Healthcare platform modernization and patient alert system

Client context

ManagingLife (NDA) lets patients track chronic pain and share data with clinicians and insurers. Insurance partners required SOC2 Type 2 and strict data governance before contracts could scale.

Challenge

Legacy Drupal 6 could not meet security or feature demands. Separately, clinicians needed automated alerts when patient-entered data suggested serious complications — across hundreds of thousands of records per month without blocking the app.

What we did

• Rebuilt core services in Symfony microservices; restricted legacy Drupal to admin-only surfaces auditors could isolate.
• Introduced HIPAA/PIPEDA-aligned workflows: code review gates, role-based approvals and third-party penetration testing.
• Shipped a queue-based alert engine with configurable clinical criteria, 30+ alert types and audit-friendly result storage.
• Migrated in-app purchases to App Store Server API v2 and Google Play billing on the new Symfony monolith with server notifications as primary sync.

Process

1. Risk assessment and incremental Symfony extraction from Drupal.
2. Alert criteria workshops with clinical stakeholders; queue design for at-least-once processing.
3. SOC2 remediation sprints and release cadence shift to 2–3 week cycles.
4. Store billing migration with cron fallback and notification-first sync.

Result and impact

Zero unplanned downtime after infrastructure upgrade (vs monthly outages before); API calls ~5× faster; releases cut from months to weeks; 15,000 new users in one year; alert system adopted by medical orgs and insurers.

This is an NDA-protected engagement. Client name and identifying details are withheld; industry, region, challenge, solution and outcome are shared in an approved form.

We could finally sign insurer deals knowing the platform would pass scrutiny.Product director (quote representative, under NDA)