Amazon Quick Achieves HIPAA Eligibility and Opens for Health Data Processing

Amazon Web Services (AWS) has announced that the Amazon Quick service is now a HIPAA-eligible service, allowing healthcare organizations to process, store, and transmit Protected Health Information (PHI) on the platform with a signed Business Associate Addendum (BAA).

This eligibility, which covers the web, desktop, and mobile clients of Amazon Quick, is valid provided that users ensure proper configuration and operate under a signed AWS BAA. The service supports governance features such as access control list (ACL) aware retrieval, chat and feedback logging, and role-based access control. AWS emphasizes that HIPAA compliance is a shared responsibility, noting that customers must implement their own administrative, physical, and technical safeguards.

The platform does not use customer data to train its underlying large language models. Security measures include encryption at rest and in transit, as well as integration with AWS CloudTrail and Amazon CloudWatch for auditing and monitoring purposes.