A HIPAA-covered healthcare org needs Claude for clinical decision support. They already have an AWS Enterprise Agreement and existing AWS BAA. Which purchase channel minimizes new legal paperwork?
Answer: AWS Bedrock — the existing AWS BAA likely covers Claude as a subprocessor
On Bedrock, AWS is the data processor and Anthropic is a subprocessor under AWS's infrastructure. An existing AWS BAA typically covers subprocessors, so no separate Anthropic BAA may be needed — verify with legal, but this is the standard pattern. Direct API requires a separate Anthropic BAA. Vertex requires a separate Google Cloud BAA.