Care-Management Platform (CCM/PCM)

A multi-tenant platform digitizing CCM and PCM workflows for a US care-management organization. Replaced fragile spreadsheet-based patient tracking, monthly progress verification, and hand-built invoices with a centralized, secure system — now running 5 tenant organizations with one physical database each.

8,000+

Patients

5 Orgs

Tenants

80s → 54ms

Dashboard

Case Study Analysis

The Challenge

Patient tracking, billable-time logging, and monthly invoicing lived in spreadsheets; CMS paycode rules lived in people's heads. Every growth step made it worse, and a flawed legacy encryption scheme silently corrupted patient records.

The Solution

Architected a database-per-tenant platform on BAA-signed GCP: care-call logging with paycode-driven processing status, ~25 generated report types, and a per-field AES-256-GCM envelope-encryption overhaul — ~208k PHI rows migrated with zero downtime, enforced by database CHECK constraints.

Key Features

Tenant Isolation: A physical database per organization, plus a global identity schema and tenant-scoped JWTs.

Audit Trail Middleware: Logs Who, What, When, and Why for every action.

PHI Envelope Encryption: AES-256-GCM with fresh IVs, keys in Secret Manager, and CHECK constraints that refuse plaintext.

Automated Reporting: ~25 generated report types covering payroll, clinic operations, and provider invoices.

Performance: Manager dashboard cut from 67–80s to 54ms; a ~200-query N+1 batched from 74s to 1.8s.