Building the Medicaid Compliance, Billing, and Agency Operations Platform That Consolidates 17 Fragmented Tools Into One SaaS for a US Disability and Home Health Franchise

Foundation and compliance architecture: tenant-aware platform core, HIPAA controls, and agency configuration layer

The first architectural decision set the constraint for everything that followed: tenant data had to be isolated at the schema level and encrypted at rest before any module could run on top.

Ideas2IT built PostgreSQL with tenant-aware schemas, RLS policies, and KMS encryption as the data layer, deployed on AWS EKS behind CloudFront and WAF, with Amazon Cognito handling MFA and role federation. On that foundation, the agency configuration layer established the compliance operating model: HIPAA controls, RBAC role gates, state document matrices, and audit trails baked in from the start.

Participant profiles, clinical plans, employee onboarding, and service authorization tracking completed the first usable agency instance.

This phase produced

• Tenant-aware PostgreSQL schema with RLS and KMS encryption
• Primary operational data store with row-level tenant isolation AWS EKS deployment with CloudFront, WAF, and Cognito
• Multi-tenant agency setup with positions, shift templates, and GPS rules Participant management module
• Clinical profiles, diagnoses, guardians, BSPs, and client group assignment Employee management module
• Onboarding, credentialing, availability, and client group assignment Service authorization tracking

Daily operations engine: GPS-gated shift execution, auto-generated Daily Service Logs, and immutable care records

The operational design decision in this phase was architectural, not workflow: the Daily Service Log had to be a consequence of shift execution, not a separate documentation task.

Ideas2IT built the shift execution engine as a continuous chain from schedule through clock-out. GPS validation gates clock-in and enforces compliance before a shift starts. Tasks, routines, ADL/IADL charting, MAR entries, behavior tracking, and incident flags run as structured in-shift events.

Clock-out is coverage-gated with OT detection and payroll period validation. At clock-out, the platform auto-generates the DSL from all recorded shift events, producing an immutable per-client record. Scheduling runs with ratio enforcement and coverage rules. The communication layer routes shift alerts, escalations, and notifications via SQS, SNS, and Twilio throughout.

‍

This phase produced:

• GPS-validated clock-in with compliance gate
• Location-enforced shift start with pre-shift compliance check Scheduling and workforce management module
• Structured in-shift event capture with attestations Medication administration record and behavior tracking module
• Critical, injury, and medication-error workflows with follow-up routing Auto-generated Daily Service Log
• Immutable per-client DSL produced at clock-out from in-shift events Communication and notifications layer
•  SMS, email, push alerts, and shift escalations via SQS, SNS, and Twilio

Revenue and franchise scale: Medicaid billing automation, payroll sync, and multi-agency oversight layer

The third phase connected the operational record chain to revenue and governance. Authorization and billing readiness ran utilization tracking and pre-bill validation before exporting EDI 837 claims to Medicaid.

Payroll operations pulled from the immutable timecard and DSL records, producing approved-hour exports to Paylocity and ADP with cost-center allocation. The QA and audit readiness layer ran DSL gap detection and overlap checks across all agency records, generating survey-ready defensibility scores.

The franchise oversight layer provided platform-wide visibility across all tenant agencies. Reporting and analytics surfaced real-time operational dashboards. The integration layer connected Therap, QuickBooks, and calendar systems via API connectors and EventBridge.

‍

This phase produced:

• Authorization, utilization tracking, and pre-bill validation engine
• Auth tracking, unit consumption checks, and pre-billing validation before EDI export EDI 837 claims export and Medicaid billing integration
• Claims routing to Medicaid and state clearinghouse systems Payroll operations module
• Platform-wide multi-agency visibility across clients, staff, compliance, and finances Reporting, analytics, and real-time dashboards
• Operational and analytical views for agency and franchise leadership External integrations
• Quality review, anomaly detection, and predictive workflows (advanced phase)