Building compliant, intelligent systems for modern healthcare.

Extracts structured data from clinical documents using Azure Document Intelligence for parsing and OpenAI for interpretation. Architecture follows HIPAA-aligned patterns with full audit trails, encryption at rest and in transit, and role-based access controls.

Trusted with sensitive clinical data.

Every system I architect is designed to meet — and stay within — these frameworks from day one.

What this system does

From unstructured clinical documents to schema-validated data.

The platform sits inside iTekk’s Functional Medicine Co-Pilot — a clinical AI workflow used by functional medicine practitioners. This component owns the document side: ingesting files, extracting structured data, validating it against defined schemas, and handing clean output to the agents that generate visit plans and recommendations.

Multi-format document intake

Accepts PDFs and document images from practitioner portals. Files land in Azure Blob Storage with audit metadata before any processing begins

GPT-4o Vision + Document Intelligence

Two-track extraction. Document Intelligence handles structured forms with predictable layouts. GPT-4o Vision handles the long tail — handwritten notes, non-standard lab panels, multi-column intake forms.

Server-side JSON validation

Every extraction is validated against a defined schema before it reaches the database. Failed validations route to a review queue; passing extractions are persisted with provenance metadata.

Compliance & Privacy

HIPAA Privacy & Security Rule, HITECH, 42 CFR Part 2, GDPR for cross-border health data, and SOC 2 Type II readiness — including BAA negotiation and de-identification (Safe Harbor & Expert Determination).

Healthcare Cloud Architecture

Azure Health Data Services, AWS HealthLake, and GCP Cloud Healthcare API — designed for PHI residency, multi-tenant isolation, and predictable cost at hospital-network scale.

Population Health & Analytics

HEDIS measures, risk-stratification models, and quality-reporting pipelines feeding CMS submissions — including value-based-care dashboards for ACOs and MSO networks.

Compliance Posture

HIPAA-aligned architecture, built honestly.

The platform is designed around HIPAA-aligned patterns from day one. Full HIPAA compliance is a program — not a feature — and is established jointly with each healthcare client. Here is what iTekk delivers on the architecture side.

Encryption at rest and in transit

Azure-managed encryption for storage and databases. TLS 1.2+ enforced on every endpoint.

Role-based access control

Access scoped per practitioner workspace. Server-side authorization on every PHI-touching endpoint.

Audit logging

Every extraction, retrieval, and modification recorded with user, timestamp, and source document reference

BAA-backed cloud partners

Built on Azure services covered by Microsoft’s HIPAA BAA. iTekk signs BAAs with healthcare clients before any PHI is processed.

Provenance tracking

Every extracted value links back to its source document and page reference, enabling clinical review and audit response.

An honest note on compliance

iTekk delivers architecture that aligns with HIPAA Security Rule technical safeguards. A live HIPAA-compliant deployment additionally requires the client’s own administrative controls — workforce training, sanction policies, breach notification procedures, and ongoing risk assessments. We work with each healthcare client to establish those pieces jointly. We do not represent any individual platform as “HIPAA certified,” as no such certification exists from HHS.

Related Healthcare Work

Other clinical and healthcare-adjacent projects.

iTekk’s healthcare experience is focused on two areas: clinical AI for functional medicine practices, and modernization of specialized Medicaid billing infrastructure.

Consumer Health App

DiagnoseThis

Consumer-facing functional medicine assistant built as a tiered agent system — Ask Why, See Why, Big Why, and Chat Why agents — each scoped to a different level of analysis depth.

Medicaid Billing Modernization

MSB / SHARS-MAC Billing Platform

Modernization of MSBConnect, a Texas Medicaid school-based health (SHARS) and MAC billing system. Legacy .NET 4.7 codebase rebuilt on .NET 9 with FastEndpoints, Dapper, and Aspire, plus Azure Blob storage migration and OWT exports with DOB redaction.

Building a clinical AI workflow that needs reliable document processing?

If you’re working on a clinical AI product where document extraction, schema validation, or HIPAA-aligned architecture is the hard part — let’s talk. We’re selective about healthcare engagements and only take on work we can ship.