Neurotech · Signal processing
Brain maps from raw EEG in the cloud, with HIPAA safeguards built in from day one.
A cloud brain-mapping (qEEG) platform for neurofeedback practitioners. Upload a recording and it is cleaned, measured against normative data and turned into a brain-map report to share with the client. I designed and built all of it, from the signal processing to the reports.
- Client
- Neurotech platform
- Role
- Architect and engineer
- Period
- 2025 – 2026
- Focus
- Built end to end
- frequency bands mapped across the scalp
- 5frequency bands mapped across the scalp
- diagnostic claims, by design
- 0diagnostic claims, by design
The problem
Most tools in this space are desktop software. Recordings sit on individual laptops, reports are put together by hand, and it's hard to say who has looked at a client's data.
Brain recordings and client details are protected health information, and the product had to be useful without drifting into medical-device territory, which would bring regulatory obligations a small company can't carry.
What I built
- 01
Scope written down first
A written scope that keeps the platform an assessment and training tool, not a diagnostic one. It drives everything downstream, from report wording to which features get built.
- 02
The neuroscience
Each recording is cleaned of artifacts, then measured the way research labs do: power in each frequency band across the scalp, left–right asymmetry, and how strongly regions work together (coherence and phase-lag connectivity), each compared against normative data so a practitioner sees what stands out.
- 03
Brain maps practitioners stand behind
Automated reports with scalp maps for every band and connectivity graphs that only draw the links that are statistically unusual. The interpretation is written by the practitioner, not generated by AI, and every report says it isn't a medical diagnosis.
- 04
HIPAA by design
Patient data kept only in services covered by a business associate agreement, access limited by role, and every access to patient data logged to an archive that can't be altered or deleted for six years.
- 05
Cloud that scales with the work
Processing runs on Google Cloud as queued background jobs, so a batch of recordings never slows the app down, with the whole setup scripted so it can be audited and rebuilt.
The result
- Fully working end to end, from recording upload to finished brain-map report.
- The compliance and scope decisions are made and documented up front, so onboarding a clinic doesn't start with a security review it can't pass.