The list below identifies the entities that may process Protected Health Information (PHI) on LivingPractice's behalf in the course of providing the Formation Agent and related services. LivingPractice maintains a Business Associate Agreement with each material subprocessor that meets the requirements of 45 CFR §164.504(e)(1)(ii) and §164.308(b).
| Subprocessor | Services | Purpose | BAA |
|---|---|---|---|
| Amazon Web Services, Inc. |
AWS Lambda Amazon Aurora Amazon Bedrock Amazon SES Amazon CloudWatch Amazon CloudWatch Logs Amazon API Gateway AWS Secrets Manager AWS KMS |
API runtime, primary database, AI inference for the Formation Agent (Claude family of models via Bedrock), transactional email, monitoring and logging, edge routing, credentials storage, and at-rest encryption. |
Executed All listed services appear on the AWS HIPAA Eligible Services Reference and are covered by the AWS Business Associate Agreement on file with LivingPractice. |
Foundation model providers (currently Anthropic, for the Claude family of models) provide the model weights used through Amazon Bedrock. Per the architecture of Amazon Bedrock, these providers do not have access to LivingPractice's prompts, completions, or logs — Amazon Bedrock deep-copies the model into AWS-owned deployment accounts to which the providers do not have access. AWS and the model providers do not use LivingPractice's Bedrock inputs or outputs to train any model. See AWS Bedrock User Guide — Data Protection.