Moses Innovations

Two to Three Hours Per Client, Down to Minutes

Michael Bainhauer, an occupational therapist, built a platform to fix a problem his entire field still has. Then he needed to know if it could actually hold real client data.

  • supabase
Start Your Success Story

Michael's Story

Michael Bainhauer is an occupational therapist. He’s spent his career working directly with patients, assessing, interpreting, helping people make real progress,  not sitting behind a keyboard. But year after year he kept hitting the same wall, and it wasn’t unique to him. Across his field, psychologists, teachers, therapists,  the assessments that guide every decision are still done on paper. A single evaluation can run 20 to 30 pages, and once it’s filled in, someone has to key all of it into a system by hand, score it, and write up the results. It’s slow, it’s tedious, and it’s exactly the kind of manual work where small errors slip through unnoticed.

He Built the Fix Himself.

Michael was sure there had to be a better way. So instead of waiting for someone to build it, he set out to build it himself. Using Lovable, an AI app-building tool, he put together a working web platform in a fraction of the time a traditional dev team would have needed. The idea was simple but ambitious: collect assessment data digitally instead of on paper, run it through a mix of established scoring algorithms and AI so nothing gets missed, and produce personalized, expert-verified reports at the other end, all while keeping every client’s records organized in one place instead of scattered across filing cabinets. Reporting that used to eat two to three hours per client, scoring, interpreting, writing, collapsed into a quick review-and-verify step measured in minutes. He built it because he understood the problem better than anyone.

The Question No AI Tool Could Answer
But once it was live, a bigger question surfaced, one Michael couldn’t answer on his own, and no AI tool could answer for him: would it actually hold up? Real clients, real sensitive health data, real growth. That’s when he brought in Rubico, not to start over, but to make sure what he’d built could stand on its own.
So Michael went looking, found Rubico’s website, and reached out. Rubico started where every good partnership should: with an honest audit, not a sales pitch.

The Challenge

Michael did everything right for the stage he was at. Rather than wait on a full development team, he used Lovable to design and ship a working version of his platform himself, a genuinely impressive result for someone with no engineering background. But building quickly raised questions no occupational therapist is trained to answer:

  • “Does this meet FERPA standards for handling student and behavioral health records?”

  • “Is client data actually secure once real people start using this?”

  • “What happens if I push a change and it breaks for a client mid-assessment?”

Michael had a platform that worked. He just didn't have anyone who could tell him whether it was compliant, secure, and safe to keep building on. That's the gap Rubico came in to close.

  • Documented Position

    FERPA compliance and security vulnerabilities were assessed, with risks identified and addressed to protect student records and client data.

  • Prioritized Roadmap

    A safer path forward was established, including a dedicated staging environment so deployments could be tested before reaching production.

  • Prioritized Roadmap

    Rubico continues to advise on UI/UX and coach Michael on building and improving the platform, helping the changes stick long-term.

How Michael and Rubico Worked Together

Rubico began with a clear, transparent technical audit — giving Michael an honest picture of exactly where the platform stood across compliance, security, and deployment workflow, and why each risk mattered. From there:

 

FERPA Compliance Remediation
Rubico resolved the compliance gaps the audit uncovered, bringing the platform in line with FERPA standards for handling student and behavioral health records.

Security Remediation
Rubico fixed the security vulnerabilities identified, closing exposure risks to the platform and its users.

A Real Staging-to-Production Workflow
Rubico set up a dedicated staging project connected seamlessly to production, replacing “every deployment is a live experiment” with a professional build-test-promote workflow.

3

Risk categories closed

2–3

Hours → Minutes Reporting time per client

20–30

Pages Per assessment, digitized

You already did the hard part

Book a call, meet the person who'll do the work, and stop guessing about what your product still needs.

Book a call with a technical expert