Groundedness
Every statement holds up against the cited document, adding nothing that is not there.
Why it matters here
It is the headline metric, above coverage. An invented requirement means somebody loses an appointment and queues again.
Assistants over a health institution’s administrative and process documentation: authorizations, requirements, care pathways and provider networks. With one line drawn in writing — they do not diagnose, do not interpret results and do not replace a professional.
6–8 weeks to production · 5 sectors running in production, healthcare among them · 3 actionable findings or the diagnostic is not billed
Built on
Ninety seconds: who we are, how we work and what you get at the end.
WhatsApp, the website or email land in the same system: it understands the question, searches your documents, answers with a citation and hands over to a person when unsure.
Example: a patient asks how to prepare for a test. The system answers and sends the reminder on WhatsApp.
01 Channels
Searches by meaning and by exact words, and filters by the tag before choosing.
answers with a source · 91 of 100
Swipe to follow the flow →
01
Documents, orders, timelines and where to file. It changes by service and by payer agreement, and it is written in a manual the patient does not have.
02
Provider network, sites, services enabled per site. Information that changes often and, out of date, sends people on wasted trips.
03
Fasting, medication pauses per the lab’s instruction sheet, what to bring. Taken verbatim from the preparation guide, with the guide cited.
04
Requires integration with the institution’s system: without it the assistant can explain the process but not the status of a case.
05
Administrative routes, deadlines and channels. Taking these off the phone line is among the most measurable savings a provider can get.
01
The line
It does not diagnose, does not suggest or adjust treatment, does not interpret lab results and does not triage urgency. That is not a statement of intent in a contract: it is a constraint that gets built and verified.
It is implemented in three layers. First, the corpus: only administrative and process documents go into the index; clinical practice guidelines stay out, so there is nowhere for a clinical answer to come from. Second, intent classification: a query asking for medical judgement is routed to the institution’s line before it ever reaches retrieval. Third, measurement: the evaluation set carries a subset of clinical questions whose only correct answer is an escalation, reported separately.
Explicit refusal becomes the default behaviour, not the exception. When retrieval comes back empty or ambiguous, the system says so and hands off to a person — and that gets measured, because an assistant that never escalates is inventing somewhere.
Every statement holds up against the cited document, adding nothing that is not there.
Why it matters here
It is the headline metric, above coverage. An invented requirement means somebody loses an appointment and queues again.
A subset of medical questions whose only correct answer is routing to a professional.
Why it matters here
It is the boundary of the service. Reported separately because the overall average hides it.
When the documentation does not cover the question, the system says so and escalates.
Why it matters here
An assistant that never says "I do not know" is approximating. In healthcare, approximating has consequences.
The answer cites the in-force version of the instruction sheet or directory, with its date.
Why it matters here
Provider networks and requirements change. Answering with last year’s version is a silent error.
Data
Health information is sensitive data under Colombia’s Law 1581 of 2012 and comparable regimes elsewhere. These are the architectural decisions that follow from it, taken up front rather than afterwards.
where identifiable information is involved. Azure OpenAI or Amazon Bedrock in your subscription: documents and queries never leave your cloud.
Names, national IDs and record numbers are detected and replaced before any text reaches inference.
The index holds instruction sheets and manuals, not clinical records. Personal data is fetched over API at the moment of the query and not persisted.
We keep what is needed to debug and audit, under a retention policy written down before production.
Enterprise plans where data sent through the API does not feed models, in every configuration.
If what you want is diagnostic support, clinical triage or image reading, this is not us. That is a medical device with its own regulatory path, and there are vendors who specialise in that ground.
And if administrative query volume is low, or the documentation is out of date and nobody maintains it, the right project is putting the documentation in order first. A retrieval system over an old manual returns old answers with far more authority than a PDF does, and that is worse than not having it.
Chunking, reranking and hybrid search, evaluated with recall@k and NDCG.
With the evaluation set run before it ever reaches production.
The system is already in production and answers badly. We measure it and determine what to fix.
MCP servers against the systems already in operation.
Key takeaways
We build this for the administrative layer, not the clinical one: authorizations, procedure requirements, care pathways, provider networks and hours. That is where the query volume sits and where the risk is manageable.
The central constraint is architectural, not a prompt: the system does not diagnose, does not suggest treatment and does not interpret results, and that boundary is measured like any other metric.
The metric that governs here is not coverage but groundedness: every statement has to hold up against the cited document. An invented requirement means somebody loses their appointment.
Patient information is sensitive data under Colombian law. Where identifiable information is involved, we deploy inside the institution’s own cloud and filter before anything reaches the model.
An AI system is worth what its sources are worth. These are the standard connectors; anything with an API or a database connects the same way, and what has no API is handled by file.
SAP
Enterprise ERP
Oracle
ERP and database
NetSuite
Cloud ERP
Salesforce
CRM and service
HubSpot
CRM and marketing
PostgreSQL
Database and pgvector
Microsoft SQL
Database
Snowflake
Data warehouse
BigQuery
Google data warehouse
Databricks
Data platform
Redshift
AWS data warehouse
Synapse
Azure data warehouse
Supabase
Managed Postgres
Workday
Payroll and HR
QuickBooks
Accounting
Sage
Accounting and ERP
Xero
Cloud accounting
Shopify
Catalogue and orders
WooCommerce
Catalogue and orders
Magento
Catalogue and orders
Stripe
Payments and subscriptions
Google Drive
Documents and folders
CSV y Excel
Flat files
Nothing in this category
We built and operated the assistant for a loyalty platform serving more than two million active users across ten countries.
We built the full pipeline: document ingestion and normalization, chunking, embedding generation, vector store on Azure AI Search and Pinecone, and retrieval with grounded generation on LangChain.
We held it above 99% availability for three years.
RAG systems →No, and not by instruction but by construction. Clinical practice guidelines do not enter the index, so there is nowhere for that answer to come from; a query asking for medical judgement is classified before retrieval and routed to the institution’s line; and the evaluation set carries clinical questions whose only correct answer is an escalation, measured and reported separately. That boundary is defined in writing with the institution before anything is built.
Health information is sensitive data and the design assumes it from the start. The index holds administrative and process documentation, not clinical records. When an answer needs a specific person’s data — the status of an authorization, say — it is fetched over API at that moment and not persisted. Where identifiable information is in play we deploy on Azure OpenAI or Amazon Bedrock inside the institution’s subscription, and filter personal data before inference.
No, and pitching it that way is where the projects that end badly come from. It takes the repetitive, documented part off the queue — requirements, hours, sites, administrative routes — which is usually most of the volume, and leaves the human team what needs judgement or context. The success measure we recommend is not "how many conversations it resolved" but "how many it escalated correctly": an assistant that never escalates is inventing somewhere.
Yes, over API, and that is what separates a useful assistant from an informational one. Without integration it can explain how an authorization works; with integration it can say where that person’s authorization is. We work against whatever exists — HIS, scheduling, patient portal — through MCP servers or direct integrations, with whatever permissions and access logging the institution requires.
It depends on volume and on the state of the documentation, not on size. If administrative queries run in the dozens per day and the instruction sheets fit in a few pages, a good FAQ handles nearly all of it and this is unnecessary. The conversation changes with several sites, services with different requirements, agreements that change, and documentation scattered across departments — that is when finding the right answer is already work.
Six to eight weeks to production for a defined scope, with something running from week one. Two things are needed from your side and neither is technical: somebody who can say which version of each document is in force, and somebody from the service area to validate the correct answers in the evaluation set. Without that the system can be built but not measured, and without measurement we do not recommend opening it to patients.
Almost always, and it is worth measuring before deciding. In one week we build a reference set from real questions off the channel, measure groundedness and escalation, and hand back the failures ranked by impact with each fix and its estimated effort. The usual cause is not the model: it is that the corpus mixes old and new versions of the same instruction sheet and the system has no way to know which one governs. If the diagnostic does not reach three actionable findings, it is not billed.
It gets fixed, it gets built, or it is not worth it. And if the diagnostic does not reach three actionable findings, it is not charged.
We use cookies to improve the user experience. Privacy