WithMe Health unifies complex health data and achieves SOC 2 Type I and Type II certification.
Industries
Healthcare,
Medication Guidance
Tech & TOOLS
AWS Lambda, Amazon S3, Amazon RDS, AWS Step Functions, Medispan, NPPES NPI Registry, NCPDP DataQ
Teams & Services
Data Engineering, Cloud Engineering, Security & Compliance
milestones
Unified 7 health data sources on AWS, enriched claims with 3 knowledge bases, achieved SOC 2 Type I and Type II certifications
Industry
Healthcare,
Medication Guidance
Tech & TOOLS
AWS Lambda, Amazon S3, Amazon RDS, AWS Step Functions, Medispan, NPPES NPI Registry, NCPDP DataQ
Teams & Services
Data Engineering, Cloud Engineering, Security & Compliance
milestones
Unified 7 health data sources on AWS, enriched claims with 3 knowledge bases, achieved SOC 2 Type I and Type II certifications
A medication guidance company uses secure, scalable data infrastructure to consolidate claims, lab, and prescription data while meeting the security requirements of regulated healthcare markets.
The situation
WithMe Health is a medication guidance company focused on lowering healthcare spending and improving member outcomes. Its platform supports members throughout their healthcare journey and depends on access to accurate, comprehensive health data.
WithMe needed to bring together complex data sources, including claims, laboratories, and prescription data, in a way that could support efficient processing, accurate insights, and continued growth in regulated healthcare markets.
The company also needed to establish the security, documentation, and governance practices required to achieve SOC 2 compliance.
The challenge
WithMe's existing infrastructure lacked the automation and scalability needed to efficiently orchestrate multiple streams of healthcare data.
Claims data needed to be consolidated and enriched with information from external healthcare knowledge bases. The solution would also support secure handling of sensitive data while creating a foundation that could cope with the company's growth.
At the same time, WithMe needed to establish a comprehensive compliance program from the ground up and achieve both SOC 2 Type I and Type II certification.
The solution
Loka designed and implemented a microservice-based data pipeline that orchestrates multiple streams of health data and consolidates them into a scalable infrastructure.
The pipeline integrates claims, laboratory, and prescription data and enriches claims information using healthcare knowledge bases, including Medispan for NDC data, the NPPES NPI Registry for provider information, and NCPDP DataQ.
In parallel, Loka guided WithMe through the SOC 2 compliance process from a standing start. Loka helped establish the security controls, documentation, governance, and processes needed to achieve SOC 2 Type I and Type II certifications.
What we delivered
Microservice-based data pipeline
3 data sources: Orchestrated claims, laboratory, and prescription data through a scalable microservice architecture.
Healthcare data enrichment
3 knowledge bases: Integrated Medispan, the NPPES NPI Registry, and NCPDP DataQ to enrich and improve claims data.
AWS data infrastructure
4 AWS services: Built the pipeline using AWS Lambda, Amazon S3, Amazon RDS, and AWS Step Functions.
SOC 2 Type I certification
1 certification: Established the security controls, documentation, and governance required for SOC 2 Type I certification.
SOC 2 Type II certification
1 certification: Extended WithMe's compliance foundation to achieve full SOC 2 Type II certification.
The results
WithMe Health now has a scalable, compliant data infrastructure that streamlines the ingestion and enrichment of critical healthcare data. The new pipeline gives WithMe a stronger foundation for delivering medication guidance and supporting member outcomes as the company grows.
Unified health data: Consolidated claims, laboratory, and prescription data into an orchestrated pipeline.
Enriched claims: Augmented claims data with information from Medispan, the NPPES NPI Registry, and NCPDP DataQ.
Scalable infrastructure: Established a microservice-based AWS architecture designed to support continued growth.
SOC 2 Type I: Achieved certification after establishing its compliance program from the ground up.
SOC 2 Type II: Achieved full SOC 2 Type II certification, strengthening trust with partners and supporting expansion into regulated healthcare markets.
