[ BLOG ]
Real stories, hard-earned lessons, and technical deep-dives from building compliant software for legal tech and healthcare.
Your app launched, people signed up, and now it keeps falling over. Five things usually break once real users show up: slow tables, duplicate charges, database locks, a backed-up job queue, and bugs that now hit everyone at once. What causes each one, and what it takes to sort out.
Read articleStep-by-step setup for the Clio MCP connector, from the team that built it. The Clio developer app path that actually works, the redirect URI trap, the TRANSPORT flag that silently breaks the install, and the Clio plan tier that blocks integrations entirely.
What Clio's native export actually covers, what only the API can reach, and how firms build automated Clio backups to OneDrive or SharePoint with mirrored folder structure and incremental sync.
Read article
Clio notified customers its LawPay integration concludes August 2026. Switching to Clio Payments handles the payment side. Whether your billing draft workflow is still worth fixing is a different question.
Read articleClio's calendar is fine for one person and strains in two places: staying in sync with Outlook or Google, and answering when several attorneys are all free at once. Here is how Clio's calendar actually works, why the sync feels off, and how firms solve the team-availability problem Clio cannot do natively.
Read articleA free, MIT-licensed MCP connector that lets Claude work with your IntakeQ/PracticeQ data. It ships with the honest part most vendors skip: with a hosted model, PHI still reaches the model. Here is the access vs retention distinction that changes how you evaluate it.
A single medical chronology can take 15 to 80 hours, and a 40-case firm can spend roughly $17,600 a month reviewing records by hand. Here is how litigation teams use Claude on the documents already in Clio to draft chronologies, deposition summaries, and paid-versus-incurred analyses, and the honest line between what a connector does and what has to be built.
Read articleLawyers test Claude on Pro, run out after a couple of documents, and jump to Max without knowing what they actually need. Here is how to choose between Pro, Max, the API, and Enterprise for a law firm, by usage limits, cost, and what each one does with your client data.
Read articleEvery privilege-safe AI option for a law firm collapses into three architectural tiers: self-hosted open-weight, a commercial frontier model under Zero Data Retention and a BAA, or a packaged legal AI product. A vendor-by-vendor comparison of training, retention, BAA, ownership, and real cost across Claude, OpenAI, Azure, Gemini, Harvey, CoCounsel, and Clio Duo.
When does building custom case management software beat renting Clio or MyCase per seat? The honest break-even math, what you gain, what you give up, and when to stay put.
Where Filevine and SmartAdvocate earn their keep for PI firms, where they cost you, and the two ways to own more of your workflow: AI on top of Filevine, or a custom build.
MyCase shipped an Open API, then gated it behind its top tier and tells firms to hire a certified consultant for the actual work. Here is what the Open API really does, the three honest ways to integrate it, and how to keep client data privileged while you do.
Read articleInheriting another vendor's half-built code with a compliance deadline looming? Generic rescue advice says spend months understanding the code. In a regulated system that order is backwards. Here is the liability-first takeover playbook, from a federal-deadline rescue shipped in 8 weeks.
Read articleAn honest field guide to the custom software shops that actually build for HIPAA, ABA, and other regulated workloads. Six firms compared on vertical focus, team model, compliance posture, project floor, and who each one is genuinely the right pick for.
Two federal courts ruled on AI and privilege in the same week of February 2026 and reached opposite results. In United States v. Heppner the AI outputs were not privileged; in Warner v. Gilbarco the work product was protected. Here is what actually separated the two, and the architecture questions every firm should answer before running client data through Claude or ChatGPT.
Anthropic launched Claude for Legal in May 2026 with practice-area plugins, workflow agents, and connectors. The headlines went to Freshfields and Quinn Emanuel, but a 5 to 50 attorney firm can use the same capability through the API and local connectors without an enterprise deal. Here is what shipped, what a small firm actually needs, and how to keep it privilege-safe.
"HIPAA compliant AI" is not a product you buy. It is an architecture and a process. The model is rarely the variable. The surface, the BAA, retention, access controls, the audit trail, and human review are. Here is a vendor-agnostic breakdown of what actually makes an AI workflow HIPAA-compliant, and a checklist to run before any PHI touches a model.
Your legal team wants AI search that respects document-level permissions and logs every query. Here's how the main approaches handle access control and audit, and how to build search that enforces ethical walls at 100ms on 1M+ documents.
How to connect Claude to Clio and Zoom for law firm automation: the real API behaviors, rate limits, and failure modes we hit building the Clio and MyCase MCP connectors. ZDR, Canadian data residency, and the LSO/ABA-512 human-review duty.
An honest map of what Claude can and can't do with Clio, MyCase, and Zoom in 2026, based on the MCP connectors we built. Real API limits, the custom-field trap, ZDR on API vs Team, and the human-review duty under ABA-512.
Read articleHow to let Claude write to Clio, MyCase, or PracticePanther without trusting it blindly: read-first design, scoped writes, confirm gates, dry-run previews, and append-only audit logs. Real API behavior and failure modes from building MCP connectors.
ZDR is not available on Claude Team or Pro chat. It is available on the Anthropic API at the organization level, which a small firm can obtain. Here is the real difference between the chat tiers and the API, why a Canadian or healthcare firm hits a residency wall, and the architecture we use to keep privileged data off retention.
How to normalize thousands of Clio records without getting throttled. Real numbers on the ~3 req/s rate limit, 429 backoff, resumable batch design, and the value-instance-id trap that breaks custom-field writes.
Clio runs a Canadian region (ca.app.clio.com, PIPEDA). Anthropic has no Canadian Claude region. Here is how Canadian law firms route AI workflows compliantly: ZDR on the API, US-pinned inference, LSO and ABA 512 human review.
The number one bug when writing Clio custom fields via the API: the id inside custom_field_values is the value-instance id, not the custom_field definition id. Plus the field-type limits (picklist, currency, date) that silently reject your writes, and the upload, webhook, and rate-limit gotchas we hit building our Clio MCP connector.
How document upload actually works in the Clio Manage API: the POST /documents then PUT-to-S3 then PATCH fully_uploaded sequence, why a single multipart POST fails, and the real gotchas we hit building our Clio MCP connector.
Clio has no document webhook. If you want to fire automation the moment a document generates in a matter, here's what actually works: matter updated webhooks, polling, and the presigned-S3 upload flow. Lessons from building the Clio MCP connector.
Choosing between Clio and MyCase for Claude-powered legal automation? We shipped MCP connectors for both. Here are the real API differences, rate limits, webhook gaps, custom-field traps, and data-residency facts that decide the build.
Should a regulated firm run its Clio or MyCase AI automation locally or on a hosted server? The honest trade-offs on data residency, audit trails, and scale, learned from building the Clio and MyCase MCP connectors and hitting the API gotchas ourselves.
A side-by-side read of the Law Society of Ontario's AI guidance and ABA Formal Opinion 512 for lawyers using generative AI. Confidentiality, competence, supervision, mandatory human review, billing, and the cross-border data-residency problem when your model has no Canadian region.
Read articleA working build recipe for law firms: take a Zoom consult recording plus the matter notes in Clio, draft a standardized consult memo with Claude, and upload it back into the right matter. Real API behaviors, exact rate limits, and the failure modes we hit building the Clio and MyCase MCP connectors.
Read articleA working recipe for automating legal intake: pull a Zoom consult transcript, extract parties and deadlines, draft a matter shell plus tasks in Clio, and stop at a human-confirm gate. Real API behavior, exact rate limits, and the failure modes we hit building the Clio and MyCase MCP connectors.
A step-by-step recipe for normalizing inconsistent Clio custom field values in place via the Manage API. The value-instance-id trap, field-type rules, the ~3 req/s rate limit, dry-run and rollback, and where Claude fits. Hard-won from building our Clio MCP connector.
Read articleHow to automate matter routing and conflict checks across a network of independent lawyers without merging their files. A per-user isolation pattern we learned building the Clio and MyCase MCP connectors: real API limits, the value-id trap, ZDR, and the human-review gate.
A working build recipe for law firms: your practice-management system already generates empty document templates, and the rich data already lives in your custom fields. Here's how to wire Claude to pre-fill those drafts from structured field values, with the real Clio API behavior, rate limits, and failure modes we hit building our open-source connectors.
Read articleBuilding a Zoom-to-Clio automation and hit a wall reading the AI Companion meeting summary from a Server-to-Server OAuth app? Here's why the read scope is blocked, when you need a General app instead, and why the cloud-recording VTT transcript is the reliable backbone.
Read articleHow to auto-trigger a workflow when a Zoom call ends without exposing a public endpoint. Local polling of the Zoom recordings API, the VTT transcript backbone, the AI Companion summary trap, and how this connects to Clio. Lessons from building our Clio and MyCase MCP connectors.
Every gotcha we hit installing the MyCase MCP connector on Windows, including the SSL certificate fix, OAuth port mismatch, and the 13-business-day MyCase credential timeline nobody documents. Step-by-step with the exact config that works.
Five ways to integrate Claude AI with MyCase practice management in 2026. Open-source MCP connector, Clerx AI, Smith.ai, Zapier, and custom builds — compared honestly on cost, compliance, and capability.
Most telemedicine practices back into a headless EHR by duct-taping a patient layer onto Healthie with no-code tools. Here's what building it properly takes.
Zapier and n8n automate a healthcare practice fast, until they break at scale or move PHI through a tool with no BAA. Where the line is, and what to own.
The first open-source MCP connector for MyCase. Connect Claude directly to your MyCase cases, contacts, tasks, documents, calendar, and billing — without sending client data to AI training. ABA Opinion 512 audit logging baked in.
MyCase Advanced is $109/user/month. The actual 3-year cost for a 15-attorney firm — with accounting, LawPay processing, and price increases — is closer to $115K. Here's the line-item breakdown.
AI tooling collapsed the cost of writing fluent software development proposals. Here is how to filter candidates with seven questions that produce answers AI cannot fake, plus the paid scoping path serious buyers are using in 2026.
Read articleHorizontal 'chat with your business' AI products keep raising rounds and keep getting absorbed or shut down. The reason they can't enter regulated industries is structural: ABA Opinion 512, HIPAA BAAs, and the gap that multi-model routers cannot close. Here's the data and what wins instead.
Vibe coding gets you 80% of a product in a weekend. We rescue what's left. Real teardown of one 'MVP Complete' handoff: circular auth, 1,339-line page files, 61 TypeScript errors, all integrations stubbed, zero infrastructure. Here's what it took to make it real.
ABA Formal Opinion 512 (July 2024) sets binding ethics rules for AI on law firm websites. Here's what attorney supervision, disclosure, and UPL prevention look like as design constraints — not just policy.
Most healthcare chatbots don't need to handle PHI at all. Here's the two-architecture decision that determines your entire HIPAA compliance burden — and how to get it right before writing the first line of code.
After United States v. Heppner, consumer Claude is not privilege-safe and Claude Enterprise is an 'open question' per the court. This is the deployment guide for running Claude-quality AI on your firm's hardware with no third-party processor: Llama 4, LM Studio, our open-source Clio MCP connector, ABA Opinion 512 audit logging.
Four open-source Clio MCP connectors exist as of May 2026. They are not interchangeable. A feature-by-feature comparison of tool coverage, compliance, and licensing across LegalContext, lawquarter, LegalMCP, and Oktopeak's Clio MCP server.
Clio publishes a per-user price. The actual 3-year cost for a 15-attorney firm — with AI, QuickBooks, and payment processing — is closer to $112K. Here's the full breakdown.
Read articleA practical guide to building Claude MCP servers for law firms. Connect Claude to Clio, protect attorney-client privilege, and satisfy ABA Opinion 512. Architecture, approaches, and compliance checklist.
Can you outsource HIPAA-compliant software? Yes, but most founders miss critical steps. BAA coverage gaps, PHI in test environments, audit participation, and vendor security evaluation -- from a team that's passed 3 HIPAA audits.
Read articleData protection laws, IP ownership, contract enforcement, timezone reality, and talent pool quality. Everything a US founder needs to verify before engaging a Serbian development team.
Read articleAI tools generate functional code, not compliant code. This HIPAA checklist covers encryption, audit trails, access controls, PHI handling, and BAAs -- with real project data from rescue engagements.
Read articleHow much does legal tech software actually cost to build? Real budgets from delivered projects ($15K-$90K), not generic ranges. Case management, document search, compliance automation — with timelines and team sizes.
Lovable and Bolt.new can't build HIPAA-compliant apps. No BAA, no encryption architecture, no audit trails. Here's what's actually missing from vibecoded healthcare apps and what it costs to fix.
Read articleLawyers are vibe coding internal tools. Here's what breaks when those prototypes need audit trails, encryption, and compliance — and how to take them to production in 6-10 weeks.
Most brands are invisible to AI search tools like ChatGPT, Claude, and Perplexity. Here are 6 things that actually work to get your brand cited in AI-generated answers, from robots.txt to structured data to topical authority.
Read articleMost 'AI agent' projects are glorified prompt chains. Here's what real agentic architecture looks like: tool use, memory, planning loops, infrastructure costs, and when you actually need agents vs smart automation. From a team that's shipped AI in production healthcare.
Read articleChrome extensions are the fastest SaaS distribution channel in 2026. Manifest V3 architecture, cost breakdown ($5K-$50K), backend requirements, and the Chrome Web Store review process. A technical guide for founders.
Read articleHonest technical analysis of Next.js + Supabase for SaaS products. When to use it, when to outgrow it, and the migration path to custom backend. From a team that evaluates stacks for 50+ MVPs.
Read articleLawyers waste 6 hours per week searching for documents. Here's why growing law firms are replacing generic DMS search with custom Elasticsearch-powered knowledge management — and recovering $220K+/year.
Read articleWhy legal tech and healthcare companies need more than basic search. Real architecture decisions for compliance-grade Elasticsearch: audit trails, HIPAA, encrypted indices, and 100ms queries on 1M+ docs.
Read articleYour software project failed. The money's gone, the team's demoralized, and you're not sure what to do next. Here's the founder's playbook for what to salvage, what to learn, and how to rebuild smarter — from a team that rescues failed projects for a living.
Read articleYour software project is going sideways. Missed deadlines, budget overruns, a team that's lost confidence. Here's the 5-step rescue framework that's saved projects worth $50k-$200k — with real decision criteria for when to rescue vs. restart.
Read articleMost MVPs fail before they find a single paying user. Here are 8 real reasons — wrong team, wrong scope, wrong timing — and what to do instead. Based on 50+ MVPs shipped in regulated industries.
Read articleThe AI healthcare market hits $67.4B in 2026, but most healthcare AI products fail. Here's what actually works — content generation, intelligent search, classification — with real project examples, HIPAA-AI compliance patterns, and honest cost breakdowns.
Read articleAudit trail implementation guide for HIPAA, DEA, SOC 2, and GDPR compliance. Real architecture patterns from 4 regulated SaaS platforms we shipped — with code examples, anti-patterns, and cost breakdowns.
Read articleHow we built DEA-compliant controlled substance tracking software with automated Form 41 generation, biometric auth, and remote video witnessing. Real architecture decisions from a 120-hour build.
Read articleHow we built AI-powered legal document search that returns results in 100ms across 1M+ documents. Elasticsearch architecture, document classification, and $220k/year ROI breakdown for law firms.
Read articleHow to start a HIPAA-compliant patient portal in 2026. The three paths (EHR built-in, third-party vendor, custom build), FHIR/HL7 integration, real cost tiers from $15k to $90k, and a 5-step implementation guide built on 3 delivered HIPAA platforms.
Read articleTransparent MVP pricing breakdown. What $35k, $50k, and $200k actually buy you in features, architecture, and compliance. Real project budgets from 50+ MVPs shipped across legal tech, healthcare, and operations.
Read articleBuild vs buy analysis for enterprise search. Real case study: custom search on 1M+ legal documents at 100ms, saving $220k/year vs Elasticsearch + Algolia. Decision framework, cost comparison, and the search features that off-the-shelf tools can't do.
Read articleHow we reduced CSV processing from 20 minutes to under 3 minutes for a multi-location event retail platform managing 500,000+ SKUs. Real architecture decisions, benchmarks, and the sync accuracy problem nobody talks about.
Read articleTechnical guide to FDA software validation for healthcare SaaS. 21 CFR Part 11 requirements, IQ/OQ/PQ protocols, electronic signatures, audit trails, and the classification trap that costs startups 6 months. From a team with 3+ regulated healthcare platforms.
Read articlePractical GDPR compliance checklist for SaaS developers. Data mapping, consent management, right to deletion architecture, breach notification systems, and DPA requirements. From a team that builds for regulated industries.
Read articleThe 5 most common HIPAA audit failures we see in healthcare SaaS — and how to fix them before an auditor finds them. Real examples from 4+ HIPAA platforms shipped.
Read articleTechnical HIPAA implementation guide for developers. Encryption patterns, audit logging architecture, AWS HIPAA setup, RBAC enforcement, and BAA requirements. From a team that's shipped 4+ HIPAA platforms.
Read articleLegal tech trends that matter in 2026: AI document review that works (and doesn't), compliance automation replacing manual workflows, and the search infrastructure gap most legal SaaS still hasn't solved. From a team that's built 3 legal tech platforms.
Read articleDiscovery phases exist because the agency hasn't built your product before. After 50+ MVPs in regulated industries, we scope during the first call — not after a $15k discovery engagement. Here's how.
Read articleYour SaaS MVP is broken and your previous dev team disappeared. Here's how to assess, rescue, and relaunch — based on a real project we took from broken prototype to production in 8 weeks. Codebase audit checklist, refactor-vs-rewrite decision framework, and cost estimates.
Read articleWhy US SaaS founders hire Serbian developers for regulated industries. CET timezone overlap, $60-80/hr vs $200-300/hr US rates, HIPAA and DEA compliance experience, GDPR-aligned data protection. The cost-quality math for healthcare and legal tech.
Read articlePractical SOC 2 guide for early-stage SaaS founders. Type I vs Type II differences, real cost breakdowns ($15k-$50k), timeline expectations, and the technical controls you need before your first enterprise deal. No compliance jargon.
Read articleAfter 50+ MVPs shipped, we dropped Scrum. Here's why sprint planning, story points, and standup meetings slow down small teams building regulated SaaS — and the Shape Up-inspired process we use instead.
Read articleHow to deploy SaaS updates across multiple locations without downtime. Blue-green deployments, database migrations, feature flags, and the rollback strategy that saved us at 2 AM. Real architecture from a 3-location launch.
Read articleHealthcare SaaS development for founders who need HIPAA-compliant platforms that work. Patient portals, provider tools, telehealth, and EHR integrations. Real projects, real timelines, 8-12 weeks.
Read articleHow to build HIPAA-compliant software without burning your budget. Real architecture decisions, actual project costs ($15k-$50k), and the mistakes that trigger audits. From a team that's shipped 4+ HIPAA platforms.
Read articleComplete cost breakdown of self-hosted ELK vs managed Elasticsearch. Infrastructure, labor, scaling costs compared. Real numbers from consultants who've deployed both.
Read articleTransparent MVP development cost guide with real project budgets. Learn what drives pricing, see actual case studies ($15k-$50k range), and calculate your MVP cost. HIPAA compliance costs included.
Read articleHow to build a Continuing Medical Education platform that passes accreditation review. PubMed verification, audit trails, credit tracking, and HIPAA overlap — from a team that shipped one.
Read articleMost LMS gamification fails because it treats professionals like gamers. Here's what actually drives engagement in professional learning platforms — streaks, tiered achievements, and virtual currency that converts.
Read articleAI isn't magic. Here's a practical guide to when AI integration genuinely helps your product — and when it's just an expensive distraction.
Read articleAirtable is great for prototyping, but it wasn't built to run complex operations at scale. Here are 5 signs it's time to move to custom software.
Read articleThe most common Elasticsearch mistakes we see in production: wrong mapping types, over-sharding, missing filters, and more. With code examples and fixes.
Read articleStep-by-step guide to optimizing Elasticsearch query performance. Mapping strategies, query patterns, caching, and real examples that achieved 50x speedups.
Read articleElasticsearch vs OpenSearch comparison for 2026. License differences, performance, features, and when to use each. From consultants who've deployed both.
Read articleYour CSV import crashes at 2,000 rows. Ours handles 10,000 in under 3 minutes. Here's the Laravel queue architecture that makes it work — with real code examples.
Read articleTechnical deep-dive: How we achieved sub-100ms query times on 1M+ legal documents using Elasticsearch. Architecture, optimization techniques, and real-world results.
Read articleCard testing fraud cost businesses $1.8B last year. We caught a sophisticated fraud ring and stopped it in 24 hours. Learn the 7-layer defense system we built.
Read articleHow we built a HIPAA-compliant structured settlement case management platform in 8 weeks for 290 hours. From discovery to launch, here's the full story.
Read article