The Brief
In early 2024, we were approached by a medical startup with a bold vision: build a platform connecting patients with specialists across the MENA region. They had seed funding, a strong founding team, and a clear market gap. What they needed was a technical partner who could execute.
The Challenge
Healthcare tech is unforgiving. Requirements include:
- HIPAA-compliant data handling
- Sub-200ms response times at scale
- Real-time video consultations
- Multi-party scheduling (patients, doctors, clinics)
- Audit trails for every data access event
We had 12 weeks to deliver a functional platform for the seed round demo. Zero margin for error.
Our Approach
Week 1-2: Architecture Sprint
Rather than jumping straight into code, we spent the first two weeks on architecture. We made a critical decision: microservices from day one. More complex to set up, but essential for the scale the client was projecting.
Stack chosen:
- Next.js 14 with App Router for the patient-facing web app
- React Native for iOS/Android
- Node.js microservices on AWS ECS
- PostgreSQL with row-level security for HIPAA compliance
- WebRTC for video consultations
- Redis for real-time features
Week 3-8: Core Development
The team of 4 developers worked in 1-week sprints with daily standups. Every Friday, we demoed to the founding team. No surprises, no scope creep.
Key technical decisions:
- End-to-end encryption for all patient data, including at rest
- JWT + refresh token rotation for session security
- Database-level audit logging triggered on every sensitive query
Week 9-10: Compliance Sprint
We brought in a healthcare compliance consultant to audit the system. Two critical issues were found and fixed. This is why we always budget for a compliance review.
Week 11-12: Hardening & Demo Prep
Performance testing revealed one bottleneck — the scheduling algorithm. We rewrote the core matching logic and got P99 response time from 800ms to 120ms.
The Demo
The platform performed flawlessly during the investor demo. Three weeks later, the startup announced their $2M seed round.
What We Learned
1. Architecture decisions made in week 1 matter more than code written in week 8 2. Compliance is not an afterthought — budget 15-20% of time for it in regulated industries 3. Weekly demos keep scope under control better than any project management tool
Today, the platform serves over 5,000 active patients. This is why we do what we do.
