Healthcare and HIPAA

From 2020 to 2021 I was Cloud Solutions Architect (DevSecOps) at PlanStreet Inc., a US software company in Lexington, Kentucky. I worked with US teams on secure, HIPAA-aligned Azure architecture for healthcare applications.

What HIPAA-aligned architecture means in practice

  • Access control with Entra ID, RBAC and least privilege, for people and for services.
  • Audit logging that records who did what, and when.
  • Encryption in transit and at rest.
  • Secrets and keys in Azure Key Vault, never in code.
  • Network security that limits what can reach the data.
  • Security checks in the delivery pipeline.

HIPAA compliance belongs to your organization, not to a vendor or a tool. I don't certify anything. I design and build the technical controls and help you document them.

Let's talk

Running healthcare software on Azure? Tell me where you are.

Message me on LinkedIn to book a 30-minute intro call