HIPAA and Remy’s self-serve BAA

Your BAA

A workspace admin accepts it in settings, and it covers every app in the workspace. It’s $100 a month, and once HIPAA is on, only support can turn it off.

Covered services

Everything Remy runs itself is covered by your BAA with Remy. Outside vendors are usable only where a BAA between Remy and the vendor covers them, and that list below is live.

Everything else

Services Remy doesn’t have a BAA with are blocked for the whole workspace, unless you connect your own key for that service.

Logs and sessions

Payload Logging is off for every app, and Remy and your apps sign people out after at most 30 minutes idle.

Audit Log

Records who signed in and what they changed. No one can edit or delete an entry for its first year.

Your data

Export the workspace’s data at any time. Deleting the workspace destroys everything in it after 30 days, with an emailed receipt of what was removed.

Your apps’ code

HIPAA covers the services Remy calls for your apps, not what your apps’ own code does. Building each app to handle health information correctly is up to you.

The record

HIPAA has us keep a business associate agreement for six years after it was last in effect.

AAmazon Web Services13 services

Amazon Bedrock

Runs models served through Amazon Bedrock.

Sends user content

Data sentUser content

RetentionZero retention

TrainingNone

RegionUS

BAACovered

32 models

Amazon Nova 2 LiteAmazon Nova LiteAmazon Nova MicroAmazon Nova ProClaude 4.5 HaikuClaude 4.7 OpusClaude 4.8 OpusClaude 5.5 HaikuClaude 5.5 OpusClaude 5.5 SonnetClaude 5 OpusClaude 5 SonnetClaude 5 FableClaude 5.1 FableDeepSeek V3.2GLM 4.7GLM-5.3GPT 5.6 LunaGPT 5.6 SolGPT 5.6 TerraGPT-6 AstraGPT-6 LunaGPT-6 SolGPT-6.1 SolGrok 4.6Kimi K3Ministral 3 14BMinistral 3 3BMinistral 3 8BMistral Large 3Nemotron 3 Super 120BQwen3 235B

Amazon S3

Stores uploaded files, assets and app data.

Sends user content, personal info, credentials, app content, diagnostics

Data sentUser content, Personal info, Credentials, App content, Diagnostics

RetentionRetainedRetained until the app is deleted · purged from backups within 60 days

TrainingNone

RegionUS

BAACovered

Amazon SES

Delivers app and platform email.

Sends user content, personal info

Data sentUser content, Personal info

RetentionNot retained

Training

RegionUS

BAACovered

Amazon SQS

Queues background job execution.

Sends user content, personal info

Data sentUser content, Personal info

RetentionNot retained

Training

RegionUS

BAACovered

Amazon Cognito

Manages platform user accounts and sign-in.

Sends personal info, credentials

Data sentPersonal info, Credentials

RetentionRetainedRetained while the account exists

TrainingNone

RegionUS

BAACovered

AWS KMS

Encrypts stored secrets and sensitive data.

Sends credentials

Data sentCredentials

RetentionNot retained

Training

RegionUS

BAACovered

AWS Secrets Manager

Stores platform and workspace credentials.

Sends credentials

Data sentCredentials

RetentionRetainedWorkspace keys stored before the platform database held them, no longer read, held until deleted

TrainingNone

RegionUS

BAACovered

AWS Lambda

Processes media: video, audio, PDF pages and downloads, for media steps and previews.

Sends user content

Data sentUser content

RetentionNot retained

Training

RegionUS

BAACovered

Amazon Data Firehose

Carries audit log events into the write-once audit bucket.

Sends personal info, metadata

Data sentPersonal info, Metadata

RetentionNot retained

Training

RegionUS

BAACovered

Amazon CloudFront

Serves files and assets from the CDN.

Sends user content, personal info, app content

Data sentUser content, Personal info, App content

RetentionNot retained

Training

RegionUS

BAACovered

Amazon Aurora PostgreSQL

Stores workspace, app and account data.

Sends user content, personal info, credentials, app content, diagnostics

Data sentUser content, Personal info, Credentials, App content, Diagnostics

RetentionRetainedRetained until the app is deleted · purged from backups within 60 days

TrainingNone

RegionUS

BAACovered

Amazon ElastiCache for Redis

Caches sessions and coordinates background work.

Sends user content, personal info, credentials

Data sentUser content, Personal info, Credentials

RetentionNot retained

Training

RegionUS

BAACovered

Amazon EKS

Runs the platform's services and app sandboxes.

Sends user content, personal info, credentials, app content, diagnostics

Data sentUser content, Personal info, Credentials, App content, Diagnostics

RetentionNot retained

Training

RegionUS

BAACovered

Anthropic1 service

Runs Anthropic (Claude) model requests selected in apps.

Sends user content

Data sentUser content

Retention30 days

TrainingNone

RegionUS

BAACovered

14 models

Claude 4.5 HaikuClaude 4.5 OpusClaude 4.6 OpusClaude 4.6 SonnetClaude 4.7 OpusClaude 4.8 OpusClaude 4.5 SonnetClaude 5.5 HaikuClaude 5.5 OpusClaude 5.5 SonnetClaude 5 OpusClaude 5 SonnetClaude 5 FableClaude 5.1 Fable

Cloudflare4 services

CDN

Serves all app and asset traffic through the CDN edge; purges cached assets.

Sends user content, personal info, app content

Data sentUser content, Personal info, App content

RetentionNot retained

TrainingNone

RegionGlobal

BAACovered

SaaS custom hostnames

Issues certificates and routes custom domains for apps.

Sends metadata

Data sentMetadata

RetentionRetained

TrainingNone

RegionGlobal

BAACovered

Browser Run (PDFs, screenshots, prerender snapshots)

Renders pages for PDFs, screenshots, thumbnails and link previews.

Sends user content

Data sentUser content

RetentionNot retained

TrainingNone

RegionGlobal

BAACovered

Workers AI (Clef)

Evaluates text and images against typed questions with Clef.

Sends user content

Data sentUser content

RetentionNot retained

TrainingNone

RegionLocation not published

BAACovered

2 models

ClefClef Flash

Google2 services

Google AI

Runs Google model requests (Gemini, Vertex, Document AI extraction).

Sends user content

Data sentUser content

RetentionRetainedCached up to 24 hours, then discarded

TrainingNone

RegionUS

BAACovered

29 models

Gemini 2.5 Flash ImageGemini 2.5 Flash Native AudioGemini 3 FlashGemini 3 Pro ImageGemini 3.1 Flash LiteGemini 3.1 Flash Lite ImageGemini 3.1 Flash LiveGemini 3.1 ProGemini 3.5 FlashGemini 3.5 Flash LiteGemini 3.5 TranscribeGemini 3.6 FlashGemini 3.7 FlashGemini 3.8 FlashGemini 3.8 Flash-Lite TTSGemini 3.8 Flash TTSGemini 3.8 LiveGemini 3.8 Live Extended ThinkingGemini 4 ArgonGemini EmbeddingGemini Embedding 2Nano Banana 2.1Gemini Omni 1.1 FlashGoogle Document AILyria 3Lyria 3 ProVeo 3.1Veo 3.1 FastVeo 3.1 Lite

Google BigQuery

Holds a copy of the usage ledger for our own finance reporting.

Sends metadata

Data sentMetadata

RetentionRetainedKept in our warehouse for finance reporting

TrainingNone

RegionUS

BAACovered

Microsoft1 service

Microsoft Foundry

Runs models served through Microsoft Foundry.

Sends user content

Data sentUser content

RetentionRetainedKept only when abuse monitoring flags a request for human review

TrainingNone

RegionUS

BAACovered

61 models

Claude 4.5 HaikuClaude 4.5 OpusClaude 4.6 OpusClaude 4.6 SonnetClaude 4.7 OpusClaude 4.8 OpusClaude 4.5 SonnetClaude 5.5 HaikuClaude 5.5 OpusClaude 5.5 SonnetClaude 5 OpusClaude 5 SonnetClaude 5 FableClaude 5.1 FableDeepSeek V3.2DeepSeek V4 FlashDeepSeek V4 Flash 0731DeepSeek V4.1 FlashCohere Embed 4FLUX.1 Kontext [pro]FLUX 1.1 [pro]FLUX.2 [pro]GPT-4o Transcribe DiarizeGPT-5GPT-5 miniGPT-5 nanoGPT-5.1GPT 5.4GPT 5.4 ProGPT-5.5GPT 5.6 LunaGPT 5.6 SolGPT 5.6 TerraGPT-6 AstraGPT-6 LunaGPT-6 SolGPT-6.1 SolGPT Image 1.5GPT Image 2GPT Image 2.5 FlareGPT Image 2.5 SunburstGPT OSS 120BGrok 4.20Grok 4.20 ReasoningGrok 4.3Grok 4.6Kimi K2.6MAI-Thinking-1Mistral Document AIMistral Large 3Mistral OCR 4.1Phi-4Phi-4 miniPhi-4 mini ReasoningPhi-4 MultimodalPhi-4 ReasoningCohere Rerank 4 FastCohere Rerank 4 ProOpenAI Embedding 3 LargeOpenAI Embedding 3 SmallWhisper-1

OpenAI1 service

Runs OpenAI (GPT) model requests selected in apps.

Sends user content

Data sentUser content

RetentionZero retention

TrainingNone

RegionUS

BAACovered

35 models

GPT Image LatestGPT-4o Transcribe DiarizeGPT-5GPT-5 miniGPT-5 nanoGPT-5.1GPT‑5.2 ProGPT 5.4GPT 5.4 ProGPT-5.5GPT 5.5 ProGPT 5.6 LunaGPT 5.6 SolGPT 5.6 TerraGPT-6 AstraGPT-6 LunaGPT-6 Luna DecisionsGPT-6 SolGPT-6.1 SolGPT Image 1.5GPT Image 2GPT Image 2.5 FlareGPT Image 2.5 SunburstGPT-Live 1GPT Realtime 1.5GPT Realtime 2GPT Realtime 2.1GPT Realtime 2.1 MiniGPT Realtime 2.1 Mini TTSGPT Transcribeo3o3-proOpenAI Embedding 3 LargeOpenAI Embedding 3 SmallWhisper-1

Needs no BAA because it receives no health information: Twilio Verify.