EdTech · AI product · UK
OneFitsEach
One worksheet in, a version for every pupil out.
Education · UK · Co-founder & CTO
- Built end to end
- UK GDPR
Read the case study
Clients in Canada · US · UK
I build software for sensitive data, and make sure it passes the security review.
I'm David Miller, a senior engineer and fractional CTO for health, neurotech and education companies. I take products from idea to launch, take over apps built by agencies, and roll out AI that keeps patient and student data inside your agreements. You deal with me from first call to launch.
Product builds · Fractional CTO · AI for regulated teams · Audits
Where I usually come in
- You need a product built, and the data in it is sensitiveFor example: OneFitsEach
- You've inherited software you don't fully trustFor example: a health app taken in-house
- Your team wants AI, but the data can't leave your controlFor example: AI for a HIPAA-covered team
- You need senior technical judgement, not another hireFor example: six years as co-founder and CTO
Something else involving sensitive data? Tell me about it.
Case studies
Selected work
Brain signals, patient records, children's schoolwork and public-sector intelligence data. Each is a real system I designed and built, took over and made safe, or led the team that built. Health and neurotech clients aren't named, for their privacy; the work is described exactly as built.
Neurotech · Real-time systems
Real-time neurofeedback, rebuilt
A neurofeedback system rebuilt from the ground up, so feedback keeps pace with the brain.
Neurotech · US · Lead engineer
- Real-time engine in Rust
- Feedback tuned to each client
Read the case study
Digital health · HIPAA
HIPAA platform takeover
Bringing a health app in-house from its agency, and making it safe to grow.
Consumer digital health · US · Technical lead
- Agency handover
- HIPAA Security Rule review
Read the case study
Platform engineering · Azure
Internal app platform
Internal tools staff can build and launch, with IT still deciding who sees them.
Health sector · US · Platform architect
- Live the next day
- Security enforced by the platform, not each app
Read the case study
Government · Machine learning
Intelligence platforms for public safety
Spotting coordinated hostile activity in live social media, at a volume no analyst team could read.
Public sector · Co-founder & CTO
- Public-sector intelligence
- Detects coordinated campaigns
Read the case study
Services
Ways to work together
Have your product built, have a senior technical lead on call, bring in AI safely, or start with an audit. You work with me directly in all four.
Fixed scope or monthly
Product build
I take your product from idea to launch myself: the app, the AI, the data and the cloud underneath. One engineer who has built every layer, so nothing falls between teams.
Founders and teams who need a product built, not just advice.
What's includedProof: Real-time neurofeedback, rebuilt end to end- Web and desktop apps, from first screen to launch
- AI features and data processing that hold up with real users
- Device and real-time software when hardware is involved
- Cloud infrastructure in your accounts, with privacy built in
Monthly retainer
Fractional CTO
Senior technical leadership without a full-time hire. I own the architecture, the roadmap and the hard calls, and I still write the code.
- Architecture, roadmap and build-vs-buy decisions
- Hands-on engineering on the critical path
- Vendor, agency and contractor oversight
- Answers for investors' and customers' security questions
Founders and operators who need one accountable technical owner.
What's includedProof: Six years as co-founder and CTO, leading engineers and data scientistsFixed scope
AI for regulated teams
Let your staff use AI on real work without patient or student data ending up somewhere it shouldn't. Set up under your existing agreements, connected to the tools they already use.
- A business-grade AI assistant (Claude, OpenAI or Gemini) covered by your HIPAA or GDPR agreements
- Connected to Microsoft 365 and your internal systems
- Company sign-in and managed devices
- A safe place to run the internal AI tools your team builds
Health, wellness and education teams that handle patient or student data.
What's includedProof: AI for a HIPAA-covered team2 weeks · fixed price
Codebase audit
Inherited an app from an agency or a team that has moved on? I'll tell you what you actually own, what's at risk, and what to fix first.
- Architecture and code-quality review
- Security and compliance gaps, ranked by risk
- Hosting and release process review
- A 90-day plan your team can follow, or I can carry out
Companies taking ownership of software someone else built.
What's includedProof: Bringing a health app in-house
FOUNDERKELOWNA, BC
David Miller
Founder & Principal Engineer
Who you'll work with
You hire me, not an agency.
Mattagami Techworks is me, David Miller. I've spent my career on systems where the data is sensitive and mistakes are expensive: brain signals, patient records, children's schoolwork and public-sector intelligence.
I work across every layer, from signal processing and AI systems to cloud infrastructure and the product people use, and I stay to run what I build. You get one person who knows how all of it fits together, and who answers for it.
- Since 2018
- leading engineering on sensitive-data systems
- 2×
- companies co-founded
For government & enterprise buyers
Canadian public-sector or supplier-diversity buyer?
Mattagami Techworks is Indigenous-owned and listed in Indigenous Services Canada's Indigenous Business Directory, so contracts with Mattagami count toward the federal Procurement Strategy for Indigenous Business (PSIB) 5% target, and supplier-diversity goals in the private sector.
Questions
Before we talk.
The things people usually ask first.
Is it really just you?
Yes. You work with me directly, from the first call to launch. No account managers, no hand-offs to juniors. If a project needs more hands than mine, I'll say so before we start, not after. Everything lives in your accounts, scripted and documented, with decisions written down, so another engineer could pick it up without me. I keep few engagements at a time, and I'll tell you on the first call when I can start.
Can you work under our BAA or data processing agreement?
Yes. I work under BAAs and DPAs today, and design systems so the agreement holds in practice: data stays in covered services, access is logged, and vendors without coverage never see protected data.
How do you price?
Audits and scoped builds are fixed price. Fractional CTO work is a monthly retainer. Either way you get a written number before any work starts, not an open-ended hourly bill.
Who owns the code and infrastructure?
You do, from day one. Everything is built in your own accounts, with the setup scripted and documented. If we stop working together, nothing leaves with me.
Do you work with clients outside Canada?
Yes. Current and past clients are in Canada, the US and the UK. I'm on Pacific time: overlap with US working hours, and UK calls at 4–6 pm London time, which is my morning.
Can you subcontract on a government or enterprise bid?
Yes, as prime on scoped work or as a specialist subcontractor. Mattagami Techworks is Indigenous-owned and listed in the ISC Indigenous Business Directory, so the work can count toward PSIB and supplier-diversity targets.
Tell me what you're building.
A 30-minute call, no pitch deck required. You'll leave with a straight answer on scope, cost and risk. If I'm not the right fit, I'll tell you who is.