Compliance built in, not retrofitted.
A HIPAA-compliant telehealth product built to reduce unequal access to care.
The problem
Founder Thomas Caraballo, a healthcare professional, started from the obstacles patients face reaching care at all. The company's stated aim is to reduce unequal access to healthcare and improve patients' health span.
A product with that aim has to carry HIPAA obligations from the first commit, and it has to make clinical information legible to people without clinical training.
What we built
iOS and Android apps on HIPAA-compliant infrastructure, with test result visualisation to help patients understand their own exam results, health goal setting, integrated patient-provider messaging, and video consultation.
Payments run through Stripe under PCI compliance, messaging through Sendbird, and video through Twilio.
What happened
The source case study publishes no adoption, retention or clinical outcome figures, so none appear here.
- HIPAA-compliant infrastructure with data protection protocols in place
- PCI-compliant payment handling
- Indigo Design Award recognition for the app
- The app has helped many users navigate the healthcare system
Delivery notes
Stack: Ruby on Rails, Swift, Kotlin, Stripe, Sendbird, Twilio.
Capabilities applied: Governance, Risk and Compliance, Product Design. Delivered as a committed scope, estimated in story points and priced before work began.
Bring us the backlog.
In 30 minutes, we will show you what a Pod would ship first and how we would price it.