← Back to portfolioSanté

Blue Sky MD

A HIPAA-compliant practice ERP for a growing medical practice: one place for reporting, marketing attribution, billing analytics, patient communication and AI assistants.

  • HIPAA-Compliant Platform
  • Marketing Attribution
  • Reporting & Analytics
  • AI Assistants

Blue Sky MD is a physician-led medical practice in Asheville, North Carolina. Like most growing practices, its data lived in separate places: eClinicalWorks for visits and billing, ad accounts for marketing, website forms for new inquiries, and phones and inboxes for patient conversations. Nobody could see in one place which campaigns filled the schedule, or how the practice was really doing week to week.

We're building the practice's operating platform on HIPAA-eligible Google Cloud services, under a signed Business Associate Agreement. It brings every system into one secure workspace and puts reporting, attribution, billing analytics, patient communication and AI assistants on top of it, for the whole team.

How the platform fits together: practice systems in, one HIPAA workspace, tools for every team out
How the platform fits together: practice systems in, one HIPAA workspace, tools for every team out

What we're building

  • Marketing attributionEvery ad click and lead form traced to a booked appointment and a completed visit, so the practice knows which campaigns actually bring in patients and what each new patient costs.
  • Automated reportingOperational, financial and visit-volume reports built from eClinicalWorks and its EBO reporting, refreshed automatically, with questions answered in plain English by AI.
  • Billing and collections analyticsCharges, collections and payer mix by provider and location, so revenue problems show up in days, not at month end.
  • Patient communication and customer serviceFollow-ups and front-desk workflows that run from the same system, with every conversation tied to the right record.
  • Team operations hubDashboards, task and communication workflows, and AI assistants for the practice's staff, scoped and added in phases.

HIPAA from the first sprint

  • A signed Business Associate Agreement before any patient-level data is shared
  • Started on de-identified data only; patient-level data comes in once the safeguards are in place
  • Data stored only in US Google Cloud regions, using HIPAA-eligible services
  • Encryption in transit and at rest, role-based access with multi-factor authentication, and an audit trail
  • AI runs on Google Vertex AI under the BAA, never on consumer AI tools
  • The practice owns its code and data, and can move the platform into its own cloud account at any time
← Back to portfolio