--- title: How healthcare tech teams innovate while balancing speed... description: Healthcare engineering leaders discuss balancing innovation speed with security and compliance requirements. Drawing on a thoughtbot industry survey and a... canonical: https://daily.dev/posts/how-healthcare-tech-teams-innovate-while-balancing-speed-and-security-yviuahai3 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: How healthcare tech teams innovate while balancing speed and security | daily.dev og:description: Healthcare engineering leaders discuss balancing innovation speed with security and compliance requirements. Drawing on a thoughtbot industry survey and a... og:url: https://daily.dev/posts/how-healthcare-tech-teams-innovate-while-balancing-speed-and-security-yviuahai3 og:image: https://api.daily.dev/og/posts/yVIUAhaI3.png og:image:alt: How healthcare tech teams innovate while balancing speed and security og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # How healthcare tech teams innovate while balancing speed and security **[thoughbot](https://daily.dev/sources/thoughbot)** · 4 min read · 0 upvotes · 0 comments ## Summary Healthcare engineering leaders discuss balancing innovation speed with security and compliance requirements. Drawing on a thoughtbot industry survey and a panel with a Merck executive, the piece covers tactics like 'happy path' code conventions (naming functions with PHI markers), treating AI services as external vendors requiring the same scrutiny (using the open-source top_secret Ruby gem to filter sensitive data before it reaches an LLM), Merck's tiered AI governance model, and the challenges of integrating legacy and modern systems during clinical platform modernization. Survey data shows 66% of leaders spend more time on governance than innovation, and 52% of initiatives struggle due to underestimated integration complexity. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How can I prevent sensitive health information from reaching an LLM in a healthcare AI chat feature? Filter sensitive data before it reaches the model using a dedicated detection layer, then add a second filtering pass to catch anything that slipped through before responses reach a summary or another user. The open-source top_secret Ruby gem uses machine learning to identify and strip sensitive information from user messages before they hit an LLM, applied on a project involving an AI chat feature for personal health product recommendations. _Teams building health-related AI features can find real implementation patterns like this through daily.dev._ ### What is a 'happy path' approach to secure coding in healthcare software? A happy path approach makes secure choices the default and obvious, so doing the right thing takes no extra effort and deviations stand out. One implementation labels functions handling protected health information with names containing 'with PHI' or 'without PHI,' making the security context visible in code reviews and AI-assisted security scans, so mislabeling a public-facing function feels immediately wrong. _Developers designing PHI-safe codebases can track patterns like this via daily.dev._ ## Similar posts on daily.dev - [5 easy, actionable tips for software development in healthcare](https://daily.dev/posts/5-easy-actionable-tips-for-software-development-in-healthcare-atfq0gggy) · thoughbot · 0 upvotes · 0 comments - [4 Takeaways from HLTH 2025: Where Health Tech Meets Humanity](https://daily.dev/posts/4-takeaways-from-hlth-2025-where-health-tech-meets-humanity-wsg2yul1e) · Atomic Spin · 0 upvotes · 0 comments - [AI won’t transform healthcare until we fix information overload](https://daily.dev/posts/ai-won-t-transform-healthcare-until-we-fix-information-overload-2wa0kszql) · The Next Web · 0 upvotes · 0 comments - [Foundations for an AI-forward healthcare organization](https://daily.dev/posts/foundations-for-an-ai-forward-healthcare-organization-mhfzhdpno) · databricks · 0 upvotes · 0 comments - [A developer’s Hippocratic Oath: Prioritizing quality and security with the fast pace of AI-generated coding](https://daily.dev/posts/a-developer-s-hippocratic-oath-prioritizing-quality-and-security-with-the-fast-pace-of-ai-generated-jumblzdq3) · SD Times · 0 upvotes · 0 comments --- Tags: [#architecture](https://daily.dev/tags/architecture), [#ruby](https://daily.dev/tags/ruby), [#compliance](https://daily.dev/tags/compliance), [#ai-governance](https://daily.dev/tags/ai-governance), [#health-tech](https://daily.dev/tags/health-tech) [View this post on daily.dev](https://daily.dev/posts/how-healthcare-tech-teams-innovate-while-balancing-speed-and-security-yviuahai3) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"How healthcare tech teams innovate while balancing speed and security","url":"https://daily.dev/posts/how-healthcare-tech-teams-innovate-while-balancing-speed-and-security-yviuahai3","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/how-healthcare-tech-teams-innovate-while-balancing-speed-and-security-yviuahai3"},"datePublished":"2026-08-18T00:04:36.771Z","dateModified":"2026-09-13T20:09:24.581Z","description":"Healthcare engineering leaders discuss balancing innovation speed with security and compliance requirements. Drawing on a thoughtbot industry survey and a...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/18e26163b4dd6ce3c1de4a33a852cfde?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/18e26163b4dd6ce3c1de4a33a852cfde?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"thoughbot","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"thoughbot","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/9fe12feb57f944a29ff63a79e350081a","url":"https://daily.dev/sources/thoughbot"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/how-healthcare-tech-teams-innovate-while-balancing-speed-and-security-yviuahai3","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"architecture,ruby,compliance,ai-governance,health-tech","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"thoughbot","item":"https://daily.dev/sources/thoughbot"},{"@type":"ListItem","position":3,"name":"How healthcare tech teams innovate while balancing speed and security"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/how-healthcare-tech-teams-innovate-while-balancing-speed-and-security-yviuahai3#faq","mainEntity":[{"@type":"Question","name":"How can I prevent sensitive health information from reaching an LLM in a healthcare AI chat feature?","acceptedAnswer":{"@type":"Answer","text":"Filter sensitive data before it reaches the model using a dedicated detection layer, then add a second filtering pass to catch anything that slipped through before responses reach a summary or another user. The open-source top_secret Ruby gem uses machine learning to identify and strip sensitive information from user messages before they hit an LLM, applied on a project involving an AI chat feature for personal health product recommendations. Teams building health-related AI features can find real implementation patterns like this through daily.dev."}},{"@type":"Question","name":"What is a 'happy path' approach to secure coding in healthcare software?","acceptedAnswer":{"@type":"Answer","text":"A happy path approach makes secure choices the default and obvious, so doing the right thing takes no extra effort and deviations stand out. One implementation labels functions handling protected health information with names containing 'with PHI' or 'without PHI,' making the security context visible in code reviews and AI-assisted security scans, so mislabeling a public-facing function feels immediately wrong. Developers designing PHI-safe codebases can track patterns like this via daily.dev."}}]} ```