The Technical Round
Explore how to design a clinical scheduling assistant under HIPAA in this technical round lesson. Understand enforcing data privacy with filtering, audit logging, and secure tool design. Learn to protect patient data by limiting model access and applying engineering controls that meet healthcare compliance requirements.
We'll cover the following...
Discovery gave Lakeview a scoping brief with a short list of allowed fields, a Lakeview-owned MCP server as the integration, and Amazon Bedrock as the likely deployment path. The next step is to design the system so that every one of those decisions is enforced in code.
In Anthropic’s FDE loop, this is the design an interviewer probes in the technical use-case screen or the final panel. For a healthcare case, the probing focuses on where patient data goes, what the model can see, and how the customer could prove what happened after the fact.
The design starts with the constraints it has to satisfy.
Framing the design before building
The scoping brief sets three constraints. The assistant may return only scheduling fields, which are the appointment time, provider, location, and visit type. Patient data must travel only through a HIPAA-covered path, under a signed BAA. And the privacy officer must be able to review who accessed which patient’s information.
Those constraints point to one central decision. Lakeview’s own MCP server filters every record before Claude sees it, so clinical fields never reach the model at all. Three reasons support it. Protection does not depend on Claude following an instruction, because the data is simply absent. The filter lives in one place that Lakeview owns, can test, and can show the privacy officer. And every access passes through that same place, which makes it the natural point to record an audit entry.
With that decision settled, the rest of the design follows the path a question takes.
The architecture at a glance
A staff member verifies the caller, then types a question into a staff application, such as the next appointment for a patient. The application sends the question to Claude on Bedrock along with the ...