Architecture
Built for clinical engagement at scale.
Leitara is a HIPAA-aligned behavioral health platform built on a modern AWS architecture.
Leitara is a HIPAA-aligned behavioral health platform built on a modern AWS architecture, with separated provider and client applications, role-scoped APIs, PostgreSQL row-level security, encrypted PHI storage, and AI capabilities powered through AWS Bedrock.
The platform was designed to support sensitive behavioral health workflows while remaining straightforward to evaluate, extend, and integrate into a broader product ecosystem.
Architecture at a Glance
Leitara uses a domain-driven application architecture with dedicated provider, client, billing, worker, and AI workflow services.
Core platform components
Provider web application
Client web and mobile applications
.NET 8 backend APIs
PostgreSQL with row-level security
AWS Cognito authentication
KMS-encrypted PHI storage
AWS Bedrock for Compass AI
Stripe billing
Google OAuth and Google Meet integration
Designed Around Role Separation
Leitara separates provider, client, worker, and AI responsibilities at both the application and infrastructure layers.
This supports clear security boundaries and a product model where providers manage clinical workflow while clients complete assignments, report check-ins, journal, and access resources.
Primary roles
Provider
Owns clinical workflow
Client
Owns engagement
Worker
Background processing
AI
Recommendations only
Security Built Into the Data Layer
Leitara uses PostgreSQL Row-Level Security as the authoritative tenant-isolation boundary. Each request establishes a role-aware execution context before database access, so provider and client visibility rules are enforced at the database layer rather than only in application code.
Security model
Cognito JWT authentication
Role-based execution context
PostgreSQL row-level security
RDS IAM authentication
Least-privilege workload roles
Audit logging for sensitive operations
This design reduces the risk of accidental cross-tenant access and creates a stronger foundation for future enterprise review.
HIPAA-Aligned Infrastructure
Leitara targets HIPAA alignment through layered safeguards across authentication, network isolation, encryption, auditability, and deployment control.
Production infrastructure includes private EC2 workloads, RDS in private subnets, KMS encryption for PHI storage, TLS in transit, WAF protection, CloudWatch logging, and audit archive retention.
Safeguards
Access control — Cognito, IAM, RLS, least privilege
Encryption — KMS at rest, TLS in transit
Isolation — Private subnets, ALB-to-EC2-to-RDS chain
Audit — Audit outbox, worker processing, S3 archive
Deployment — Immutable AMIs, tag-based promotion
Operations — SSM Session Manager, no public EC2 access
AI Architecture
Compass is built as a provider-controlled AI workflow, not an autonomous clinical actor.
Clinical context flows into Compass, which generates structured suggestions—but nothing is applied until the provider reviews and approves.
AI principles
AI assists provider workflow
Provider reviews before changes apply
Suggestions are structured and auditable
Clinical judgment remains with the provider
AI operates within existing authorization boundaries
Deployment and Operational Maturity
Leitara uses immutable AMI deployments, Pulumi-managed infrastructure, separate development, integration, and production environments, and tag-driven artifact promotion from release candidates to production.
Infrastructure
AWS
CloudWatch
RDS
Deployment
Azure DevOps
Immutable deployments
IaC
Operations
Monitoring
Audit
Async workers
Explore the Platform
Learn more about the principles, architecture, and technology behind Leitara.