How do I get a BAA (Business Associate Agreement) for Amazon Bedrock?

We recently wrote about our experience getting a business associate agreement (BAA) with OpenAI. 

In addition to OpenAI, we also needed to get BAA signed with AWS and Amazon Bedrock.

The goal of this post is to explain how to get a BAA signed for Amazon Bedrock. In our case, the process took less than a day.

Amazon Bedrock

Amazon Bedrock is a managed service that lets developers build and scale generative AI applications using foundation models from leading providers. It can be done via a single API and offers tools for customization, security, and integration with other AWS services.

Getting a Business Associate Agreement for Amazon Bedrock

Getting a business associate agreement for Amazon Bedrock is straightforward.

As seen on the AWS HIPAA Eligible Services page, Amazon Bedrock is included by default with the AWS BAA. 

If you have a BAA signed with AWS, Amazon Bedrock is included.

See also: Is Amazon Web Services (AWS) HIPAA compliant? (2025 update)

Conclusion

If you need a BAA with AWS for Amazon Bedrock, all you need to do is to make sure you have a BAA with AWS. Since we already had one, Amazon Bedrock was immediately useable in a HIPAA compliant manner.