Boutique law firmPrivileged-data infrastructure rebuild
What matteredA litigation hold three years prior had exposed the firm's storage to wider discovery than counsel was comfortable with; the partners wanted privileged and work-product material on infrastructure that produces a different per-client access scope by construction, not by policy.
What we shippedRearchitected the firm's matter storage so per-matter access scopes are enforced at the storage layer, not the application layer; every cross-matter query is impossible to formulate from the application code, and the partner / associate role separation was rebuilt along the same line.
OutcomeThe firm's malpractice carrier reduced the policy premium on the strength of the audit, and a subsequent litigation hold scope was answered in one paragraph instead of a forensic engagement.
Specialty healthcare practiceHIPAA-grade infrastructure scaled to 12 practitioners
What matteredThe existing EHR vendor's audit posture had degraded after acquisition; the practice owner wanted a fallback that satisfied both HIPAA and a pending state-level reporting requirement, on infrastructure they actually understood.
What we shippedBuilt a parallel chart-storage layer with the required audit posture, deployable alongside the legacy EHR, plus federated mail filtering with rule-by-rule explainability and donor / patient / billing scopes architecturally separated.
OutcomeThe practice passed a state-level audit on the first try, and time-to-audit-response dropped from weeks to a one-day engagement.
Investigative newsroomSource-confidentiality posture for an active investigation
What matteredJournalists working a multi-month investigation needed source-handling infrastructure that survives both technical compromise and legal subpoena — a substrate where the relevant data either does not exist or carries no probative weight.
What we shippedBuilt a tiered storage posture: communications inside the editorial scope are end-to-end encrypted by construction, metadata that escapes to logs is structurally minimal, and federated rule-based filtering replaced opaque categorization on the editorial mail flow.
OutcomeThe investigation was published; no subpoenas have surfaced, and a separate counsel review confirmed the substrate would not be probative if subpoenaed today.