Deploy a HIPAA-aligned AWS foundation into your own account: versioned, validated, documented. Your engineers stay on the product.
No AWS credentials or patient data needed to get started.
A defined scope. A documented handoff.
By Xpertech, the team behind Xperlock.
Start with one AWS account or establish governance across your organization. Choose the scope that fits your team.
For small teams standing up a new, dedicated AWS account.
Not included in Lite: application compute, databases, and workload migration. Those are scoped separately.
For teams coordinating security across separate environments.
Both plans support hosted state and drift detection through Xperlock Workspace.
Your launch is ready. Someone is asking how you protect data, control access and prove what is configured: a customer, an auditor, or your board.
That work competes with the features your customers are waiting for.
The decision is how much of your team's time that work should take.
See what a comparable in-house build could take—and where an engineered baseline can help.
Illustrative labor budget
One lead engineer builds the baseline, with architecture and security review.
Illustrative labor budget
Infrastructure, architecture and security specialists work across parallel workstreams.
Illustrative US salaries and benefits over the stated engineering effort. Not measured client project costs. AWS usage, software, recruitment and ongoing operations are excluded.
Actual effort depends on account readiness, integrations, control scope and review requirements.
Configure, review, deploy and validate a reusable OpenTofu baseline, within a defined scope.
Assumes Xperlock plus retained internal work totals 20–40% of the equivalent in-house budget. Your quote establishes the actual comparison; this is not a measured result or guarantee.
Account preparation, AWS provisioning, integration and validation still take time. Your quote defines the delivery schedule.
Lite is a fixed-price scope of four to six weeks. Enterprise is quoted against your account structure.
See what is includedFrom your requirements to evidence you can use, with a decision point before anything is deployed.
Review your workload and requirements. Choose Lite or Enterprise and agree what is included.
Your agreed scopeReview the OpenTofu plan, permissions and estimated AWS running costs after readiness checks.
Your approved planApply the approved foundation using scoped, temporary access. You own the AWS resources.
Your AWS baselineReceive your inventory, implementation report and responsibility checklist. Choose handoff or ongoing support.
Your implementation evidenceKnow what will change before it changes.
Coordinated controls in your AWS environment, with a record of what was implemented.
Scoped roles and least-privilege policies help your team control who can do what.
Segmented networks and defined traffic paths. Enterprise adds account governance and scoped centralized inspection.
Key management and encryption settings for the resources in your agreed scope.
Audit trails, configuration records and enabled AWS security services help you investigate changes.
Backup and retention configuration for agreed resources, with recovery responsibilities documented.
A resource inventory, configuration checks and an action list give your team a clear handoff.
The deliverable is infrastructure in your account, with versioned configuration and documented responsibilities.
Your applications, data handling, policies, agreements and operations also need safeguards.
Real AWS engagements by Xpertech, the team behind Xperlock.
HealthcareClinical imagingLife sciencesXperlock is the productized version of this work. Same team, same standards, delivered as a defined scope.
Bring experienced infrastructure thinking to your next launch.
Deployment is a starting point. Continue with hosted state, drift detection and a supported update workflow.
Retained infrastructure state and version history.
Recurring automated checks highlight changes from the managed baseline.
See proposed changes before they are applied.
Configuration + hosted state
Compare the managed configuration
Your approval before updates
Baseline versions and deployment history
Prefer to manage it yourself? Choose a defined handoff of state, configuration and documentation.
Start with the right scope and a clear understanding of who owns what.
Lite fits a new, dedicated AWS account for a regulated workload. Enterprise fits multiple environments with shared governance. The free assessment helps you choose.
You own the AWS resources. Xperlock uses scoped access to implement the agreed foundation. Your handoff defines how access and state custody end.
The foundation is one part of your program. Your organization remains responsible for its applications, data handling, administrative safeguards and ongoing operations.
Workspace checks the managed baseline for drift. Corrections follow a reviewed change process; they are not silently applied. You can also choose a documented handoff to your team.
Start with a free assessment of your workload, data and environment needs. Leave with a clearer view of the next steps.
