Healthcare
Verde Health — HIPAA-compliant patient portal on AWS
Overview:
Verde Health needed a patient-facing portal for appointment booking, lab-result viewing, and secure messaging — with full HIPAA compliance and integration to their existing EMR. Off-the-shelf solutions didn't fit their multi-provider workflow.
Approach:
Helios built a Next.js portal on AWS with HIPAA-eligible services only (RDS, S3, CloudFront, KMS), BAA in place with AWS. Auth via Auth0 with MFA. Integration to athenahealth EMR via HL7 FHIR. SOC2-aligned controls including encryption at rest, audit logging, and 7-year retention.
Engagement details:
Duration: 14 weeks build + HITRUST audit prep
Stack: Next.js, AWS (HIPAA-eligible), Postgres, Auth0, athenahealth FHIR
Team size: 5 (1 architect, 2 full-stack, 1 security, 1 PM)
Compliance: HIPAA, HITRUST CSF, SOC2-aligned
Outcome:
40K patients onboarded in first 90 days. Zero security incidents. First HITRUST audit returned zero findings. Verde added a second module (provider messaging) with Helios.
40K
Patients onboarded in 90 days
99.95%
Uptime since launch
0
HITRUST findings
