# Interested in using prodigy for tagging HIPAA data. Any advice on setup?

**URL:** https://support.prodi.gy/t/interested-in-using-prodigy-for-tagging-hipaa-data-any-advice-on-setup/6188
**Category:** Uncategorized
**Tags:** usage
**Created:** [December 16, 2022, 8:30pm UTC](https://support.prodi.gy/t/interested-in-using-prodigy-for-tagging-hipaa-data-any-advice-on-setup/6188 "2022-12-16T20:30:04Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![uwyang](https://sea2.discourse-cdn.com/flex020/user_avatar/support.prodi.gy/uwyang/32/3467_2.png) [@uwyang](https://support.prodi.gy/u/uwyang)
#### Post date: [December 16, 2022, 8:30pm UTC](https://support.prodi.gy/t/interested-in-using-prodigy-for-tagging-hipaa-data-any-advice-on-setup/6188/1 "2022-12-16T20:30:04Z")

</div>

Hello, heard about prodigy, like it, but want to make sure of some details.

I'm interested in using Prodigy to tag some health care data (text and audio/video). All data are anonymized. We are interested in using Prodigy as tagging tool, but we also need to be HIPAA compliant at the same time.

Does anybody have any prior experience or suggestions on the setup?  
We work with AWS stack if that makes a difference.

Thank you very much for the advice!!!

---

<div class="post-metadata">

### Author: ![ryanwesslen](https://sea2.discourse-cdn.com/flex020/user_avatar/support.prodi.gy/ryanwesslen/32/2969_2.png) [@ryanwesslen](https://support.prodi.gy/u/ryanwesslen)
#### Post date: [December 16, 2022, 9:11pm UTC](https://support.prodi.gy/t/interested-in-using-prodigy-for-tagging-hipaa-data-any-advice-on-setup/6188/2 "2022-12-16T21:11:42Z")

</div>

hi @uwyang!

Thanks for your question and welcome to the Prodigy community 👋

Prodigy is an on-premise, Python library. Prodigy runs entirely on your own hardware and never "phones home" or otherwise connects to our or other third-party servers. So if you're working with sensitive data, you can even run it on a completely air-gapped machine with no internet access to meet your compliance requirements (which is how many users working on health data for instance do it).

Here's a related question where someone asked about HIPAA and Ines' thoughts:

> [@Possible to interface via another app?](https://support.prodi.gy/t/possible-to-interface-via-another-app/4228/4):
>
> Yeah, in general, this should be fine! (Of course, it'd probably be easier and less work to just use Prodigy's web-based UI if you can.) Btw, we have a lot of users who are working with sensitive data like electronic health records and are running Prodigy on an air-gapped machine (see [Med7](https://support.prodi.gy/t/med7-an-information-extraction-model-for-clinical-natural-language-processing-built-with-spacy-prodigy/2632) for instance), so I'm pretty confident that you won't have any problems there. I don't know of any case where Prodigy didn't meet the compliance requirements and it's passed every security review – mainly bec…

> [@uwyang](#):
>
> We work with AWS stack if that makes a difference.

Prodigy is installed on the cloud as it would on-premise. I would suggest looking through the [`aws`](https://support.prodi.gy/tag/aws) issues as it can give you a lot of ideas on how custom it and how others have worked with AWS.

Hope this helps!
