---
type: proposal
status: verbal
client: '[[Nexus Health]]'
value: 22000
submitted: null
decision_due: 2026-04-01T00:00:00.000Z
priority: high
tags:
  - proposal
  - sales
  - healthcare
  - hipaa
  - cloud
---
# [[Nexus Health]] Cloud Assessment Proposal

## Overview

AWS infrastructure audit and HIPAA compliance gap analysis for [[Nexus Health]], a digital health platform startup. Following up after discovery call on 2026-03-14.

**Client**: [[Nexus Health]]
**Contact**: [[Dr. Anika Patel]] (CPO), [[Tom Huang]] (VP Engineering)
**Value**: $22,000
**Duration**: 4 weeks
**Status**: Verbal — [[Tom Huang]] confirmed proceeding 2026-03-29
**Decision expected**: 2026-04-01

## Background

[[Nexus Health]] is a Series A healthcare SaaS startup ($8M raised) building a patient engagement platform. Their AWS infrastructure is poorly configured — a previous audit found 12 critical HIPAA compliance gaps. [[Mike Chen]] from [[TechStart Inc]] gave them a strong reference, which helped close.

[[Tom Huang]] confirmed they want to proceed — start date depends on [[Leila Farouk]]'s availability (April 7).

## Proposed Team

| Team Member | Role | Hours | Rate |
|-------------|------|-------|------|
| [[Leila Farouk]] | Cloud & Security Lead | 60 | $325/hr |
| [[Priya Kapoor]] | HIPAA Compliance Analysis | 30 | $275/hr |
| Carter | Oversight & Client Management | 20 | $275/hr |
| **Total** | | **110** | **$22,000 blended** |

## Proposed Scope

### 1. AWS Infrastructure Audit ($8,000)
- Current architecture review
- Security group analysis
- IAM policy audit
- Cost optimization assessment
- Estimated: 30 hours

### 2. HIPAA Gap Analysis ($6,000)
- PHI data flow mapping
- Access control review
- Encryption assessment (at rest + in transit)
- Audit logging evaluation
- Estimated: 22 hours

### 3. Cloud Architecture Recommendation ($5,000)
- Target architecture blueprint
- HIPAA-compliant reference architecture
- Service selection (managed vs self-hosted)
- Estimated: 18 hours

### 4. Remediation Roadmap ($3,000)
- 90-day remediation plan
- Priority-ranked findings
- Effort estimates per finding
- Quick wins vs structural changes
- Estimated: 12 hours

## Deliverables

1. Infrastructure audit report
2. HIPAA gap matrix (12+ known gaps + any new findings)
3. Cloud architecture blueprint
4. 90-day remediation roadmap

## Timeline

| Phase | Duration | Deliverable |
|-------|----------|-------------|
| Infrastructure audit | Week 1 | Audit report |
| HIPAA gap analysis | Week 2 | Gap matrix |
| Architecture design | Week 3 | Blueprint |
| Roadmap & presentation | Week 4 | Remediation roadmap |

## Dependencies

**On Client**:
- AWS account access (read-only IAM role)
- Previous audit report
- Architecture documentation
- Stakeholder availability ([[Rachel Torres]] for compliance)

**On Us**:
- [[Leila Farouk]] availability confirmed (April 7)
- Reference check with [[Mike Chen]] complete
- NDA signed

## Risks

| Risk | Impact | Mitigation |
|------|--------|------------|
| [[Leila Farouk]] not available until April 7 | May need to push start date | Confirm availability, have backup plan |
| Scope expansion from audit findings | Budget pressure | Fixed scope, additional findings as Phase 2 |
| Client team availability | Delays | Schedule all sessions in Week 1 |

## Tasks

- [ ] Confirm [[Leila Farouk]] April availability 📅 2026-03-25
- [ ] Finalize proposal and send to [[Dr. Anika Patel]] 📅 2026-03-28
- [x] Complete reference check with [[Mike Chen]] 📅 2026-03-22
- [ ] Draft NDA for [[Leila Farouk]] 📅 2026-03-28

## Related

- Client: [[Nexus Health]]
- Team: [[Leila Farouk]], [[Priya Kapoor]]
- Referral: [[Mike Chen]], [[TechStart Inc]]
- Knowledge: [[API Security Checklist]]

---

*Verbal — confirmed 2026-03-29; finalise proposal and confirm [[Leila Farouk]] availability*
