Aptible - HIPAA-Compliant Cloud Infrastructure

TL;DR

TL;DR: Aptible is a PaaS that runs apps, databases, and AI workloads on isolated AWS infrastructure with HIPAA and HITRUST R2 compliance enforced by default, including a BAA and 30-day free trial.

Source and Accuracy Notes

• Project page: aptible.com
• Documentation: deploy-docs.aptible.com
• GitHub organization: github.com/aptible
• Pricing page: aptible.com/pricing
• HN launch thread: news.ycombinator.com/item?id=8086431
• Source last checked: 2026-06-17

What Is Aptible?

Aptible is a Platform-as-a-Service (PaaS) purpose-built for digital health teams that need to run production infrastructure in regulated environments. As described on their website:

Deploy apps, databases, and AI on secure, audit-ready cloud infrastructure with security and compliance enforced by default.

Unlike general-purpose cloud platforms where compliance is a manual overlay, Aptible bakes HIPAA and HITRUST R2 controls directly into the platform. Every deployment runs in an isolated, auditable environment on AWS with networking, IAM, and encryption handled automatically.

The company has been operating since 2013 and is headquartered in San Francisco.

Key Features

Isolated AWS Architecture

Each deployment runs in a shared-nothing environment on AWS. Networking, IAM roles, and encryption are configured automatically. You do not need deep AWS expertise to maintain a compliant posture.

Managed Databases

Aptible supports 8 database types on dedicated, non-shared infrastructure. Automated backups, scalable volumes, security hardening, and monitoring are included out of the box.

Compliance Automation

100% of HIPAA controls are enforced by default on dedicated environments. The platform also visualizes HITRUST and HIPAA Addressable controls. Evidence collection for audits is continuous and automatic.

AI Gateway

Aptible recently launched an AI Gateway that enforces encryption, audit logging, quotas, and availability for all LLM usage in production. This lets teams use AI models without creating compliance gaps.

Observability

Built-in audit-ready visibility across apps, databases, and infrastructure, with anomaly detection and system-level monitoring.

Pricing

Aptible uses usage-based pricing with no mandatory contracts or high minimums. From their pricing page FAQ:

Most teams getting started spend $200-$500/month on resources. Add a Production plan ($499/month) when you are ready for a dedicated stack, and total costs typically land in the $750-$1,000/month range.

Key pricing details:

• 30-day free trial - no credit card required (company email required)
• Production plan - $499/month for a dedicated stack
• Startup Program - available for companies with fewer than 20 engineers, includes co-marketing credits
• Billing - resources billed by the hour (containers, managed databases, etc.)

Setup Workflow

Step 1: Sign Up for Free Trial

Visit aptible.com and click “Get Started.” You need a valid company email address. Personal and disposable email addresses are not eligible for the trial.

Step 2: Deploy Your First App

Aptible supports deployment via Dashboard, CLI, or Terraform. The typical workflow:

# Install the Aptible CLI
# (download from https://www.aptible.com/docs/cli)

# Authenticate
aptible login

# Create an app
aptible apps:create my-health-app

# Deploy a Docker image
aptible deploy --app my-health-app --docker-image myregistry/myapp:latest

Step 3: Provision a Managed Database

# Create a PostgreSQL database
aptible db:create postgresql my-health-db --size 10

# The database runs on dedicated infrastructure with
# automated backups and encryption at rest

Step 4: Configure Compliance

On a Production plan, HIPAA controls are enforced automatically. Use the Dashboard to:

• View compliance status across all environments
• Manage role-based access controls
• Review audit logs and anomaly detection alerts
• Configure the AI Gateway for LLM workloads

Who Is Aptible For?

Aptible targets teams that need to operate in regulated environments but do not want to hire a dedicated DevOps or compliance team. Specific use cases include:

• Digital health startups building HIPAA-compliant telehealth or EHR platforms
• Health-tech SaaS companies that need a BAA without managing AWS compliance manually
• AI/ML teams in healthcare who need to run LLM workloads with audit trails
• Any team that needs HITRUST R2 certification without building controls from scratch

Their customer stories mention a behavioral health platform that reached 11 million Canadians during COVID-19 and an EHR SaaS scaled to 3 million patients without a single DevOps hire.

Aptible vs. Alternatives

| Feature | Aptible | Generic AWS | Other PaaS | |---|---|---|---| | HIPAA enforcement | Built-in, automatic | Manual configuration | Varies | | HITRUST R2 certified | Yes | No (you manage) | Rarely | | BAA included | Yes | Separate agreement | Sometimes | | Isolated infrastructure | Dedicated per customer | Shared (unless you architect) | Usually shared | | AWS expertise needed | Minimal | Deep | Varies |

The key differentiator is that Aptible treats compliance as a platform feature rather than a customer responsibility. As they put it: “A BAA is a contract, not a control.”

Security Notes

• All data encrypted at rest and in transit by default
• Role-based access controls with audit logging
• Continuous threat detection included in all plans
• Shared-nothing architecture - your workloads never share infrastructure with other customers
• Anomaly detection on infrastructure activity
• Built-in engineering support from a team that has managed HIPAA infrastructure on AWS since 2013

FAQ

Q: Do I need a credit card for the free trial? A: No. Sign up with a valid company email. Personal and disposable email addresses are not eligible.

Q: What compliance frameworks does Aptible support? A: HIPAA is enforced by default on all dedicated environments. HITRUST R2 certification is in place, and HITRUST/HIPAA Addressable controls can be visualized and applied through the Dashboard.

Q: Can I use my own AWS account? A: Aptible runs on isolated AWS infrastructure managed by Aptible. The platform abstracts AWS complexity so you do not need to manage compliance controls directly.

Q: How much does it cost to get started? A: Most teams spend $200-$500/month on infrastructure resources. A Production plan at $499/month adds a dedicated stack. Total typical spend is $750-$1,000/month. Startup credits are available.

Q: Does Aptible support AI/LLM workloads? A: Yes. The Aptible AI Gateway enforces encryption, audit logging, quotas, and availability for all LLM usage, letting teams use AI models without creating compliance gaps.

Q: What database types are supported? A: Aptible supports 8 managed database types on dedicated, non-shared infrastructure with automated backups and monitoring.

Conclusion

Aptible fills a specific gap in the cloud infrastructure market: teams that need to operate in regulated environments (especially healthcare) but lack the DevOps bandwidth to build and maintain compliance controls manually. By baking HIPAA and HITRUST R2 enforcement into the platform itself, Aptible turns compliance from an ongoing engineering project into a default setting.

The pricing is higher than raw AWS or generic PaaS options, but the trade-off is significant: no need to hire compliance specialists, no manual evidence collection for audits, and no risk of misconfigured shared infrastructure. For digital health teams scaling past their first compliance audit, Aptible offers a path to move fast without accumulating compliance debt.