AWS + React Developer — HIPAA-Compliant Healthcare SaaS MVP (Stateless Architecture)

We are building a HIPAA-compliant SaaS platform for medication stewardship in skilled nursing facilities (SNFs). The platform allows clinical pharmacy consultants and providers to upload scanned medical documents, run AI-powered medication and disease state reviews, and generate clinical findings — all without storing any patient data. This is a focused, well-defined MVP. No scope creep. We need a developer who moves fast, communicates clearly, and has real experience with HIPAA-eligible AWS architecture. Core concept — stateless processing: This platform is intentionally stateless. Documents are uploaded, processed through OCR, analyzed by AI, and the findings are displayed to the user. Nothing is written to a database. No patient data or documents are retained after the session ends. The platform processes PHI transiently and discards it — significantly simplifying the HIPAA footprint while maintaining compliance. What you will build: 1. AWS infrastructure (HIPAA-eligible, stateless) — S3 used only as a temporary processing buffer (files deleted immediately after OCR completes) — AWS Textract for OCR processing of scanned PDFs and images — AWS Bedrock (Claude Sonnet) for AI-powered clinical analysis — AWS Cognito for user authentication only (no clinical data stored) — AWS Amplify or CloudFront for React frontend hosting — KMS encryption for data in transit — All services configured under AWS BAA coverage — No RDS or persistent database required for clinical data 2. React frontend — Clean single-page application — Document upload UI (drag/drop, supports PDF and image files) — OCR text display with basic edit capability before analysis — Free-text question input (user asks Claude questions about the document) — Claude response display panel — Copy to clipboard button on all output — User login and profile page (name, email, facility) — Membership and billing settings page — Stripe monthly subscription integration 3. HIPAA compliance — Stateless architecture — no PHI persisted after session — HTTPS enforced on all endpoints — AWS BAA signed and covering all services — User BAA acknowledgment on signup — Audit logging for access events — Privacy policy and terms of service integration What we are NOT building in this phase: — Mobile app — EHR or PointClickCare integration — Stored intervention history or dashboard — Cost savings calculator — Admin panel — Anything beyond the three core features above: upload, analyze, copy output Ideal candidate: — 3+ years React and AWS experience — Prior HIPAA-eligible AWS builds — please describe your specific experience in your proposal — Hands-on experience with AWS Textract or comparable OCR pipelines — Familiarity with AWS Bedrock or direct LLM API integrations — Experience with stateless or ephemeral data processing architectures — Stripe subscription integration experience — Strong communicator — weekly video check-ins required — Available to start within 2-4 weeks Engagement details: — Estimated scope: 40–60 hours — Timeline: 8–10 weeks — Budget: $2,500–$4,500 USD fixed price preferred — Payment milestones: 25% upfront, 25% at working OCR pipeline, 25% at working Claude integration, 25% at launch — Communication: Weekly video check-in + async messaging How to apply: In your proposal please answer these four questions specifically: 1. Describe a HIPAA-eligible AWS application you have built — what services did you use and how did you handle PHI? 2. Have you implemented stateless or ephemeral document processing before? How did you approach it? 3. What is your experience with AWS Textract or other OCR pipelines? 4. How would you integrate AWS Bedrock or a Claude API call into a React frontend securely? Proposals that do not answer these four questions will not be considered. About us: We are an early-stage clinical SaaS platform founded by a Clinical Pharmacy Specialist. We are building a tool that genuinely improves patient care and safety in long-term care settings. We want a developer who takes pride in clean, secure, well-documented code and wants to be part of building something meaningful in healthcare. If that is you, we would love to hear from you.