A timber building facade with warm interior lighting at night

Healthcare agents for patient intake and document review

Patient intake, referral and document review, and clinical knowledge assistants, with PII and prompt injection screened before a model reads anything.

In short

Dynamiq gives healthcare organizations agents for patient intake, referral document processing and clinical knowledge questions, deployed behind a private endpoint. Detectors classify PII and prompt injection before any reasoning model sees the text, and a clinician or intake coordinator reviews anything a detector flags or that falls outside the expected schema. Built for organizations that need a BAA for HIPAA workloads, a DPA under GDPR and a full trace of every run.

What makes it hard

Intake buried in scanned paperwork
Referral letters, medication lists and lab summaries arrive as scans that someone still has to retype into the record system.
Patient data needs screening before any model sees it
Every document contains PII by nature, and it has to be classified before a reasoning model reads it, not after.
Clinical knowledge scattered across teams
Intake protocols, coding guidance and referral rules live in enough different places that staff spend real time just finding the current version.
Inbound call / Front deskCompleted
CallerI need to reschedule tomorrow's appointment.
AgentI can do that. Thursday at 10 or Friday at 2?620 ms
CallerFriday works.
AgentDone. You will get a text confirmation now.540 ms
calendar.rescheduleFriday 2:00 PM confirmed
SIP, 1 tool
Illustration of an inbound voice call: the agent reschedules an appointment with the calendar system, with the response time for each turn.

Controls your reviewers ask for

Self-host in your own AWS, Azure, GCP, IBM Cloud, OpenShift or any Kubernetes 1.32+ cluster, or run on Dynamiq Cloud behind a private endpoint. Dynamiq holds SOC 2, and signs a BAA for HIPAA workloads and a DPA under GDPR.

Visit the Trust Center
Detectors before the model
PII and prompt injection are classified on incoming text before any reasoning model sees it, and the verdict is recorded on every run.
Private endpoint, scoped access
The deployed agent sits behind a private endpoint, reachable only with a scoped, expiring access key.
Dedicated project per pipeline
Intake, connections and knowledge bases live in a project scoped to only what that pipeline needs, nothing shared.
Structured output only
Extracted data is forced into a fixed schema, so a downstream system receives structured fields, never free text.
Full audit trail
Every run is traced and replayable, including each detector's verdict, inspectable in the UI or exported as JSON.

Questions and answers

Does Dynamiq support HIPAA workloads?

Yes. Dynamiq supports HIPAA workloads and signs a business associate agreement (BAA) with healthcare customers.

Does the platform redact patient data automatically?

No. Detectors classify and flag PII and prompt injection; they do not redact or rewrite the text. Routing a flagged document to a person is the control.

Where does patient text travel?

Only to the model and detector providers you connect, under the connections you configure, and it is recorded in the run's trace like any other input and output.

Can this run behind our own private endpoint?

Yes. Deploy behind a private endpoint with a scoped access key, or self-host the whole platform inside your own environment.

Can a voice agent answer patient calls?

Yes. Voice Agents answer inbound calls on your existing numbers for scheduling and intake questions, and transfer to staff for anything clinical or urgent. Dynamiq does not place outbound calls.

Who reviews what the agent extracts?

An intake coordinator or clinician, for anything flagged by a detector or falling outside the expected schema. Extraction does not skip review on its own.

See a healthcare agent on your data.

Talk to our team. We will show an agent built for your workflow and how it runs in your environment.