HIA.LLC — Medical Research Dashboard

Overview

Built and maintained a secure, production-grade dashboard supporting a medical and public health research study for Maui wildfire survivors. The platform enables staff operations, participant services, and reporting with privacy-first workflows, role-based access controls, and audit-friendly processes designed for real-world, day-to-day use.

Challenge

The program needed a single, reliable system where researchers and program staff could manage participants, track consent and surveys, run reports, and operate with clear accountability—without compromising participant privacy or regulatory expectations. Requirements included strict access control, audit trails, and workflows that could evolve with the study.

End-to-end delivery

Delivered from design and Figma through prototype, frontend, backend, and cloud hosting.

1. 1

   Design & discovery

   Worked with researchers and program stakeholders to define user flows, data needs, and compliance boundaries. Created wireframes and high-fidelity mockups in Figma for staff dashboards, participant-facing flows, and reporting views so the team could validate workflows before development.

2. 2

   Prototype & validation

   Built an interactive prototype to validate navigation, permissions, and key screens with stakeholders. Iterated on information architecture and role-based views (admin, staff, limited views) so the final build matched operational reality.

3. 3

   Frontend

   Implemented the dashboard and participant-facing UI with React and Next.js: responsive layouts, accessible forms, clear data tables, and consistent patterns for filters, exports, and status indicators. State management and API integration were designed for reliability and easy maintenance.

4. 4

   Backend & data

   Designed and implemented the API and database layer (Node.js, PostgreSQL): secure authentication, role-based authorization, audit logging for sensitive actions, and structured data models for participants, consent, and surveys. Ensured reporting and exports stayed performant as data grew.

5. 5

   Security & compliance

   Applied privacy-first and audit-friendly practices throughout: least-privilege access, immutable audit trails for key operations, secure session handling, and workflows that support compliance review. Worked within HIPAA-aware constraints and program-specific policies.

6. 6

   Hosting & deployment

   Deployed the application and database to a cloud environment with HTTPS, environment-based configuration, and automated backups. Set up monitoring and maintenance procedures so the system runs reliably for daily operations.