Skip to content

Indigenous-ownedPSIB-eligible

AI products for health, the brain and learning — built to pass the compliance review.

I'm David Miller — fractional CTO and senior engineer for health, neurotech and education teams. I've built real-time EEG systems, taken over a HIPAA health platform, and co-founded OneFitsEach, an AI platform for UK schools.

Fractional CTO · AI for regulated teams · Codebase takeover audits · Replies within one business day

  • Government intelligence ML
  • Real-time EEG
  • HIPAA
  • UK GDPR
  • AWS
  • Azure
  • GCP
  • Claude · OpenAI · Gemini in production

Selected work

Systems where getting it wrong isn't an option.

Brain signals, health records, children's schoolwork, national-security data. All of it live in production, with me as the engineer accountable for it.

All work

Digital health · HIPAA

Taking over an agency-built health platform and making it safe to own.

US digital health company · Technical lead

  • Agency handover
  • HIPAA gaps closed
  • New AWS accounts in Terraform

Read the case study

Platform engineering · Azure

An internal app platform where shipping a secure tool is as simple as adding a folder.

US healthcare company · Platform architect

  • An app is a folder
  • Sign-in the app can't break
  • Passwordless per-app databases

Read the case study

Ways to work together

Three ways in. One senior person accountable.

No account managers, no hand-offs to juniors. You work with me directly, from the first call to production.

OngoingMonthly retainer

Fractional CTO

Senior technical leadership without a full-time hire. I own the architecture, the roadmap and the hard calls — and I still write the code.

  • Architecture, roadmap and build-vs-buy decisions
  • Hands-on engineering on the critical path
  • Vendor, agency and contractor oversight
  • Compliance posture for HIPAA, GDPR and PIPEDA

Founders and operators who need one accountable technical owner.

Proof: Eight years as a co-founder and CTO
Fast winFixed-scope sprint

AI for regulated teams

Give your staff Claude without sending sensitive data somewhere it shouldn't go. Covered by your BAA or DPA, wired into the tools they already use.

  • Claude via AWS Bedrock or Azure under your BAA/DPA
  • Connectors to Microsoft 365 and internal systems
  • SSO, device management and audit logging
  • An internal app platform for shipping AI tools safely

Health, wellness and education teams that handle PHI or student data.

Proof: Claude for a HIPAA-covered company
Start here2 weeks · fixed price

Codebase takeover audit

Inherited an app from an agency or a departed team? I'll tell you what you actually own, what's at risk, and what to fix first.

  • Architecture and code-quality review
  • Security and compliance gap report (HIPAA / GDPR)
  • Infrastructure and deployment assessment
  • A prioritised 90-day plan — I can execute it, or your team can

Companies taking ownership of software someone else built.

Proof: Taking over a HIPAA health platform
FOUNDERKELOWNA, BC

DM

David Miller

Founder & Principal Engineer

Indigenous-owned business

Who you'll work with

You hire me, not an agency.

Mattagami Techworks is me, David Miller — a senior engineer who has spent a decade building systems where the data is sensitive and the stakes are real: brain signals, health records and children's schoolwork.

I work across the whole stack — signal processing, AI pipelines, cloud infrastructure, the product people touch — and I stay to run what I build. Clients come back because there's one person who knows how all of it fits together.

8 yrs
as a co-founder and CTO
2×
companies co-founded
3 clouds
AWS, Azure and GCP in production
4 domains
intelligence, health, neurotech and education
More about me

For government & enterprise buyers

Buying under PSIB? Contracts with Mattagami count.

Mattagami Techworks is Indigenous-owned and listed in Indigenous Services Canada's Indigenous Business Directory, so contracts with Mattagami support the federal 5% Indigenous procurement target — and supplier-diversity goals in the private sector.

Questions

Before you book a call.

The things people usually ask first.

Is it really just you?

Yes. You work with me directly, from the first call to production — no account managers, no hand-offs to juniors. If a project needs more hands than mine, I'll say so before we start, not after.

Can you work under our BAA or data processing agreement?

Yes. Most of my work is under a BAA or DPA, and I design systems so the agreement is actually enforceable: data stays in covered services, access is logged, and vendors without coverage never see protected data.

How do you price?

Audits and scoped builds are fixed price. Fractional CTO work is a monthly retainer. Either way you get a written number before any work starts — no open-ended hourly billing surprises.

Who owns the code and infrastructure?

You do, from day one. Code lives in your repositories and infrastructure is defined as code in your cloud accounts. If we stop working together, nothing leaves with me.

Do you work with clients outside Canada?

Yes — current and past clients are in Canada, the US and the UK. I'm on Pacific time and overlap comfortably with both US coasts and UK mornings.

Can you subcontract on a government or enterprise bid?

Yes, as prime on scoped work or as a specialist subcontractor. Mattagami Techworks is Indigenous-owned and listed in the ISC Indigenous Business Directory, so the work can count toward PSIB and supplier-diversity targets.

Tell me what you're building.

A 30-minute call, no pitch deck required. You'll leave with a straight answer on scope, cost and risk — and if I'm not the right fit, I'll tell you who is.