Solutions

Solution · Medical

Practice admin off your desk, confidentiality intact

Autonomous help with practice administration — correspondence, documents, recurring routines — under controls built for patient confidentiality.

monopea gives a medical practice autonomous help with administrative work — correspondence, document handling, recurring reminders, research — under controls built for confidentiality: data stored in Switzerland and processed in the EU, secrets in a write-only vault, and anything outward-facing held as a pending proposal until the practice approves it.

Patient confidentiality is the hardest constraint in the building, and it is exactly why most practices have kept AI at arm’s length: a tool that might retain, retransmit, or act on patient-adjacent data is not worth the admin hours it saves. monopea is built for the practice that wants those hours back without renegotiating that constraint.

Why patient confidentiality rules out raw autonomy

Anything touching patient-adjacent information — referral letters, appointment correspondence, scanned documents — carries medical confidentiality with it. A consumer chatbot with unclear retention is already a problem; an autonomous agent that can send email is a categorically bigger one, because the failure mode is an unsupervised message about a patient leaving the practice. The 2026 exposed-instance incidents around self-hosted agents were a public demonstration of autonomy without an external control.

A practice does not need an AI that promises to be careful. It needs one where the careful part is structural: storage you can point to on a map, credentials the model cannot see, turns that can run without leaving a durable record, and a human decision wired in front of every outward action by default.

  • Persistent data stored in Switzerland, processed on EU infrastructure
  • Outward-facing actions become pending proposals — sent only after the practice approves
  • Incognito turns write nothing durable, for the questions that must not persist

What the agent takes over — and what stays with you

The agent works the administrative layer: it drafts referral letters and patient correspondence and holds each as a proposal for sign-off; it summarises and organises the documents you upload; it prepares recall and follow-up reminders on a schedule and queues them for approval; it triages the practice inbox you connect and proposes replies; and it handles the research and paperwork questions that eat the end of the day. It operates through whatever tools you connect via MCP — no rip-and-replace of your systems, and clinical judgement is never its job.

The platform carries the confidentiality load by construction: the default-deny approval gate blocks dispatch until someone at the practice decides, the write-only vault keeps logins and API keys permanently out of the model’s view, residency routing keeps storage in Switzerland — with Swiss-hosted open-weight models selectable if inference should stay there too — and the audit trail records who approved what, when, with signed checkpoints. Trust is granted per tool, explicitly, as routines prove themselves.

Why it matters

Hours back, duty intact

Correspondence, reminders, and document admin get drafted and queued by the agent — nothing reaches a patient without the practice’s approval.

Confidentiality by construction

Swiss storage, EU processing, a write-only vault, and incognito turns — the controls are architecture, not a usage policy for staff to remember.

A defensible record

Every proposal, approval, and dispatch is logged with signed checkpoints, so "what did the AI send, and who cleared it?" always has an exact answer.

FAQ

Medical practices, in short

Can the agent contact a patient on its own?
Not by default. Anything outward-facing — an email, a reminder, a letter — becomes a pending proposal and waits until someone at the practice approves it. Per-tool autonomy can be granted explicitly for routines you trust; unknown tools fail closed.
Where does practice data live?
Persistent data — conversations, memory, uploaded documents, encrypted secrets — is stored in Zurich, Switzerland, and processing runs on EU infrastructure. Stored in Switzerland, processed in the EU; Swiss-hosted models are selectable for inference.
Does it make clinical decisions?
No. monopea is an administrative agent: correspondence, documents, scheduling routines, research, inbox triage. It drafts and proposes; clinical judgement and every outward decision stay with the practice.
What about a question that should not be stored at all?
Run it as an incognito turn: nothing durable is written on monopea’s side — no memory, no conversation history. It is local no-retention by design.