H
Hamza Mouzam.
AboutServicesProcessPortfolioCase StudiesClients
Hire me
AboutServicesProcessPortfolioCase StudiesClientsHire me
H
Hamza Mouzam.
© 2026
ServicesCase studiesContactPrivacy
H
Hamza Mouzam.
AboutServicesProcessPortfolioCase StudiesClients
Hire me
AboutServicesProcessPortfolioCase StudiesClientsHire me
All case studies
CS-03Lumen Health2024

HIPAA-aware patient portal & EHR sync

Engineered a secure patient portal plugin with OAuth 2 to a third-party EHR. Wrote a typed REST layer and a full PHPUnit + Cypress test pipeline.

Role
Plugin lead
Duration
11 weeks
Year
2024
PHP 8.2OAuth 2REST API
Uptime
99.99%
Audit
1st pass
Tests
92%
OverviewProblemSolutionStackResultsShowcase
01Overview

Overview

Lumen needed a secure patient portal that synced with a third-party EHR over OAuth 2, deployed as a self-contained WordPress plugin.

02The problem

The problem

The previous integration was a fragile cron job pushing CSVs nightly. PHI handling was opaque, audit logs were incomplete, and the security review had failed twice.

03The solution

The solution

  • OAuth 2 client with token rotation and per-tenant scopes.
  • Typed REST layer with PHP 8.2 enums and value objects.
  • Audit log service writing append-only events to an isolated table.
  • PHPUnit + Cypress test pipeline running on every commit.
04Tech stack

Tech stack

PHP 8.2WordPress REST APIOAuth 2PHPUnitCypressGitHub Actions
05Outcome

Outcome

The plugin passed the external HIPAA audit on first review and has run for nine months without a single PHI leak incident.

06Measured results

The numbers that matter.

Uptime
99.99%
Audit
1st pass
Tests
92%
07Showcase

Selected screens.

screen.01
screen.02
screen.03
screen.04
Previous
CS-02
A Gutenberg-native editorial CMS
Next
CS-04
47-site multisite on a single composer platform
Booking Q3 — 2 slots remaining

Let's engineer something that scales.

Tell me about your product, your traffic, and the wall you've hit. I reply within 24 hours.

Or book a call instantly if you prefer.

Prefer email? m.hamza.mouzam@gmail.com
H
Hamza Mouzam.
© 2026
ServicesCase studiesContactPrivacy