Healthcare Software Development Company in Sydney, built to ship.

Patient identity is the hardest problem in the building

Two records for one person is the defining healthcare data failure, and it happens through a misspelt name, a changed surname, a transposed date of birth. Once duplicated, a clinician sees half a history and does not know it. Master patient index and matching rules belong in the first architecture conversation, not in a later data-quality project.

Interoperability is the requirement behind the requirement

HL7 v2 is still everywhere and FHIR is what everything new expects, so most real systems speak both and translate between them. The translation layer is where the effort goes, because the two models disagree about how much structure a clinical fact has.

Audit is not logging

Who viewed which record, when, and under what justification. Access logging in healthcare is a legal artefact that gets read by an investigator, so it has to be immutable, queryable and complete, which is a different design from application logs that rotate away after thirty days.

Every field is a clinical safety decision

A dropdown that permits an implausible dose, a date picker that accepts a future birth date, a free-text field where a coded value was needed. Validation here is not input hygiene, it is the difference between a caught error and a delivered one.

Working overlap

3.5 hours a day

Four and a half hours ahead of Surat, five and a half during Australian daylight saving. Their afternoon is our morning, so the shared window is roughly 10:00 to 13:30 IST. Australian teams tend to use that overlap for decisions and leave the build to run unattended, which suits the work.

The law that applies

the Privacy Act 1988 and the Australian Privacy Principles

APP 8 makes the Australian entity accountable for what an overseas recipient does with personal information, which means our handling becomes their liability. That is worth naming in the contract rather than leaving implied. The Notifiable Data Breaches scheme sets the disclosure clock.

Procurement

Straightforward and contract-led. Public sector work brings ISM and IRAP considerations that private work does not.

Language

English throughout, with Australian spelling in customer-facing copy.

Where the data can live

AWS ap-southeast-2, Azure Australia East and Google australia-southeast1 all sit in Sydney, so onshore hosting is the default rather than a concession. Latency to Surat is real but irrelevant for anything that is not interactive, and the build pipeline does not care.