Verselo

← Blog

AI assistant for clinics: patient emails and treatment plan follow-up without overloading reception

How an AI assistant for clinics drafts patient emails, requests missing records and follows up on treatment plans while respecting the GDPR and medical secrecy.

  • By Vishal Punia
  • 6 min read

Key takeaways

  • An AI assistant drafts replies to patient emails about appointments and paperwork in your voice, requests missing records and flags unanswered treatment plans.
  • Diagnoses, treatment advice, test results and cost estimates never go out without your medical team.
  • Health data is a special category under Article 9 GDPR and may be processed for medical purposes only under the responsibility of staff bound by professional secrecy.
  • The assistant's provider is a processor, so you need an Article 28 GDPR contract and a provider with sufficient guarantees.
  • It runs alongside Doctolib or your practice software through your inbox and writes drafts only for the first one to two weeks.

An AI assistant for clinics reads every patient email, drafts replies about appointments, directions and preparation in your voice, requests missing records and reminds you when a treatment plan has gone unanswered for several days. Medical questions, results and cost estimates always stay with your clinicians. This may be compatible with professional secrecy and the GDPR if all applicable legal and organisational safeguards are met. The Verselo AI assistant runs on its own server, reserved for your clinic.

Why do patient emails and treatment plans pile up in private clinics even when the team is at full stretch?

Monday morning at a busy dental clinic: patients are waiting, the phone keeps ringing and emails have piled up over the weekend. One patient wants to move her Thursday appointment. A new patient asks whether to bring the X-ray taken by his previous dentist. Mr Albrecht received his implant treatment plan and has not been in touch since.

None of these emails is hard. But reception serves the people standing in front of it first. The inbox comes later, often after closing time.

The cost shows up further down the line. On the day of the first consultation, prior records are missing, so the appointment is cut short or moved. And nobody follows up with Mr Albrecht, because in a busy clinic nobody keeps a list of open treatment plans.

Reception staff, templates or a dedicated AI assistant: what actually takes email work off the clinic?

Templates save typing. Someone at reception still has to read the email, work out what it is about and pick the right template. The assistant takes over that step and leaves the approval with you.

SituationReception aloneTemplatesDedicated AI assistant
New patient asks what to bringReply when there is a gapGeneric list unrelated to the treatmentDraft with the records this treatment needs
Appointment changeCall or email at the end of the dayStandard reply, a slot still has to be foundDraft with the patient's requested time for reception to handle
Treatment plan unanswered for several daysSlips throughSlips throughReminder to you, follow-up draft ready
Question about pain after an extractionPassed to a clinicianMust not be answered by templateStays with your clinicians and is not answered automatically

Reception is still needed. It just gets the emails sorted and with a draft ready, instead of opening each one. And at 7:30 the practice manager sees on their phone, in the morning briefing, what came in overnight and who is waiting for a reply.

Which tasks can an AI assistant take on in a clinic, and what always stays with the medical team?

The line is simple: the assistant prepares the admin. Anything clinical is decided by qualified staff.

What the assistant prepares:

  • Replies about opening hours, directions, parking and what the first visit looks like
  • Requests for prior scans, lab results or consent forms before the appointment, based on your checklist per treatment
  • Drafts for appointment requests and changes, for reception to handle
  • Follow-up drafts when a treatment plan or estimate has gone unanswered for a few days
  • Replies in German or Spanish when international patients write

What always stays with your medical team:

  • Any diagnosis, assessment of symptoms or treatment recommendation
  • Test results and lab values, which the assistant never sends
  • Cost estimates and prices; at most it drafts the covering email
  • Anything you mark as sensitive during setup

An example: Mr Albrecht received his implant plan several days ago. The assistant notices there has been no reply and leaves you a short draft asking whether he has questions about the procedure and whether a call would help. No pressure, no price, nothing medical. You approve it with one tap or change a sentence. How quote follow-up works in general is covered in follow up on quotes by email with AI.

More on what the assistant does in a clinic is on the page AI assistant for private clinics.

How do professional secrecy and the GDPR stay intact when an AI assistant reads patient emails?

It is the first question every clinic owner asks. Four points belong together:

Health data is a special category. Article 9(1) GDPR prohibits processing health data in principle. Article 9(2)(h) allows it for medical purposes, and Article 9(3) requires that it is handled by or under the responsibility of a professional bound by professional secrecy. An email saying "I'm coming in for the implant consultation" is already health data.

The provider is a processor. Article 28(1) and (3) GDPR says you may only use processors that provide sufficient guarantees, and the processing must be governed by a contract that sets out its subject matter, duration, purpose and the types of data.

In Germany: medical secrecy under criminal law. § 203(1) no. 1 StGB makes unauthorised disclosure of patient secrets by doctors and dentists punishable by up to one year in prison or a fine. Paragraph 3 allows disclosure to people who contribute to the professional activity, insofar as their service requires it. In practice that means binding the provider to secrecy in writing.

In Spain: the AEPD's guidance. The AEPD guide for health professionals treats a third party whose service involves patient data as a processor. The clinic must choose one with the necessary guarantees, and any subcontracting needs its authorisation. If your clinic may need a data protection officer, confirm that requirement with your data-protection adviser.

What this means in practice: ask the provider, including us, for the data processing agreement and the confidentiality commitment. With the Verselo assistant your data sits in a data centre in Frankfurt, separated from every other client. To write replies it uses an AI model that is not trained on your data. During setup we connect the mailbox you approve and define the rules for drafts and automatic replies. What a dedicated server changes compared with a US cloud is explained in AI assistant on an EU server vs US cloud.

How does a clinic go live in 14 days, and who is it not worth it for?

The assistant needs no access to your practice management software. It works through your inbox, whether Microsoft 365, Gmail or another standard mailbox, and your calendar. Doctolib or booking through your website carry on as before.

Going live has four steps:

  1. A 30-minute call. You tell us what your inbox looks like and how reception works. We tell you honestly whether the assistant is worth it.
  2. Setup. We set up your server, connect inbox and calendar and add your treatments, checklists and workflows. The assistant learns your tone from your sent emails.
  3. One to two weeks of drafts. During that phase, the assistant writes drafts only. Reception reads along, corrects them and sees how well it handles your patients.
  4. It replies on its own. If it fits, you switch on automatic replies one email type at a time. Directions go out by themselves, anything medical stays a draft.

Approvals reach your phone via Telegram, even between two patients.

When is it not worth it? A practice that handles almost everything by phone and sends no treatment plans gains little. If you clear your inbox in half an hour a day, you don't need an assistant. It pays off for private clinics, dental practices, aesthetic medicine and specialist centres where patient emails and open treatment plans cost reception hours every day.

Conclusion

An AI assistant can answer patient emails, request missing records and follow up on treatment plans. This may be compatible with professional secrecy and the GDPR if, among other safeguards, the provider is bound by an Article 28 contract and a confidentiality commitment and sees only the data it needs. Medical decisions stay with your clinicians, and reception gets ready drafts instead of a full inbox. Whether it pays off for your clinic is something we can work out in a 30-minute call.

Frequently asked questions

Can a clinic use an AI assistant for patient emails?

It can, if the conditions are met. Article 9(2)(h) GDPR allows health data to be processed for medical purposes when this happens under the responsibility of a professional bound by secrecy. The assistant's provider acts as a processor, so you need a contract under Article 28 GDPR, a provider with sufficient guarantees and access limited to what the task requires. In Germany, the provider should also be bound to secrecy in line with § 203 StGB.

Does the assistant answer medical questions from patients?

No. It recognises medical questions and passes them to your clinicians as a draft or alert. It does not diagnose, does not recommend treatments and never sends results or cost estimates on its own.

Does it work alongside Doctolib or our practice management software?

Yes. It works through your email inbox and calendar; direct integration with practice management systems is not part of this workflow. Online booking and patient records stay exactly as they are.

Does the assistant email patients without approval?

Not at the start. For one to two weeks it only writes drafts. After that you switch on automatic replies one email type at a time, such as directions or the request for prior records. Anything medical stays a draft.

Which clinics is an AI assistant not worth it for?

Practices that rarely talk to patients by email and send no treatment plans or private estimates. It pays off for private clinics, dental practices, aesthetic medicine and specialist centres that receive many patient emails every day.

Your AI Assistant for your inbox: live within a week

We set up your AI assistant, with your data in Frankfurt: it answers routine emails in your tone of voice, prepares drafts for sensitive replies, reminds you to follow up on open quotes and sends your 07:30 morning briefing to your phone.