Specialization
Healthcare software, built for Qatar, the USA and Europe
Healthcare is where we go deepest. We have researched how digital health works in each of our core markets — the strategies, the regulators and the rules a software team has to design for — and we build to those requirements from day one.
Our research, by market
A summary of what we found in each region and how it shapes the way we build.
A centrally planned, largely public health system with a national strategy, a shared clinical record across the main public providers and in-country hyperscale cloud. Health data is 'special nature' data under Qatar's privacy law, so permission, impact assessments and local hosting decisions come first.
Market landscape
- The Ministry of Public Health's third National Health Strategy 2024–2030, 'Health for All', is built on three pillars: population health and wellbeing, excellence in service delivery and patient experience, and health-system efficiency and resilience.
- Hamad Medical Corporation runs Oracle Cerner as its clinical information system and has supported integrated care across Qatar's public sector with it since 2012. The system also connects to Primary Health Care Corporation facilities, and Qatar Biobank was integrated with it in 2023.
- AI already runs in national programmes. Since June 2024, PHCC has used Lunit INSIGHT MMG in its 'Screen for Life' breast screening programme, which Lunit describes as the Middle East's first nationwide use of AI in a national breast-screening workflow.
- Hyperscale cloud is available in the country: Microsoft opened an Azure datacenter region in Qatar in 2022 and Google Cloud launched its Doha region in 2023, so health workloads can be hosted in Qatar.
Where software and AI help
- Patient-facing apps and portals in Arabic and English that connect to established provider systems instead of creating new data silos.
- AI-assisted triage, screening support and clinical documentation that sits alongside clinicians, as the screening programme above does, rather than replacing them.
- Population-health and prevention tools that match the strategy's population-health pillar, such as chronic-condition programmes, wellness and engagement.
- Integration and data-pipeline work between providers, research institutions and analytics platforms.
- Medical-device and digital-health products: the strategy is expected to support growth in that sector.
Regulations we design for
- PDPPL — Law No. 13 of 2016
Qatar's Personal Data Privacy Protection Law, now administered by the National Cyber Security Agency. It covers consent, data-subject rights and security obligations for controllers and processors.
- Health as 'personal data of a special nature'
Health data is a special category under the PDPPL. You need permission from the regulator before you process it, so the permission step belongs on the project plan, not just in the privacy policy.
- PDPPL regulatory guidelines (DPIA, records, breach notice)
The regulator's guidelines require a data privacy impact assessment before new processing of special-nature data, records of processing, privacy by design, and breach notification to the regulator and affected individuals within 72 hours. Fines can reach QAR 5,000,000.
- Ethics of AI in health research
MOPH's 2024 National Health Research Ethics Workshop, run with the NCSA, Qatar University and HBKU, focused on AI in health research, data management and national policy. Any AI work that touches research data should expect ethics review.
How we build here
- 01Host in Qatar by default: use the in-country Azure or Google Cloud region for production data, backups and logs, and record each data flow that leaves the country.
- 02Plan the PDPPL steps up front: data mapping, a DPIA before any special-nature processing, and the regulator permission. All three go on the delivery timeline from week one.
- 03Build consent and data-subject rights into the product: granular consent, easy withdrawal, and access, correction and erasure workflows. These are product features, not admin tasks.
- 04Write an append-only audit trail for every read and write of health records, with role-based access and encryption in transit and at rest.
- 05Ship bilingual Arabic and English from the start, including RTL layouts, and run on our Doha office's time zone for workshops and UAT with local stakeholders.
Healthcare and wellbeing work
Ealthiness
Health & fitness app
A mobile fitness companion — guided exercises, live run tracking, mood graphs, and daily activity insights that keep users moving and coaches connected.
A Place For Mom
Healthcare platform
A leading US senior-care platform serving 300k+ customers — connecting families with assisted living and memory-care providers across the country.
Related services
AI in Healthcare
Healthcare AI designed around clinical workflows, privacy and accuracy — from triage support to remote monitoring.
Mobile App Development
iOS and Android apps with React Native and Expo — fast, polished and ready for the App Store and Google Play.
RAG Development
Retrieval-augmented generation that answers from your documents, cites its sources and respects who is allowed to see what.
Custom Software Development
Bespoke platforms and internal tools built around how your business actually works.
Healthcare articles
Healthcare Software Development in Europe: GDPR, MDR and the AI Act
Europe stacks several regimes on top of GDPR. Here is how MDR, the AI Act, the European Health Data Space, DiGA and DTAC shape healthcare software in 2026.
7 min read
Healthcare Software Development in the USA: HIPAA, FHIR and AI
HIPAA is only the start. A practical map of the US rules that shape healthcare software in 2026, from FHIR mandates to FDA's view of clinical AI.
6 min read
Healthcare Software Development in Qatar: An Engineering Guide
Qatar's health system is centrally planned, already digitised and investing in AI. Here is what a software team has to design for before writing the first line of code.
6 min read
Machine Learning for Prioritisation in Healthcare Services
Some of the safest, most useful AI in healthcare does not diagnose anything. It helps busy teams decide which request, referral or patient to look at next.
5 min read
Building HIPAA- and GDPR-Compliant AI for Healthcare
Compliance is a design input, not a final review. The architectural decisions that make healthcare AI defensible under HIPAA, GDPR and the EU AI Act.
5 min read
How to Implement AI in Healthcare Safely
AI in healthcare succeeds on trust, not model size. A practical approach to choosing use cases, protecting data, validating output and fitting AI into clinical workflows.
5 min read
Sources
Research summary as of October 2026. This is not legal advice; regulations change, and every project starts with a review against current rules.
- QNA — MOPH launches National Health Strategy 2024–2030 platform
- The Peninsula — National Health Strategy and the medical devices sector
- Hamad Medical Corporation — Oracle Cerner EHR integration
- Lunit — AI in Qatar's national breast cancer screening programme
- QNA — MOPH discusses ethics of AI in health research
- NCSA — Personal Data Privacy Protection Law (Law No. 13 of 2016)
- Clyde & Co — Regulatory guidelines on Qatar's PDPPL
- Microsoft — First datacenter region in Qatar
- Google Cloud — New cloud region in Doha
- HHS — HIPAA Security Rule
- Federal Register — Proposed HIPAA Security Rule (6 Jan 2025)
- Fierce Healthcare — HIPAA Security Rule final action timeline
- HHS — HIPAA and cloud computing
- HHS — HIPAA Breach Notification Rule
- FTC — Health Breach Notification Rule
- Washington AG — My Health My Data Act
- ASTP/ONC — Information blocking disincentives final rule
- ASTP/ONC — HTI-1 final rule
- HHS — HTI-5 proposed rule
- CMS — Interoperability and Prior Authorization final rule (CMS-0057-F)
- FDA — Clinical Decision Support Software guidance
- FDA — Final guidance on PCCPs for AI-enabled device software
- FDA — AI-enabled device software functions: lifecycle draft guidance
- EUR-Lex — GDPR (Regulation (EU) 2016/679)
- EUR-Lex — AI Act (Regulation (EU) 2024/1689)
- EUR-Lex — Digital Omnibus on AI (Regulation (EU) 2026/1744)
- EUR-Lex — Medical Device Regulation (EU) 2017/745
- European Commission — MDCG guidance (incl. MDCG 2019-11)
- European Commission — European Health Data Space Regulation
- German federal services portal — DiGA directory application
- NHS Innovation Service — Updated DTAC form and guidance
- NHS — Complying with DCB0129/DCB0160 clinical risk standards
- Fedlex — Swiss Federal Act on Data Protection
Building a healthcare product?
Tell us your market and what you want to build. We'll come back with the regulatory questions to answer first and a plan to get there.
Email us