mailbox (formerly mailbox.org)
Germany· Office Productivity Suite
mailbox (formerly mailbox.org) vs Unomed Flows
Compare mailbox (formerly mailbox.org) y Unomed Flows en capacidades, jurisdicción, garantías y encaje para compradores europeos.
Ambos figuran como alternativas a: Microsoft 365
Unomed Flows
Switzerland· Office Productivity Suite
Needs review
Shortlist for Swiss practices wanting AI-prepared referrals, filing, ICD-10-GM suggestions and dictation drafts inside an existing browser-based PIS with mandatory human approval. Skip if you need a full PIS replacement, no US-group cloud processors, or public ISO/SOC evidence before pilot. Consider LiteScribe or HappyScribe when the only gap is transcription rather than multi-step practice administration.
Swiss-operatedHuman approval gateExisting PIS overlaySwiss hosting (claimed)No patient-data training (claimed)
Las filas resaltadas diferencian a los dos productos.
| Característica | mailbox (formerly mailbox.org) | Unomed Flows |
|---|---|---|
| País de origen | Germany | Switzerland |
| Categoría | Office Productivity Suite | Office Productivity Suite |
| Código abierto | No | No |
| Autoalojado | No | No |
| Sede | No indicado | Switzerland |
| Entidad legal | No indicado | Unomed AG, Tramstrasse 9, 8050 Zurich, Switzerland (CHE-374.858.885) |
| Ley aplicable | No indicado | Swiss law / Swiss FADP (DSG) framing on privacy pages; German legal texts stated as binding |
| Matriz / control EE.UU. | No indicado | Sin matriz estadounidense conocida |
| Exposición CLOUD Act (indicativa) | No indicado | Medio |
| Estado de alojamiento en la UE | No indicado | Parcial |
| Alojamiento / residencia | No indicado | Vendor claims Swiss data-centre hosting and a locally operated LLM in Switzerland. Privacy lists CH for hosting/DB, file storage, email and SMS; Ireland for identity/liveness; Denmark for speech. Observed api.unomed.ch CSP references AWS S3 eu-central-2 and AWS Rekognition/Cognito eu-west-1. Firebase Cloud Messaging for push; Cloudflare/Google Analytics on the website. Full named processor list on request. |
| Resumen | German paid digital workplace from Heinlein Hosting GmbH: secure email with PGP/S/MIME, Drive, browser Office, Meet, and business Admin on dual Berlin data centres. | Swiss AI workflow automation that prepares referrals, filing, coding and report drafts inside existing browser-based medical practice software for human approval. |
| Etiquetas |
| De un vistazo | mailbox (formerly mailbox.org) | Unomed Flows |
|---|---|---|
| HQ | No indicado | Zurich, Switzerland |
| Legal entity | No indicado | Unomed AG (CHE-374.858.885) |
| Product focus | No indicado | AI admin workflows inside existing practice software |
| Commercial model | No indicado | Per finished workflow run; free first-run trial path; monthly cancel |
| Open source | No indicado | No |
| Self-hosted | No indicado | Not offered as standard (Enterprise mentions own deployment; details not public) |
| Key capabilities | mailbox (formerly mailbox.org) | Unomed Flows |
|---|---|---|
| Swiss-operated | No indicado | Sí |
| Human approval gate | No indicado | Sí |
| Existing PIS overlay | No indicado | Sí |
| Swiss hosting (claimed) | No indicado | Sí |
| No patient-data training (claimed) | No indicado | Sí |
mailbox (formerly mailbox.org)
Correo cifrado y alias
Los correos se benefician de soporte PGP y S/MIME, con cifrado del lado del servidor simplificando comunicación segura. Los filtros antispam y protección antivirus filtran mensajes entrantes eficazmente. Los planes incluyen alias — hasta 3 en Light, 25+50 en Standard y 25+250 en Premium — más dominios personalizados. Filtros y reglas ilimitados ayudan a gestionar bandejas. La compatibilidad Tor añade opciones de anonimato.
Unidad en la nube y suite de oficina
Drive ofrece almacenamiento expandible en centros de datos redundantes de Berlín. Standard proporciona 5 GB, Premium 50 GB, con opciones adicionales. La suite de oficina integrada gestiona procesamiento de textos, hojas de cálculo y colaboración. Calendarios y libretas de direcciones compartidas soportan equipos. Los archivos se sincronizan entre dispositivos de forma segura.
Videoconferencia y herramientas de administración
Meet ofrece videollamadas conformes al RGPD sin proveedores externos. Para empresas, los paneles Admin gestionan usuarios, cuotas y acceso centralmente. El chat XMPP se integra para mensajería. Todo alimentado por energía verde, con plena adherencia al RGPD.
Unomed Flows
Trigger-and-step workflows with mandatory approval
Practices assemble workflows from listed triggers (referral arrived, dictation finished, lab result, refill request, insurer question, and more) and preparation steps (extract, match patient, suggest codes, draft report, file, encrypt-send). The vendor states the last step is always human review and approval before results are used.
Referral intake without retyping
Ready-made template path: when a referral PDF arrives, Flows reads patient and referrer fields, prepares patient creation in the practice system, and prepares a receipt confirmation. Staff confirm the match before anything is written. Aimed at Swiss referral volume rather than generic OCR demos.
ICD-10-GM code suggestions from documentation
After a consultation is documented, Flows can suggest matching ICD-10-GM codes and only enters them once approved. Coding responsibility stays with the professional; the product prepares candidates inside the practice process.
Runs inside existing browser-based PIS UIs
Unomed claims to work on the visible interface of the practice software (like an assistant), without database access or replacing the system. Public list covers 16-plus systems with official partnerships named for Swiss-MR, Axenita, inSuite, Nereida, ePaad and roaadent among others. Desktop-only stacks need a custom discussion.
Dictation and findings preparation
Workflows can turn finished dictations into structured report drafts (including referrer-short versions) and prepare findings for naming and filing into the proposed record. Unclear patient matches are meant to be resolved before filing, not auto-committed.
| Assurance & compliance | mailbox (formerly mailbox.org) | Unomed Flows |
|---|---|---|
| Independent security / no-logs audit | No indicado | Not found No public independent audit PDF or no-logs audit page found on unomed.ch. |
| ISO 27001 | No indicado | Not found No ISO 27001 certificate claim located on product, security or trust pages. |
| SOC 2 / SOC 3 | No indicado | Not found No SOC 2/3 report claim found. |
| GDPR / EU data protection | No indicado | Vendor claimed Swiss FADP (DSG) and GDPR both referenced in the privacy policy; Unomed AG is Swiss controller/processor depending on context. Confirm DPA for B2B healthcare use. |
| US CLOUD Act exposure (indicative) | No indicado | Partial Swiss entity / no known US parent, but US-group subprocessors appear: AWS (S3 eu-central-2, Rekognition/Cognito eu-west-1 per CSP), Firebase Cloud Messaging, Cloudflare and possibly Google Analytics on the marketing site. Indicative exposure medium. Not legal advice. |
| Data processing agreement (B2B) | No indicado | Vendor claimed Privacy policy §9 states processing on behalf of healthcare providers under contractual arrangements (data processing agreement). Request the current DPA and named subprocessor schedule. |
| EU AI Act | No indicado | Unknown Product is AI-centric for administrative preparation with human approval. No public EU AI Act classification or conformity statement found. |
| Considerations & known limitations | mailbox (formerly mailbox.org) | Unomed Flows |
|---|---|---|
| US-group cloud services on the data path | No indicado | Medium Despite Swiss hosting claims, observed and disclosed paths include AWS services and Firebase push. Sovereignty-sensitive buyers should obtain the named processor list and assess CLOUD Act / transfer risk with counsel. |
| No public independent security audit | No indicado | Medium No ISO 27001, SOC 2 or independent audit artefacts were found on the public site. Healthcare procurement may need questionnaires, penetration-test summaries or on-request reports before production use. |
| AI preparation errors in clinical administration | No indicado | Medium Vendor openly states suggestions can be wrong. Residual risk remains if practices over-trust auto-prepared codes, patient matches or report drafts; approval UX and training matter. |
| PIS coverage and desktop limits | No indicado | Low Supported browser-based systems are listed, but missing PIS brands and non-browser desktop software may block adoption until Unomed confirms feasibility. |
Encaje
mailbox (formerly mailbox.org)
Best fit when
No indicado
Poor fit when
No indicado
Unomed Flows
Best fit when
- Swiss medical practices on supported browser-based PIS wanting less retyping of referrals and findings
- Teams that require a visible approve step before AI-prepared data enters the record
- Clinics standardising ICD-10-GM suggestion and dictation-to-report drafting inside current software
- Buyers prioritising Swiss legal entity and Swiss-claimed workflow hosting over US productivity suites
Poor fit when
- Organisations replacing the practice information system itself rather than automating adjacent admin steps
- Desktop-only PIS environments with no browser UI unless Unomed confirms a custom connection
- Procurement that forbids US-parent cloud subprocessors (AWS/Firebase/Cloudflare paths observed or disclosed)
- Buyers needing published ISO 27001/SOC 2 reports or a fully public named subprocessor register on day one
Consider instead when
When: You only need dictation or meeting transcription, not multi-step referral and filing workflows
Consider: LiteScribe or HappyScribe
Those catalog peers focus on transcription/notes rather than Swiss PIS overlay automation.
When: You need general-purpose cross-app automation across Office/Google stacks outside Swiss healthcare templates
Consider: Microsoft 365 or Google Workspace automation
Broader ecosystems, different jurisdiction and healthcare workflow depth.
Open questions for due diligence
mailbox (formerly mailbox.org)
No indicado
Unomed Flows
- Will Unomed provide the current named subprocessor list (legal entities) and sign a DPA covering Flows workflows before go-live?
- Which exact Swiss datacentre operator hosts primary databases, and is any AWS account/region used for primary patient workflow storage versus only identity or object storage?
- Are ISO 27001, SOC 2, or health-sector assessments available under NDA?
- What does Enterprise 'own deployment' include (VPC, on-prem components, customer-managed keys)?
- How is EU AI Act applicability assessed for administrative AI with mandatory human approval in Swiss practices serving cross-border patients?