VeriPass
Legal Tech Platform
Full Stack2025
Carenavio
Telemedicine Platform
Healthcare startups often fail HIPAA audits, delaying launch by months. As the sole engineer, I built a telemedicine platform from scratch with security and compliance baked in from day one. The system handles encrypted messaging, video consultations, e-prescriptions, and medication delivery—and passed HIPAA audit on the first attempt.
Company
CareLoop
Role
Full Stack Developer
Duration
12 months
Year
2025
Tech Stack
ReactTypeScriptExpressPrismaPostgreSQLStripeTwilio
The Problem
The company needed to launch a telemedicine product but couldn't afford to fail compliance audits. Existing solutions were either non-compliant or too expensive to customize.
The Solution
Architected with compliance first: encrypted data at rest and in transit, audit logging for all PHI access, role-based access controls, and automated session timeout. Built prescription workflow integrating pharmacy systems and Shippo delivery.
Technical Challenges
1
Designing encryption architecture that satisfied HIPAA while keeping the system performant
2
Building video consultation with fallbacks for poor connectivity (common in rural areas)
3
Integrating three separate systems (Stripe, pharmacy API, Shippo) into a seamless prescription fulfillment flow
4
Creating audit trails that captured every PHI access without impacting UX
Results & Impact
5K+
Consultations
monthly appointments
100%
Compliance
HIPAA audit pass
4.8/5
Satisfaction
patient rating
Lessons Learned
Key Takeaways
- Compliance is easier when you design for it from the start—retrofitting is painful
- Healthcare users are often less tech-savvy; every extra click loses patients
- Third-party integrations are the biggest source of production issues
