Wrenfield Health Tech
Migrated a telehealth startup's infrastructure to a HIPAA-compliant AWS environment ahead of a compliance audit and a funding round's technical due diligence.
Industry
Healthcare
Timeline
12 weeks
Team
2 engineers, 1 DevOps
Category
Cloud & DevOps
Where things stood
Wrenfield's infrastructure had grown organically on a single shared server with no formal HIPAA safeguards documented, which became a blocker for both an upcoming compliance audit and investor due diligence.
How we got there
HIPAA-compliant architecture
Rebuilt infrastructure on AWS with encryption at rest and in transit, network isolation, and access logging required for HIPAA technical safeguards.
Infrastructure as code with audit trail
Defined every environment in Terraform so infrastructure changes are reviewable and documented, not made ad hoc on a shared server.
Compliance documentation and audit prep
Produced the access-control and data-flow documentation the compliance auditor and investor's technical due diligence both required.
What changed
Passed
HIPAA compliance audit on first review
0
Findings in investor technical due diligence
100%
Infrastructure changes now defined as code
Tech stack
AWS
Hosts the HIPAA-compliant infrastructure, replacing the single shared server.
Terraform
Defines every environment as code with a reviewable change history.
Docker
Packages services consistently across the new compliant environments.
PostgreSQL
Stores patient data encrypted at rest, with access logging enabled.
GitHub Actions
Runs the deploy pipeline with required approvals before touching production.
Prometheus/Grafana
Monitors access patterns and system health for the compliance audit trail.
