ReportAId PRM Case Manager
ReportAId PRM Case Manager is an Italian healthcare module that reads medical reports, extracts every clinical recommendation and feeds a front-office dashboard ranking which patients to call back, when and why. Sold to hospitals on quotation.
What is ReportAId PRM Case Manager?
PRM · Case Manager is one of five modules sold by ReportAId, an Italian company that presents itself as the first AI platform turning medical reports into patient relationships. The other four are PRM · Automatic, Prescription Intelligence, Guideline Adherence and Clinical Trials Recruiting; each runs on its own or combined with the others. This entry covers the Case Manager module, which the vendor positions for facilities that already have a team dedicated to patient management.
The problem it addresses is stated plainly by the company: around 80% of healthcare data is unstructured, and roughly 70% of patients never return to the same facility for the follow-up their report recommended. Reports get written, filed, and never acted upon.
The processing chain has three named steps. First, report reading: the system analyses reports as they are produced — printed documents, HL7 messages or EHR records — and identifies each clinical recommendation, including the timing the specialist indicated. Second, follow-up generation: every recommendation becomes a concrete action, whether a front-office reminder, a personalised patient message or a direct booking proposal. Third, patient communication by email or WhatsApp, with the option to book the next step of the care pathway directly.
What separates this module from its automatic sibling is the dashboard. The front office sees, in real time, the patients to contact again ordered by clinical priority and deadline, the pending exams and therapies to monitor extracted automatically from the reports, the history of communications and bookings, and automatic alerts on urgent cases. Nobody has to read every report to know what to do next.
The vendor frames the design as deliberately non-intrusive: the physician changes nothing in their workflow, the system never touches the content of a report or the doctor-patient conversation, patient messages remain attributable to the facility rather than to a machine, and the case manager can review each message before it is sent.
ReportAId claims measured results on Italian private facilities — +21% recurring patients in the months after activation and a 70% open rate on automated clinical communications — and names thirteen Italian healthcare providers as clients, among them Ospedale San Raffaele, Gruppo Villa Maria and KOS Group.
What it does
- Read medical reports as they are produced, with no data entry, from printed documents, HL7 messages or EHR records
- Extract every clinical recommendation from free text: follow-up visits, exams to repeat, drugs to monitor and the timing the specialist indicated
- Rank the patients to contact again by clinical priority and by deadline, in a single front-office queue
- Surface pending exams and therapies to monitor automatically, without anyone opening each report
- Turn each recommendation into a concrete action: a front-office reminder, a personalised patient message or a direct booking proposal
- Raise automatic alerts on the cases that need immediate attention
- Keep the history of communications sent and bookings made, with case-manager review before any message is sent
When to use ReportAId PRM Case Manager / When not to
A quick filter to help you decide if ReportAId PRM Case Manager is the right fit.
When to use ReportAId PRM Case Manager
- Private and accredited private hospitals, outpatient clinics and diagnostic centres handling large volumes of medical reports
- Front-office and medical secretariat teams responsible for calling patients back once a report has been issued
- Facilities that already run a team dedicated to patient management, which is the profile the module names as its target
- Medical directors and healthcare operations managers trying to close the gap between what is prescribed and what patients actually book
- Care coordinators and health information managers who need pending exams and therapies surfaced without reading every report
When not to use ReportAId PRM Case Manager
- Patients and the general public: patients receive the messages, they are never users of the tool
- Practising physicians, whose workflow and consultation the vendor explicitly promises not to touch
- Small practices producing few reports, since the value of the module scales with document volume
- Buyers who want to sign up online and compare prices: there is no self-service, no published pricing and no free tier
- Organisations outside healthcare, and in practice outside Italy: every named client is Italian and the site exists only in English and Italian
How to use ReportAId PRM Case Manager
A typical end-to-end flow, from setup to results.
- Request a demo through the form linked from every page of the site; there is no self-service sign-up
- Fill in the work email, organisation, phone and role fields the vendor's form asks for
- Let the vendor analyse a sample of your facility's reports and walk you through the full flow, from report reading to patient follow-up
- Choose which of the five modules you need, since each one runs alone or alongside the others
- Negotiate the quotation, which the vendor prices on facility size, modules selected and volume of reports handled
- Sign the commercial agreement and the project-level data processing agreement, and produce the DPIA your organisation owes as controller
- Connect the report source — printed documents, HL7 messages or EHR records — and your healthcare CRM, without replacing the management software already in place
- Go live: the vendor announces a few days of setup, with its team supporting the transition
- Work the dashboard daily, handling the queue of patients to contact ordered by clinical priority and deadline
- Review generated messages before they are sent, and act on the alerts raised for urgent cases
Pros & Cons
Pros
- Unusually thorough legal paperwork for a company this young: two dated privacy notices, terms of service, a detailed cookie policy and a named data protection officer
- GDPR roles written down explicitly — the customer is controller, ReportAId is processor under a project DPA — instead of being left implicit
- Subprocessors named rather than described in the abstract: SlashID for identity, Langfuse for observability, Google Ireland and Amplitude for website measurement
- Processing and storage claimed entirely within the EU, and the website notice states that no transfer outside the EEA takes place
- Written clinical guardrails: AI output is not medical advice, decisions must not rest on it alone, re-identification is prohibited and machine access is limited to aggregates
- The clinical workflow is left alone, and patient messages stay attributable to the facility rather than to an automated system
- Thirteen named Italian healthcare providers as references, and a publicly released open model on Hugging Face
Cons
- No public pricing whatsoever: the pricing path returns a genuine 404 and no monetary amount appears anywhere on the site, so every evaluation starts with a sales call
- Neither a free trial nor a permanent free plan is mentioned, in either direction
- The site is a JavaScript single-page application: all eleven URLs tested return the same 6,405-byte shell, so nothing is readable without executing scripts
- The sitemap lists 14 URLs while the application actually routes 29, omitting the PRM module page itself, the cookie policy, the whitepaper and all three MCP pages
- ISO 27001 and ISO 9001 are claimed with no certificate number and no certifying body named
- The only terms of service published cover the MCP server rather than the platform or this module, and that server has no public technical documentation
- No published stance on training models with customer data, no documented opt-out, and no hosting country or hosting provider ever named
Pricing & Plans
No price is published. A targeted check found no pricing page — the pricing path returns a genuine 404 — no pricing route inside the application, and no monetary amount anywhere in the site's code. The vendor states that cost is agreed with each organisation according to its size, the modules selected and the volume of reports handled, and directs buyers to request a demo for a personalised quotation. Neither a free trial nor a permanent free plan is mentioned, in either direction.
Data, GDPR & hosting
A consolidated view of how ReportAId PRM Case Manager handles your data.
GDPR overview
Implementation is documented rather than merely asserted. Two dated privacy notices are published: one for the website, in Italian, and one for the MCP server, in English, last updated on 30 June 2026. A data protection officer is designated and reachable at privacy@reportaid.ai. Legal bases are cited article by article under Regulation (EU) 2016/679, staff are instructed under Article 29, data subject rights are listed at length and the Italian Garante is named as supervisory authority. Roles are split explicitly: the customer is controller and carries the DPIA, ReportAId is processor under a project DPA. The vendor additionally claims ISO 27001 and ISO 9001 certification and AI Act compliance, but publishes no certificate number and no certifying body.
Who owns the data?
For the clinical and operational data flowing through the platform, the healthcare organisation is the data controller and ReportAId acts only as a data processor, on the customer's instructions, under a commercial agreement and a project-level data processing agreement. The customer also carries the data protection impact assessment and the lawfulness of what it entrusts. ReportAId becomes controller only for the data needed to authenticate users and operate the service. Ownership of the software, interfaces and analytics remains with ReportAId or its licensors, and customers receive a limited, non-exclusive, non-transferable and revocable right of use. On the corporate website, ReportAId S.r.l. is controller for form and browsing data.
Reuse rights
Access through the MCP server is read-only, and limited to aggregated figures: individual patient records are never exposed. Authorised users may query the analytics their own organisation is entitled to see, and nothing beyond that. Four things are explicitly forbidden: identifying or re-identifying any individual, combining the output with other sources in order to do so, extracting data in bulk beyond what the authorised use requires, and relying on the AI output alone for decisions producing legal or similarly significant effects on people. Data must be kept confidential and may not be disclosed, copied or retained outside what the customer agreement permits. Beyond these prohibitions, the site publishes no clause on what a customer may do with the insights it draws from the platform.
Data retention & training
Hosting summary
ReportAId claims to be 100% European, with all data processed and stored inside the European Union. The website privacy notice goes further and states that the controller performs no transfer outside the European Economic Area; should one become necessary, it would rest on an adequacy decision under Article 45 GDPR or on the Chapter V safeguards. The MCP server notice applies the same rule. The cookie policy is the one place where non-EU suppliers appear: some are established in the United States, with transfers covered by the EU-U.S. Data Privacy Framework or standard contractual clauses. Amplitude is described as running on EU servers, while Google Tag Manager and Google Ads are attributed to Google Ireland Limited in Dublin. What is missing is specificity: no hosting country is named and no hosting provider is identified, the MCP notice referring only to its hosting and infrastructure providers. Separately, the marketing site itself resolves to an Amazon CloudFront edge node in Paris — a delivery point for the public website that says nothing about where clinical data lives.
Things to keep in mind
Risks and trade-offs to weigh before adopting ReportAId PRM Case Manager.
- Health data is the most sensitive category the GDPR recognises, and responsibility does not transfer with the workload: your organisation stays controller and carries the DPIA
- The system reads free clinical text, and the vendor's own terms admit AI output can be incomplete, inaccurate, outdated or misleading — a missed recommendation costs as much as a wrong one
- The pitch is explicitly that the front office no longer reads every report, which is also the point at which human oversight thins out
- Automated messages are designed to look as though they come from your facility, so a clumsy or badly targeted one damages your reputation rather than the vendor's
- Part of the value is framed as recovered revenue and recurring patients: the line between continuity of care and commercial solicitation is one your organisation has to draw, not the software
- Security and quality certifications are claimed without certificate numbers, and there is no published answer on model training or data opt-out
- Care-related messages travel through WhatsApp, putting a third party in the patient communication chain, while daily operations come to depend on one supplier whose contract terms are invisible before the demo
Setup & Integrations
Technical difficulty
The vendor promises a light touch: go-live within a few days, no replacement of existing systems, no data entry, and its own team supporting setup. The reality sits one level higher. Someone has to connect the report source — printed documents, HL7 messages or EHR records — and the healthcare CRM, which is an IT integration project rather than an installation. There is no online sign-up: access runs through a demo, a contract and a DPA, and your organisation must produce the DPIA. The optional MCP server additionally requires OAuth authorisation through the vendor's identity provider.
Deployment
Integrations
Supported languages
Behind ReportAId PRM Case Manager
Fundraising
Social
Resources
All the official URLs gathered for verification and reference.
Frequently asked questions
What exactly does the PRM Case Manager module do?
How is it different from the PRM Automatic module?
How much does it cost?
Do we have to replace our existing management software?
What data does it read, and in what form?
Who is legally responsible for the patient data?
Where is the data hosted?
Is our data used to train AI models?
How are patients contacted, and can we review the messages?
Is there an API?
Should you pick ReportAId PRM Case Manager?
ReportAId PRM Case Manager is a narrow product done thoroughly. It solves one problem — the follow-up a medical report recommends and nobody chases — and it solves it where the work actually happens, at the front-office desk rather than in the consulting room. The design decisions follow from that: the physician's workflow is untouched, messages carry the facility's name, and a human reviews each one before it goes out.
Two things make the vendor easier to take seriously than most companies of its age. The first is the legal paperwork: two dated privacy notices, terms of service, a named data protection officer, a project-level DPA, explicitly assigned GDPR roles and named subprocessors. The second is verifiable traction — thirteen Italian healthcare providers named, including Ospedale San Raffaele and Gruppo Villa Maria — alongside a EUR 2.2 million pre-seed round led by Italian Founders Fund in May 2025.
The gaps are equally clear. Nothing about price is public, so budgeting is impossible before a sales conversation. The ISO 27001 and ISO 9001 badges carry no certificate number. The only terms of service published cover the company's MCP server rather than the platform, and that server has no public documentation. There is no published position on whether customer data trains the models, and no hosting country is ever named behind the 100% European claim.
Two practical cautions. The site is a JavaScript application whose sitemap omits nine of its own routes, including this module's page, so due diligence has to go past the sitemap. And the founding date cannot be settled: the site says 2024 in three places, while the Italian business register records registration on 21 November 2023.
Worth a demo if you run a report-heavy private facility in Italy with a patient-management team. Bring the contract questions with you.
- Choosing a selection results in a full page refresh.
- Opens in a new window.