MedStack

MedStack was born from a clear market gap in digital health. As healthcare companies increasingly moved patient data to the cloud—from telemedicine platforms to home monitoring devices to genomics analysis—they faced a compliance nightmare. They needed to prove to hospitals, insurance companies, and regulators that patient data was secure and their practices documented. Balaji Gopalan saw the opportunity: build the infrastructure layer that digital health companies could bolt onto their products to inherit security and privacy guarantees without hiring teams of compliance experts.

The original MedStack was a concierge service. Customers would contact the team, and MedStack would help them architect their cloud infrastructure with built-in security and privacy controls. By July 2018, they'd signed 45 customers and were generating roughly $25-30k MRR. But the model had a fatal flaw: it was labor-intensive and limited customers' ability to iterate. Every time a customer wanted to change their server size or infrastructure, they had to loop in the MedStack team.

In late 2018, Balaji made a critical decision. Using $1.3M in new funding (bringing total raised to $2.3M since inception), the team completely rebuilt the product from the ground up. MedStack Control, launched in Q3 2019, was a self-service console that let customers manage users, adjust infrastructure, and scale independently—while still inheriting MedStack's security and compliance commitments.

The pandemic accelerated everything. Suddenly, telemedicine, remote monitoring, and cloud-based health platforms weren't nice-to-haves—they were essential. By the time of this interview in April 2020, MedStack was serving close to 70 customers, nearly double the July 2018 baseline. Average revenue per customer was around $700-850/month, generating roughly $56-60k MRR.

Balaji credits a recent shift from transactional outreach to inbound marketing as a key driver. The new business model also helped: customers now pay a SaaS fee for MedStack's assurances, policies, and compliance support, plus a markup on underlying cloud infrastructure costs. This aligned pricing with value and created a scalable acquisition motion.

The concierge product worked for early traction but hit a wall. MedStack Control was the breakthrough—it turned a service business into a true platform play. The team also invested heavily in industry certifications (HIPAA, likely others), which customers could inherit for their own compliance activities. That became a real competitive moat.

On the operational side, Balaji kept the team lean. After initial growth, he intentionally right-sized to 7 people (3 engineers, 1 salesperson, others in ops/support) with a ~$100k/month burn rate. The shift to inbound also reduced customer acquisition friction compared to direct sales to early-stage digital health founders.

In April 2020, MedStack was chasing three metrics: 100+ customers (from ~70), $1M ARR (from $672k), and a few enterprise-size logos to strengthen the Series A story. They were mid-fundraise on a $500k seed extension, deliberately designed with favorable terms given the economic moment. Balaji wasn't ruling out venture debt as an alternative, though month-to-month customer contracts made traditional debt harder.

The tailwind from digital health adoption was real, but Balaji remained measured in his claims. The pandemic had created urgency, but the real opportunity was in trust: as digital health scaled, a single major breach could crater public confidence. MedStack's documentation, monitoring, and compliance infrastructure positioned them as the safety layer digital health companies needed to scale without fear.