Tiny Steps CMS

Four home health agencies were about to commit to seventeen hundred dollars a month for ProviderSoft. Too many menus. Too many features they’d never use. Meanwhile, therapists were driving paper notes to the office. Supervisors were cosigning forms by hand. Credential expirations lived in a spreadsheet — and when one lapsed, nobody knew until the audit.

They needed software that understood how home health therapy actually works — therapists in the field, documenting visits on their phones between appointments, supervisors reviewing from wherever they are, and someone watching every credential expiration before it becomes a liability.

Built in two months. Forty-two users across four agencies. The key decision: make the most common workflow — documenting a visit — as fast as physically possible. Open the app, select the patient, fill in the details, sign with your finger, submit. Under three minutes, including the signature.

The credential lockout is the piece I’m proudest of. Sixty-plus credential types per therapist, four of them critical. If a critical credential expires, the system locks the therapist out. No grace period. No workaround. It sounds aggressive — until you realize the alternative is a therapist working with an expired medical clearance and the agency bearing the liability.

The billing pipeline follows every dollar from authorization to visit documentation to invoice generation to payment collection. Nothing falls through the cracks because the system won’t let it.

Multi-tenant healthcare is hard because no two agencies work the same way. Different forms, different billing cycles, different field positions on every PDF. The polymorphic document pipeline — thirteen templates across four agencies, each with its own layout — was the most complex thing I’ve ever built.

Before this system, expired credentials were caught during audits — after the damage was already done. Automated lockout is the only guarantee. Not a single therapist has worked with expired credentials since launch. That’s the metric I care about most.

Every form submission is validated on both client and server. Every error state is explicitly typed. One hundred sixty-five server actions, zero runtime type errors in production. The type system is the safety net under the safety net.