Freelance Developer - UK Health Data Compliance Specialist

Role Overview

We are seeking a skilled Freelance Developer to assist in re-homing the patient-data side of our existing web app, ensuring compliance with UK health data regulations. ShawScope, a nurse-led clinical service, requires your expertise to transition our app from Lovable’s managed infrastructure to our own, fully compliant setup.

Responsibilities

• Export the current Lovable project into a GitHub repository that we own, or work from a provided repository.
• Establish and configure a Supabase project (Pro tier, UK region) to manage patient records with appropriate security settings such as Row-Level Security.
• Reconnect the app's frontend to the new Supabase, replacing the existing Lovable-managed backend.
• Deploy the frontend to a suitable hosting platform (e.g., Vercel, Netlify, or Cloudflare) linked to our GitHub and Supabase, using our domain or subdomain.
• Implement security measures including HTTPS/TLS, encryption at rest, multi-factor authentication for admin logins, least-privilege access, and automated backups.
• Optionally, configure appointment email/SMS reminders with a provider that offers a Data Processing Agreement (DPA).
• Conduct end-to-end testing to ensure functionality for booking, login, records management, and photo uploads.
• Provide a concise written handover detailing hosting locations, management instructions, backup processes, and an easy-to-understand summary for CQC documentation.

Required Skills

• Experience migrating apps from no-code/low-code platforms like Lovable to self-hosted environments.
• Proficiency in Supabase, particularly with Postgres, authentication, storage, and security configurations.
• Expertise in frontend deployment using platforms like Vercel, Netlify, or Cloudflare.
• Familiarity with UK GDPR regulations, especially in handling sensitive health data.

Nice to Have

• Previous experience working in healthcare or regulated sectors.
• Ability to recommend third-party services that comply with Article 9 data requirements and provide DPAs.