Amazon Nova Act, a service that lets users build and manage fleets of AI agents for automating browser-based workflows, has been designated as HIPAA eligible. The announcement came from AWS on May 21, 2026, and opens up the tool for use in healthcare and life sciences organizations that handle electronically protected health information (ePHI).
Healthcare and life sciences organizations often rely on repetitive, manual browser tasks for critical processes like claims processing and referral coordination. Agentic AI can automate these workflows, but compliance with the Health Insurance Portability and Accountability Act (HIPAA) has limited adoption where ePHI might be involved. With Amazon Nova Act now listed as a HIPAA eligible service, organizations can deploy autonomous browser-based AI agents to handle complex workflows in connection with ePHI.
About Amazon Nova Act
Amazon Nova Act is an AWS service designed to build and manage fleets of reliable AI agents for automating production UI workflows at scale. The agents complete repetitive browser tasks and escalate to a human supervisor when needed. Nova Act integrates with external tools through API calls, remote Model Control Protocol (MCP), or agentic frameworks such as Strand Agents. Workflows can be defined using a mix of natural language and Python code.
The service helps automate real-world browser tasks that previously required manual work. It can navigate websites, fill out forms, extract information, and complete multi-step workflows. For healthcare and life sciences organizations, this means reduced administrative burden, faster claims turnaround, and more consistent execution of routine processes.
Why HIPAA eligibility matters for agentic AI
Unlike models that only generate text, agentic AI systems interact with live systems, access data, and execute workflows that may involve Protected Health Information (PHI). Under the AWS Shared Responsibility Model, AWS manages the security of the underlying infrastructure, while customers remain responsible for configuring controls to achieve HIPAA compliance within their deployments.
Healthcare use cases
With HIPAA eligibility, organizations can now automate appointment scheduling, insurance verification, and prior authorization across provider and payer portals. They can check claim status, submit appeals, and track reimbursements on payer websites without manual intervention. The service also supports sending and tracking referrals between providers and gathering data from multiple systems for compliance reporting.
Getting started
Stay ahead of the AI curve
The most important updates, news, and content — delivered weekly.
No spam. Unsubscribe anytime.
To use Nova Act in a HIPAA eligible environment, customers must follow these steps:
- Execute an AWS Business Associate Addendum (BAA) through the self-service process in the AWS Management Console and designate the account as a HIPAA account.
- Review the Nova Act documentation for service-specific security configurations.
- Implement security controls including AWS Identity and Access Management (IAM) access policies, AWS Key Management Service (AWS KMS) encryption, and AWS CloudTrail logging.
- Conduct a design review using the AWS Well-Architected Tool before deploying workloads involving ePHI.
For detailed implementation guidance, AWS recommends engaging AWS Professional Services or an AWS generative AI Competency Partner.
Things to know
- HIPAA eligibility: Amazon Nova Act is now included in the HIPAA Eligible Services Reference list. Customers with a signed AWS BAA can use Nova Act to process ePHI.
- Integration: Nova Act works with the Strand Agents framework and integrates with Amazon Bedrock AgentCore, Amazon CloudWatch, and IAM.
- Availability: The service is available in the US East (N. Virginia) AWS Region. More regions may be added in the future.
- Pricing: Details are available on the Amazon Nova Act pricing page.
- Compliance note: HIPAA eligibility means the service is designed for use in accordance with HIPAA requirements. Customers must configure the service to meet their specific compliance obligations. This announcement is not intended to provide legal or compliance advice.
Background
Amazon Nova Act was introduced as an AWS service for building and managing fleets of AI agents that automate browser-based workflows. The service is part of the Amazon Nova family of AI offerings. The authors of the announcement are Abiola Babsalaam, a Senior Technical Account Manager at AWS; Nishant Dhiman, a Senior Solutions Architect based in Sydney; and Shruti Arora, a GenAI Specialist Solutions Architect at Amazon AGI.
With this HIPAA eligibility, regulated healthcare environments can now adopt agentic AI for automating browser tasks that involve sensitive patient data. AWS encourages customers to execute their BAA and explore the Nova Act documentation to deploy their first compliant agentic AI workflow.
Related on Neura Market