How MHK built a HIPAA-eligible agentic AI solution on Amazon Bedrock

This article describes how MHK, a Hearst Health company, built SmartProminence AI Orchestrator—a HIPAA-eligible agentic workflow framework on AWS that processes healthcare documents while maintaining strict compliance and security standards.

• Controller-agent architecture separates workflow orchestration from LLM processing, enabling independent scaling and compliance enforcement
• Event-driven design using Amazon SQS enables stateless processing and fault isolation across concurrent jobs
• DAG-based parallel execution with conditional logic optimizes throughput and reduces token costs
• Configuration-driven agent registry allows new AI workflows to deploy in 2 weeks instead of 3-6 months
• Per-client KMS encryption, capability tokens, and network isolation provide defense-in-depth for multi-tenant PHI protection
• Achieved 90% reduction in manual review effort and unified HIPAA/SOC 2 compliance across all agents

The orchestrator demonstrates how agentic patterns can scale AI capabilities across healthcare workflows without multiplying compliance burden by centralizing security controls at the orchestrator level.