The operations platform for austere medicine.
One system for dispatch, inventory, narcotics, credentialing, and clinical documentation — built for the operators running medicine where infrastructure ends.
Built for how field medicine actually works.
Most operators stitch together 5–7 specialty tools — ePCR, narcotics tracking, scheduling, inventory, credentialing — and the seams cost them. NuCo collapses the stack into a single tenant-scoped platform you can deploy in days, not months.
Rig assignments, departures board, readiness queue.
Personnel profiles, certifications, compliance matrix.
E-signed agreements (NDA, IP, non-solicit, waivers).
Rig stock, kits, receiving, transfers, handoffs.
DEA-compliant narcotics tracking — witness signatures, count sessions, append-only chain of custody.
Course tracking, HIPAA training, continuing ed.
Daily digests, expiring certs, count reminders.
Operational situation board — live wildfire activity, federal SA overlays, crew positioning, and incident layers in one map.
Patient encounters, vitals, interventions, signatures.
Built for the regulatory reality of medical operations.
The standards your customers, auditors, and licensing boards expect — designed into the data model from the first migration, not retrofitted at audit time.
HIPAA-ready architecture
- →Application-layer encryption on PHI (libsodium AEAD), session-derived key, 96-hour offline cache auto-purge.
- →Per-tenant row-level isolation enforced at the database, not the app.
- →HIPAA §164.312(b) read-event audit capture on every PHI access.
- →Append-only audit log with cron-driven archival to immutable cloud storage.
- →BAA-ready vendor stack (Supabase Team, Fly.io HIPAA, R2 Object Lock).
NEMSIS 3.5.1 compliant
- →National EMS Information System v3.5.1 data model baked into the encounter schema.
- →Two-encounter-type design — prehospital (incident-based) and outpatient (encounter-based) — in one schema.
- →Tactical/austere overlay (TCCC, DA4700-equivalent capture) layered as a configurable template, not a fork.
- →State submission engine designed for per-state activation as your tenants need it.
DEA-compliant narcotics tracking
- →Append-only narcotics ledger enforced at three layers: RLS policy, table grants, and database trigger.
- →Witness signatures (touch + typed legal name), photo capture on waste, daily-while-deployed count sessions.
- →Discrepancy detection + admin-only resolution that writes a new event, never mutates history.
Forensic-grade audit posture
- →Every state-changing endpoint plumbs structured events into a single append-only `audit_log`.
- →Immutable archive cron with 6-year Object Lock retention to satisfy HIPAA §164.316(b)(2) minimums.
- →Per-tenant scoping so customer auditors see only their own activity.
Built by operators. Used in production.
NuCo is the productized version of the platform that runs at one of the country's leading private austere medical operators. Every module ships only after it's been tested on real deployments — not in a vendor lab.