MedDesk - Healthcare CRM Built for HIPAA-Regulated Practices

Independent medical practices in the $300K to $700K revenue range run their operations on spreadsheets and disconnected tools. No real-time financial visibility, no staff accountability system, patient intake still on paper, and KPIs living in someone's personal Excel file. Practices lose money silently and compliance is an afterthought.

A full multi-tenant CRM, architected for HIPAA-regulated environments, that replaces all of that. One system, every practice, zero spreadsheets. Built on Next.js and Supabase with row-level security enforced at the database level.

1. 01Each practice is a separate organization in the database with its own org_id, zero data leakage between clients
2. 02Row Level Security is enforced at the Postgres level via Supabase, unauthorized queries are rejected at the database itself
3. 03A Postgres audit trigger fires on every INSERT, UPDATE, and DELETE on patient tables, recording who did what, when, and what the data looked like before and after

• →Full production CRM deployed and live
• →8 database tables with row-level security and database-level audit logging
• →Multi-tenant architecture supporting unlimited practices

• →Multi-tenancy built in from day one, retrofitting it later would mean rebuilding the entire schema
• →Audit logging at database level not application level, application code can be bypassed, database triggers cannot
• →Row Level Security as the last line of defence, even if every other layer fails, RLS never sleeps