HIPAA-Capable Behavioral Health Platform
A US behavioral health provider had outgrown a legacy system that could serve one organisation and could not be safely extended to more. We rebuilt the clinical platform on Google Cloud with the compliance boundary drawn explicitly: BAA-covered services, isolated environments, encryption and audit logging throughout, and least-privilege production access. Cutover was rehearsed on a data copy before a live record was touched, and phase two adds true multi-tenancy, a Super Admin control plane, and self-service onboarding.
HIPAA-capable architecture
Single clinic to sellable platform
Governed scope and change control
Migration without downtime risk
Built With
- GCP
- Firestore
- Cloud Run
- Identity Platform
- Pub/Sub
- Claude Code
- React