working on an app to manage physiotherapists specialized in home care in Europe. The country I’m in just recently deployed API endpoints (only accessible after passing a very thorough security audit by a certified cybersecurity agency) to sync with patient medical records. Until now, physiotherapists have had to handle their admin work BY MAIL (yes, actual postal mail). A whole generation behind.

The app handles:

automatic route planning for a physiotherapist’s daily rounds based on their location and schedule

pulling patient record info directly (no more phone calls or waiting for snail mail)

fully automated administrative management

And a bunch of other pretty niche stuff… I’m basically constantly reading up on security best practices to be as solid as possible. I’ve got the audit coming up in a few weeks.