Blog

When you’re dealing with a real-world project rather than documentation, Many systems in healthtech and fintech face the same challenge: processes that don’t finish within 15 minutes. An application waits for approval from a compliance officer. A transaction must be rolled back because a downstream API has failed. User onboarding stretches across weeks. Until now, the typical solutions involved Step Functions, […]

The EU’s Digital Omnibus agreement pushes high-risk AI obligations for medical devices from August 2027 to August 2028, and standalone Annex III systems from August 2026 to December 2027. For healthtech teams in Germany, Austria and Switzerland, that extra year is a planning gift, not an architectural reprieve. TL;DR – what changed and what didn’t The provisional Digital Omnibus […]

The European Health Data Space rolls out in phases through 2029 and 2031. Here’s what each phase actually requires from product teams building digital health software in the DACH region and where we’ve seen teams already make decisions they’ll regret. Most healthtech CTOs we talk to in DACH treat EHDS as „GDPR for medical data”. It isn’t. GDPR tells you what […]

We’ve built two production mental health platforms under both regulatory regimes. Mentalyc – an AI-powered therapy documentation tool operating under HIPAA and SOC 2 Type II in the US. Selfapy – a CBT-based digital therapeutics platform certified under BSI IT-Grundschutz in Germany, with over 120 individual security requirements met before launch. Here is what building under both frameworks actually […]

In the previous part of this series, I wrote about how projects and processes are two different languages and that mixing them without awareness is the source of most organizational misunderstandings. At the end of the article, which you can read here: https://fireup.pro/blog/project-or-process, I introduced a matrix: variability of requirements versus repeatability of actions. Its two right-hand quadrants – traditional […]

Cold email outreach B2B works, but only when three conditions are met simultaneously: the email reaches the inbox, the list targets the right person, and the message addresses a problem the recipient already has. Miss any one of them and the campaign fails regardless of the other two. According to Woodpecker’s research based on 8 million campaigns, the […]

What this article covers: The technical architecture behind employer-sponsored GLP-1 benefit platforms, including multi-party insurance integration, prescription flow orchestration, eligibility verification, and the backend decisions that determine whether a platform survives at scale. Based on five years of production experience building 9am.health, a virtual clinic serving clients including Amazon, Novo Nordisk and the State of Georgia. What is a GLP-1 […]

Employers, clients, and colleagues expect far more from developers than working code. They want solutions that cause no harm, can be verified, are released in small increments, are based on honest estimates, and are built by people who respect each other’s professionalism and never stop improving. These ten principles — drawn directly from Bob Martin’s books and complemented by my own experience across […]

What this article covers: The specific challenges of test automation for AI healthcare applications, including HIPAA-compliant test environments, testing audio processing and AI-generated output, BDD implementation for regulated products, and CI/CD pipelines for health apps. Includes a real case from building a QA framework for Mentalyc, an AI-powered therapy documentation platform. What is test automation for AI […]

The four-ears model (Vier-Ohren-Modell) is an interpersonal communication framework developed by German psychologist Friedemann Schulz von Thun, which assumes that every message can be received on four distinct levels: factual, relationship, appeal, and self-revelation. When the sender and receiver focus on different layers of the same message, misunderstanding occurs and that is the root cause of a vast number of […]