# safeINIT

> safeINIT is an AWS Advanced Partner that helps health-tech, AI, and SMB teams build, secure, and scale on AWS. We deliver landing zones (safeZONE, built on AWS Organizations and OpenTofu), HIPAA-aligned architectures, AI systems on AWS (RAG, Bedrock, ML pipelines), and ongoing engineering retainers (INIT 1 / 2 / 3 / 5).

## Core pages

- [Home](https://safeinit.com/): What safeINIT does, who we work with, and how engagements start.
- [About](https://safeinit.com/about-us): Team, certifications, AWS partner status, and how we work.
- [safeZONE](https://safeinit.com/safezone): AWS landing zone built on AWS Organizations and OpenTofu (Terraform). Managed (1.5% of AWS usage) or Dedicated delivery.
- [Collaboration](https://safeinit.com/collaboration): Engagement models — retainer tiers INIT 1 / 2 / 3 / 5, project work, and how we scope.
- [Data and AI readiness assessment](https://safeinit.com/ai-readiness-assessment): Two to three week assessment for teams already on AWS: readiness scorecard, target architecture, 12-month roadmap and business case. The verdict can be "not yet".

## Industries

- [Healthcare](https://safeinit.com/industries/healthcare): HIPAA-aligned AWS foundations for health tech.
- [AI on AWS](https://safeinit.com/industries/ai-on-aws): RAG pipelines, Bedrock agents, ML pipelines, contact center AI, MCP servers.
- [SMB](https://safeinit.com/industries/smb): Cost optimization, production-ready AWS foundations, and growth scaling for small and mid-sized teams.

## Proof

- [Case studies](https://safeinit.com/case-studies): Customer stories with measured outcomes.
  - [https://safeinit.com/case-studies/techsoup-aws-cost-savings](https://safeinit.com/case-studies/techsoup-aws-cost-savings)
  - [https://safeinit.com/case-studies/i2iconnect-hipaa-aws-teletherapy](https://safeinit.com/case-studies/i2iconnect-hipaa-aws-teletherapy)
  - [https://safeinit.com/case-studies/rxperius-hipaa-aws-foundation](https://safeinit.com/case-studies/rxperius-hipaa-aws-foundation)
  - [https://safeinit.com/case-studies/esafetyfirst-ai-contact-center](https://safeinit.com/case-studies/esafetyfirst-ai-contact-center)
  - [https://safeinit.com/case-studies/pc-parts-marketplace-ai](https://safeinit.com/case-studies/pc-parts-marketplace-ai)

## Resources

- [HIPAA on AWS guide](https://safeinit.com/resources/hipaa-guide): Free downloadable guide covering 40+ AWS configurations and 5 architectural sections.
- [Events](https://safeinit.com/resources/events): Talks, webinars, masterclasses, and immersion days.
- [AWSodle](https://safeinit.com/resources/awsodle): A free, daily Wordle-style game for AWS — guess the Amazon Web Services service from clues across Classic, Use case, Emoji, and Logo modes. No sign-up; plays in the browser.
- [Blog](https://safeinit.com/blog): Practical guides on AWS, HIPAA compliance, security, and serverless architecture.
  - [How to become HIPAA compliant in the cloud: a guide for AWS users](https://safeinit.com/blog/how-to-become-hipaa-compliant): A step-by-step path to HIPAA compliance on AWS: security controls, BAAs, eligible services, breach response, and audits.
  - [AWS HIPAA Compliance: eligible services, BAA, and architecture](https://safeinit.com/blog/aws-hipaa-compliant): How AWS HIPAA-eligible services and security controls let you store, process, and transmit PHI while meeting federal requirements.
  - [5 HIPAA Compliance Requirements startups usually miss](https://safeinit.com/blog/hipaa-compliance-requirements): The HIPAA requirements health-tech startups overlook when moving fast, and what it takes to handle PHI safely.
  - [AWS security best practices for protecting your cloud infrastructure](https://safeinit.com/blog/aws-security-best-practices): Core AWS security practices to protect cloud workloads from misconfigurations, unauthorized access, and data breaches.
  - [Serverless architecture done right: How to build event-driven architectures](https://safeinit.com/blog/serverless-architecture): How serverless removes infrastructure management on AWS, and how to design event-driven systems that scale cleanly.
  - [AWS Lambda explained: The event-driven engine behind serverless](https://safeinit.com/blog/aws-lambda): What AWS Lambda is, how the event-driven execution model works, and where it fits in a serverless architecture.
  - [We built a serverless real time leaderboard for AWS Community Day and gave away an iPad](https://safeinit.com/blog/how-to-build-a-serverless-leaderboard-with-aws): How we built an interactive quiz leaderboard for AWS Community Day, and the serverless architecture behind it.
  - [AWS backup restore testing: prove recovery actually works](https://safeinit.com/blog/aws-backup-restore-testing): Only 10% of ransomware victims recover more than 90% of their data. How to test AWS backup restores on a schedule and turn results into audit evidence.
  - [AWS service control policies: how to prove your guardrails actually work](https://safeinit.com/blog/aws-service-control-policies): An SCP that has never been simulated is a claim, not a control. How to prove a guardrail denies what you think it denies, and what the IAM policy simulator still won't tell you.
  - [Multi-tenant AWS IoT architecture: where to draw the isolation boundaries](https://safeinit.com/blog/multi-tenant-aws-iot-architecture): One shared AWS IoT Core endpoint, one data account per tenant, and devices that learn who they work for at runtime. Isolation decisions from a white-label IoT platform we built, layer by layer.
  - [Is Amazon RDS HIPAA compliant? What the BAA covers and what you still configure](https://safeinit.com/blog/amazon-rds-hipaa-compliant): Amazon RDS and Aurora are on the AWS HIPAA eligible list. That lets you put PHI in them. Encryption, TLS, audit logging, snapshots and access are still yours to configure, engine by engine.

## Tools

- [AWS Assessment Score](https://safeinit.com/assessment-score): Self-serve AWS maturity assessment. Get a per-category score, recommendations, and a personalised report.

## Legal

- [Privacy Policy](https://safeinit.com/privacy-policy)
- [Cookie Policy](https://safeinit.com/cookie-policy)
- [PI & Cyber Insurance](https://safeinit.com/pi-cyber-insurance)

## Contact

- Email: contact@safeinit.com
- Web: https://safeinit.com