React + Supabase Developer for Healthcare SaaS Production Migration

I have an existing web-based healthcare SaaS application built with React, TypeScript, PostgreSQL, and Supabase using Lovable as the development environment. The application is already built and functional. I am preparing it for a small real-client beta in the U.S. Because the application may process PHI, I need an experienced developer to review the existing architecture and determine the smallest appropriate production migration needed before real client data can be used. IMPORTANT: This initial $200 project is for a TECHNICAL REVIEW AND MIGRATION PLAN ONLY. I am not asking you to perform the migration as part of this contract. I already have a detailed production migration/security specification generated from the existing application, as well as a private GitHub copy of the code. For this initial review, I need you to: * Review the existing repository and migration/security specification. * Verify that the specification accurately reflects the current architecture. * Review the existing Supabase/PostgreSQL setup, including RLS policies, organization/tenant isolation, authentication, database functions, and server-side functions. * Determine whether a backend-only migration is feasible while preserving the existing frontend and workflows. * Identify exactly what must move away from Lovable-managed infrastructure before PHI is introduced. * Identify what can safely remain unchanged. * Identify any Lovable dependencies that could cause PHI to pass through Lovable infrastructure. * Recommend the smallest practical production architecture using HIPAA-eligible services where required. * Identify any major security issues that should be addressed before a real-client beta. * Provide an estimated timeline and separate quote for performing the actual migration after the review. The goal is NOT to rebuild or redesign the application. I want to preserve as much of the existing application as possible. Relevant experience I am looking for: * Supabase * PostgreSQL and Row-Level Security (RLS) * React / TypeScript * Multi-tenant SaaS applications * Authentication and application security * Production migrations * Experience with PHI, HIPAA-sensitive systems, healthcare SaaS, or other regulated data is strongly preferred. Experience with Lovable is helpful but not required. Please briefly answer the following when applying: 1. What experience do you have with Supabase/PostgreSQL RLS and multi-tenant applications? 2. Have you worked with PHI, healthcare SaaS, HIPAA-sensitive applications, or other regulated data? 3. Have you migrated a Lovable or similar low-code/AI-built application to independently controlled infrastructure? 4. Based on this description, would you first investigate a backend-only migration rather than rebuilding the application? 5. How would you test that users from one organization cannot access another organization's data? No real client PHI is currently needed for this review. If the initial review goes well, I may hire the same developer under a separate contract/milestone to perform the migration.