HIPAA-Compliant Portal Launch

We need a full-stack developer to launch HIPAA-compliant client and provider portals for a Connecticut med spa and longevity clinic. The work includes reviewing existing Replit code, planning production deployment, migrating hosting, database, and storage to HIPAA-eligible services with signed BAAs, integrating the Terra API for health data, and implementing role-based access, encryption, audit logs, MFA, and session timeouts. You should also document the architecture and security controls, ensure all vendors handling patient data sign BAAs, and provide 30 days of post-launch support. Please include a HIPAA-compliant project you built, your recommended hosting setup, rate, timeline, and availability. First step is a paid code review and launch plan.