Lovable + Supabase Developer Needed to Audit and Prepare Healthcare SaaS Prototype for Production

Project Overview I am the founder of PlaceCo, a healthcare placement and care-transition platform currently built as a working prototype using Lovable and Supabase. The core product is already designed and functioning. I am NOT looking for someone to rebuild the application from scratch. I am looking for an experienced full-stack developer to review the current application, identify technical/security gaps, fix priority issues where appropriate, and provide a clear roadmap for taking the prototype toward a secure production-ready pilot. The application includes workflows for: • Healthcare/referral organizations • Care providers • Families • Universal Placement Requests (UPRs) • Provider matching / placement readiness • Referral status tracking • Provider responses • Document requests/uploads • Messaging • Provider availability • Multi-provider referral workflows The first engagement will be a technical audit and production-readiness assessment. Required Experience Please apply only if you have strong experience with several of the following: • Lovable or AI-generated React applications • React • TypeScript • Supabase • PostgreSQL • Supabase Authentication • Row Level Security (RLS) • Multi-tenant SaaS architecture • Secure file/document storage • Role-based access control • API/security review • Healthcare applications • HIPAA-aware software architecture • Audit logging • Secure messaging or document workflows Healthcare or HIPAA experience is strongly preferred. Phase 1 — Technical Audit I need the developer to review: 1. Application architecture 2. Database schema 3. Supabase configuration 4. Authentication and user roles 5. Organization / tenant separation 6. Row Level Security policies 7. Provider, family and referral-source permissions 8. Document upload/storage security 9. Messaging architecture 10. API keys, secrets and environment variables 11. Referral/UPR workflow logic 12. Data exposure risks 13. Audit logging requirements 14. Backup/recovery considerations 15. What parts of the current Lovable application can safely remain 16. What needs to be corrected 17. What should eventually be rebuilt 18. Requirements before real PHI could ever be introduced Deliverables At the end of Phase 1, I want: • Written technical audit • List of security vulnerabilities or concerns • List of immediate fixes • Recommended production architecture • Keep / Fix / Rebuild assessment of the existing application • Estimated development hours for each major improvement • Estimated cost to reach a secure pilot version • Recommended order of development • Identification of anything that must be addressed before handling PHI If the audit goes well, I would like to continue working with the same developer on implementation. Important This is an early-stage healthcare startup. The current prototype uses demo/synthetic information only. Please do NOT propose rebuilding everything before reviewing what already exists. I am looking for someone practical who can preserve working components whenever possible. Budget I am looking for a cost-conscious developer and would prefer to begin with a small fixed-price audit. Target Phase 1 budget: $150–$400 fixed price depending on experience and scope. Please include: • Your proposed fixed price • Estimated hours • What you would review • What your final audit deliverable would include Future development work can be scoped separately after the audit. To Apply Please answer these questions: 1. Have you worked with Lovable applications before? 2. How much experience do you have with Supabase? 3. Have you written or reviewed Supabase RLS policies? 4. Have you built multi-tenant SaaS applications? 5. Have you worked on healthcare or HIPAA-related software? 6. What would you review first in an application like this? 7. Would you recommend auditing the current build before rebuilding anything? Why? 8. What would you charge for the Phase 1 audit? 9. Are you comfortable signing an NDA and IP/work-product agreement? Please begin your proposal with the words: “PLACECO AUDIT” so I know you read the full posting. About PlaceCo PlaceCo is being developed to help healthcare referral teams, care providers and families coordinate placement more efficiently. Our focus is placement readiness: helping users understand which providers may actually be ready to accept a person based on factors such as current availability, payer, care level, clinical capabilities and admission timing. The goal is to keep referrals moving until placement is successfully confirmed.