Available for projects and consulting
// physician-developer · brasília, brazil

Carlos E. F.
de Avila

Physician · Health Data Scientist

I build the structure behind secure digital health: data science, interoperability and cybersecurity — privacy by design from the first commit to deploy.

16+ products in the ecosystem
15+ years in digital health
13+ years in public health & ER
Portrait of Carlos E. F. de Avila
CRM ativo · Brasília – DF
// about

About me

Physician with an active medical licence, two MBAs and over 15 years building in digital health. I work at the intersection of the clinic and the code: health informatics, data science, interoperability and information security.

That includes over 13 years in Brazil’s public health system, focused on care for vulnerable populations — chiefly healthcare inside the juvenile justice system — plus health management, mental health and work as a regulator and prehospital physician at SAMU. That experience defines what I build: tools that work in real services, not just on slides.

I am a founding partner of Sciereli HDC, a health data science and information security holding. Sixteen products across four fronts — consulting and ecosystem (saude.dev), privacy and OPSEC (Paranoi), cybersecurity and R&D (Labs) — all built on the same principle: health data is sensitive data, and the architecture has to prove it.

Health InformaticsHealth Data ScienceCybersecurityLGPD / HIPAA / GDPRInteroperabilityDataOpsPrivacy by DesignPublic HealthHealth TechSupplementary Health
carlos@sciereli:~
$ whoami
> Physician · Health Data Scientist · Founding Partner
$ ls ecossistema/
> saude.dev/  paranoi/  cyber/  labs/
$ cat principles.txt
> privacy-by-design · local-first · open-core
$ run
I want to solve the big challenges in health data with the eyes of someone who both treats patients and builds the systems: data quality, security, interoperability and privacy are not project phases — they are its foundation.
— Carlos E. F. de Avila · founding partner, Sciereli HDC
// experience

Experience

Founding Partner · Physician-Developer

Sciereli HDC 2019 — present

Health data science and information security holding, based in Brasília. Consulting, products and research under one roof — 16 products across four fronts.

Founder · Health software consulting

saude.dev 2019 — present

LGPD/HIPAA compliance, secure development, audit and pentest, interoperability with RNDS, HL7 FHIR and e-SUS, DPO-as-a-Service and training for healthtechs.

Founder · Privacy and OPSEC

Paranoi 2021 — present

Strategic digital protection for high-exposure individuals: defensive OSINT, counter-surveillance, secure communications and digital footprint removal.

Researcher · Digital Health

Sciereli Labs 2020 — present

R&D and scientific production: federated learning, homomorphic encryption applied to health, benchmarks and technical reports.

General Practitioner · Regulator & Prehospital Physician

SES-DF · SAMU 13+ years

Over 13 years in the public health system: care for vulnerable populations, focused on juvenile-justice healthcare, health management and mental health — plus medical regulation and prehospital emergency care at SAMU.

// projects

Projects & Ecosystem

Products and fronts I founded or maintain — from clinical de-identification to interoperability, privacy and causes that matter.

Holding active

Sciereli HDC

Holding for health data science and information security — consulting, products and research under one roof. 16 products, 4 fronts, zero trackers.

0 cookies · 0 analytics
sciereli.com.br →
Cybersecurity active

Sciereli Cybersecurity

Cybersecurity and compliance for healthcare: pentest, hardening and ISO certifications.

sciereli.com.br/cyber →
R&D active

Sciereli Labs

Research and scientific production arm in digital health — papers, technical reports and benchmarks, with published work on clinical AI (DermAlert) and anonymization (SADM).

sciereli.com.br/labs →
Consulting always on

saude.dev

Health software consulting with LGPD/HIPAA/GDPR compliance. Privacy by Design from first commit to deploy — DPO-as-a-Service, audit and interoperability.

LGPDHIPAAGDPRHL7 FHIRRNDSe-SUS
saude.dev →
SciComm active

xaro.pe

Xarope — science communication for health data. Turns DATASUS, SUS and state databases into articles and visualizations anyone understands.

AstroDATASUSData Viz
xaro.pe →
LGPD active · free

anonimiz.ar

Clinical record de-identification 100% in the browser. Strips CPF, CNS, CRM and 17+ HIPAA identifiers — no data leaves the device.

WebAssemblyNERHIPAA Safe HarborOpen Source
anonimiz.ar →
Local-first active · free

integr.ar

Personal health data server, local-first and LGPD-by-design. OCR, semantic search, local RAG and secure sharing — all on your machine.

Tauri v2FastAPIPostgreSQLMinIOOllamaDockerMCPAGPL-3.0
integr.ar →
Education active

capacita.ai

Digital health training platform, privacy-first, hosted or self-hosted. Multi-tenant with real RLS and Open Badges 3.0 certificates.

NestJSFastifyPostgreSQL 16 RLSZitadelTraefikOpen Badges 3.0
capacita.ai →
Interop beta · open-core

sinais.online

Brazilian canonical interoperability waist: one canonical event, many destinations — RNDS-RAC, e-SUS APS, HIS HL7 and legacy systems, no lock-in.

MQTT 5FHIR R4HAPI FHIRTimescaleDBApache-2.0
sinais.online →
Governance active

higeia.io

Health compliance without spreadsheets: fifteen modules with a deterministic core and assistive AI for LGPD, security and governance. Append-only audit trail with chained hashes on every decision.

MCP ServersClaude · GeminiISO 27001 · 27701NIST CSF 2.0AWS sa-east-1
higeia.io →
Strategy active

saude.cc

Health management and innovation boutique. Boards, C-suites and investors hire when evidence, regulation and technology must become a decision — diagnostics, retainers and fractional C-level.

AI ReadinessFractional CAIO · CISORNDS/FHIRValue-Based Care
saude.cc →
Legal active

saude.capital

Legal capital for digital health — the ecosystem’s legal advisory layer.

saude.capital →
Clinical closed beta · AGPL-3.0

anot.ae

A 100% local typing assistant for Brazilian public-health professionals: write the SOAP note once and the extension fills e-SUS APS PEC, SISREG III and SEI. Not one byte leaves the machine.

SQLiteArgon2idChaCha20-Poly1305llama.cppMV3AGPL-3.0
anot.ae →
Interop closed beta · AGPL-3.0

panaceia.io

Person-to-institution interoperability: 13 adapters (e-SUS, SISREG, GAL, Hórus, SI-PNI, SEI…) normalizing captures into Brazilian RNDS profiles — with no central server.

FHIR R4Brazilian RNDS profilesAES-256-GCMPack DSLAGPL-3.0
panaceia.io →
OPSEC active

paranoi.co

Strategic digital protection for those who can’t be vulnerable: compartmented connectivity, hardened devices, travel OPSEC and incident response — for judges, lawyers, executives and journalists.

Compartmented connectivityDevice hardeningTSCMForensics
paranoi.co →
OSINT active

dados.cc

Intelligence strictly from open, lawful sources under methodological rigor and LGPD: scored exposure portraits, dossiers, due diligence and continuous monitoring.

OSINTChain of custodyExposure scoreLGPD
dados.cc →
Counter-surv. active

sigilo.cc

The permanent layer of the Paranoi ecosystem: encrypted comms, family vault and Sentinela — continuous monitoring across Brazilian sources (credit bureaus, courts, registries) and the dark web.

SignalSimpleXTSCMLGPD Art. 18
sigilo.cc →
Data Removal active

pegada.digital

Digital footprint removal and management, with honest promises — removed data tends to come back, and maintenance tracks its reappearance.

pegada.digital →
Civic active · CC BY 4.0

extrato.digital

Open methodology for your AI to assemble a verifiable portrait of any Brazilian parliamentary mandate — Chamber, Senate and CLDF, with a source link on every figure. No data passes through the site.

llms.txtOpen DataPlaybooksCC BY 4.0
extrato.digital →
Civic active · open source

pata.solutions

Civic hub for animal protection: real-time legislative monitor, geolocated report map and educational content on responsible ownership — all open source.

AstroOpen DataAGPL-3.0
pata.solutions →
Adoption coming soon

adota.ai

Adoption by real compatibility: a scoring algorithm weighs eight dimensions between adopter and animal, with a lifestyle questionnaire and 7/30/90-day post-adoption follow-up.

MatchingScoringAGPL-3.0
pata.solutions/adota →
SaaS coming soon

abriga.ai

Multi-tenant SaaS for shelters and NGOs: veterinary records to CFMV and WSAVA standards, 9-stage adoption pipeline, PIX donations, public transparency and RLS isolation.

Row Level SecurityMercado PagoLGPDWCAG 2.1 AA
pata.solutions/abriga →
Studio pre-production

qoji.art

QOJI — small, cohesive worlds. Pixel art, sound and game design by the same hand. Anchor project: Bananal, a tarot card roguelite set in a folded Brasília.

Godot 4AsepriteReaper480×270ADRs
qoji.art →
Devlog in development

qoji.gg

Where data, AI and security meet psychological horror. Gameplay streams and devlog of my first horror game — the creative process thought out loud, in public.

TwitchYouTubeDevlog
qoji.gg →
Marketplace active · free

olh.ae

Olhaê — all your items for sale in one link. Gathers listings from Mercado Livre, Shopee, OLX, Enjoei and Facebook into a page optimized for WhatsApp previews. Circular economy.

Next.jsLink ScrapingOpen GraphSentry
olh.ae →
// skills

Skills & Stack

Health & Clinical

MedicineHealth InformaticsPublic HealthMental HealthEmergency / SAMUHealth ManagementSupplementary Health

Interoperability

HL7 FHIR R4RNDS / RNDS-RACe-SUS APSbr-core · IPS BrasilHAPI FHIRMQTT 5OpenEHRDATASUS

Data & AI

PythonSQLPostgreSQLTimescaleDBPandasRAGOllamaNER / PresidioFederated learning

Privacy & Compliance

LGPDHIPAA Safe HarborGDPRISO 27001DPIADPO-as-a-ServiceDe-identificationPrivacy by Design

Cybersecurity & OPSEC

PentestHardeningZero TrustOSINTCounter-surveillanceThreat ModelingSBOM / CycloneDX

Engineering & Cloud

DockerTauri v2FastAPINestJSAstroNext.jsMinIO / S3TraefikCloudflareTailscaleGit · CI/CD

Civic & Creative

Open datallms.txtAGPL-3.0 · CC BYGodot 4Pixel ArtGame Design
Carlos E. F. de Avila
// contact

Let’s build health software that respects data?

Open to consulting, health data and cybersecurity projects, talks and partnerships. No form, no scheduling queue — I answer directly by email.

carlos@saude.dev