Multi-specialty healthcare group — HIPAA-aligned patient communication platform
Built a patient communication platform integrated with Epic via FHIR, with PHI segmentation and the technical safeguards inventory for annual HIPAA review.
The situation
A multi-specialty healthcare group needed a patient communication platform that could work against their existing Epic instance without widening the surface where protected health information lived, and needed the documentation their compliance team required for annual HIPAA review.
Frameworks that constrained the build
HIPAAHITECHSOC 2 Type II
What we built
Patient communication platform integrated with the group’s Epic instance over FHIR APIs
PHI handling segmented across the application rather than spread through it
Technical safeguards inventory produced for the annual HIPAA review
SOC 2 preparation documentation
A signed BAA covering every PHI-touching surface
Systems and stack
EpicFHIR APIsSegmented PHI architecture
Client names are withheld where engagement agreements require it. Details described here are limited to what those agreements permit us to publish.