# How Clario technology detects PHI/PII in DICOM images using Amazon Bedrock

[AWS](https://yomu.fyi/company/aws) · Alex Boudreau · Aug 19, 2026

**Type:** Problem & solution

## Summary

Clario developed an automated PHI and PII detection solution on AWS to process thousands of DICOM image slices and PDF files in clinical trials. Medical imaging workflows require strict privacy compliance under HIPAA, GDPR, and ICH E6 guidelines across standard tags, custom vendor metadata, and pixel-burned text. To address this, the pipeline retrieves files from Amazon S3 and runs memory-intensive detection workloads on Amazon EKS backed by Amazon RDS for PostgreSQL. Amazon Textract handles optical character recognition, while Anthropic's Claude Sonnet on Amazon Bedrock classifies sensitive data using domain-optimized prompt engineering. The system identifies precise coordinates and sensitive entity types rather than directly altering files, enabling human-in-the-loop review before downstream redaction occurs.

## Context

Clinical trial DICOM image slices and PDFs often contain sensitive PHI and PII in standard tags, custom vendor metadata, or burned directly into pixels. Every slice must be de-identified in compliance with HIPAA, GDPR, and ICH E6 guidelines before moving downstream, but manual spot-checks risk compliance gaps and inconsistencies across globally distributed sites.

## Approach / What changed

Clario built an AWS-native architecture using Amazon API Gateway, Amazon S3, and Amazon EKS backed by Amazon RDS for PostgreSQL. The pipeline combines Amazon Textract for text extraction with Anthropic's Claude Sonnet on Amazon Bedrock for PHI/PII classification, separating entity detection and coordinate generation from downstream pixel masking to permit human review.

## Takeaways

- Separating PHI/PII detection and coordinate mapping from actual pixel masking allows human experts to review findings before irreversible changes are applied.
- The effective detection pipeline pairs Amazon Textract for text extraction with Claude Sonnet on Amazon Bedrock for PHI/PII classification using domain-optimized prompts.
- Investing in a manually validated ground truth dataset was essential for building a reliable, automated evaluation pipeline at production scale.

**Tags:** [Architecture](https://yomu.fyi/topic/architecture), [AWS](https://yomu.fyi/topic/aws), [Kubernetes](https://yomu.fyi/topic/kubernetes), [LLMs](https://yomu.fyi/topic/llm), [Privacy](https://yomu.fyi/topic/privacy)

[Read original post](https://aws.amazon.com/blogs/architecture/how-clario-automates-phi-pii-detection-in-dicom-images-using-amazon-bedrock)