Designing a HIPAA Architecture on AWS
A practical guide to HIPAA-eligible workloads on AWS: what the BAA covers, where the eligible-services list hurts you, and the LLM blind spot AWS leaves open.
PII Redaction Is a Lifecycle, Not a One-Time Fix
Redacting PII once is not enough. Data keeps flowing and policies drift. Treat privacy as a continuous lifecycle: discover, redact, review, monitor, repeat.