AI for medical clinics that ship care, not chart hours.
Patient portal front ends, HIPAA aware intake forms, multi physician scheduling, secure document upload, and protocol RAG. We are not the EHR; we build the layer that makes the EHR usable for patients and staff.
HIPAA constrains the surface. Staff time is the bottleneck.
Clinics we have spoken to ship the same four bottlenecks. Patient intake done by hand on paper. Front desk phone load with the same five questions. EHR patient portal abandoned. And referral coordination that takes days.
- Patient intake on paper. New patient fills a clipboard, front desk types it into the EHR. Twenty minutes of staff time per intake plus typo risk.
- Front desk phone load. "What insurance do you take?" "How do I refill?" "What is the address?" Asked daily, answered by a human.
- EHR portal adoption. Patients are told to log in to MyChart or AthenaHealth, fail at the password reset, give up. A friendlier front end fixes it.
- Referral coordination. Specialist needs records from primary. Records faxed (yes, still). Days lost.
Sources: HIPAA Security Rule, HIPAA Breach Notification.
Five capabilities that respect HIPAA and improve patient experience.
HIPAA aware intake
Patient fills intake on phone before the visit, signed consents, insurance card capture, all encrypted at rest and in transit. BAA available with hosting partner. OCR pattern.
- BAA hosting
- encrypted at rest
- audit logging
Front end on top of EHR
Clean modern UI for portal, messaging, refill, scheduling. EHR is the system of record; we are the experience layer.
Multi physician scheduling
Schedule across multiple providers, multiple locations, with insurance pre auth status visible. Reduces same day cancellations.
Protocol RAG for staff
Clinical staff query private treatment protocols and CDC guidance in plain English. Citations every time, never patient identifiable. Knowledge base pattern.
FAQ chatbot for the public site
Address, hours, accepted insurance, what to bring, refill policy. Cited from your published policy. Does not give medical advice. Chatbot pattern.
Northwest Arkansas Infectious Disease.
Northwest Arkansas Infectious Disease is a specialist practice serving Northwest Arkansas at nwaids.com. We built the public clinic site as a hand coded property with full LocalBusiness plus MedicalClinic schema, provider bios, accepted insurance, and the answer engine optimization stack. The patient portal and EHR remain on the practice EHR system. The public site is the front door for new patients, referring physicians, and patients looking for the practice in search.
What ships on that property: hand coded layout, full MedicalClinic plus Physician schema, accepted insurance plan, and the SEO stack that lifts the practice into Google for specialist searches across the region. The site does not store PHI.
Other case studiesWhat Medical AI work costs.
The 00 Growth Engine retainer is the right baseline for clinics that want active content, schema maintenance, and answer engine optimization for specialist search queries. See all pricing.
Buyer questions, Medical specific.
Are you HIPAA compliant?
That AI Guy is not a covered entity. We are a software contractor. HIPAA flows from the covered entity (the clinic) and the business associate (us) through a Business Associate Agreement (BAA). Where PHI is involved we deploy on infrastructure that supports BAAs and we sign one. The BAA is a real document, not a checkbox.
Can the AI give medical advice?
No. AI on a clinic site is constrained to operational questions: address, hours, insurance, refill policy, what to bring. Medical advice comes from the clinician.
Will you replace our EHR?
No. EHR replacement is a multi year, multi vendor decision. We build experience layers on top of the EHR you have.
What about state medical board advertising rules?
Site copy follows your state medical board rules. Specialist titles, board certifications, and outcome claims are reviewed against board guidelines before publication.
How do you handle insurance card capture securely?
Photos go straight to encrypted storage, accessible only to authorized clinic staff via authenticated session. Photos do not pass through public LLM APIs. Storage is BAA compliant.
Other verticals we ship to.
Tax
CPA firms, tax preparers, ITIN, S corp, audit defense
Real estate
Listings, CMAs, neighborhood guides, lead routing
Construction
Quotes, scheduling, project galleries, customer portals
Hospitality
Direct booking, channel mgmt, guest comms, reviews
Combat sports
Class booking, member portal, video, kids program
Insurance
Quotes, agent CRM, lead routing, policy RAG
E commerce
Storefronts, inventory, AI search, support RAG