Practice Better builds practice management software for health and wellness practitioners - dietitians, therapists, health coaches, functional medicine providers, and personal trainers. Founded in Toronto in 2014 by practitioners who lived the workflow pain themselves, the platform now serves over 50,000 practitioners across 70+ countries. The stack spans scheduling, telehealth video, secure messaging, EHR charting, billing, and client portals, with an AI layer and a 2023 acquisition of That Clean Life for nutrition planning.
From a security standpoint, this is a high-stakes environment. The platform handles protected health information (PHI) at scale - charting records, session notes, forms, and payment data flowing across jurisdictions with varying regulatory regimes (HIPAA, PIPEDA, GDPR-equivalent frameworks). Telehealth video and secure messaging expand the attack surface beyond a traditional web app into real-time communication infrastructure. The data security domain isn't a bolt-on here; it's structural to every feature from automations to the client portal.
For security engineers, the threat model is concrete: safeguarding sensitive health data in a multi-tenant SaaS environment where availability and confidentiality are non-negotiable. The technical domains - EHR, telehealth, AI, and data security - demand rigor around encryption, access control, secure development lifecycle, and compliance automation at a platform operating across 70 countries. No heroics required, just disciplined engineering against real regulatory and adversarial pressure.
