Three apps, eight infrastructure layers, and every vendor a signed BAA. Scroll the stack — each layer locks into place as you pass it.
Wavera ships as a triplet — EHR for the clinic, Inventory for the pharmacy, Connect for the integrations layer. One JWT signs in to all three.
Scroll the stack — each layer locks at the top and the next slides in beneath, building a transparent pile of the whole system.
Next.js 16 App Router running React 19, typed end-to-end with TypeScript 5. Tailwind CSS 4 for styling · shadcn + Radix UI primitives · Framer Motion for physics · Tiptap 3 for the rich-text clinical editor.
Next.js App Router API routes and server actions keep the server and client on the same graph. pino provides structured JSON logging with correlation IDs that land in Cloud Logging.
EHR rides on Supabase PostgreSQL in dev and Cloud SQL PostgreSQL in production via Prisma 6. Inventory and Connect share a Drizzle ORM 0.45 schema — SQLite locally, Cloud SQL PostgreSQL in prod. Upstash Redis caches hot reads and rate-limits PHI endpoints.
NextAuth 5 issues JWTs that propagate across EHR · Inventory · Connect via a shared secret. Clinical roles are MFA-enforced with TOTP. PHI is encrypted at the field level with AES-256-GCM before it touches the database.
Google Gemini LLM drives note generation and the Luna copilot, deployed through Vertex AI for managed scale. Deepgram streams ambient dictation over WebSocket. Tesseract.js OCRs scanned path and imaging reports at ingestion.
All three apps run on Google Cloud Run — serverless containers that auto-scale from zero to thousands. Cloud SQL for Postgres, Cloud Storage for documents, Cloud KMS for key management, Cloud Logging for audit, Pub/Sub for events, Upstash Redis for cache.
FHIR R4 native — 26 resource types, US Core 7.0.0. Wavera participates in TEFCA via CommonWell as our QHIN — Carequality nationwide queries live across 140k+ patients. Custom HL7 v2 DFT^P03 encoder for claim transmissions; 340B drug pricing live; secure file transport via ssh2-sftp-client.
HIPAA-eligible GCP with a signed BAA. PHI encrypted at rest via Cloud KMS. Audit trail across all three systems through pino + Cloud Logging. WAF protecting production. MFA enforced for every clinical role. SOC 2 Type II audit in progress; ONC (g)(10) certification roadmap on file.
Source EHRs migrate in through FHIR R4. Inside Wavera — agents grounded against NCCN, an oncology data model, and an event-driven API gateway. Outbound — bidirectional sync with every partner you already trust. Hover any card.