Back to infrastructure

Ayla

Regulatory-Compliant Medical Platform

A high-availability medical device platform supporting dementia treatment, featuring multi-cloud infrastructure, automated pipelines, cross-platform web and mobile deployments and strict regulatory requirements.

My Role

Tech Lead & Scrum Master

Stack

Kubernetes, Ruby on Rails, Flutter, Terraform, GCP, OTC

Impact

Multi-Region Data Residency • ISO 27001 Compliant • Single-Click IaC Deployment

Interactive Gallery — Select or swipe to explore

System Architecture Log

Traffic Flow
Service Node
graph TB %% Direction and Layout direction TB subgraph Shared_Ops [DevOps & CMS] I[GitHub Actions CICD]:::traffic J[Terraform IaC]:::traffic K[Squidex CMS]:::node end subgraph Frontend_Layer [Omni-Channel] A[Flutter Web / Mobile]:::traffic B[Bunny CDN / Edge Storage]:::node end subgraph UK_Region [GCP] G[Cloud Run Containers]:::node H[Cloud SQL]:::node end subgraph EU_Region [Open Telekom Cloud] D[NGINX Ingress]:::node C[K8s Cluster]:::node F[Object Storage]:::node E[PostgreSQL RDS]:::node end %% Connections A <--> B I -->|Fastlane| A J -->|Provision| G J -->|Provision| C B <-->|UK Traffic| G B <-->|EU Traffic| D D --> C G <--> H C <--> E C --- F G <--> K C <--> K %% Styles classDef traffic fill:#2563eb,stroke:#3b82f6,color:#fff classDef node fill:#16a34a,stroke:#22c55e,color:#fff

PROJECT LOG // GOVERNANCE // CLOUD ORCHESTRATION

The Engineering Story

As Tech Lead for Ayla, I was responsible for architecting a platform that met the rigorous safety and security standards of a certified medical device. This required a "Security-by-Design" approach, balancing high availability (SLA) with rigid data residency requirements across the UK and EU.

Multi-Cloud Infrastructure & IaC

To satisfy GDPR and local health data regulations, I architected a dual-cloud strategy: Open Telekom Cloud (OTC) for European users and GCP for the UK. Using Terraform, I codified the entire infrastructure, enabling us to spin up identical, audit-ready Kubernetes clusters or Cloud Run environments in minutes. This automation was critical for maintaining the "Release-Pre-Release" protocols required for medical certification.

Full-Stack Delivery & Automation

The platform featured a Flutter frontend for Web, iOS, and Android, all managed through automated CICD pipelines. I implemented a layered automation strategy, combining GitHub Actions for web deployments and server-side logic with Fastlane for mobile app store distribution. The backend was a high-performance Ruby on Rails API, architected as a stateless "mini-service" to ensure horizontal scalability within Kubernetes. I also integrated Squidex CMS to empower non-technical colleagues to manage content without compromising the system's core integrity.

Leadership & Compliance

Beyond the code, I served as Scrum Master and Product Owner, leading sprint planning, retro and demos. I worked closely with regulatory partners and personally oversaw the creation of DPIAs, Cyber Essentials certification, and the path to ISO 27001 compliance. In the absence of a dedicated IT department, I managed the MDM systems and sysadmin duties, ensuring that every layer of the organization met the strict regulatory bar.