INDUSTRIES / HEALTHTECH
HealthTech software designed with HIPAA in mind.
Records, patient portals and clinical workflows with access controls and audit trails built in, delivered at a fixed price.
(01) Typical products
What we build for care.
- EHR
Electronic health records
Structured patient records, encounters, notes and attachments with role-based views for each care team member.
- PORTAL
Patient portals
Secure sign-in, appointments, results, messages and document sharing for patients and their families.
- CLINIC
Clinical workflows
Intake, referrals, orders, task queues and hand-offs that match how a clinic actually runs.
- BOOKING
Scheduling and reminders
Availability, bookings, waitlists and reminders by email or SMS, with fewer no-shows.
- REMOTE
Telehealth and remote care
Video visits, device and wearable data intake, and follow-up plans for patients away from the clinic.
- ADMIN
Reporting and back office
Billing exports, utilisation dashboards and audit reports for administrators and compliance leads.
(02) What matters
What matters in health.
Health data is the most sensitive data a product can hold. These are the concerns we design around.
Access control and audit trails
Every read and write of a patient record is attributable. Least-privilege roles and tamper-evident logs are part of the first release.
Encryption and hosting
Data encrypted in transit and at rest, on AWS accounts configured with HIPAA in mind. HIPAA obligations and any BAA sit with you and your cloud provider; we build to support them.
Data minimisation and retention
Collect only what care needs, separate identifiers from clinical content, and set retention and deletion rules you can show an auditor.
Reliability when it counts
Clinicians cannot wait on a spinner. We plan backups, restore drills and graceful degradation so records stay available.
(03) Architecture
A layered stack, on open source.
A health platform keeps identifiers, clinical data and access logs in separate layers, each with its own controls.
Patient and clinician apps
- Vue.js
- Responsive web
- Role-based views
- Accessible UI
Identity and access
- Keycloak
- MFA
- Role permissions
- Session controls
Clinical services
- Laravel
- Records
- Appointments
- Audit trail
Secure infrastructure
- AWS
- Encrypted storage
- Private networking
- Backups
(05) Engagement
Three ways to work with us.
- 01
Fixed-cost projects
Scope, price and date agreed in writing before we write a line of code. Milestone payments, change requests quoted upfront.
- 02
MVP in weeks
From idea to a live, investor-ready product in 2 to 8 weeks, on open-source foundations that scale with you.
- 03
AI-augmented teams
A dedicated squad of senior engineers with timezone overlap, working AI-first. Scale up or down on two weeks notice.
(06) Pricing
Indicative prices, fixed in writing.
MVP SPRINT
STARTING AT
$6k
4 to 6 weeks
- +Discovery and fixed scope
- +UI/UX design system
- +Web or mobile MVP
- +One core integration
- +Launch and 30-day support
PRODUCT BUILD
MOST CHOSENSTARTING AT
$12k
8 to 14 weeks
- +Everything in MVP Sprint
- +Payments, KYC or ledger modules
- +Admin portal and analytics
- +Security review and UAT
- +CI/CD and cloud setup
AI-AUGMENTED TEAM
STARTING AT
$6k
per month, cancel on 2 weeks notice
- +2 to 4 senior engineers
- +AI-first workflow
- +Weekly demos and reporting
- +Timezone overlap agreed
- +Scale up or down anytime
(07) FAQ
HealthTech questions, answered.
Are you HIPAA compliant?
HIPAA applies to covered entities and their business associates, so compliance is a property of your organisation and your agreements, not of a software vendor's logo. We design and build with HIPAA in mind: access controls, audit trails, encryption and minimal data. We hold ISO 27001:2022 for our own information security.
Which health products do you build?
Health records, patient portals, scheduling and reminders, telehealth workflows and reporting back offices. We start from your care workflow, not from a template, and fix the price once the scope is written down.
Where is patient data hosted?
Typically on AWS in an account you own, with encryption at rest and in transit and private networking. Because you own the infrastructure, you control the agreements with the cloud provider, including any BAA.
Can you integrate with existing hospital or clinic systems?
Yes. We build integrations to the systems you already run, using their documented interfaces and standards where available. We confirm what the other system exposes during discovery so the fixed quote reflects it.
Can you build telehealth features?
Yes. We build booking, secure video sessions, notes and prescriptions workflows through providers you choose, with access controls and audit logs. Clinical and regulatory sign-off remains with your team.
How do you protect patient data in development?
We use synthetic or anonymised data in development and test environments, restrict who can see production, and log access. Real patient data is only touched where the work requires it.
Start a project