System Architecture - Insurance AI Bridge

⚛️

Frontend Layer

Next.js Application

Server-side rendering with App Router for optimal performance

React 18 TypeScript

Claim Analysis Panel

Interactive UI for viewing AI-powered claim analysis

React Query Zustand

Policy Viewer

Syntax-highlighted policy document viewer

Tailwind CSS

Member Context Card

Timeline view of member interaction history

Framer Motion

↓

HTTPS/TLS Encrypted Connection

⚡

Bridge API Layer (FastAPI)

PII Masking Engine

AES-256 tokenization of sensitive data before LLM calls

Cryptography Fernet

LLM Orchestrator

Manages structured LLM calls with retry logic and validation

OpenAI SDK Pydantic

Data Aggregator

Combines data from multiple legacy sources into unified context

asyncio SQLAlchemy

Schema Validator

Type-safe validation of all API requests and responses

Pydantic v2

↓

Read-Only Database Connections

🔗

Legacy System Integration Layer

SQL Server Connector

Read replica connection for claim and member data

pyodbc Read Replica

SOAP API Client

Legacy system API integration for real-time data

zeep XML

SharePoint Integration

Policy document retrieval from SharePoint

SharePoint API OAuth 2.0

↓

Secure Data Channels

🏢

Legacy Insurance Portal (.NET)

SQL Server Database

Production database with claims, policies, and member data

SQL Server 2019

.NET Web Portal

Existing insurance portal (read-only for bridge system)

ASP.NET

Document Storage

SharePoint and file system for policy PDFs

SharePoint

Frontend Technologies

Next.js v14.x
TypeScript v5.x
React Query v5.x
Tailwind CSS v3.x
Zustand v4.x

Backend Technologies

FastAPI v0.104.x
Python v3.11+
Pydantic v2.x
SQLAlchemy v2.x
Uvicorn v0.24.x

Infrastructure

PostgreSQL v15+
Redis v7.x
Nginx Latest
Docker Latest
Prometheus Latest

AI & LLM

OpenAI GPT-4 Turbo
Anthropic Claude Sonnet
Structured Outputs Enabled
Function Calling Enabled

🔒

PII Protection

Zero-retention PII policy with AES-256 tokenization. All names, DOBs, and SSNs are masked before external API calls. Tokens cleared from memory immediately after processing.

🛡️

HIPAA Compliance

Full HIPAA compliance with encrypted data at rest and in transit, comprehensive audit logging, role-based access control, and automatic session timeout.

📊

Audit Trail

Complete audit logging of all data access with user ID, timestamp, IP address, action performed, and success/failure status. Logs retained for 7 years per HIPAA requirements.