Introduction
Healthcare software, built by people who've lived inside it.
Practice management, EHR integration, HIPAA-grade engineering, and a proven playbook for taking over and stabilizing products already in flight.
Introduction
Healthcare software, built by people who've lived inside it.
Practice management, EHR integration, HIPAA-grade engineering, and a proven playbook for taking over and stabilizing products already in flight.
Introduction
Healthcare software, built by people who've lived inside it.
Practice management, EHR integration, HIPAA-grade engineering, and a proven playbook for taking over and stabilizing products already in flight.
Who we are
Two operators who Built a healthcare software company to a $1.1B exit, then started over on our own terms.
Fady Soliman
CEO & Co-Founder
Former Director of IT at Therapy Brands. Owned DevOps and the cloud environment for a national practice-management platform. Certified HIPAA Professional who has audited hospitals.
Shyam Bhalala
COO & Co-Founder
Former Director of Software Engineering at Therapy Brands. Led a 100+ person engineering organization shipping practice management, RCM, and clinical software to thousands of practices.
We met inside a healthcare software company, helped build it to a KKR exit, and founded XOA to do the work the way we always wished it had been done: deep expertise, no games, and clients we keep for life.
XOA LLC
A senior engineering firm that grows by reputation, not by advertising.
Client retention
Every client we have signed since founding is still a client today.
We are referral only
We don't advertise. Every engagement comes from a client or partner who vouched for us.
Quality over quantity
We are very selective about who we do business with. Fewer clients, deeper relationships, better software.
Where we are
US-based leadership. Hybrid delivery. One point of contact on your clock.
Fady Soliman
CEO & Co-Founder · Client lead
Your primary point of contact. Central time, works East Coast hours.
Shyam Bhalala
COO & Co-Founder · Operations & delivery
Runs delivery, scrum process, quality, and staffing across teams.
Gaurang Pravin
Chief Technology Officer
Architecture, code review, AI systems. Deep healthcare background.
Engineering teams
Scrum teams that scale with you
Front-end, back-end, mobile, QA, UX, DevOps, sized month to month. Overlapping hours with your team, every day.
We work in your environment. Your AWS, your GitLab, your accounts. You own every line and every credential.
Daily overlap, not tickets in a queue. Standups on your time zone with a US lead who has a direct line to the team.
We don't host, and we don't MSP. We build and run your software with you, not lock you into ours.
Healthcare experience
More than half of what we build is for clinics.
What we've shipped
- Practice management & scheduling platforms used by thousands of providers
- Revenue cycle management — claims, ERA/835, X12, eligibility. Among the first RCM platforms in the therapy space.
- AI patient intake — photograph ID, insurance card, and referral; data parsed in seconds, 17 forms pre-filled, one signature, written back to the EMR
- Clinical prognosis & outcomes tooling on the back end
- Front-end modernization over legacy EMRs: build the workflow layer clinics love, then retire the vendor underneath
EHR / EMR integration
We've written to EHRs every way there is to write to them.
EHR vendors are hard to work with. We know, because we used to be one. We've learned how to get a yes, and how to get around a no.
Vendor APIs
Negotiated paid read/write access where it exists, including one EHR that took eight weeks of persistence and $6,500 in setup to unlock. We know the playbook, and we're not shy about using it.
Direct & VPN access
Read-only database and VPN connections to legacy systems for reporting, syncing, and analytics when there's no API at all.
Front-door write-back
Authenticated headless-browser sessions that fill EHR forms dynamically, with audit trails and retry logic. The same pattern Scrivas relies on today, and a layer we can own, harden, or rebuild.
HIPAA · SOC 2 · Security
Compliance isn't a checkbox for us. It's written into the contract.
HIPAA by default
Our MSA ships with BAA and HIPAA language built in. We know what we're liable for and what you're liable for before the first sprint. Led by a former Certified HIPAA Professional who has audited hospitals.
SOC 2-aligned engineering
Least-privilege access, audit logging, change management, incident response, and vendor controls, so your platform is audit-ready when enterprise buyers ask.
PHI handling
Encryption in transit and at rest, environment segregation, no PHI in logs, controlled LLM data flows and retention policies, and key management done properly.
Cloud hardening
AWS and Azure security baselines, infrastructure as code, secrets management, backup and disaster recovery, and monitoring that actually pages someone.
What we heard
A product that's excellent when it works, and needs to work every time.
The product
- Web, iOS, and Android, with encounters that move across devices
- AWS · React front end · Python back end · Flutter mobile · LLM transcription and note generation
- Front-door EHR integration live for Practice Fusion and athenahealth; eClinicalWorks next
- Ideal customer: small clinics and therapy practices that want simple, not enterprise
What matters now
Beta physicians are ready to bring their whole clinic on. They need it to work the same way every day.
A run rate the business can plan around, with requirements agreed before they are billed.
The integration layer needs a long-term owner and a clear build-vs-license decision.
No in-house engineering team means you need a firm that behaves like one.
Our playbook
Taking over someone else's code is what we do most.
Nine of ten XOA engagements began by inheriting a product from another team. Nobody wants to let you in their house. We have a way in that keeps everyone calm and the product running.
Open the hood
- Read-only access to GitLab, docs, AWS
- Architecture map and risk register
- Honest verdict: solid, salvageable, or house of cards
Stabilize
- Observability: logging, error tracking, alerting
- Reproduce and fix the top defects
- Automated regression, smoke tests, release process
Take ownership
- Knowledge capture from the incumbent team
- Credentials and environments under your control
- Gradual handover, zero downtime for beta users
Scale & build
- Hardened, auto-scaling AWS footprint
- Roadmap: eCW, offline capture, post-visit edits
- Sales-ready demo environment your team can trust
We come in as an extension of your team. Your product owner decides what; we handle how. And we report on it in a way your board can read.
Engagement models
You set the budget. We right-size the team.
Stabilization SOW
Fixed scope, fixed price, milestone billing. One goal: production stable, scalable, and sales-ready. You pay when milestones land.
Best for: getting to stable fast.
Dedicated team
A right-sized scrum team that's yours: lead, full-stack, mobile, QA, with UX and DevOps flexed in as needed. A predictable monthly run rate you can plan around.
Best for: ongoing support, maintenance, and roadmap delivery.
Time & materials
Hourly access to specialists (UX, security, DevOps, data) for the two months you need them, not the twelve you don't.
Best for: spikes and specialists.
You pay for delivered work, never for idle resources.
Requirements agreed before we bill against them.
Add or remove roles as the roadmap changes.
Sprint reports, bug burn-down, and executive summaries.
Working with XOA
We do the work. Your team takes the stage.
We don't show off. We build it, hand it to you on a silver platter, and make sure the people who run Scrivas look brilliant presenting it.
- A US point of contact on East Coast hours, with a direct line into the team
- Your product owner sets priorities; we translate them into a plan and ship it
- Everything lives in your accounts: code, cloud, credentials, documentation
- Weekly status, sprint demos, and reports you can forward to the board unedited
- Dummy-proof UX, because physicians want simple and they won’t tolerate friction
What we don't do
Managed services or helpdesk. On-site implementations and change management. Hosting your product on our infrastructure. We stay focused on building and running great software with you.
Client for life
Every client we've ever signed is still a client. Average relationship: five to eight years. We'd rather turn down work than take on a marriage that won't last.
Beyond the engagement
Doors we can open together.
We spend our days inside clinics that are deciding, right now, how they'll handle documentation. A stable Scrivas is something we'd be proud to introduce.
59 clinics we serve today
Independent practices and multi-site groups across occupational medicine, orthopedics, therapy, and radiology, each making its own scribing decision.
Investor relationships
Private equity and angel partners who own hospital and clinic brands, including one network of roughly 70 hospitals in California.
Partner & white-label
When clients ask us to build AI documentation from scratch, we'd rather bring them a proven platform. Scrivas could be that platform.
Next steps
From introduction to a stable platform.
- 1Today
Introductions and questions. Get to know each other. This is a marriage, not a transaction. Sign NDA and BAA.
- 2Access
Read-only GitLab, documentation, and AWS access once the migration completes.
- 3Assessment
Architecture, stability, security posture, and the EHR-layer build-vs-license analysis.
- 4Proposal
Findings, a stabilization SOW, and team options sized to your budget.
- 5Stabilize
Ship confidence to your beta physicians. Then hand sales the green light.
Let's talk