HIPAA-compliant software & medical intelligence

We build to HIPAA’s technical safeguards — encryption in transit and at rest, least-privilege access, full audit trails — and document the controls so your compliance team can evidence them. Compliance is a shared responsibility, so we work to your BAA and policies.

Usually, via HL7 v2 or FHIR depending on what your system exposes. We scope the integration against your actual interface spec early, because "supports FHIR" covers a very wide range in practice.

Grounded retrieval with citations, explicit refusal behaviour, and a human in the loop wherever a clinical judgement is involved. No model we ship suggests a dose or a diagnosis unaided.

Developers work against de-identified or synthetic data by default. Where production access is genuinely required it’s time-boxed, logged, and granted to named individuals only.

We design for 99.9% on monitored, redundant infrastructure and agree the specific SLA in contract. For anything touching active patient monitoring we also define the degraded mode — what still works when a dependency is down.

Fixed-bid projects start around $3k, retainers from $6k/month, and staff augmentation from $70/hour. Clinical and compliance scope — BAAs, audit requirements, EHR integration depth — is what moves the number, and we confirm it in writing before any work begins.