HIPAA beyond the database
Compliance had to hold for every vendor, request and log line, not just stored records.
Vendor BAAs, encryption and an audit log designed for review.

A women's health app that fills the weeks between OBGYN visits, sending patient-reported symptoms straight into the clinic's records.

OBGYNRx gives patients a way to stay in contact with their OBGYN team between appointments: they record symptoms in their own words, follow their care plan, message the practice and receive lab results. We delivered the patient app, the clinician portal and the HIPAA-compliant backend that connects them.
Long gaps separate one appointment from the next, and almost nothing a patient experienced in between was written down. Conditions like endometriosis and PCOS, and high-risk pregnancies, can't wait for the next visit to be discussed. Clinicians opened each appointment by reconstructing the last two months from memory. The hard parts were HIPAA, sync across devices and EMR integration.
We spent our effort where it counted, compliance and symptom understanding, and chose proven, boring infrastructure everywhere else.
4 steps, from architecture to launch.
Access rules, encryption and an audit trail were designed before features, with BAAs in place for infrastructure vendors.
A Flutter app for iOS and Android and a Next.js portal, both backed by Supabase for the database, sign-in and file storage.
A medical language model, tuned on annotated patient descriptions, converts plain wording into structured clinical entries.
Records flow to the practice through HL7 FHIR, with a manual export for systems that can't connect.
Compliance had to hold for every vendor, request and log line, not just stored records.
Vendor BAAs, encryption and an audit log designed for review.
Patients write "it hurts on my right side when I sit," not clinical terms.
A tuned medical NLP model maps everyday descriptions to structured symptoms a clinician can scan.
Practices run many different EMR systems, which had defeated earlier attempts.
A FHIR-first connector covers the common systems, and a simple export handles the rest.
Log symptoms in plain words and build a timeline to share before or during a visit.
Appointments, tests and medications from the clinician, with reminders.
Secure messaging with attachments inside the clinic's hours, and lab results with plain-language next steps.
Marking an entry urgent pages the on-call clinician outside office hours.
Each patient's activity since the last visit, written back to the EMR over FHIR.
Patients seeing both a high-risk pregnancy specialist and a local midwife link both practices to one account.
Tell us what you are shipping.
Start a Project →