Skip to content
Of Ash and Fire Logo

Our Blog

Insights, updates, and knowledge sharing from our team

Latest Articles

How to Build HIPAA-Compliant Audit Trails in Custom Healthcare Software

How to Build HIPAA-Compliant Audit Trails in Custom Healthcare Software

2026-03-13

A developer guide to implementing HIPAA-compliant audit trails: what events to log, immutable storage patterns, retention policies, and real-time monitoring.

Read More
HIPAA Business Associate Agreements for Software Developers: What You Need to Know

HIPAA Business Associate Agreements for Software Developers: What You Need to Know

2026-03-13

When is a software developer a HIPAA business associate? What must be in a BAA? Covers subcontractor chains, SaaS requirements, breach notification, and...

Read More
FHIR and HL7 Integration Guide for HIPAA-Compliant Healthcare Applications

FHIR and HL7 Integration Guide for HIPAA-Compliant Healthcare Applications

2026-03-13

Technical guide to integrating FHIR R4 and HL7 v2 in healthcare applications. Covers Epic/Cerner APIs, SMART on FHIR, message parsing, and HIPAA-compliant...

Read More
HIPAA-Compliant API Development: Securing PHI in Transit and at Rest

HIPAA-Compliant API Development: Securing PHI in Transit and at Rest

2026-03-13

Learn how to build HIPAA-compliant APIs with proper PHI encryption, authentication patterns, and audit logging. Covers the 2026 Security Rule mandate for...

Read More
How Much Does Custom Software Development Cost in 2026? Real Pricing, Models, and What Drives the Budget

How Much Does Custom Software Development Cost in 2026? Real Pricing, Models, and What Drives the Budget

2026-03-13

Transparent guide to custom software development costs in 2026. Covers pricing by project type ($25K-$1M+), pricing models, cost drivers, hidden costs, and...

Read More
15 Red Flags When Hiring a Software Development Company (And What to Look for Instead)

15 Red Flags When Hiring a Software Development Company (And What to Look for Instead)

2026-03-13

15 warning signs that a software development company may not deliver. For each red flag, learn why it matters and what to look for in a quality development...

Read More
HIPAA-Compliant Cloud Architecture: AWS vs Azure vs GCP for Healthcare Apps

HIPAA-Compliant Cloud Architecture: AWS vs Azure vs GCP for Healthcare Apps

2026-03-13

Compare AWS, Azure, and GCP for HIPAA-compliant healthcare applications. Covers BAA coverage, architecture patterns, cost comparison, and the 2026...

Read More
HIPAA Security Testing: Penetration Testing and Vulnerability Scanning for Healthcare Apps

HIPAA Security Testing: Penetration Testing and Vulnerability Scanning for Healthcare Apps

2026-03-13

The 2026 HIPAA Security Rule mandates annual penetration testing. Learn methodology, scope, common healthcare vulnerabilities, and compliance documentation...

Read More
25 Questions to Ask a Software Development Company Before You Sign a Contract

25 Questions to Ask a Software Development Company Before You Sign a Contract

2026-03-13

25 essential questions organized by category: technical expertise, process, domain knowledge, commercial terms, and post-launch support. Includes what good...

Read More
How to Choose a Software Development Company in 2026: The Enterprise Buyer's Complete Guide

How to Choose a Software Development Company in 2026: The Enterprise Buyer's Complete Guide

2026-03-13

The definitive guide to evaluating and selecting a custom software development partner. Covers evaluation criteria, pricing models, red flags,...

Read More
The AI-Generated Code Quality Crisis: What Engineering Leaders Must Know in 2026

The AI-Generated Code Quality Crisis: What Engineering Leaders Must Know in 2026

2026-03-08

AI coding assistants boost speed but introduce 1.7x more bugs and up to 41% more technical debt. Learn how engineering leaders can maintain code quality...

Read More
Testing AI-Generated Code: Why Standard Testing Falls Short

Testing AI-Generated Code: Why Standard Testing Falls Short

2026-03-08

AI-generated code requires different testing strategies. Learn why standard test suites miss AI-specific issues and how to build comprehensive testing for...

Read More