Security & compliance

HIPAA compliant by default. Isolated by design.

Ambrose handles client health data every day, so safety is not a setting. It is the default. Here is how your data stays yours.

Guardrail

Encrypted agency vault

Your book of business, call recordings, exports, and documents live in an encrypted vault scoped to your agency. Protected health information only runs against model providers under a signed Business Associate Agreement.

Guardrail

Per-agency isolation

Every record carries an agency id, enforced by application filters and database row-level security. One agency can never see another’s keys, chats, credits, or contacts.

Guardrail

Runs on Amazon Bedrock

Inference runs on Claude through Amazon Bedrock in US AWS regions. Bedrock does not store prompts or completions and does not train on them.

Guardrail

Full audit trail

Every AI call and every staged action is logged and attributable. Sensitive actions are previewed and require your approval before they run.

Guardrail

No cross-tenant prompts

Skills, files, and conversations are scoped to your agency. Nothing from another tenant is ever injected into your agents’ context.

Guardrail

Least privilege

Agents get only the tools and integrations you attach. The in-app assistant can create and update, but never deletes.

The short version

Ambrose is built so an agency can safely put AI to work on real client data. Protected health information lives in an encrypted vault scoped to your agency and only runs against model providers under a signed Business Associate Agreement, on Claude through Amazon Bedrock. Each agency runs in its own isolated tenant, with its own data and credentials. And because every action is logged, and sensitive ones require your approval, you always know what your agents did and why.

Have a security or compliance question? Get in touch and we’ll walk you through it.

Ready when you are.

Join Tech Savvy Insurance and your Ambrose seat is included. HIPAA compliant from the first message.

Get started