How MaxLevels Built Shoorah’s
AI-Powered Mental Wellness Ecosystem

No. Shuru, the AI companion, provides 24/7 self-help support: guided reflection, mood check-ins, and conversational support in multiple languages. It does not diagnose, prescribe, or deliver treatment. Shoorah's PEAP (Premium Employee Assistance Program) connects users directly with licensed therapists, doctors, and life coaches, and the platform routes users to professional care rather than attempting to substitute for it. This boundary was a design constraint from the first architecture session, not a disclaimer added afterwards.

Scope first, model second. Shuru is deliberately bounded to self-help: reflection prompts, mood check-ins, and conversational support. Anything that reads as crisis, diagnosis, or treatment is routed to Shoorah's network of licensed professionals instead. Around that sit end-to-end encryption, conversation data that is never used for advertising or profiling, and a privacy review of every prompt and response path before it ships.

One backend, one data model, two interfaces. Individuals get a calm, private app. HR teams get a separate administration portal with role-based access and aggregated, anonymized reporting: they can see engagement trends across a workforce, never a named person's entries or conversations. Because both sit on the same data model, a capability built once serves both audiences.

GDPR and the UK Data Protection Act 2018 are the baseline. Shoorah also runs on ISO 27001-certified hosting, follows ICO guidance for sensitive personal data, aligns its architecture with SOC 2 Type 2 controls, and respects clinical confidentiality standards such as BACP wherever practitioners are involved. Third-party penetration testing runs on a regular schedule rather than as a one-off.

Yes, provided the API layer is designed for it up front. Shoorah's white-label layer lets a partner embed wellness capabilities such as journaling, meditation, assessments and Shuru inside their own branded product, with their own theming and a clean tenant boundary. Retrofitting multi-tenancy into a single-tenant app later usually means a rebuild, which is why it was part of the first architecture.

Feature parity and iteration speed. Shoorah ships journaling, mood tracking, meditation, breathwork, vision boards, self-assessments, a children's experience and an AI companion. Maintaining two native codebases across that surface area doubles the cost of every change. Flutter keeps a single codebase for iOS and Android while still delivering the animation and audio performance the experience depends on.

A first production release at this scope typically takes six to nine months, with discovery and architecture accounting for the first four to six weeks. Shoorah itself has been an ongoing partnership: the enterprise portal, the white-label layer and Shuru were delivered as later phases on the same foundation rather than crammed into one launch.

Four things, roughly in order of weight: how many distinct user types you support, the compliance bar you have to clear, whether AI is a thin wrapper or a purpose-built component, and how much of the architecture is designed for reuse. Building for two audiences and a white-label layer costs more in year one and considerably less across three.

The client does. MaxLevels works as a technology partner, so source code, infrastructure accounts, models and intellectual property belong to the client from day one, with documentation and handover treated as part of the engagement rather than an extra.

Work across healthcare spans clinical workflow tools, patient engagement apps, remote monitoring platforms and AI-assisted triage and documentation, built to the same compliance-first standard as Shoorah and adapted to GDPR, HIPAA or local regimes depending on the market.