Patient intake (pre-visit, HIPAA-compliant)

Patient intake automates the entire pre-visit patient journey: from first contact to an electronic record ready for the appointment. The AI agent handles questionnaires, insurance data, document photos, and medical history — collecting, verifying, and structuring without front desk involvement. For the clinic, this means that when the patient arrives, the physician opens a completed chart, and the front desk is not drowning in manual data entry.

What automation does exactly

1. Sends an invitation. The scenario starts 48 hours before the appointment, sending a secure link via SMS or email through a HIPAA-compliant Communications channel.
2. Runs an adaptive questionnaire. The patient answers questions on demographics, complaints, allergies, and medications. The agent tailors questions to the visit type.
3. Extracts data from documents. Photos of the insurance card, ID, referrals, and previous discharge summaries go through OCR and a vision model — the required fields are populated without manual input.
4. Verifies insurance coverage. Sends a request to the clearinghouse, retrieves policy status, co-pay, and eligibility.
5. Classifies the case. The agent determines the visit type (initial, follow-up, urgent), triages by complaints, and routes to the appropriate specialist.
6. Syncs Calendar. Confirms the slot, blocks preparation, sends reminders 24 and 2 hours in advance.
7. Transfers the record to EHR. The completed entry lands in the patient chart — the physician sees the filled document before the appointment begins.
8. Logs HIPAA events. Every action involving PHI is recorded in an immutable log for audit purposes.

What automation does not do

• Does not make diagnoses or medical decisions: AI collects data, the physician interprets.
• Does not operate without a BAA (Business Associate Agreement) with AI, hosting, and communications providers. If the BAA is not signed, it cannot be launched.
• Does not cover telehealth visits out of the box: video protocols and remote monitoring require separate configuration.

Who it is for

Clinics with an outpatient format where the front desk is overloaded with manual data entry, and errors in intake data lead to insurance rejections and rework. The minimum threshold is 500–800 visits per month to offset the BAA layer and infrastructure costs. Lower volumes are more effectively handled with simple web forms without AI.

For a dermatology practice with 8 physicians, the impact was $185K per year at $12 900 in investment — 1334% ROI. The key factor is not the 92% time reduction itself, but the freed-up front desk hours that went toward complex cases: non-standard insurance, appeals, follow-up.

Technically, Patient intake is a multi-step orchestration on top of the clinic's existing stack. The AI agent does not replace the EHR or PM system, but complements them as a HIPAA-compliant wrapper on a vertical-SaaS core.

Flow architecture

1. Trigger. The "patient scheduled" event in the PM system sends a webhook — the agent scenario starts.
2. Conversational layer. The patient interacts via a secured web portal or a Communications chat channel with BAA coverage. No login required — the link is one-time, tied to the appointment ID.
3. Document AI. Uploaded photos go through OCR and a vision model. Fields are extracted from unstructured documents: policy number, group, plan-holder name, dates.
4. Validation. Data is checked against format (policy structure, NPI directory, date validity). Comparison against the clinic's database for duplicates.
5. Classification agent. The AI agent classifies the visit by complaints and routes it to the appropriate specialty. At low confidence — fallback to the front desk.
6. Integration bus. The ready structure is pushed to the EHR via FHIR or HL7 API. If a direct API is unavailable — an RPA connector transfers data as a bot operator.
7. Audit log. All actions with PHI are written to an immutable log with user ID, timestamp, and access scope.

Solution components

Implementation steps

1. Weeks 1–2: discovery and BAA. As-is process map, inventory of forms and integrations. In parallel — BAA signing with vendors.
2. Week 2–3: infrastructure. Closed VPC, at-rest and in-transit encryption, role-based access, test connection to EHR.
3. Weeks 3–4: agent build. Questionnaire configuration for the specialty, extraction prompt setup, connection to the PM system, scenarios on synthetic data.
4. Week 4: pilot. 1–2 physicians, 50–100 real patients, manual quality check, confidence threshold calibration for classification and extraction.
5. Post-pilot: scaling to the entire clinic, quarterly HIPAA audits, retro with the front desk for iteration.

Automation boundaries

The confidence threshold is the key parameter. When the value falls below the setting (typically 0.85), the case goes to the front desk queue. This is a tradeoff between automation and accuracy: it is better to delay 5–7% of complex cases than to miss 0.5% of errors in the EHR. In a dermatology practice, the threshold was calibrated to a stable error rate of 0.3% — down from the initial 3.8%.

Launching Patient intake requires a set of organizational, legal, and technical prerequisites. The main work is not inside the AI agent, but in the compliance layer and EHR integrations.

Data and access:

• BAA (Business Associate Agreement) with the AI provider, hosting, and communications vendor — required under HIPAA.
• API access to EHR via FHIR or HL7, or consent for RPA integration for legacy systems.
• Current intake forms in any format (PDF, paper, web) — to preserve the patient's familiar workflow.
• List of document sources: insurance policy, ID, referrals, previous records.
• A configured clearinghouse service for insurance verification, or readiness to connect one of the standard vendors.
• Baseline metrics: current intake time, error rate, wait time — needed for comparison at 30 and 90 days.

Team and processes:

• Product owner from the clinic side — operations manager or administrator (4–8 hours per week during the pilot, 1–2 hours after).
• Privacy Officer — signs the BAA, validates security controls, and is responsible for HIPAA risk assessment.
• 1–2 early-adopter physicians and a receptionist for UAT, triage calibration, and patient experience feedback.
• A weekly retro slot for the first 8 weeks — critical for iteration and closing edge cases.

Timeline:

• 4–6 weeks from BAA signing to a production pilot with 1–2 physicians.
• Another 2–4 weeks to scale to the full clinic, with receptionist training and adaptation for each specialty.