Magical
Magical deploys specialized AI agents that run healthcare operations end to end, from patient access to revenue cycle. Its agents work inside existing systems without APIs, and a free browser extension still handles autofill and text expansion.
What is Magical?
Magical is a platform of AI agents built by HeyAutofill, Inc. to carry out the administrative work that healthcare organizations run every day. Where most automation vendors ask what systems you can connect, Magical asks the opposite question: its agents operate the browser and desktop applications a human employee would use, so no API and no integration project is required. That single design choice explains the whole product, because hospital EHRs and payer portals rarely expose anything to connect to.
The catalogue holds eleven ready-to-deploy agents, each aimed at one named workflow and each showing a live execution counter on the site: prior authorizations, underpayments, referral management, medical records requests, medical necessity, revenue integrity, payment posting, documentation, benefits verification, denials management and AR follow-up. Accuracy figures are published per agent, from 91% on benefits verification to 99% on payment posting, with deployment quoted at four to six weeks. Across the platform Magical advertises 80%+ automation coverage and 90%+ accuracy after a six to eight week rollout. Workflows that exist only inside one organization can be turned into custom agents trained on its own SOPs.
Technically, each workflow iteration runs in its own virtual machine. A multi-agent framework splits login, document handling, reasoning and computation across specialized agents, while AI judges act as guardrails on execution. Every step is recorded with the action taken and the reasoning behind it, so a run can be resumed or handed to a person. Daily automated testing, self-healing workflows and detailed logs round out the operational side.
Alongside this sits the product Magical started with and still sells: a free browser extension for autofill and text expansion, available for Chrome, Edge and Opera. Founded in September 2020, the company employs around seventy people across the United States and Canada, and points to a KLAS Emerging Company Spotlight rating, a Becker's revenue cycle listing and a published Headspace case study.
What it does
- Run prior authorizations end to end, from coding to payer submission
- Verify patient eligibility and benefits directly inside payer systems
- Post payments, chase accounts receivable and work denied claims
- Extract data from any PDF and key it into online forms
- Move and reshape data between applications that expose no API
- Autofill forms, databases and messages straight from the browser
- Build custom agents trained on your own SOPs and operating rules
When to use Magical / When not to
A quick filter to help you decide if Magical is the right fit.
When to use Magical
- Revenue cycle teams in hospitals, health systems and physician groups buried under prior authorizations, benefits verification, denials and AR follow-up
- Healthcare payers and health plans that need eligibility, claims and records workflows executed at volume without adding headcount
- Provider organizations whose EHRs and payer portals expose no usable API, since the agents drive exactly the screens a human would
- Operations leaders with tightly written internal SOPs who want a bespoke agent trained on their own rules rather than a generic automation
- Individual professionals such as recruiters, sales reps or support agents who simply want the free browser extension for autofill and text expansion
When not to use Magical
- Buyers who need a published price list: nothing is quoted publicly and every route leads to a sales demo
- Developers hoping to drive an automation platform programmatically, since Magical documents no public API
- Teams that need something live this afternoon, as production is announced in weeks rather than hours
- Mobile-first users, because there is no iOS or Android application; the product lives in the browser and on the web
- Organizations needing a non-English interface or contractual EU data residency, neither of which is offered
How to use Magical
A typical end-to-end flow, from setup to results.
- Book a demo from the website, since there is no self-serve sign-up for the agent platform
- Complete the single-step form, choosing the Automation or the Text Expansion track and giving your company size and industry
- Attend the walkthrough: a live tour of the platform, an autonomous agent completing a workflow end to end, and a first pricing and packaging discussion
- Choose a starting point, either a ready-made agent from the library of eleven or a custom agent for a workflow unique to your organization
- Hand over the SOP and the operating logic behind that workflow; this capture stage is business-level, not technical
- Let Magical configure the specialized agents that handle login, document processing, reasoning and computation
- Run supervised training, during which Magical monitors executions and flags edge cases for review
- Go live, counting four to six weeks for a custom agent and six to eight weeks for a standard deployment
- Set up governance: separated workspaces, granular view, edit and execute permissions, SAML 2.0 single sign-on, MFA and SCIM on Enterprise
- Monitor day to day through automation logs, daily automated testing and immutable audit trails, with the help centre available around the clock
Pros & Cons
Pros
- Needs no API or connector, which is precisely the obstacle in healthcare where EHRs and payer portals rarely expose one
- Agents are pre-trained on named revenue cycle workflows and carry published accuracy rates and live execution counters
- SOC 2 Type II and HIPAA are claimed, with the SOC 2 report obtainable through a Drata trust portal
- Complete public DPA with EU Standard Contractual Clauses, a UK Addendum and a published sub-processor list with a ten-day notice period
- Strong traceability, since every agent step is logged with its reasoning and backed by daily testing and immutable audit logs
- Short announced time to production, four to eight weeks against the months a classic RPA project consumes
- A free browser extension lets a team assess the vendor at zero cost and zero commitment
Cons
- No public pricing at all: the pricing URL redirects to the homepage and every button leads to a demo
- No documented public API, so nothing can be driven programmatically from the customer side
- No mobile application, on either iOS or Android
- Privacy policy, terms and DPA all date from 8 November 2023 and still describe the text expander rather than the healthcare agents
- GDPR is handled contractually but never claimed, and no Article 27 EU representative is named
- The opt-out from data reuse goes through an email to support rather than a setting inside the product
- Accuracy figures and execution counters are vendor-declared, with no third-party audit cited
Pricing & Plans
A permanent free tier exists: the terms of service guarantee continued access to the unpaid version of the service after a paid subscription is cancelled, and the browser extension is listed at 0 USD in the site's structured data. No paid price point is published. The pricing URL redirects to the homepage, the footer pricing link points back to the home page, and the site states that pricing and packaging options are discussed during the demo. The lowest paid price is therefore not public and must be obtained from the vendor.
- Free — the unpaid version of the service
- retained after any subscription is cancelled
- with restrictions on use and access
- the browser extension is listed at 0 USD
- Core — paid subscription tier named in the terms of service
- billed on a monthly or yearly cadence chosen at purchase
- no price published
- Advanced — higher paid subscription tier named in the terms of service
- no price published
- Enterprise — adds SAML 2.0 single sign-on
- SCIM provisioning and administrator control over AI features
- price on request
Data, GDPR & hosting
A consolidated view of how Magical handles your data.
GDPR overview
Magical publishes a full Data Processing Addendum, incorporated into its terms, that names the EU GDPR, the UK GDPR with the Data Protection Act 2018, the Swiss FADP and the CCPA/CPRA. It builds in the EU Standard Contractual Clauses and a UK Addendum for transfers, binds HeyAutofill, Inc. to processor duties, offers assistance with data protection impact assessments and data subject requests, and publishes a list of authorised sub-processors with a ten-day notice period and a right to object. What is absent is any plain claim of compliance: the trust page advertises HIPAA and SOC 2 Type II and never the GDPR, no Article 27 EU representative is named, and no data protection officer is designated. Privacy requests go to trust@getmagical.com.
Who owns the data?
HeyAutofill, Inc., which trades as Magical, positions itself as a processor. Under its Data Processing Addendum the customer keeps control of personal data and can require its return or deletion once the services end, with a deletion certificate available on request. Magical states it does not sell personal information to data brokers, and its Californian notice confirms no sale in the preceding twelve months. On the healthcare pages the company claims never to store protected health information on its servers. The terms are far less generous on user content: submissions and templates carry a royalty-free, perpetual, irrevocable and worldwide licence to Magical, and templates may be made available to other users.
Reuse rights
Customers keep full freedom over the operational records their agents process; nothing in the terms limits what they may do with their own data. Magical's own reuse is considerably broader. The privacy policy allows the company to use the information it collects to develop, train, optimize and improve artificial intelligence and machine learning models, on top of product improvement, marketing and legal purposes. Shortcut command data is stored; variable content, meaning whatever is copied or transferred while using the service, is processed but not stored, and users may opt out by emailing help@getmagical.com. The trust page states that use of large language models prevents any training on prior agent runs. Anonymized or aggregated data may be used and shared without restriction.
Data retention & training
Hosting summary
Magical's privacy policy states that personal information is stored on servers in various locations, including the United States, and warns that data may be transferred outside the user's country of residence and may be disclosed to US federal or state authorities under applicable law. The trust page confirms the services are hosted on AWS. Data is encrypted in transit with HTTPS/TLS 1.2 and at rest with AES-256, and text expansion templates carry an additional layer of encryption. Backups are extensive: point-in-time restore covers any database change within fourteen days, full daily backups are kept for thirty-one days in a separate geographic region, and template backups are kept for seven days. On its healthcare pages the company states it never stores protected health information on its servers. No European hosting region is offered and no data centre is named. The domain resolves to an anycast address geolocated in Amsterdam on Amazon's network, which is a content delivery node rather than an indication of where customer data actually lives.
Things to keep in mind
Risks and trade-offs to weigh before adopting Magical.
- Prior authorizations and claims carry real clinical and financial consequences for patients; a 92% accuracy claim also means roughly one submission in twelve still needs a human eye
- Teams that stop doing the work by hand lose the tacit knowledge of payer quirks and appeal routes, and that expertise is slow to rebuild if the vendor changes
- The terms grant Magical a perpetual, irrevocable and worldwide licence over templates, which may be made available to other users, so check what staff save before it becomes shareable
- The privacy policy permits collected data to be used to train AI models; an opt-out exists but must be requested by email, which makes inaction a form of consent
- Accuracy rates and execution counters come from the vendor and are not independently audited, so establish your own baseline before signing
- Data is stored in various locations including the United States, with no contractual EU residency offered, which is a genuine constraint for European entities
- Binding individual arbitration in San Francisco, a class action waiver and no refunds on started billing periods leave limited recourse if the relationship sours
Setup & Integrations
Technical difficulty
Low for the customer's technical teams, moderate in elapsed time. There is no self-serve onboarding: a demo leads to a scoped project. The approach is explicitly no-code, with the customer supplying the SOP and the business logic while Magical configures the specialized agents and runs supervised training. No API, connector or integration work is required, which removes the usual bottleneck. Expect four to six weeks for a custom agent and six to eight weeks for a standard deployment. IT involvement is limited to SAML 2.0 single sign-on, MFA and SCIM provisioning. The browser extension itself installs in seconds.
Deployment
Integrations
Behind Magical
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Magical.
Frequently asked questions
What exactly does Magical do?
Does Magical need an API or an integration project?
How long does a deployment take?
How reliable are the agents?
Is Magical HIPAA and SOC 2 compliant?
Does Magical train AI models on customer data?
What does it cost?
Is there a mobile app, and what is the minimum age?
Should you pick Magical?
Magical has made one clear bet, and it is a good one for its market: rather than integrating with healthcare systems, its agents simply use them, the way a member of staff would. In an industry where EHRs and payer portals expose almost nothing to connect to, that removes the obstacle every automation project usually founders on. The eleven pre-built agents map onto workflows a revenue cycle director can name without hesitation, the published accuracy figures are specific rather than vague, and the security posture is genuinely solid: SOC 2 Type II, HIPAA, a complete Data Processing Addendum with EU Standard Contractual Clauses, a published sub-processor list and immutable audit logs on every agent step.
The reservations are just as concrete. Nothing is priced publicly, so no one can size a budget without entering a sales cycle. There is no public API, no mobile app, and the legal documents — privacy policy, terms and DPA — all date from November 2023 and still describe the text expander the company started with, not the healthcare agents it sells today. The GDPR is honoured contractually but never claimed on the site, and no Article 27 EU representative is named, which matters for any European buyer. The accuracy and volume figures come from the vendor alone.
For a US healthcare organization drowning in prior authorizations and denials, Magical is a serious candidate worth the demo, provided the pricing conversation happens early. For anyone outside that profile, or anyone who needs to compare costs before talking to sales, the free browser extension remains the only way in — and the rest of the platform stays behind a form.
- Choosing a selection results in a full page refresh.
- Opens in a new window.