{"id":"hipaa-baa-llm","slug":"hipaa-baa-llm","name":"HIPAA-friendly LLM with BAA path","shortName":"HIPAA LLM","problemStatement":"Process PHI-adjacent text with a provider willing to sign a BAA / equivalent and offer enterprise isolation controls.","whenNotTopPick":"Azure OpenAI already under Microsoft BAA, Vertex mandated, or memory-layer HIPAA (Supermemory) is the gap not the LLM.","categoryIds":["cat-inference-apis"],"depotPickProviderId":"amazon-bedrock","depotPickRationale":"GUESS-adjacent: always confirm current BAA eligibility with counsel + vendor. Privacy weighted. Confidence: medium (legal, not just tech).","runnersUpIds":["azure-openai","vertex-ai","anthropic","supermemory"],"weights":{"capabilityFit":0.2,"pricePerformance":0.1,"latencyReliability":0.12,"developerDx":0.1,"privacyPosture":0.3,"lockInRisk":0.08,"maturity":0.1},"methodologyNotes":"GUESS-adjacent: always confirm current BAA eligibility with counsel + vendor. Privacy weighted. Confidence: medium (legal, not just tech).","tags":["hipaa","baa","healthcare","compliance"],"depth":{"whenNotToUse":{"text":"Azure OpenAI already under Microsoft BAA, Vertex mandated, or memory-layer HIPAA (Supermemory) is the gap not the LLM.","source":"editorial `whenNotTopPick` (data/jtbds.json)"},"whenNotToUseReason":null,"runnerUp":{"providerId":"azure-openai","name":"Azure OpenAI","overallForJob":7.9,"pickOverallForJob":8.04,"beatsPickOn":["capabilityFit","developerDx"],"source":"first resolvable entry of the job's editorially ranked `runnersUpIds`; scores are stored job-weighted scores"},"runnerUpReason":null,"lockIn":{"pickLockInRisk":7,"runnerUpLockInRisk":7.8,"scale":"0–10 stored curated estimate; higher = more lock-in (worse)","pickExitSignals":[],"runnerUpExitSignals":[],"pickNotes":[],"selfHostFallback":[],"migration":"The pick has lower stored lock-in risk than runner-up Azure OpenAI (7 vs 7.8).","migrationReason":null,"derivedFrom":"stored lockInRisk scores, provider tags (oss, self-host, openai-compat, open-models), free rows that list this job, and verbatim provider notes. No migration guide was invented."}},"freshness":{"pick":{"score":{"asOf":"2026-09-14","ageDays":43,"stale":true,"staleAfterDays":30,"reason":null},"lastReviewed":{"asOf":"2026-09-14","ageDays":43,"stale":true,"staleAfterDays":30,"reason":null},"sourceCheck":{"checkedAt":"2026-10-27","sourceUrls":1,"sourcesReachable":1,"pricingRows":63,"pricingRowsReconfirmed":26,"note":"A source re-check confirms the page is reachable and, for pricing rows, that the stored amount and SKU name appear on it. It does not re-derive or change the score.","reason":null}}},"depotPick":{"id":"amazon-bedrock","slug":"amazon-bedrock","name":"Amazon Bedrock","tagline":"Enterprise multi-model switchboard. Great when AWS is mandatory; mediocre when you just want the best Claude…","overall":8.04},"runnersUp":[{"id":"azure-openai","slug":"azure-openai","name":"Azure OpenAI","tagline":"Pick when IT already standardized on Azure and needs VNET/private endpoints. Otherwise go direct OpenAI and…","overall":7.9},{"id":"vertex-ai","slug":"vertex-ai","name":"Google Vertex AI","tagline":"Enterprise Gemini path. Use AI Studio for prototypes, Vertex when security review starts asking questions.","overall":8.1},{"id":"anthropic","slug":"anthropic","name":"Anthropic","tagline":"Depot default for serious coding and production agents. Prefer Sonnet for cost/quality; reserve Opus for hard…","overall":8.5},{"id":"supermemory","slug":"supermemory","name":"Supermemory","tagline":"Managed context engine when you want memory without running a vector DB. Mem0 for simpler fact API; Cognee…","overall":7.84}]}