Three apps, eight infrastructure layers, and every vendor a signed BAA. Scroll the stack — each layer locks into place as you pass it.
Wavera ships as a triplet — EHR for the clinic, Inventory for the pharmacy, Connect for the integrations layer. One JWT signs in to all three.
Scroll the stack — each layer locks at the top and the next slides in beneath, building a transparent pile of the whole system.
Next.js 16 App Router running React 19, typed end-to-end with TypeScript 5. Tailwind CSS 4 for styling · shadcn + Radix UI primitives · Framer Motion for physics · Tiptap 3 for the rich-text clinical editor.
Next.js App Router API routes and server actions keep the server and client on the same graph. pino provides structured JSON logging with correlation IDs that land in Cloud Logging.
EHR rides on Supabase PostgreSQL in dev and Cloud SQL PostgreSQL in production via Prisma 6. Inventory and Connect share a Drizzle ORM 0.45 schema — SQLite locally, Cloud SQL PostgreSQL in prod. Upstash Redis caches hot reads and rate-limits PHI endpoints.
NextAuth 5 issues JWTs that propagate across EHR · Inventory · Connect via a shared secret. Clinical roles are MFA-enforced with TOTP. PHI is encrypted at the field level with AES-256-GCM before it touches the database.
Google Gemini LLM drives note generation and the Luna copilot, deployed through Vertex AI for managed scale. Deepgram streams ambient dictation over WebSocket. Tesseract.js OCRs scanned path and imaging reports at ingestion.
All three apps run on Google Cloud Run — serverless containers that auto-scale from zero to thousands. Cloud SQL for Postgres, Cloud Storage for documents, Cloud KMS for key management, Cloud Logging for audit, Pub/Sub for events, Upstash Redis for cache.
Custom HL7 v2 DFT^P03 encoder for claim transmissions · FHIR Exchange live across 140k patients · 340B drug pricing live · secure file transport via ssh2-sftp-client. QHIN / TEFCA integration planned for nationwide queries.
HIPAA-eligible GCP with a signed BAA. PHI encrypted at rest via Cloud KMS. Audit trail across all three systems through pino + Cloud Logging. WAF protecting production. MFA enforced for every clinical role. SOC 2 audit in progress; ONC certification in progress.
Wavera runs on Google Cloud and builds on Gemini — signed BAA, healthcare-grade residency, enterprise observability. The next generation of oncology infrastructure should be standards-first and backed by investors who understand healthcare at scale.