Medellín, Colombia · UTC−5 · Remote operation across Latin America and the United States hello@quarl.co EN · ES
quarl ES

AI for healthcare

Assistants over a health institution’s administrative and process documentation: authorizations, requirements, care pathways and provider networks. With one line drawn in writing — they do not diagnose, do not interpret results and do not replace a professional.

6–8 weeks to production · 5 sectors running in production, healthcare among them · 3 actionable findings or the diagnostic is not billed

  • Authorizations
  • Care pathways
  • Provider network
  • Procedure requirements
  • Data protection
  • Explicit refusal
  • Groundedness measured
Contact us How we work Free, no pitch · the proposal lands in 48 hours

Built on

  • Anthropic
  • Claude
  • Google Gemini
  • Google Cloud
  • LangChain
  • LangGraph
  • PostgreSQL
  • Qdrant
  • Datadog

An engineering team that has already been on the other side.

Ninety seconds: who we are, how we work and what you get at the end.

The same sourced answer on every channel

WhatsApp, the website or email land in the same system: it understands the question, searches your documents, answers with a citation and hands over to a person when unsure.

Example: a patient asks how to prepare for a test. The system answers and sends the reminder on WhatsApp.

WhatsApp connected
Web connected
Email connected

01 Channels

02Understands

Reads the message
Detects the entityservice = cardiology
Picks the sourceClinical_protocols.pdf
How should the patient prepare for tomorrow’s echocardiogram?

03Searches

94 of 100finds the right chunk
142 mstakes

Searches by meaning and by exact words, and filters by the tag before choosing.

04Answers with a source

Fast for 4 hours and bring current medication. Source: Cardiology protocol, section 2.1.

answers with a source · 91 of 100

05Hands over

  1. Not enough backing
  2. A person on the team is notified
  3. Full conversation attached
  4. Human answer logged

Swipe to follow the flow →

What it answers, concretely

01

"What do I need to get this procedure authorized?"

Documents, orders, timelines and where to file. It changes by service and by payer agreement, and it is written in a manual the patient does not have.

02

"Where and when am I seen?"

Provider network, sites, services enabled per site. Information that changes often and, out of date, sends people on wasted trips.

03

"How do I prepare for this test?"

Fasting, medication pauses per the lab’s instruction sheet, what to bring. Taken verbatim from the preparation guide, with the guide cited.

04

"Where is my authorization?"

Requires integration with the institution’s system: without it the assistant can explain the process but not the status of a case.

05

"How do I file a transfer or a complaint?"

Administrative routes, deadlines and channels. Taking these off the phone line is among the most measurable savings a provider can get.

01

The line

What this system does not do, and how that is guaranteed

It does not diagnose, does not suggest or adjust treatment, does not interpret lab results and does not triage urgency. That is not a statement of intent in a contract: it is a constraint that gets built and verified.

It is implemented in three layers. First, the corpus: only administrative and process documents go into the index; clinical practice guidelines stay out, so there is nowhere for a clinical answer to come from. Second, intent classification: a query asking for medical judgement is routed to the institution’s line before it ever reaches retrieval. Third, measurement: the evaluation set carries a subset of clinical questions whose only correct answer is an escalation, reported separately.

Explicit refusal becomes the default behaviour, not the exception. When retrieval comes back empty or ambiguous, the system says so and hands off to a person — and that gets measured, because an assistant that never escalates is inventing somewhere.

How it is measured

The numbers we ask for before opening it to patients

01

Groundedness

Every statement holds up against the cited document, adding nothing that is not there.

Why it matters here

It is the headline metric, above coverage. An invented requirement means somebody loses an appointment and queues again.

02

Correct escalation on clinical queries

A subset of medical questions whose only correct answer is routing to a professional.

Why it matters here

It is the boundary of the service. Reported separately because the overall average hides it.

03

Correct refusal rate

When the documentation does not cover the question, the system says so and escalates.

Why it matters here

An assistant that never says "I do not know" is approximating. In healthcare, approximating has consequences.

04

Freshness of the cited document

The answer cites the in-force version of the instruction sheet or directory, with its date.

Why it matters here

Provider networks and requirements change. Answering with last year’s version is a silent error.

Data

Sensitive data, in practice

Health information is sensitive data under Colombia’s Law 1581 of 2012 and comparable regimes elsewhere. These are the architectural decisions that follow from it, taken up front rather than afterwards.

  • Deployment inside the institution’s own infrastructure

    where identifiable information is involved. Azure OpenAI or Amazon Bedrock in your subscription: documents and queries never leave your cloud.

  • Personal data filtered before the model

    Names, national IDs and record numbers are detected and replaced before any text reaches inference.

  • Separation between the document corpus and patient data

    The index holds instruction sheets and manuals, not clinical records. Personal data is fetched over API at the moment of the query and not persisted.

  • Traces with a bounded retention

    We keep what is needed to debug and audit, under a retention policy written down before production.

  • No training use

    Enterprise plans where data sent through the API does not feed models, in every configuration.

When we are not the right choice

If what you want is diagnostic support, clinical triage or image reading, this is not us. That is a medical device with its own regulatory path, and there are vendors who specialise in that ground.

And if administrative query volume is low, or the documentation is out of date and nobody maintains it, the right project is putting the documentation in order first. A retrieval system over an old manual returns old answers with far more authority than a PDF does, and that is worse than not having it.

Related services

RAG systems

RAG that answers well — and knows when to stay quiet

Chunking, reranking and hybrid search, evaluated with recall@k and NDCG.

AI chatbots and assistants

Chatbots for businesses of every size

With the evaluation set run before it ever reaches production.

Project rescue

Your AI answers badly. It is almost never the model’s fault.

The system is already in production and answers badly. We measure it and determine what to fix.

Integrations and APIs

Connecting the systems that do not talk today

MCP servers against the systems already in operation.

Key takeaways

Four things before the call

  1. 01

    We build this for the administrative layer, not the clinical one: authorizations, procedure requirements, care pathways, provider networks and hours. That is where the query volume sits and where the risk is manageable.

  2. 02

    The central constraint is architectural, not a prompt: the system does not diagnose, does not suggest treatment and does not interpret results, and that boundary is measured like any other metric.

  3. 03

    The metric that governs here is not coverage but groundedness: every statement has to hold up against the cited document. An invented requirement means somebody loses their appointment.

  4. 04

    Patient information is sensitive data under Colombian law. Where identifiable information is involved, we deploy inside the institution’s own cloud and filter before anything reaches the model.

This is where the data comes in

An AI system is worth what its sources are worth. These are the standard connectors; anything with an API or a database connects the same way, and what has no API is handled by file.

SAP

Enterprise ERP

ERP

Oracle

ERP and database

ERP

NetSuite

Cloud ERP

ERP

Salesforce

CRM and service

CRM

HubSpot

CRM and marketing

CRM

PostgreSQL

Database and pgvector

Databases

A RAG system in production: three years, two million users

We built and operated the assistant for a loyalty platform serving more than two million active users across ten countries.

We built the full pipeline: document ingestion and normalization, chunking, embedding generation, vector store on Azure AI Search and Pinecone, and retrieval with grounded generation on LangChain.

We held it above 99% availability for three years.

RAG systems →

Frequently asked questions

01

Can the assistant tell a patient what they have or what to do about a result?

No, and not by instruction but by construction. Clinical practice guidelines do not enter the index, so there is nowhere for that answer to come from; a query asking for medical judgement is classified before retrieval and routed to the institution’s line; and the evaluation set carries clinical questions whose only correct answer is an escalation, measured and reported separately. That boundary is defined in writing with the institution before anything is built.

02

What about clinical records and data protection?

Health information is sensitive data and the design assumes it from the start. The index holds administrative and process documentation, not clinical records. When an answer needs a specific person’s data — the status of an authorization, say — it is fetched over API at that moment and not persisted. Where identifiable information is in play we deploy on Azure OpenAI or Amazon Bedrock inside the institution’s subscription, and filter personal data before inference.

03

Does it replace the call centre?

No, and pitching it that way is where the projects that end badly come from. It takes the repetitive, documented part off the queue — requirements, hours, sites, administrative routes — which is usually most of the volume, and leaves the human team what needs judgement or context. The success measure we recommend is not "how many conversations it resolved" but "how many it escalated correctly": an assistant that never escalates is inventing somewhere.

04

Does it connect to our health information system?

Yes, over API, and that is what separates a useful assistant from an informational one. Without integration it can explain how an authorization works; with integration it can say where that person’s authorization is. We work against whatever exists — HIS, scheduling, patient portal — through MCP servers or direct integrations, with whatever permissions and access logging the institution requires.

05

Is this for a small clinic or only for a large network?

It depends on volume and on the state of the documentation, not on size. If administrative queries run in the dozens per day and the instruction sheets fit in a few pages, a good FAQ handles nearly all of it and this is unnecessary. The conversation changes with several sites, services with different requirements, agreements that change, and documentation scattered across departments — that is when finding the right answer is already work.

06

How long does it take and what do you need from us?

Six to eight weeks to production for a defined scope, with something running from week one. Two things are needed from your side and neither is technical: somebody who can say which version of each document is in force, and somebody from the service area to validate the correct answers in the evaluation set. Without that the system can be built but not measured, and without measurement we do not recommend opening it to patients.

07

We already have a chatbot and people complain about it. Can it be fixed?

Almost always, and it is worth measuring before deciding. In one week we build a reference set from real questions off the channel, measure groundedness and escalation, and hand back the failures ranked by impact with each fix and its estimated effort. The usual cause is not the model: it is that the corpus mixes old and new versions of the same instruction sheet and the system has no way to know which one governs. If the diagnostic does not reach three actionable findings, it is not billed.

Fifteen minutes. A concrete answer.

It gets fixed, it gets built, or it is not worth it. And if the diagnostic does not reach three actionable findings, it is not charged.

Message on WhatsApp