line item | Typical cost (2026) |
|---|---|
| BAA due diligence & subprocessor review | $8k–$20k |
| Audit logging & access-control infrastructure | $15k–$40k |
| Encryption & key management (at rest and in transit) | $10k–$25k |
| Initial HIPAA risk assessment (then annually) | $8k–$20k/yr |
| GDPR DPIA & Article 9 lawful-basis mapping (if EU patients) | $5k–$15k |
| Pre-launch penetration testing | $10k–$30k |
| SaMD design controls & validation (only if applicable) | +$120k–$400k |
None of this is discretionary once ePHI is in scope: every party touching PHI needs a signed BAA, and HIPAA's Security Rule requires these controls as baseline, not upgrades. See our HIPAA software development checklist and GDPR guide for US founders selling into the EU for the full detail.
HL7 and FHIR integration cost
After the core application, interoperability work is usually the largest cost driver. A typical HL7/FHIR integration runs $20k–$80k per endpoint, plus $3k–$10k/year in maintenance as FHIR profiles evolve. Four factors explain most of the spread:
- EHR API maturity. A SMART on FHIR app connecting to Epic or Oracle Health (Cerner) is cheap to build against; a legacy system exposing only HL7 v2 adds a translation layer and longer testing.
- Data model distance from USCDI. The closer your schema already maps to USCDI, the less transformation work each integration needs.
- Sandbox and credential lead time. Large health systems can take weeks for sandbox access and months for production credentials — a scheduling risk more than a cost one.
- Number of message types. Reading demographics only is far cheaper than reading and writing orders, results and notes across multiple FHIR resources.
Budget testing time specifically: sandbox certification, then a second round after production credentials, routinely adds 15–25% to the timeline a clean API spec alone would suggest.
The build process, step by step
A compliant healthcare build follows a predictable sequence, and the stages teams rush — discovery and the compliance foundation — are where the budget is actually decided.
- Discovery & regulatory scoping (2–4 weeks, ~8–12%): map workflows, every integration needed, the PHI you touch, and whether any part is SaMD.
- Architecture & data model (3–5 weeks, ~10–15%): a FHIR-mappable internal model and security controls, before feature code is written.
- Compliance foundation (4–8 weeks, often parallel, ~15–20%): access control, audit logging, encryption and BAA-covered infrastructure.
- Core application build (8–20 weeks by software type, ~30–40%): the clinician and patient workflows themselves.
- EHR, HL7/FHIR & device integration (4–10 weeks, ~15–25%): the stage most likely to run long.
- Validation, security & QA (3–6 weeks, ~10–15%): functional, security and, where SaMD applies, regulatory testing.
- Launch, onboarding & support (1–2 weeks per site plus ongoing, ~5–10%): go-live, staff training and a maintenance plan.
The compliance foundation and integration stages are core backend and cloud engineering — the discipline behind our custom software development practice, extended for regulated data through our custom healthcare software development services.
Realistic timelines by project type
| Project type | Typical timeline |
|---|---|
| EHR integration added to an existing product | 6–12 weeks |
| Telemedicine MVP | 4–7 months |
| Patient portal MVP | 3–5 months |
| Full production platform, multiple integrations | 8–14 months |
| Enterprise / multi-facility or FDA-regulated SaMD | 14+ months |
Timelines track integration count and compliance surface, not visible feature count. Live EHR access is granted per provider organization, and a health system's own security review can run for weeks in parallel — flag this dependency to stakeholders on day one.
What moves the price inside a range
Within any tier, five factors explain most of the spread between the bottom and top of the range:
- 1. Number of integrations. Each additional EHR, lab, device or payer connection adds design, error handling and edge cases — consistently the largest driver in healthcare.
- 2. Regulatory class. A product that interprets an image, recommends a dose or triages symptoms may be regulated as SaMD, adding $120k–$400k and 3–9 months. Settle this during discovery — it's expensive to discover mid-build.
- 3. Data migration volume and quality. Moving legacy patient records into a FHIR-mapped model is rarely a clean export-import; duplicate records and inconsistent coding (ICD, SNOMED, LOINC) often cost more than the migration script itself.
- 4. Number of user roles. Clinician, admin and patient roles are not 50% more work than one role — each multiplies permission logic and test paths, often closer to double.
- 5. Delivery region. Senior nearshore engineering typically runs 40–60% below US onshore rates for the same scope — see our software development cost benchmark for the full economics.
How to budget your project
A practical sequence for turning these ranges into a number your board or investors will accept:
- Inventory every integration first. Count EHRs, labs, devices and payer systems before estimating anything else — this predicts more of your final cost than any other input.
- Settle the regulatory class early. Decide during discovery whether any part is SaMD; it changes the budget by six figures and shouldn't stay open past week two.
- Budget compliance as a percentage, not a fee. Use 15–25% of application cost (25–35% if SaMD applies), not a flat number.
- Add a data migration line regardless. Legacy healthcare data is messier than the source system's documentation suggests.
- Get a scoped estimate from a healthcare-experienced team. A partner offering real custom healthcare software development services will walk your integration list before naming a number — a generalist quoting a one-page brief is guessing.
FAQ
How much does healthcare software development cost in 2026?
It depends more on software type and compliance scope than total feature count. EHR integration runs $20k–$80k per connected system; a telemedicine platform runs $70k–$350k; a standalone patient portal runs $40k–$180k. Compliance work adds 15–25% on top, and HL7/FHIR integration is usually the largest line item after the core application.
How much does EHR integration cost?
A single HL7 v2 interface (labs, ADT feed) costs $15k–$35k. A FHIR R4 integration with a certified EHR (Epic, Oracle Health/Cerner, Athenahealth) runs $25k–$70k per system. A multi-EHR integration hub runs $80k–$220k or more. Cost scales with the number of source systems, not your own app's size.
How much should I budget for HIPAA and GDPR compliance?
Roughly 15–25% of total budget, rising to 25–35% for SaMD. Concrete 2026 line items: BAA due diligence ($8k–$20k), audit logging & access control ($15k–$40k), encryption & key management ($10k–$25k), an initial HIPAA risk assessment ($8k–$20k/yr), a GDPR DPIA for EU patients ($5k–$15k), and pre-launch penetration testing ($10k–$30k).
How much does HL7 FHIR integration cost?
Typically $20k–$80k per endpoint, plus $3k–$10k/year in maintenance. Price is driven by the EHR vendor's API maturity, how far your data model differs from USCDI, and how long the health system takes to grant sandbox and production credentials.
How long does healthcare software development take in 2026?
An EHR integration added to an existing product takes 6–12 weeks. A telemedicine MVP takes 4–7 months, a patient portal MVP 3–5 months, and a full platform with multiple integrations 8–14 months. Timelines track integration count and compliance surface, not visible feature count.
What increases healthcare software development cost the most?
In order: the number of EHR, lab, device or payer integrations; whether any part is regulated as SaMD (adding $120k–$400k and 3–9 months); legacy data volume and quality; the number of user roles; and delivery region, since senior nearshore engineering typically runs 40–60% below US onshore rates.
Last updated 18 July 2026. Ranges reflect delivery-complete builds for US and EU healthtech clients and vary by scope, integrations, regulatory class and data migration. Regulatory references are general guidance, not legal advice. Request a scoped proposal for your specific product.
