/ 00 — Sanithu Hulathduwage
I'm a Computer Science student at Midwestern State University and multi-venture founder. Founding engineer + architect of a HIPAA-compliant healthcare CRM — built from zero, now scaled to a team. Founder of SetFlow. Inventor of the Universal Privacy Engine.
Velant.ai
Founding engineer · HIPAA CRM in production
SetFlow
AI-native LMS · getsetflow.app · beta
Privacy Engine
Zero-knowledge data architecture
/ Based in
Wichita Falls, TX
Originally from Colombo, Sri Lanka 🇱🇰
I went from class assignments to shipping enterprise-grade production systems in under a year. As founding engineer and architect at Velant.ai, I built the platform from zero — a HIPAA-compliant multi-tenant healthcare CRM with a full WebRTC VoIP softphone, an AI call intelligence pipeline, a real-time WebSocket architecture, and a cross-platform Flutter mobile app — across a 4-app monorepo. Now leading engineering alongside the team.
In parallel I founded SetFlow — an AI-native LMS for K-12, higher ed, and individual learners, with a Bring-Your-Own-Database tier for institutions. I also co-founded GoodFellow Support Services Ltd, a UK elderly care company, where I lead operations and technology remotely from the US.
I'm also inventing the Universal Privacy Engine — a privacy-first computing architecture where identity is destroyed before processing, not merely protected after collection. I treat compliance, cryptography, and zero-trust as architectural primitives, not policy afterthoughts.
Across healthcare (Velant.ai) and education (SetFlow), I've shipped against HIPAA, FERPA, COPPA, GDPR / UK GDPR, CCPA / CPRA, SOC 2 Type 1 readiness, and IDEA accommodations — DPAs and data-flow diagrams available under NDA.
Open to internships, full-time roles, founder collaborations, and research partners.
/ At a glance
/ Currently
What I'm building today — across SaaS, healthcare, and care services.
AI-native LMS for K-12, higher ed, and individual learners.
A learning operating system built on Next.js 14, Prisma, Postgres, and Anthropic Claude. Two products in one codebase — SetFlow (the LMS) and SetFlow Academy (the marketplace) — with a Bring-Your-Own-Database tier so institutions keep student data on their own Postgres.
HIPAA-compliant healthcare CRM + telephony platform.
4-app pnpm monorepo: React CRM, Flutter mobile, patient portal, NestJS API. Includes a full WebRTC VoIP softphone, an AI call intelligence pipeline (Whisper → GPT-4o → follow-up content), Azure OpenAI SMS outreach with auto-takeover, multi-tenant data isolation, and 15+ third-party integrations.
UK elderly care + specialist cleaning, run remotely from the US.
Non-clinical elderly care and specialist cleaning across the UK. I lead operations and technology remotely — service delivery, workforce coordination, hiring, onboarding, scheduling, the website, hosting, internal tools, and workflow automation.
✦ Featured · SetFlow
getsetflow.app ↗In spring 2026, Canvas was breached — roughly 275M student records compromised by ShinyHunters across 8,809 institutions. SetFlow’s architecture makes that scale of breach structurally impossible: districts keep their own data through our Bring-Your-Own-Database tier.
✕ The Canvas breach. April 29 – May 7, 2026
Attributed: ShinyHunters0M
records compromisedIn spring 2026, ShinyHunters breached the Canvas learning platform and exfiltrated student data — roughly 275 million records across 8,809 institutions, with outages dragging through finals week. It became one of the largest education-data breaches on record.
✕ Exposed
Full names · email addresses · student IDs · billions of private messages between students and teachers
✓ Not exposed (per Instructure)
Passwords, SSNs, and financial info (per Instructure).
▲ Primary risk
Targeted spear-phishing + social engineering using the stolen private messages.
The lesson isn’t to harden a central vault — it’s to stop centralizing student data in the first place. SetFlow keeps each district’s data in the district’s own Postgres, AES-256-GCM-encrypted at the connection layer, never on our servers.
/ Why SetFlow is different
/ 01
Classroom + study + AI tutor + LMS integration in one — an order-of-magnitude bigger moat than any single-workflow competitor.
/ 02
AGS grade passback + NRPS roster sync + Deep Linking 2.0 shipped. School IT deploys SetFlow into Canvas / Brightspace / Moodle / Blackboard via SSO. Most new entrants haven’t.
/ 03
Every class gets its own Tori with its own memory, learning the student over a semester. Not "ChatGPT for school" — a tutor per course.
/ 04
Per teacher, no card required. District pricing only at scale. Priced for adoption, not extraction.
/ The market
US K-12 EdTech
$13B → $30B
by 2030 · HolonIQ
AI tutoring slice
$1B → $20B+
by 2030
Inference cost
$3 – $8
per student / year
Status
Live · getsetflow.app
Pre-revenue · WFISD in talks
The languages, frameworks, and primitives I reach for. Updated regularly.
A non-linear path that runs from physical IT and brand design through to founding and engineering production platforms.
Dec 2025 – Present · Remote (UK)
GoodFellow Support Services Ltd
Co-founded a non-clinical elderly care and specialist cleaning company across the UK. Lead operations + technology remotely from the US — workforce coordination, scheduling, website, and full technical infrastructure.
2024 – Present · Remote
Velant.ai
Architected and shipped the entire Velant platform from zero — a HIPAA-compliant enterprise healthcare CRM with VoIP telephony, AI call intelligence, a real-time WebSocket architecture, a cross-platform Flutter app, and a secure patient portal. 31 feature modules, 15+ third-party integrations. Now leading engineering alongside a small team.
2024 – Present
SetFlow
Founded SetFlow — an AI-native LMS at getsetflow.app for K-12, higher ed, and individual learners. Built on Next.js 14 + Prisma + Postgres + Anthropic Claude, including a Bring-Your-Own-Database tier so institutions can host student data on their own Postgres.
2024 – Present · Wichita Falls, TX
Midwestern State University
One-on-one and group tutoring across Computer Science and Mathematics — data structures, algorithms, calculus, debugging, and problem sets.
2024 · Wichita Falls, TX
McCoy's Roofing & Renovations
Redesigned business cards and brand logo (+20% client inquiries); built and optimized the LinkedIn presence to grow visibility.
2024 · Wichita Falls, TX
Empire Tax Services
Designed branded marketing materials that contributed to a 15% increase in event attendance.
2022 – 2023 · Wichita Falls, TX
Midwestern State University
Built and configured 60+ computers (−25% downtime), resolved 95% of IT support tickets on first contact, and maintained on-campus servers, networks, and AV infrastructure.
2021 – 2022 · Colombo, Sri Lanka
K Life Private Limited
Improved equipment uptime by 10% and managed social media — 3% audience growth and 18% profit increase across owned channels.
From class assignments to enterprise-grade production systems. Tap any row to expand.
Founder & CEO. AI-native learning OS at getsetflow.app — classes, assignments, quizzes, gradebook, Tori AI tutor, plus a Bring-Your-Own-Database tier for institutions.
Two products in one codebase. SetFlow (the LMS) at getsetflow.app and SetFlow Academy (the marketplace) at academy.getsetflow.app. Same Vercel deployment, separate auth.
HIPAA-compliant enterprise platform — founding engineer + architect. React CRM, Flutter mobile, patient portal, NestJS API. WebRTC softphone, AI call intelligence, multi-tenant data isolation.
4-app pnpm monorepo serving as a unified platform for healthcare lead management, VoIP telephony, AI automation, appointments, and patient intake.
My own invention. A zero-knowledge data platform where identity is destroyed before processing — vault-isolated, session-ephemeral, and AI-safe.
Anonymize → Tokenize → Encrypt → Process → Destroy Tokens → Keep Anonymous Output Only. A new privacy infrastructure layer for healthcare, banking, government, and AI.
Real-time news fetcher with a custom RAG pipeline using Pinecone and Ollama to summarize articles into concise, categorized insights.
Campus assistance chatbot with a custom-built RAG pipeline using Pinecone and Ollama for semantic, context-aware responses to student queries.
AI system that analyzes medical reports and generates simplified, user-friendly health insights from complex clinical data.
Finance tracking application for income/expense logging and budget management with an intuitive, minimal UI.
Open for freelance and contract work alongside my own ventures. I design and ship production systems — marketing sites, web apps, mobile apps, internal tools, AI integrations, and full platforms — solo or with your team.
Marketing sites, portfolios, landing pages, e-commerce. Fast, accessible, SEO-ready.
Next.js · Astro · Tailwind · Vercel · Cloudflare
Dashboards, SaaS products, internal tooling, admin panels, auth systems.
Next.js · React · NestJS · Prisma · PostgreSQL · Supabase
Cross-platform iOS + Android apps with deep native integrations (push, calling, biometrics).
Flutter · Riverpod · WebRTC · APNs · FCM
RAG pipelines, AI agents, chatbots, voice transcription, intelligence layers on top of existing data.
OpenAI · Anthropic Claude · Pinecone · Whisper
Multi-tenant SaaS architecture, real-time WebSocket systems, telephony, scaling, compliance.
Monorepos · Redis · BullMQ · Auth0 · WebRTC
Logos, brand systems, marketing assets — pulled into your product end-to-end.
Figma · Brand systems · Marketing collateral
/ How it works
/ 01
Intro call
Free 20 minutes. We scope the problem.
/ 02
Proposal
Fixed scope, fixed timeline, fixed price.
/ 03
Build
Weekly demos, live preview link, full ownership of code on day one.
/ 04
Launch
Deploy + handoff. 30 days of bug fixes included.
/ Get in touch
I reply within 24 hours. Free 20-minute intro call to scope your project. WhatsApp is fastest.
Message me on WhatsAppStartups are my obsession. The mess, the speed, the stakes — all of it. I’ve started three companies in under a year and I’ll start another one with you. Whether you have a wild idea and need a technical partner, or you’re an operator who needs a builder, I want to hear it.
“Identity and data should never permanently coexist.”
0
Ventures running
<0yr
From class to prod
0 apps
In one monorepo
0+
Integrations shipped
/ I’m open to
/ What I bring
Full-stack engineering
Web, mobile, AI, real-time, infra — architected a HIPAA-compliant healthcare CRM from zero and shipped it to production.
Multi-venture operating
Three companies running today across SaaS, healthcare, and UK care services.
AI-native instincts
RAG, agents, voice, embeddings, vector stores — production-grade, not demo-grade.
Product + design
I’ll design the brand, the marketing site, the product, and the founder narrative.
Speed
Class assignment to enterprise-grade production system in under a year.
Compliance mindset
HIPAA, encryption, RBAC, audit logging — architectural, not policy-bolted.
/ What I’m looking for
Domain experts
You know an industry deeply — healthcare, finance, defense, legal — and you need a builder.
Operators with networks
You can close enterprise deals, recruit talent, or open doors I can’t.
Conviction + follow-through
You don’t need permission to ship. You finish what you start.
Sectors that matter
AI infrastructure, healthcare, education, security, privacy, fintech, defense, climate.
/ Hard nos
/ Next step
WhatsApp is fastest. Tell me what you’re building, what you need, and what stage you’re at. I reply within 24 hours.
/ 08 — Research
A privacy-first computing architecture where identity is destroyed before processing.
An independent invention: a zero-knowledge data platform where identity is destroyed before processing, vault-isolated, and session-ephemeral. Reproduction or use of the architecture requires written permission.
/ Degree
Midwestern State University · Wichita Falls, TX
Expected December 2026
/ Coursework
/ Certifications
/ Leadership & Activities
I train hard. Daily. Combat sports keep me sharp, the gym keeps me strong, music keeps me grounded. The bansuri is from home — Sri Lankan roots in a Texas garage.
/ Discipline as a love language
I treat training the way I treat shipping — daily, obsessive, joyful. Combat sports build focus under pressure. Music keeps me honest about beauty. Both feed the engineering.
Sanithu moves ideas into production fast, with taste.
Bryln McCoy
Business Owner · McCoy's Roofing
He takes a deep understanding of computer science into goals to bring concepts to reality.
Bailey Tate
Friend / Peer
The chillest guy I ever met.
Ethan
Friend
/ 12 — Resume
Resume — printable, ATS-ready.
Single-page-portrait PDF. Mirrors the work on this site, formatted for recruiters and ATS parsers.
Internships, full-time roles, founder collaborations, or research partners — I am open to all of it. I respond within 24 hours.