The platform bridges four distinct stakeholders through decoupled interfaces, isolated sessions, separate authorization middleware, and distinct database access scopes:

• ✓ SuperAdmin Portal: Overall clinical governance, specialist document vetting, pre-approved email allowlists, and B2B bank settlement reconciliation.
• ✓ Company (HR Hub): Corporate employer suite for managing wellbeing credit tiers, sub-managers, departments, and viewing anonymized health insights.
• ✓ Provider Portal: Professional clinical workspace for licensed therapists (CORU/IACP certified), clinical intake assessment review, appointment slots, and two-step invoicing.
• ✓ Client Portal: Confidential patient-facing portal featuring guided intake, adaptive clinical scoring, specialist smart matching, and secure teleconsultation.

Rather than relying on fragile multi-gigabyte dependency trees or heavy full-stack frameworks prone to breaking upstream changes, MHC was conceived with an emphasis on transparency, predictable execution, and long-term maintainability:

• ✓ Vanilla PHP 8.2+ OOP: Modular, strictly-typed backend core utilizing PDO prepared statements and explicit parameter binding.
• ✓ Zero Framework Overhead: Eliminates build-step latency, fragile bundler pipelines, and supply-chain vulnerabilities common to massive npm packages.
• ✓ Vanilla JS & CSS Design Tokens: High-performance native browser components ensuring zero hydration lag and instantaneous initial page loads.
• ✓ Complete Audit Clarity: External engineers can inspect every single route, query, and transformation without having to unpack layers of opaque framework abstractions.

Handling sensitive mental healthcare data under EU and Irish jurisdiction requires clinical and statutory compliance to be baked into the relational schema from day one:

• ✓ k≥10 Anonymization Threshold: Corporate employers never have access to individual employee records; aggregate clinical insights are strictly masked until at least 10 active members participate.
• ✓ Real-Time Crisis / Red Alert Protocol: Question 9 of the PHQ-9 assessment (self-harm/suicidal ideation) immediately triggers safeguarding alerts and routes users to Irish emergency hotlines (Pieta House, Samaritans 116 123, 999/112).
• ✓ Defense-in-Depth Security: Bcrypt (Cost 12) password hashing, per-session CSRF tokens, and HttpOnly / SameSite session cookies.
• ✓ Direct B2B Bank Settlement: Automated 2-step clinician invoice submission reconciled via direct SEPA bank transfer in full alignment with Irish tax regulations.