https://anqureshi.com/blog Practical notes on healthcare software, cloud architecture, AI, analytics, observability, and developer tools. en Thu, 13 Aug 2026 00:00:00 +0500 https://anqureshi.com/blog/responding-to-suspected-phi-exposure https://anqureshi.com/blog/responding-to-suspected-phi-exposure A practical engineering playbook for containment, evidence, access revocation, scope assessment, vendor escalation, recovery, and safer follow-up. Assad Nadeem Qureshi Thu, 30 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/secrets-encryption-key-management-healthcare https://anqureshi.com/blog/secrets-encryption-key-management-healthcare A practical operating model for storing secrets, separating keys, rotating credentials, controlling access, and recovering encrypted healthcare workloads. Assad Nadeem Qureshi Tue, 28 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/mackex-wordpress-to-nextjs-performance https://anqureshi.com/blog/mackex-wordpress-to-nextjs-performance A practical case study of rebuilding Mackex Services from a WordPress theme into a fast Next.js App Router site backed by WordPress, WPGraphQL, ISR, Vercel, and SEO cleanup. Assad Nadeem Qureshi Tue, 28 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/hipaa-backup-disaster-recovery https://anqureshi.com/blog/hipaa-backup-disaster-recovery A practical guide to backup and disaster recovery for HIPAA workloads, including recovery objectives, immutable storage, provider controls, BAAs, PHI, and restoration testing. Assad Nadeem Qureshi Mon, 27 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/healthcare-saas-tenant-isolation https://anqureshi.com/blog/healthcare-saas-tenant-isolation A practical guide to tenant isolation and authorization for healthcare SaaS, including identity, data, storage, queues, caches, background jobs, audit logs, emergency access, and isolation testing. Assad Nadeem Qureshi Mon, 27 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/smart-on-fhir-integration https://anqureshi.com/blog/smart-on-fhir-integration Notes from planning a first SMART on FHIR R4 integration and the architecture and product questions involved. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/sentry-vs-crashlytics-healthcare https://anqureshi.com/blog/sentry-vs-crashlytics-healthcare A data-flow-first comparison of Sentry and Firebase Crashlytics for healthcare applications, including BAA availability, PHI risks, configuration, and vendor review. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/secure-cicd-healthcare-apps-aws-gcp-azure https://anqureshi.com/blog/secure-cicd-healthcare-apps-aws-gcp-azure A practical healthcare CI/CD model using workload identity, protected releases, verified provenance, isolated runners, safe migrations, and audit evidence. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/production-data-development-staging-hipaa https://anqureshi.com/blog/production-data-development-staging-hipaa A practical workflow for healthcare test data covering synthetic fixtures, de-identification limits, governed subsets, controlled debugging, access expiry, refreshes, backups, and verified deletion. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/multi-environment-cloud-architecture-aws-gcp-azure https://anqureshi.com/blog/multi-environment-cloud-architecture-aws-gcp-azure A practical guide to separating development, staging, and production across AWS accounts, GCP projects, and Azure subscriptions, including identity, networks, data, delivery, backups, and governance. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/mixpanel-vs-google-analytics-healthcare https://anqureshi.com/blog/mixpanel-vs-google-analytics-healthcare A practical comparison of Mixpanel and Google Analytics for healthcare apps across BAA scope, PHI restrictions, identifiers, consent, retention, deletion, exports, and regions. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/hipaa-vendor-checklist-analytics-monitoring https://anqureshi.com/blog/hipaa-vendor-checklist-analytics-monitoring A practical checklist for evaluating BAA scope, PHI data flow, subprocessors, retention, security, access, and incident obligations for analytics and monitoring vendors. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/healthcare-analytics-without-phi https://anqureshi.com/blog/healthcare-analytics-without-phi A practical event taxonomy and validation pattern for healthcare applications that minimizes the risk of exposing protected health information. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/healthcare-ai-vendor-selection https://anqureshi.com/blog/healthcare-ai-vendor-selection A practical engineering framework for evaluating AI services that may create, receive, maintain, or transmit protected health information. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/configure-sentry-without-phi https://anqureshi.com/blog/configure-sentry-without-phi A practical Sentry configuration guide for reducing PHI exposure across errors, requests, breadcrumbs, replay, logs, traces, alerts, and integrations. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/centralized-cloud-audit-logging-aws-gcp-azure https://anqureshi.com/blog/centralized-cloud-audit-logging-aws-gcp-azure A practical multi-cloud design for complete audit coverage, protected retention, investigation, alerting, cost control, and verification. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/best-mcp-servers-for-developers https://anqureshi.com/blog/best-mcp-servers-for-developers A practical guide to useful MCP servers for Cursor, Claude Code, and Codex, including GitHub, Playwright, Context7, Serena, security, and setup choices. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/amazon-macie-hipaa-phi-s3 https://anqureshi.com/blog/amazon-macie-hipaa-phi-s3 A practical architecture guide to using Amazon Macie to discover possible PHI in Amazon S3 while accounting for AWS BAA requirements, findings, remediation, and coverage limits. Assad Nadeem Qureshi Wed, 22 Jul 2026 00:00:00 +0500 https://anqureshi.com/blog/ai-agents-vs-rag https://anqureshi.com/blog/ai-agents-vs-rag A practical breakdown of what each actually does, when to use which, and how they combine in production. Assad Nadeem Qureshi Thu, 09 Jul 2026 00:00:00 +0500