bonfireDB vs AWS HealthLake

AWS HealthLake is a mature, HIPAA-eligible, fully managed FHIR R4 system-of-record with deep AWS integration and a strong Cures Act / payer-interop story. bonfireDB is an early-stage, app-native clinical backend (TypeScript + Postgres) that gives a single product team typed projections, fresh-on-commit reads, ABAC-enforced semantic search, and FHIR generated underneath.

TL;DR

If your job is to store, exchange, and analyze health data across systems — Cures Act / ONC / CMS conformance, payer IGs, Bulk Data export, SQL analytics over FHIR — HealthLake is a genuinely strong, battle-tested choice with zero ops and the full weight of AWS behind it. Where it's awkward is when one team is building an application on top of it: search is eventually consistent by default, there's no live reactive cache, fine-grained authz is a fixed SMART-scope relationship rule rather than a custom write-enforced ABAC engine, there's no native semantic/vector search and no in-service agent runtime (the official AWS Labs HealthLake MCP server, Jan 2026, is a self-hosted companion over raw FHIR), and the ~$197/mo-per-datastore always-on floor (Advanced tier, plus request costs) punishes dev/stage/prod and per-tenant designs. bonfire targets exactly that app-builder gap with typed clinical primitives, committed read models, a reactive query hook, built-in ABAC-enforced semantic search, and build-your-own-MCP — FHIR R4 generated underneath. bonfire is early-stage and largely positioning today; HealthLake is shipping, certified-adjacent, and running ~billions of FHIR resources in production at enterprise customers.

At a glance

A managed FHIR R4 datastore built for enterprise interoperability and analytics, compared with a TypeScript clinical backend designed for one team building an app fast.

AWS HealthLakebonfireDB
TypeManaged FHIR R4 datastore (interop/analytics-first)Agent-native clinical backend; FHIR generated underneath
Language / stackClosed AWS service; DynamoDB + OpenSearch internallyTypeScript + Postgres + pgvector
License / costProprietary; ~$197/mo per always-on datastore (Advanced tier) + request costsApache-2.0 core (free) + managed tier (see pricing)
HostingManaged-only (AWS cloud); no self-host or local devYour AWS (OSS) or managed
App-native typed APINo — standard FHIR R4 REST, no typed clinical SDKYes — typed clinical primitives
Fresh-on-commit app readsEventual by default; strong is opt-in, doubles write costYes — committed operational read models
Reactive realtime cacheServer-push Subscriptions (Oct 2025); not a reactive cacheYes — useClinicalQuery
Built-in semantic searchNone native — bolt on Bedrock/OpenSearch vectors yourselfBuilt in — pgvector, ABAC-enforced
Agent / MCP layerNo in-service agent runtime; the official AWS Labs OSS HealthLake MCP server (Jan 2026) is a self-hosted companion (11 FHIR tools, read-only mode), and agents over raw FHIR still cap ~50% (FHIR-AgentBench)Build-your-own-MCP over clean projections
Clinical authorization (write-enforced)SMART scopes + fixed GP-relationship rule; no custom write ABACRead + write enforced ABAC, auto-audit
Automatic audit / provenanceCloudTrail API logs; no auto FHIR AuditEvent/ProvenanceAutomatic
FHIR conformance / exportMature FHIR R4 (no R4B/R5); US Core v7, Bulk Data v2, Da VinciFHIR R4 generated underneath; scoped conformance (honest: not a full enterprise FHIR server)
Best forEnterprise interoperability, payer exchange, analytics at scaleBuilders of AI-native health apps (scribes, copilots, agents)

Where AWS HealthLake genuinely wins

  • Zero ops, real maturity: GA since July 2021, a HIPAA-eligible always-on managed FHIR R4 server under the AWS BAA with an SLA, CloudTrail, and CloudFormation/CDK — no servers, scaling, patching, or backups to run.
  • Strong regulatory + interoperability breadth: US Core up to STU v7 (USCDI v4), Bulk Data Access v2, SMART App Launch + OAuth2/OIDC, ONC Inferno-validated, plus CARIN BB and Da Vinci PDex/CDex/PAS — purpose-built for Cures Act / CMS mandates bonfire does not attempt.
  • Deep AWS-native integration: IAM, CloudTrail, PrivateLink/VPC, EventBridge, Lake Formation governance, and zero-ETL SQL analytics over FHIR via Amazon Athena.
  • Integrated Comprehend Medical NLP turns unstructured clinical text into queryable native FHIR resources (entities, relationships, PHI) without you building an NLP pipeline.
  • Very active 2024-2026 roadmap closing historical FHIR gaps: Bundle transactions, JSON/FHIRPath Patch, $validate, SMART v2 scopes, FHIR Subscriptions (Oct 2025), async bundles, plus ETag/If-Match and idempotency-key concurrency control.
  • Proven at scale: named enterprise users including Greenway Health (cited ~9.5B FHIR resources ingested), Rush, Cortica, InterSystems, and Redox — a track record an early-stage project cannot claim.

Where bonfireDB is built different

  • Fresh-on-commit app reads: HealthLake search is eventually consistent by default (DynamoDB write -> OpenSearch index lag); strong consistency exists but is opt-in per request, doubles write-capacity consumption, and only on history-enabled stores. bonfire serves committed operational read models so app reads reflect the latest write without a per-call tax.
  • Reactive realtime cache: HealthLake's Oct-2025 FHIR Subscriptions are server-push notifications (REST-Hook / EventBridge), not a live reactive query layer or bidirectional sync — apps still poll or wire up their own cache. bonfire's design is a reactive client query (useClinicalQuery) that updates as data changes.
  • App-state-as-first-class: HealthLake is a FHIR system-of-record, so non-FHIR draft/app/UI state has no natural home and teams typically run a second database for it. bonfire is designed to hold app and clinical state in one typed store, with FHIR generated underneath.
  • Write-enforced custom ABAC + Consent: HealthLake's fine-grained authorization is a fixed rule (SMART user/ scopes plus a Patient.generalPractitioner / Patient.link relationship check) — not an arbitrary attribute-based policy engine, and it has no Consent-resource enforcement; broader per-tenant isolation you build in a proxy/Lambda yourself. bonfire's design enforces ABAC on reads AND writes natively.
  • Native semantic search: HealthLake has no built-in vector/semantic search — you bolt on Bedrock + OpenSearch vectors + Athena yourself. bonfire ships pgvector semantic search with the same ABAC enforcement applied to results.
  • Agent / MCP layer over clean projections: HealthLake has no in-service agent runtime; AWS Labs now ships an official open-source HealthLake MCP server (Jan 2026) — a self-hosted companion exposing 11 FHIR tools (CRUD, advanced search, $patient-everything, import/export) — but it serves raw FHIR, where agents cap around 50% answer correctness (FHIR-AgentBench, best multi-turn+retriever+code architecture). bonfire's build-your-own-MCP sits over clean typed projections rather than raw FHIR, plus automatic audit on access.
  • Cost + DX for a small team: HealthLake's Advanced tier bills ~$0.27/hr (~$197/mo) per datastore, always on even at zero traffic, plus per-request charges — painful across dev/stage/prod and per-tenant stores — and is closed, AWS-only, with no self-host/local-dev/offline-CI option. bonfire's core is Apache-2.0, runs in your own AWS or a managed tier, and is built to run locally.

Which should you choose?

Choose AWS HealthLake if…

Your primary job is interoperability, regulatory conformance, payer data exchange, or analytics at enterprise scale — Cures Act / ONC / CMS, Bulk Data export, US Core, Da Vinci IGs, SQL over FHIR — and you want a fully managed, certified-adjacent, battle-tested FHIR system-of-record with zero ops and deep AWS integration.

Choose bonfireDB if…

You're a small team shipping an outpatient or AI-native healthcare app and you want typed primitives, fresh-on-commit reactive reads, built-in ABAC-enforced semantic search, and an agent/MCP layer over clean projections — with FHIR generated underneath rather than as the thing you build against — and you can accept an early-stage, largely-vision product over a mature managed service.

bonfireDB is early-stage; this compares its design and positioning against AWS HealthLake as it ships today (2026). Verify current AWS HealthLake capabilities before deciding.

You build the app. Bonfire is the clinical data layer underneath.

Open source. Runs in your AWS. The clinical layer is handled.

FAQ

Frequently asked questions

What is a good AWS HealthLake alternative for building an app?

HealthLake is a strong managed FHIR R4 datastore for interop and analytics, but it's interop-first, not app-first. bonfireDB is an early-access, app-native TypeScript + Postgres clinical backend with typed primitives, fresh-on-commit reads, and built-in ABAC, FHIR generated underneath. If your job is exchange and conformance, HealthLake wins; if it's shipping one app fast, bonfireDB is designed for that gap.

How much does AWS HealthLake cost?

As of 2026 (verify current pricing), HealthLake's Advanced tier bills roughly $0.27/hr (~$197/mo) per datastore, always on even at zero traffic, plus per-request charges. That floor multiplies across dev, stage, prod, and per-tenant stores. bonfireDB's core is Apache-2.0, runs in your own AWS, and is built to run locally.

Is AWS HealthLake HIPAA compliant?

Yes. As of 2026, HealthLake is a HIPAA-eligible AWS service available under the AWS BAA, with CloudTrail logging and an SLA. Verify current eligibility and sign a BAA for your account. bonfireDB is open-source software you run in your own AWS, so HIPAA compliance depends on how you deploy and operate it.

Does AWS HealthLake support semantic or vector search over clinical notes?

Not natively, as of 2026. HealthLake has no built-in vector/semantic search, so you bolt on Bedrock plus OpenSearch vectors and Athena yourself. bonfireDB ships pgvector semantic search with ABAC enforcement applied to the results, so retrieval respects the same access policy as the rest of the data.

Are HealthLake reads consistent for an app, and is there a reactive cache?

HealthLake search is eventually consistent by default; strong consistency is opt-in per request, doubles write-capacity cost, and only works on history-enabled stores. Its Oct-2025 FHIR Subscriptions are server-push notifications, not a reactive query layer. bonfireDB is designed for committed read models and a reactive client hook (useClinicalQuery).