> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://blueprint.ziro.health/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://blueprint.ziro.health/_mcp/server.

# Recommended Tool Stack

## Design

| Tool             | Use Case                                  | Health-Specific Consideration                                   |
| ---------------- | ----------------------------------------- | --------------------------------------------------------------- |
| **Figma**        | UI/UX design, prototyping, design systems | Health design system templates available, accessibility plugins |
| **Framer**       | Marketing sites, landing pages            | HIPAA considerations for healthcare marketing                   |
| **UsabilityHub** | Quick user testing                        | Recruit health-specific participants                            |
| **UserTesting**  | Moderated/unmoderated testing             | Healthcare panel available                                      |

## Development

| Tool                     | Use Case                    | Health-Specific Consideration   |
| ------------------------ | --------------------------- | ------------------------------- |
| **React / React Native** | Cross-platform mobile + web | Health UI component libraries   |
| **Swift (iOS)**          | Native iOS health apps      | Apple HealthKit integration     |
| **Kotlin (Android)**     | Native Android health apps  | Health Connect integration      |
| **Python**               | Backend APIs, ML models     | FHIR client libraries available |
| **PostgreSQL**           | Relational database         | HIPAA-eligible on major clouds  |

## Compliance & Security

| Tool                          | Use Case                                |
| ----------------------------- | --------------------------------------- |
| **Drata / Vanta**             | Automated SOC 2 compliance              |
| **Snyk**                      | Dependency vulnerability scanning       |
| **CrowdStrike / SentinelOne** | Endpoint detection and response         |
| **AWS Audit Manager**         | HIPAA compliance evidence collection    |
| **1Password / LastPass**      | Enterprise password management with MFA |

## Cloud Platforms

| Platform  | Health-Specific Services                                           |
| --------- | ------------------------------------------------------------------ |
| **AWS**   | HIPAA-eligible, HealthLake for FHIR, Comprehend Medical for NLP    |
| **GCP**   | HIPAA-eligible, Healthcare API for FHIR, AutoML for health         |
| **Azure** | HIPAA-eligible, Azure API for FHIR, Microsoft Cloud for Healthcare |

## Analytics & Monitoring

| Tool                     | Use Case                                              |
| ------------------------ | ----------------------------------------------------- |
| **PostHog**              | Product analytics (self-hosted option for compliance) |
| **Datadog**              | Infrastructure monitoring and observability           |
| **Sentry**               | Error tracking and performance monitoring             |
| **Amplitude / Mixpanel** | Product analytics and user behavior                   |

## Testing & QA

| Tool                | Use Case                        |
| ------------------- | ------------------------------- |
| **Playwright**      | End-to-end browser testing      |
| **Detox**           | Mobile app E2E testing          |
| **OWASP ZAP**       | Security vulnerability scanning |
| **LoadRunner / k6** | Performance and load testing    |