Healthcare software · Custom builds · Website takeovers
Built to hold.
Most developers won't go near patient data. I build the systems that hold it: EHRs, clinical intake, assessment tools, and the data layers behind them.
Not in healthcare? I also build custom web products and APIs, and take over projects other developers left half-finished. Same engineering, none of the paperwork.
Currently taking on new projects
- projects shipped
- 40+projects shipped
- clinical systems in production
- 3clinical systems in production
- code ownership handed over
- 100%code ownership handed over
- reply time, always
- < 24hreply time, always
Worked inBehavioral health · Medical practice · Travel technology · Beauty & e-commerce
What I doIndex 01
Regulated work, and everything else.
Healthcare is the specialism and where most of my time goes. It is not the only thing I do, and the second group is as real as the first, scoped and priced in writing before anything starts, either way.
Healthcare & regulated
Compliance & Systems Review
Before you commit to a build, get the truth about what you already have. I review your system end to end: where PHI lives, who can reach it, what is logged, and what would hurt you in an audit. You get a written report with a fixed price against each gap. Yours to keep, and to take to any developer you like.
PHI data-flow map: where it lives, moves and rests · Access control and audit-trail review · Prioritised gap list, ranked by real risk · Fixed-price quote against each fix
1 week
Clinical System Build
Most chosenEHR and records, patient intake, clinical assessments, internal dashboards, the reporting layer behind them. Built inside your compliance boundary, documented so your next engineer is not lost, and owned by you from the first commit.
Discovery, scope document and data model · Built under BAA, inside your compliance boundary · Audit logging and role-based access from day one · Handover docs, plus 30 days of support after launch
6–12 weeks
Clinical System Rescue
You have a clinical system that is half-built, broken, or abandoned by whoever made it, and it is holding patient data either way. I take it over, work out what is actually there, fix what matters first, and get you back in control of it.
Takeover of an existing clinical codebase · Immediate triage of anything exposing PHI · Fixes and unfinished features completed · Every credential recovered, rotated and handed to you
2–4 weeks
Everything else
Web & API development
Custom sites, APIs, integrations and internal tools outside healthcare. Same engineering, same handover, no compliance overhead.
2–4 weeks
Website rescue & takeover
A site that is broken, slow, half-finished, or abandoned by its last developer. I take it over, finish it and ship it.
1–2 weeks
White-label & overflow
For agencies and developers with more work than hands, or a build that has gone somewhere they would rather not go. I work under your name, to your process, and I do not approach your client.
by project
Ongoing care & maintenance
Updates, monitoring, backups and small changes, with priority reply time. Cancel any month, no notice period.
monthly
Selected workIndex 02
Five builds, told properly.
Most of what I do sits under agreement, so rather than a thin gallery of screenshots, here are five I can describe in full: from a clinical platform running a whole practice to consumer products with nothing to do with healthcare at all.
A behavioral health practice
Behavioral health · 2025 – present
ConfidentialThree production systems for one behavioral health practice over two years: a clinical assessment platform, a full EHR with insurance claims submission, and an in-session data collection tool, all operated under a signed Business Associate Agreement.
- therapists using it daily
- 40therapists using it daily
- rented subscriptions replaced
- 3rented subscriptions replaced
The Departure Club
Travel technology · 2026 – present
A reward-flight search engine that assembles complete itineraries out of award seats and paid positioning flights, sold as a subscription. Live, and still shipping.
- route strategies per search
- 10route strategies per search
- airports, five continents
- 200+airports, five continents
A Beverly Hills women's health practice
Medical practice · 2026
A 430-page medical site where the patient enquiry form had quietly stopped reaching the CRM. Rebuilt, reconnected and hardened, without losing a single search ranking.
- independent SEO audit score
- 93/100independent SEO audit score
- search clicks, average position 7
- 119Ksearch clicks, average position 7
Niiche
Beauty & e-commerce · 2026
A curated beauty platform that looked perfectly healthy. Eight products were invisible, the skin-type filter offered 55 options that matched nothing, and dozens of links had quietly gone stale.
- invisible products restored
- 8invisible products restored
- filter options, nonsense to real
- 55 → 17filter options, nonsense to real
A neurofeedback practice
Healthcare · 2026
An intake and progress tracker moved off a third-party stack the client was not comfortable with, and held at pilot until the compliance paperwork catches up.
- app, one deploy, one owner
- 1app, one deploy, one owner
- third-party processors holding her data
- 0third-party processors holding her data
Confidential & regulated workIndex 03
Some of my best work will never appear on this page.
Most of what I build sits behind a Business Associate Agreement: clinical records, patient intake, assessment data that was never meant to be seen by anyone outside the practice. I would rather show you less than break an agreement, so that work is described here without naming anyone.
I sign BAAs
I have worked as a Business Associate under HIPAA. I am comfortable with the agreement, the access controls and the audit trail that come with it. You will not have to explain any of it to me first.
I sign the NDA before the first call
If you would rather not describe your system to a stranger, send the NDA over and I will sign it before we talk. That order round is normal, not paranoid.
Your project stays off this site
Nothing you hire me for shows up here, in a case study, or in a pitch to someone else unless you have said yes to it in writing. Silence is the default, not the exception.
Credentials handled properly
Least-privilege access, no shared logins, no production data sitting on my laptop, and every credential either handed back or rotated the day the work ends.
How it worksIndex 04
No mystery, no drift, no hostage-taking.
Most people who come to me have been burned once already. This is the part that makes sure it doesn't happen twice.
- 01
Tell me the situation
What you have now, what it needs to do, and where it is falling short, in your own words. You do not need to diagnose it, that is my job. If an NDA needs signing before that conversation, send it and I will sign it first.
- 02
Fixed scope, fixed price
You get a written plan and a number before any work begins. If something new surfaces mid-project, you hear about it and decide. It never quietly appears on an invoice.
- 03
I ship, you own it
Code, documentation and every credential handed over at the end. No lock-in, no hosting held hostage. If you ever want to work with someone else, nothing stops you.
In their words
He understood the compliance side before we had to explain it. We've come back three times since.
AboutIndex 05
Who you’re actually hiring
I'm a freelance software engineer. I build clinical software: records systems, patient intake, assessment tools, and the data layers that hold them together.
I came to healthcare the way most engineers don't: a practice trusted me with their records system, then their assessments, then their session data. Learning to build inside a compliance boundary changed how I work, and it is now the work I want most. Outside healthcare I still take on web and API projects, and I have shipped a lot of them, over forty at this point.
You work with me directly. No agency layer, no account manager, no junior quietly doing the work while a senior name sits on the invoice. When you send a message, I'm the one who replies.
QuestionsIndex 06
The things people ask before they hire me.
Are you HIPAA certified?
Nobody is. There is no such thing as HIPAA certification, and any vendor claiming it is telling you something about themselves. What is real: I have signed and worked under a Business Associate Agreement, and I build to the safeguards HIPAA actually requires: access control, audit logging, encryption in transit and at rest, and a defined breach process.
Will you sign a BAA?
Yes, before I touch anything that holds PHI. If your legal team has their own template, send it over. If you do not have one, that is worth a conversation on its own. You may need one in place with more vendors than you think.
We're a small practice. Is this overkill for us?
Often it is, and I will tell you so. Most small practices are running a spreadsheet alongside a vendor tool that does about seventy per cent of what they need, and the useful fix is one narrow thing: the intake form causing double entry, the report somebody rebuilds by hand every month. That is a small, cheap piece of work and it is frequently all that is needed. If a rebuild genuinely is the right call I will say that too, but I would rather fix the one thing than sell you a system.
Do you work with agencies and other developers?
Often, and it is some of my favourite work. A good share of what I do arrives through other developers and agencies who have taken on a build that turned out bigger, messier or more regulated than expected. I work under their name, to their process, and I do not approach their client before, during or after. If you are an agency reading this, that is the whole arrangement.
Do you only do healthcare work?
No. Healthcare is the specialism and most of my time, but I take on general web, API and integration projects too, and I still do rescue work on sites that have been left half-finished. If you are not sure whether your project fits, ask. I will tell you plainly either way.
Do I own the code at the end?
Entirely. Code, documentation and every credential are handed to you at handover, in your accounts, under your control. I don't host things on my own accounts and I don't hold anything back as leverage.
How does payment work?
Half up front to book the slot, half on delivery. Reviews are paid in full before I start, because the whole value of a review is the report at the end of it. You get an invoice for each stage, and work begins once the first one clears. Payment method is whatever is easiest on your side, and we sort that once the scope is agreed.
When can I reach you?
I work UTC+1, usually nine to seven. That covers the full UK and European working day, and from mid-morning to early afternoon on the US East Coast, enough overlap for a standing call at a sensible hour either way. Email gets a reply the same working day, normally within a few hours. If something is broken on a live system, put that in the subject line and I will treat it accordingly.
Next stepIndex 07
Replies within one business day
Tell me what you’re dealing with.
A few lines about your practice, the system you have or need, and where it is falling short. You'll get a real reply from me within one business day. Not a form response, and not a sales call in disguise.
If you'd rather sign an NDA before describing your system, send it over and I'll sign it first. No obligation, and I'll say so if I'm not the right person for it.
- Timezone
- UTC+1
- Reply time
- Within 1 business day