VirtualClinic
Cloud Platform
A high-availability, security-first Three-Tier Clinical Cloud Platform designed for the 2026 Polish and EU medical markets, built on a robust AWS and Aiven foundation.
Security & Compliance First
Medical data requires uncompromising security. Moving beyond simple hosting, the challenge was to architect a three-tier system that satisfies Polish 2026 mandates (KSeF) and EU RODO (GDPR) regulations through zero-knowledge encryption and strict data isolation.
Three-Tier Clinical Cloud
An enterprise-grade architecture utilizing AWS for global routing, perimeter security, and serverless compute, paired with Aiven for mission-critical managed PostgreSQL. The frontend is decoupled and served via AWS Amplify for optimal performance.
- enhanced_encryption Zero-Knowledge E2EE (RSA-OAEP 2048)
- settings_suggest Fully Automated CI/CD with ECR & Fargate
Technical Cloud Infrastructure
Deterministic data flow across a hardened AWS perimeter.
1. Routing & DNS
AWS Route 53 manages the apex and API subdomains with failover policies. VPC networking ensures isolated traffic flow.
2. Perimeter Security
ALB handles SSL termination via ACM. IAM policies and CloudWatch monitoring enforce the least-privilege principle.
3. Compute & CI/CD
ECS Fargate runs hardened containers pulled from ECR. AWS Amplify serves the React frontend with global CDN edge-caching.
4. Data & Compliance Layer
Aiven for PostgreSQL
Mission-critical data isolation using multi-tenant tenant_id patterns on a managed, high-performance Aiven cluster.
Encryption & Secrets
AWS Secrets Manager and KMS handle P1 certificates and KSeF tokens. RSA-OAEP private keys remain on-device in IndexedDB.
Observability
CloudWatch Logs and Metrics provide real-time auditing and automated scaling triggers based on platform load.
Technical Stack
| Category | AWS / Aiven Service |
|---|---|
| Frontend | AWS Amplify |
| Compute | ECS Fargate + ECR |
| Database | Aiven for PostgreSQL |
| Security | ACM + IAM + KMS |
| Secrets | AWS Secrets Manager |
| Networking | Route 53 + ALB + VPC |
Compliance Standards
- verified_user Zero-Knowledge E2EE (Zero Private Key Leak)
- account_balance Polish 2026 Mandate: KSeF Ready
- gavel EU RODO / GDPR compliant by design
Project Availability
The VirtualClinic platform is currently operational for select medical institutions in the EU. Technical cloud documentation is available upon request.