AWS (Amazon Web Services) discussed how Bluesight developed Prism, an AI layer that connects hospital pharmacy and compliance data across its product suite.
According to a statement from the AWS vendor, Prism Assistant for ControlCheck is generally available and works with 20 healthcare systems. Meanwhile, the multi-product agent for 340B Group Purchasing Organization (GPO) compliance is still scheduled for release in late 2026.
This project addresses a data-intensive process that is often performed manually by hospital pharmacy teams. AWS says that a single company covered by the 340 billion could spend more than 4,000 staff hours each year reviewing whether GPO drug purchases qualify for the exception. Staff should compare purchasing data to U.S. Food and Drug Administration shortage notifications, American Society of Health-System Pharmacists records, days on stock, machine learning shortage predictions, and backorder reports from other hospitals.
ControlCheck agent reaches 20 hospital health systems
Bluesight began with ControlCheck, a controlled substances monitoring product. Although the hospital diversion team used ControlCheck to identify anomalous drug transaction patterns, compliance staff still had to create reports, review dashboards, and manually correlate results.
Prism Assistant provides users with a conversational interface that allows them to query ControlCheck data, create graphs, and generate report materials. AWS claims that Bluesight built the first version during a three-day experience-based acceleration engagement in September 2025, during which eight Bluesight engineers collaborated with seven AWS specialists. TechForge Media notes that while these rapid development schedules highlight the tools’ agility, they remain vendor-reported metrics pending independent validation from active health systems themselves.
The team used Strands Agent on Amazon Bedrock and hosted the application through Amazon Bedrock AgentCore Runtime. AgentCore Gateway exposed more than 10 ControlCheck APIs as MCP tools, allowing agents to discover and invoke them during user requests.
Importantly, Bluesight avoided direct access to the language model database. The company’s engineers wrapped the existing ControlCheck API endpoint with an AWS Lambda function that returned structured data suitable for agent processing. The company kept its business logic within the application layer, where agents interpreted questions, selected tools, collected records, and presented results.
AWS reports that this design reduces query latency from 5 minutes to 10 seconds. The deployment also included a front end with chart generation, observability controls, cost attribution, encryption, authentication, and infrastructure-as-code.
“This is exactly what diversion program leaders have been waiting for. It provides faster answers and takes the manual out of every investigation,” said Sameer Neyazi, director of product management at Bluesight.
According to AWS, Bluesight deployed the service within a virtual private cloud and reached general availability within nine months. The 20 healthcare systems using Prism Assistant represent evidence of active deployments in your AWS account. Larger GPO agents have not yet reached that stage.
Multi-agent 340B compliance targets GPO purchases
Federal 340B regulations prohibit disproportionate share, pediatric cancer, and independent cancer hospitals from purchasing outpatient drugs through GPO contracts if non-GPO channels can supply the drugs. Compliance teams must document exceptions when supply conditions prevent that purchasing route.
Bluesight’s planned GPO agent will aggregate records from CostCheck, ShortageCheck, and 340BCheck. CostCheck provides purchasing information, ShortageCheck provides evidence of drug availability, and 340BCheck verifies eligibility data.
The proposed architecture uses Anthropic Claude Sonnet 4.6 as the primary model and Claude Haiku 4.5 for low-latency operation via Amazon Bedrock. AgentCore Runtime runs agents in a VPC with private subnets. AgentCore Gateway connects Lambda-based tools to three Bluesight product systems.
Coordinating GPO agents direct specialized data workers. One employee retrieves purchase records, another collects proof of supply, and another verifies 340B eligibility. The coordinator collects evidence and produces audit-oriented reports.
A second AWS acceleration engagement focused on that architecture in March 2026. AWS says the team connected to the system by the end of the first day and completed all planned functionality by the end of the second day. The company tested the agent against synthetic data and reported a 100 percent invoice discovery rate and 93 percent evidence justification accuracy, exceeding its 85 percent goal.
However, business buyers should be careful. These numbers do not represent the overall production performance of hospital customers. Synthetic testing can demonstrate whether tool calls, logic matching, and report generation work for prepared scenarios, but it cannot establish how the system handles local data gaps, late updates of missing items, unusual drug IDs, or disputed purchase cases.
Maintain compliance scores outside of the language model
Bluesight assigns language models constrained roles within the GPO workflow. The model collects records, calls product tools, and drafts instructions. Deterministic scoring services calculate compliance decisions.
The service evaluates 13 evidence inputs, applies priority-based matching, and uses configurable time frames. This design provides compliance teams with a repeatable scoring process rather than LLM-generated decisions, and allows auditors to examine the source records, applied rules, and sequence of tool calls behind each decision.
Despite automated assistance, hospital pharmacy, legal, and compliance teams still require absolute ownership of these policy settings. Supplier shortage thresholds, acceptable inventory periods, or purchase date windows can change compliance outcomes. Bluesight’s approach provides customers with a technical mechanism to configure these decisions, but each organization must set and approve its own policy rules.
HIPAA controls and audit traces shape your deployment
Amazon Bedrock holds HIPAA status and Bluesight operates under a business partnership agreement with AWS. AWS says it does not train its underlying models based on customer data processed through Amazon Bedrock.
Bluesight uses Amazon Cognito to authenticate OAuth2 client credentials and validate JSON web tokens. AgentCore Runtime provides session isolation for concurrent customer requests. AWS Key Management Service encrypts your data at rest and in transit, and AWS Secrets Manager manages credentials for downstream services.
Amazon CloudWatch records agent decisions, tool calls, data access events, alarms, and performance metrics. This audit trail is important if a hospital needs to explain why it authorized a GPO purchase or escalated a pattern of drug diversion.
Bluesight’s internal measurements across 20 health systems show report generation and analysis in ControlCheck workflows is up to 97% faster. According to the report, manual assembly time was reduced from approximately 6 hours to 15 minutes, a reduction of 96%. Pre-investigation triage was reduced from 3 hours to approximately 10 minutes, and variance analysis of controlled substances was reduced from 30 minutes to less than 1 minute.
Teams should rigorously run past purchase cases in parallel with existing review processes before agent-assisted results influence compliance decisions. Local testing requires rigorous examination of data integrity, drug code matching, timing of shortages, exception rules, and cases where human reviewers previously disagreed. Each generated result must preserve the version of the scoring rule, the source evidence, and the tool trace that generated it.
Reference: AWS GraphRAG reduces drug research cycles by 87%
Want to learn more about AI and big data from industry leaders? Check out the AI & Big Data Expos in Amsterdam, California, and London. This comprehensive event is part of TechEx and co-located with other major technology events such as Cyber Security & Cloud Expo. Click here for more information.
AI News is brought to you by TechForge Media. Learn about other upcoming enterprise technology events and webinars.
