Co-founder and CEO of EPKO. I run the company, handle client relations and code alongside the team in Next.js, TypeScript and Supabase when a client feature needs that extra polish. At EPKO we build software that meets the technical requirements of EU regulations: WCAG, GDPR, NIS2, AI Act, MDR. Formal legal opinions and certification stay with partners (law firms, auditors). I look at business systemically. I build a team that ships and stays with clients for years.
Experience in software testing and quality assurance
Publications
01
IVR, missed-call lists, callbacks, a voicebot: which of them actually answers the phone in a clinic
09/24/2026 · 9 min read
IVR, missed-call lists, callbacks and a voice assistant do four different things with a call. What each one solves, where it stops, and how to find out in a week which one a clinic actually needs.
A voicebot, GDPR and the AI Act: where the recording of a patient call actually sits
09/17/2026 · 10 min read
Eight questions to put to a voice assistant supplier before it answers its first patient call. On recordings, retention, sub-processors and the duty to say that there is a machine on the other end.
Phone bookings in a clinic covered by NIS2: where convenience ends and risk begins
09/13/2026 · 9 min read
With NIS2 everyone looks toward the server room. Meanwhile a paper book, a spreadsheet on a shared drive and a bookings mailbox say more about patients than anyone assumes. Which obligations touch the front desk.
A voicebot in a clinic: what a voice assistant actually does when it answers the phone
09/09/2026 · 9 min read
Clinics have already bought systems that log missed calls, and it did not help. What a voice assistant does in a single call, what it does not do and will not do, and when there is no point putting one in.
Custom System vs Another SaaS Tool? A Practical Guide for Business Owners
07/04/2026 · 6 min read
A new SaaS tool doesn't always solve the problem. Find out when it's worth investing in a custom system or automation — and when off-the-shelf software is perfectly fine.
What a clinic website looks like when patients find it through AI search
07/03/2026 · 7 min read
More and more patients ask an AI search engine about doctors: Gemini, ChatGPT, Perplexity or Grok, instead of scrolling through ten links. What this means for your clinic website, what to change now, and why most rules of good SEO still apply.
What GDPR actually requires from a clinic website in 2026 (and what an auditor checks first)
06/16/2026 · 11 min read
A booking form, patient reviews, a chat with reception, marketing pixels. Every one of these is processing patient data. Here is what GDPR really requires from a clinic website, what an auditor checks first and how to do it so the site keeps selling.
Booking portals vs your own clinic booking system: economics and control
05/19/2026 · 11 min read
Each month you look at three invoices and ask whether it is time for your own booking system. The real economics of commissions, the hidden cost of control, and the threshold where building your own pays back faster than paying the portal one more year.
What a clinic website really costs in 2026: four tiers and what you actually buy
05/15/2026 · 14 min read
Real costs of a clinic website in Poland in 2026: from a 5,000 PLN business card to a full platform with online booking, SMS reminders and EHR integration.
NIS2 in 2026: who it applies to and what to do now
05/14/2026 · 11 min read
Poland transposed NIS2 in April 2026. We explain it without scaring you with fines: who it applies to, the timelines, and what to do in the first 30, 180 and 365 days.
WCAG 2.2 for foundations in 2026: when you must, when you should, and what to fix first
05/06/2026 · 30 min read
WCAG 2.2 for Polish foundations: when compliance is a legal requirement, how grant reviewers (EU Funds, KPO, NIW) read it, and what to fix first after a weak audit.
Eight concrete signals from our audits: TypeScript, framework, plugins, Core Web Vitals, database, auth, tests. How to decide in 30 minutes whether to fix or rewrite.
Should you fix or rebuild a website after a freelancer
04/25/2026 · 14 min read
What we find most often in websites left behind by freelancers, and when to fix versus rewrite. Two case studies from our portfolio and a decision framework, no inflated numbers.
Zero Trust Architecture for Small and Medium Businesses
08/09/2025 · 7 min read
Zero Trust Architecture represents a modern approach to cybersecurity based on the principle of "never trust, always verify", which can significantly improve the level of protection for small and medium businesses against contemporary cyber threats.
Medova.health We’re building a global platform that truly connects travelers with clinics and gives everyone the same growth opportunities—no pay-to-win ranking, just real value.
Complete Checklist for an Effective Business Website 2025: What You Need to Avoid Losing Customers
05/05/2025 · 8 min read
A business website is not just decoration - it's a sales tool that either works for your success or wastes potential. Whether you're creating a new website or refreshing your current one, this article contains the essence of technical knowledge dressed in specific points to implement.
How to Protect Your Data in E-commerce? Complete Guide to Data Breaches and Effective Defense
03/27/2024 · 5 min read
Criminals exploit system vulnerabilities, phishing, and human error, impacting both customers and businesses. How can you protect yourself from a data breach? What should you do if it happens?