Life sciences
A governed RAG system for sensitive research data
The constraint. Retrieval over sensitive research material, where the model must never surface content the user is not entitled to see.
The control model was designed before the model was chosen: entitlement-aware retrieval, IAM boundaries and audit logging built in from the first commit. The result was a proof of concept that could credibly become production, rather than a demonstration that quietly stalled at the security review.
- Amazon Bedrock
- pgvector
- Lambda
- API Gateway
- IAM
- CloudWatch