[ BLOG ]
Real stories, hard-earned lessons, and technical deep-dives from building compliant software for legal tech and healthcare.
Filevine reporting past the native Report Builder: Data Connector CSV exports, DataBridge on Snowflake, the REST API, and plain-English querying via MCP. Real constraints, rate limits, and which pathway fits which firm, from the team that shipped the open-source Filevine MCP connector.
Clio Grow captures the lead, Clio Manage runs the case, and the conversion between them is a per-matter click in the Grow UI. Here is what firms lose in that gap, why they hire implementation specialists at $20 to $55 an hour to patch it, and what an API-level handoff actually takes.
Read article
Records chasing is a full job at most personal injury firms: crash reports, FOIL requests, provider follow-ups, preservation letters, and a 90-day municipal notice clock. Here is what a retrieval vendor, a dedicated hire, and an automated request loop each actually cover, and the parts none of them fix.
Read article
Three-way reconciliation means the bank statement, the trust ledger, and every client ledger agree. Doing it across Clio Manage, a payment processor, and QuickBooks Online means reconciling three systems that each believe something slightly different. Here is where the breaks happen and which ones are worth automating.
Read article
We read every job posting mentioning Clio on one freelance marketplace in July 2026. Zero fixed-price projects above $5,000. Fifty-seven percent of the listings were requests for a human to do work software could do. Here is the full inventory of manual legal work, the rates firms pay for it, and which parts a machine can honestly take.
Read article
The first open-source MCP connector for IntakeQ and PracticeQ. Claude reads your clients, appointments, intake forms, notes, and invoices directly through your IntakeQ account. Every PHI access is logged locally. BAA included on every IntakeQ plan.
A Brooklyn attorney compared both before calling us. Here is the honest breakdown: what Zapier's MyCase integration actually does, what an MCP server does differently, when Zapier is the right choice, and what each means for privileged client data.
Read article
A law firm configured for zero data retention gets a hard error on every request to Claude Fable 5, and on AWS Bedrock that model requires 30-day retention plus opt-in human review. The compliance posture that protects privileged work now carries a capability ceiling. What that means when you pick a model.
Your app launched, people signed up, and now it keeps falling over. Five things usually break once real users show up: slow tables, duplicate charges, database locks, a backed-up job queue, and bugs that now hit everyone at once. What causes each one, and what it takes to sort out.
Read article
Step-by-step setup for the Clio MCP connector, from the team that built it. The Clio developer app path that actually works, the redirect URI trap, the TRANSPORT flag that silently breaks the install, and the Clio plan tier that blocks integrations entirely.
What Clio's native export actually covers, what only the API can reach, and how firms build automated Clio backups to OneDrive or SharePoint with mirrored folder structure and incremental sync.
Read article
Clio notified customers its LawPay integration concludes August 2026. Switching to Clio Payments handles the payment side. Whether your billing draft workflow is still worth fixing is a different question.
Read article
Clio's calendar is fine for one person and strains in two places: staying in sync with Outlook or Google, and answering when several attorneys are all free at once. Here is how Clio's calendar actually works, why the sync feels off, and how firms solve the team-availability problem Clio cannot do natively.
Read article A free, MIT-licensed MCP connector that lets Claude work with your IntakeQ/PracticeQ data. It ships with the honest part most vendors skip: with a hosted model, PHI still reaches the model. Here is the access vs retention distinction that changes how you evaluate it.
A single medical chronology can take 15 to 80 hours, and a 40-case firm can spend roughly $17,600 a month reviewing records by hand. Here is how litigation teams use Claude on the documents already in Clio to draft chronologies, deposition summaries, and paid-versus-incurred analyses, and the honest line between what a connector does and what has to be built.
Read article
Lawyers test Claude on Pro, run out after a couple of documents, and jump to Max without knowing what they actually need. Here is how to choose between Pro, Max, the API, and Enterprise for a law firm, by usage limits, cost, and what each one does with your client data.
Read article
Every privilege-safe AI option for a law firm collapses into three architectural tiers: self-hosted open-weight, a commercial frontier model under Zero Data Retention and a BAA, or a packaged legal AI product. A vendor-by-vendor comparison of training, retention, BAA, ownership, and real cost across Claude, OpenAI, Azure, Gemini, Harvey, CoCounsel, and Clio Duo.
When does building custom case management software beat renting Clio or MyCase per seat? The honest break-even math, what you gain, what you give up, and when to stay put.
Where Filevine and SmartAdvocate earn their keep for PI firms, where they cost you, and the two ways to own more of your workflow: AI on top of Filevine, or a custom build.
MyCase shipped an Open API, then gated it behind its top tier and tells firms to hire a certified consultant for the actual work. Here is what the Open API really does, the three honest ways to integrate it, and how to keep client data privileged while you do.
Read article
Inheriting another vendor's half-built code with a compliance deadline looming? Generic rescue advice says spend months understanding the code. In a regulated system that order is backwards. Here is the liability-first takeover playbook, from a federal-deadline rescue shipped in 8 weeks.
Read article
An honest field guide to the custom software shops that actually build for HIPAA, ABA, and other regulated workloads. Six firms compared on vertical focus, team model, compliance posture, project floor, and who each one is genuinely the right pick for.
Two federal courts ruled on AI and privilege in the same week of February 2026 and reached opposite results. In United States v. Heppner the AI outputs were not privileged; in Warner v. Gilbarco the work product was protected. Here is what actually separated the two, and the architecture questions every firm should answer before running client data through Claude or ChatGPT.
Anthropic launched Claude for Legal in May 2026 with practice-area plugins, workflow agents, and connectors. The headlines went to Freshfields and Quinn Emanuel, but a 5 to 50 attorney firm can use the same capability through the API and local connectors without an enterprise deal. Here is what shipped, what a small firm actually needs, and how to keep it privilege-safe.
"HIPAA compliant AI" is not a product you buy. It is an architecture and a process. The model is rarely the variable. The surface, the BAA, retention, access controls, the audit trail, and human review are. Here is a vendor-agnostic breakdown of what actually makes an AI workflow HIPAA-compliant, and a checklist to run before any PHI touches a model.
Your legal team wants AI search that respects document-level permissions and logs every query. Here's how the main approaches handle access control and audit, and how to build search that enforces ethical walls at 100ms on 1M+ documents.
How to connect Claude to Clio and Zoom for law firm automation: the real API behaviors, rate limits, and failure modes we hit building the Clio and MyCase MCP connectors. ZDR, Canadian data residency, and the LSO/ABA-512 human-review duty.
An honest map of what Claude can and can't do with Clio, MyCase, and Zoom in 2026, based on the MCP connectors we built. Real API limits, the custom-field trap, ZDR on API vs Team, and the human-review duty under ABA-512.
Read article
How to let Claude write to Clio, MyCase, or PracticePanther without trusting it blindly: read-first design, scoped writes, confirm gates, dry-run previews, and append-only audit logs. Real API behavior and failure modes from building MCP connectors.
ZDR is not available on Claude Team or Pro chat. It is available on the Anthropic API at the organization level, which a small firm can obtain. Here is the real difference between the chat tiers and the API, why a Canadian or healthcare firm hits a residency wall, and the architecture we use to keep privileged data off retention.
How to normalize thousands of Clio records without getting throttled. Real numbers on the ~3 req/s rate limit, 429 backoff, resumable batch design, and the value-instance-id trap that breaks custom-field writes.
Clio runs a Canadian region (ca.app.clio.com, PIPEDA). Anthropic has no Canadian Claude region. Here is how Canadian law firms route AI workflows compliantly: ZDR on the API, US-pinned inference, LSO and ABA 512 human review.
The number one bug when writing Clio custom fields via the API: the id inside custom_field_values is the value-instance id, not the custom_field definition id. Plus the field-type limits (picklist, currency, date) that silently reject your writes, and the upload, webhook, and rate-limit gotchas we hit building our Clio MCP connector.
How document upload actually works in the Clio Manage API: the POST /documents then PUT-to-S3 then PATCH fully_uploaded sequence, why a single multipart POST fails, and the real gotchas we hit building our Clio MCP connector.
Clio has no document webhook. If you want to fire automation the moment a document generates in a matter, here's what actually works: matter updated webhooks, polling, and the presigned-S3 upload flow. Lessons from building the Clio MCP connector.
Choosing between Clio and MyCase for Claude-powered legal automation? We shipped MCP connectors for both. Here are the real API differences, rate limits, webhook gaps, custom-field traps, and data-residency facts that decide the build.
Should a regulated firm run its Clio or MyCase AI automation locally or on a hosted server? The honest trade-offs on data residency, audit trails, and scale, learned from building the Clio and MyCase MCP connectors and hitting the API gotchas ourselves.
A side-by-side read of the Law Society of Ontario's AI guidance and ABA Formal Opinion 512 for lawyers using generative AI. Confidentiality, competence, supervision, mandatory human review, billing, and the cross-border data-residency problem when your model has no Canadian region.
Read article
A working build recipe for law firms: take a Zoom consult recording plus the matter notes in Clio, draft a standardized consult memo with Claude, and upload it back into the right matter. Real API behaviors, exact rate limits, and the failure modes we hit building the Clio and MyCase MCP connectors.
Read article
A working recipe for automating legal intake: pull a Zoom consult transcript, extract parties and deadlines, draft a matter shell plus tasks in Clio, and stop at a human-confirm gate. Real API behavior, exact rate limits, and the failure modes we hit building the Clio and MyCase MCP connectors.
A step-by-step recipe for normalizing inconsistent Clio custom field values in place via the Manage API. The value-instance-id trap, field-type rules, the ~3 req/s rate limit, dry-run and rollback, and where Claude fits. Hard-won from building our Clio MCP connector.
Read article
How to automate matter routing and conflict checks across a network of independent lawyers without merging their files. A per-user isolation pattern we learned building the Clio and MyCase MCP connectors: real API limits, the value-id trap, ZDR, and the human-review gate.
A working build recipe for law firms: your practice-management system already generates empty document templates, and the rich data already lives in your custom fields. Here's how to wire Claude to pre-fill those drafts from structured field values, with the real Clio API behavior, rate limits, and failure modes we hit building our open-source connectors.
Read article
Building a Zoom-to-Clio automation and hit a wall reading the AI Companion meeting summary from a Server-to-Server OAuth app? Here's why the read scope is blocked, when you need a General app instead, and why the cloud-recording VTT transcript is the reliable backbone.
Read article
How to auto-trigger a workflow when a Zoom call ends without exposing a public endpoint. Local polling of the Zoom recordings API, the VTT transcript backbone, the AI Companion summary trap, and how this connects to Clio. Lessons from building our Clio and MyCase MCP connectors.
Every gotcha we hit installing the MyCase MCP connector on Windows, including the SSL certificate fix, OAuth port mismatch, and the 13-business-day MyCase credential timeline nobody documents. Step-by-step with the exact config that works.
Five ways to integrate Claude AI with MyCase practice management in 2026. Open-source MCP connector, Clerx AI, Smith.ai, Zapier, and custom builds — compared honestly on cost, compliance, and capability.
Most telemedicine practices back into a headless EHR by duct-taping a patient layer onto Healthie with no-code tools. Here's what building it properly takes.
Zapier and n8n automate a healthcare practice fast, until they break at scale or move PHI through a tool with no BAA. Where the line is, and what to own.
The first open-source MCP connector for MyCase. Connect Claude directly to your MyCase cases, contacts, tasks, documents, calendar, and billing — without sending client data to AI training. ABA Opinion 512 audit logging baked in.
MyCase Advanced is $109/user/month. The actual 3-year cost for a 15-attorney firm — with accounting, LawPay processing, and price increases — is closer to $115K. Here's the line-item breakdown.
AI tooling collapsed the cost of writing fluent software development proposals. Here is how to filter candidates with seven questions that produce answers AI cannot fake, plus the paid scoping path serious buyers are using in 2026.
Read article
Horizontal 'chat with your business' AI products keep raising rounds and keep getting absorbed or shut down. The reason they can't enter regulated industries is structural: ABA Opinion 512, HIPAA BAAs, and the gap that multi-model routers cannot close. Here's the data and what wins instead.
Vibe coding gets you 80% of a product in a weekend. We rescue what's left. Real teardown of one 'MVP Complete' handoff: circular auth, 1,339-line page files, 61 TypeScript errors, all integrations stubbed, zero infrastructure. Here's what it took to make it real.
ABA Formal Opinion 512 (July 2024) sets binding ethics rules for AI on law firm websites. Here's what attorney supervision, disclosure, and UPL prevention look like as design constraints — not just policy.
Most healthcare chatbots don't need to handle PHI at all. Here's the two-architecture decision that determines your entire HIPAA compliance burden — and how to get it right before writing the first line of code.
After United States v. Heppner, consumer Claude is not privilege-safe and Claude Enterprise is an 'open question' per the court. This is the deployment guide for running Claude-quality AI on your firm's hardware with no third-party processor: Llama 4, LM Studio, our open-source Clio MCP connector, ABA Opinion 512 audit logging.
Four open-source Clio MCP connectors exist as of May 2026. They are not interchangeable. A feature-by-feature comparison of tool coverage, compliance, and licensing across LegalContext, lawquarter, LegalMCP, and Oktopeak's Clio MCP server.
Clio publishes a per-user price. The actual 3-year cost for a 15-attorney firm — with AI, QuickBooks, and payment processing — is closer to $112K. Here's the full breakdown.
Read article
A practical guide to building Claude MCP servers for law firms. Connect Claude to Clio, protect attorney-client privilege, and satisfy ABA Opinion 512. Architecture, approaches, and compliance checklist.
Can you outsource HIPAA-compliant software? Yes, but most founders miss critical steps. BAA coverage gaps, PHI in test environments, audit participation, and vendor security evaluation -- from a team that's passed 3 HIPAA audits.
Read article
Data protection laws, IP ownership, contract enforcement, timezone reality, and talent pool quality. Everything a US founder needs to verify before engaging a Serbian development team.
Read article
AI tools generate functional code, not compliant code. This HIPAA checklist covers encryption, audit trails, access controls, PHI handling, and BAAs -- with real project data from rescue engagements.
Read article
How much does legal tech software actually cost to build? Real budgets from delivered projects ($15K-$90K), not generic ranges. Case management, document search, compliance automation — with timelines and team sizes.
Lovable and Bolt.new can't build HIPAA-compliant apps. No BAA, no encryption architecture, no audit trails. Here's what's actually missing from vibecoded healthcare apps and what it costs to fix.
Read article
Lawyers are vibe coding internal tools. Here's what breaks when those prototypes need audit trails, encryption, and compliance, and how to take them to production in 6-10 weeks.
Most brands are invisible to AI search tools like ChatGPT, Claude, and Perplexity. Here are 6 things that actually work to get your brand cited in AI-generated answers, from robots.txt to structured data to topical authority.
Read article
Most 'AI agent' projects are glorified prompt chains. Here's what real agentic architecture looks like: tool use, memory, planning loops, infrastructure costs, and when you actually need agents vs smart automation. From a team that's shipped AI in production healthcare.
Read article
Chrome extensions are the fastest SaaS distribution channel in 2026. Manifest V3 architecture, cost breakdown ($5K-$50K), backend requirements, and the Chrome Web Store review process. A technical guide for founders.
Read article
Honest technical analysis of Next.js + Supabase for SaaS products. When to use it, when to outgrow it, and the migration path to custom backend. From a team that evaluates stacks for 50+ MVPs.
Read article
Lawyers waste 6 hours per week searching for documents. Here's why growing law firms are replacing generic DMS search with custom Elasticsearch-powered knowledge management — and recovering $220K+/year.
Read article
Why legal tech and healthcare companies need more than basic search. Real architecture decisions for compliance-grade Elasticsearch: audit trails, HIPAA, encrypted indices, and 100ms queries on 1M+ docs.
Read article
Your software project failed. The money's gone, the team's demoralized, and you're not sure what to do next. Here's the founder's playbook for what to salvage, what to learn, and how to rebuild smarter — from a team that rescues failed projects for a living.
Read article
Your software project is going sideways. Missed deadlines, budget overruns, a team that's lost confidence. Here's the 5-step rescue framework that's saved projects worth $50k-$200k — with real decision criteria for when to rescue vs. restart.
Read article
Most MVPs fail before they find a single paying user. Here are 8 real reasons — wrong team, wrong scope, wrong timing — and what to do instead. Based on 50+ MVPs shipped in regulated industries.
Read article
The AI healthcare market hits $67.4B in 2026, but most healthcare AI products fail. Here's what actually works — content generation, intelligent search, classification — with real project examples, HIPAA-AI compliance patterns, and honest cost breakdowns.
Read article
Audit trail implementation guide for HIPAA, DEA, SOC 2, and GDPR compliance. Real architecture patterns from 4 regulated SaaS platforms we shipped — with code examples, anti-patterns, and cost breakdowns.
Read article
How we built DEA-compliant controlled substance tracking software with automated Form 41 generation, biometric auth, and remote video witnessing. Real architecture decisions from a 120-hour build.
Read article
How we built AI-powered legal document search that returns results in 100ms across 1M+ documents. Elasticsearch architecture, document classification, and $220k/year ROI breakdown for law firms.
Read article
How to start a HIPAA-compliant patient portal in 2026. The three paths (EHR built-in, third-party vendor, custom build), FHIR/HL7 integration, real cost tiers from $15k to $90k, and a 5-step implementation guide built on 3 delivered HIPAA platforms.
Read article
Transparent MVP pricing breakdown. What $35k, $50k, and $200k actually buy you in features, architecture, and compliance. Real project budgets from 50+ MVPs shipped across legal tech, healthcare, and operations.
Read article
Build vs buy analysis for enterprise search. Real case study: custom search on 1M+ legal documents at 100ms, saving $220k/year vs Elasticsearch + Algolia. Decision framework, cost comparison, and the search features that off-the-shelf tools can't do.
Read article
How we reduced CSV processing from 20 minutes to under 3 minutes for a multi-location event retail platform managing 500,000+ SKUs. Real architecture decisions, benchmarks, and the sync accuracy problem nobody talks about.
Read article
Technical guide to FDA software validation for healthcare SaaS. 21 CFR Part 11 requirements, IQ/OQ/PQ protocols, electronic signatures, audit trails, and the classification trap that costs startups 6 months. From a team with 3+ regulated healthcare platforms.
Read article
Practical GDPR compliance checklist for SaaS developers. Data mapping, consent management, right to deletion architecture, breach notification systems, and DPA requirements. From a team that builds for regulated industries.
Read article
The 5 most common HIPAA audit failures we see in healthcare SaaS — and how to fix them before an auditor finds them. Real examples from 4+ HIPAA platforms shipped.
Read article
Technical HIPAA implementation guide for developers. Encryption patterns, audit logging architecture, AWS HIPAA setup, RBAC enforcement, and BAA requirements. From a team that's shipped 4+ HIPAA platforms.
Read article
Legal tech trends that matter in 2026: AI document review that works (and doesn't), compliance automation replacing manual workflows, and the search infrastructure gap most legal SaaS still hasn't solved. From a team that's built 3 legal tech platforms.
Read article
Discovery phases exist because the agency hasn't built your product before. After 50+ MVPs in regulated industries, we scope during the first call — not after a $15k discovery engagement. Here's how.
Read article
Your SaaS MVP is broken and your previous dev team disappeared. Here's how to assess, rescue, and relaunch — based on a real project we took from broken prototype to production in 8 weeks. Codebase audit checklist, refactor-vs-rewrite decision framework, and cost estimates.
Read article
Why US SaaS founders hire Serbian developers for regulated industries. CET timezone overlap, $60-80/hr vs $200-300/hr US rates, HIPAA and DEA compliance experience, GDPR-aligned data protection. The cost-quality math for healthcare and legal tech.
Read article
Practical SOC 2 guide for early-stage SaaS founders. Type I vs Type II differences, real cost breakdowns ($15k-$50k), timeline expectations, and the technical controls you need before your first enterprise deal. No compliance jargon.
Read article
After 50+ MVPs shipped, we dropped Scrum. Here's why sprint planning, story points, and standup meetings slow down small teams building regulated SaaS — and the Shape Up-inspired process we use instead.
Read article
How to deploy SaaS updates across multiple locations without downtime. Blue-green deployments, database migrations, feature flags, and the rollback strategy that saved us at 2 AM. Real architecture from a 3-location launch.
Read article
Healthcare SaaS development for founders who need HIPAA-compliant platforms that work. Patient portals, provider tools, telehealth, and EHR integrations. Real projects, real timelines, 8-12 weeks.
Read article
How to build HIPAA-compliant software without burning your budget. Real architecture decisions, actual project costs ($15k-$50k), and the mistakes that trigger audits. From a team that's shipped 4+ HIPAA platforms.
Read article
Complete cost breakdown of self-hosted ELK vs managed Elasticsearch. Infrastructure, labor, scaling costs compared. Real numbers from consultants who've deployed both.
Read article
Transparent MVP development cost guide with real project budgets. Learn what drives pricing, see actual case studies ($15k-$50k range), and calculate your MVP cost. HIPAA compliance costs included.
Read article
How to build a Continuing Medical Education platform that passes accreditation review. PubMed verification, audit trails, credit tracking, and HIPAA overlap — from a team that shipped one.
Read article
Most LMS gamification fails because it treats professionals like gamers. Here's what actually drives engagement in professional learning platforms — streaks, tiered achievements, and virtual currency that converts.
Read article
AI isn't magic. Here's a practical guide to when AI integration genuinely helps your product — and when it's just an expensive distraction.
Read article
Airtable is great for prototyping, but it wasn't built to run complex operations at scale. Here are 5 signs it's time to move to custom software.
Read article
The most common Elasticsearch mistakes we see in production: wrong mapping types, over-sharding, missing filters, and more. With code examples and fixes.
Read article
Step-by-step guide to optimizing Elasticsearch query performance. Mapping strategies, query patterns, caching, and real examples that achieved 50x speedups.
Read article
Elasticsearch vs OpenSearch comparison for 2026. License differences, performance, features, and when to use each. From consultants who've deployed both.
Read article
Your CSV import crashes at 2,000 rows. Ours handles 10,000 in under 3 minutes. Here's the Laravel queue architecture that makes it work — with real code examples.
Read article
Technical deep-dive: How we achieved sub-100ms query times on 1M+ legal documents using Elasticsearch. Architecture, optimization techniques, and real-world results.
Read article
Card testing fraud cost businesses $1.8B last year. We caught a sophisticated fraud ring and stopped it in 24 hours. Learn the 7-layer defense system we built.
Read article
How we built a HIPAA-compliant structured settlement case management platform in 8 weeks for 290 hours. From discovery to launch, here's the full story.
Read articleNEWSLETTER
