ArkiaSuite vs Unomed Flows

Vergelijk ArkiaSuite en Unomed Flows op mogelijkheden, rechtsgebied, waarborgen en geschiktheid voor Europese kopers.

Beide vermeld als alternatief voor: Google Workspace, Microsoft 365

Logo: ArkiaSuite

ArkiaSuite

France· Office Productivity Suite

Needs review

Shortlist when you want a French all-in-one workspace on operator-owned servers in Savoie with a public Art. 28 DPA and frank security limits. Skip when you need SecNumCloud/HDS, E2EE, mature Apple clients, or multi-admin 24/7 operations. Consider mailbox.org, Kolab Now or Nextcloud instead in those cases.

EU-operatedHosted in FrancePublic Art. 28 DPAFree tierFiles + mail + docs
Logo: Unomed Flows

Unomed Flows

Switzerland· Office Productivity Suite

Needs review

Shortlist for Swiss practices wanting AI-prepared referrals, filing, ICD-10-GM suggestions and dictation drafts inside an existing browser-based PIS with mandatory human approval. Skip if you need a full PIS replacement, no US-group cloud processors, or public ISO/SOC evidence before pilot. Consider LiteScribe or HappyScribe when the only gap is transcription rather than multi-step practice administration.

Swiss-operatedHuman approval gateExisting PIS overlaySwiss hosting (claimed)No patient-data training (claimed)
ArkiaSuite vs Unomed Flows: Overzicht
KenmerkLogo: ArkiaSuiteArkiaSuiteLogo: Unomed FlowsUnomed Flows
Land van herkomstFranceSwitzerland
CategorieOffice Productivity SuiteOffice Productivity Suite
Open sourceNeeNee
Self-hostedNeeNee
HoofdkantoorFranceSwitzerland
Juridische entiteitGS Informatique EURL (SIREN 925 179 079, RCS Chambéry)Unomed AG, Tramstrasse 9, 8050 Zurich, Switzerland (CHE-374.858.885)
Toepasselijk rechtNiet vermeldSwiss law / Swiss FADP (DSG) framing on privacy pages; German legal texts stated as binding
VS-moeder / zeggenschapGeen bekende VS-moederGeen bekende VS-moeder
CLOUD Act-blootstelling (indicatief)MiddelMiddel
EU-hostingstatusGehost in de EUGedeeltelijk
Hosting / residentieContent on GS Informatique hardware in Frontenex (primary) and Faverges (encrypted backup). Payments via Stripe Payments Europe (Ireland, US-group payment processor). Password checks via Have I Been Pwned k-anonymity API. TLS via Let's Encrypt. No AWS/GCP/Azure claimed for content.Vendor claims Swiss data-centre hosting and a locally operated LLM in Switzerland. Privacy lists CH for hosting/DB, file storage, email and SMS; Ireland for identity/liveness; Denmark for speech. Observed api.unomed.ch CSP references AWS S3 eu-central-2 and AWS Rekognition/Cognito eu-west-1. Firebase Cloud Messaging for push; Cloudflare/Google Analytics on the website. Full named processor list on request.
Samenvatting

French-hosted all-in-one workspace: cloud files, email, browser office docs, calendar and photo backup on the operator's own servers in Savoie.

Swiss AI workflow automation that prepares referrals, filing, coding and report drafts inside existing browser-based medical practice software for human approval.

Tags
In één oogopslag: ArkiaSuite vs Unomed Flows
In één oogopslagLogo: ArkiaSuiteArkiaSuiteLogo: Unomed FlowsUnomed Flows
HQFrontenex, Savoie, FranceZurich, Switzerland
Legal entityGS Informatique EURL (SIREN 925 179 079)Unomed AG (CHE-374.858.885)
Hosting modelOperator-owned servers (not AWS/GCP/Azure)Niet vermeld
Self-hostNo (vendor-operated SaaS)Niet vermeld
Open sourceNoNo
Commercial modelFree tier + subscription storage/mail upgradesPer finished workflow run; free first-run trial path; monthly cancel
Product focusNiet vermeldAI admin workflows inside existing practice software
Self-hostedNiet vermeldNot offered as standard (Enterprise mentions own deployment; details not public)
Key capabilities: ArkiaSuite vs Unomed Flows
Key capabilitiesLogo: ArkiaSuiteArkiaSuiteLogo: Unomed FlowsUnomed Flows
EU-operatedJaJa
Hosted in FranceJaNiet vermeld
Public Art. 28 DPAJaNiet vermeld
Free tierJaNiet vermeld
Files + mail + docsJaNiet vermeld
Human approval gateNiet vermeldJa
Existing PIS overlayNiet vermeldJa
Swiss hosting (claimed)Niet vermeldJa
No patient-data training (claimed)Niet vermeldJa

ArkiaSuite

  • Operator-owned file sync in Savoie

    ArkiaCloud stores and syncs files from Windows, browser or phone, with expiring password-protected share links, team spaces, trash and prior versions. Primary disks sit in Frontenex; nightly encrypted backups go to a second GS Informatique site in Faverges.

  • Email with optional custom-domain Pro

    ArkiaMail provides ad-free mailboxes with spam filtering and optional two-factor authentication. Free accounts include a limited mailbox; larger boxes and ArkiaMail Pro on the customer's own domain are provisioned as paid add-ons (Pro is set up with the operator, not only self-serve).

  • Browser docs compatible with Office formats

    ArkiaDocs offers word processing, spreadsheets and presentations in the browser with multi-user editing and claimed compatibility with Word, Excel and PowerPoint files, living on the same account as files and mail.

  • Calendar, contacts and photo backup

    ArkiaAgenda syncs shared calendars, contacts and tasks with phone and desktop clients. ArkiaPhotos backs up phone photos and groups them by date, place and face; face templates are computed on Frontenex servers and can be disabled on request.

  • Windows desktop app shipping now

    A native Windows 10/11 64-bit app (site lists version 1.6.0) auto-syncs chosen folders and opens mail, files, docs and calendar in one window. Android is described as in Play Store review; macOS and iOS clients are still in development.

Unomed Flows

  • Trigger-and-step workflows with mandatory approval

    Practices assemble workflows from listed triggers (referral arrived, dictation finished, lab result, refill request, insurer question, and more) and preparation steps (extract, match patient, suggest codes, draft report, file, encrypt-send). The vendor states the last step is always human review and approval before results are used.

  • Referral intake without retyping

    Ready-made template path: when a referral PDF arrives, Flows reads patient and referrer fields, prepares patient creation in the practice system, and prepares a receipt confirmation. Staff confirm the match before anything is written. Aimed at Swiss referral volume rather than generic OCR demos.

  • ICD-10-GM code suggestions from documentation

    After a consultation is documented, Flows can suggest matching ICD-10-GM codes and only enters them once approved. Coding responsibility stays with the professional; the product prepares candidates inside the practice process.

  • Runs inside existing browser-based PIS UIs

    Unomed claims to work on the visible interface of the practice software (like an assistant), without database access or replacing the system. Public list covers 16-plus systems with official partnerships named for Swiss-MR, Axenita, inSuite, Nereida, ePaad and roaadent among others. Desktop-only stacks need a custom discussion.

  • Dictation and findings preparation

    Workflows can turn finished dictations into structured report drafts (including referrer-short versions) and prepare findings for naming and filing into the proposed record. Unclear patient matches are meant to be resolved before filing, not auto-committed.

Assurance & compliance: ArkiaSuite vs Unomed Flows
Assurance & complianceLogo: ArkiaSuiteArkiaSuiteLogo: Unomed FlowsUnomed Flows
Independent security / no-logs audit
Not found

No public third-party security or no-logs audit PDF found on the site.

Not found

No public independent audit PDF or no-logs audit page found on unomed.ch.

ISO 27001
Not found

No ISO 27001 claim located on arkiasuite.fr.

Not found

No ISO 27001 certificate claim located on product, security or trust pages.

SOC 2 / SOC 3
Not found
Not found

No SOC 2/3 report claim found.

GDPR / EU data protection
Vendor claimed

French EURL controller/processor; public privacy policy and Art. 28 contract. Confirm fit for your processing roles.

Vendor claimed

Swiss FADP (DSG) and GDPR both referenced in the privacy policy; Unomed AG is Swiss controller/processor depending on context. Confirm DPA for B2B healthcare use.

US CLOUD Act exposure (indicative)
Partial

French entity with no known US parent; content on operator-owned FR servers. Residual exposure via Stripe (US-group payments) and Have I Been Pwned password API. Not legal advice.

Partial

Swiss entity / no known US parent, but US-group subprocessors appear: AWS (S3 eu-central-2, Rekognition/Cognito eu-west-1 per CSP), Firebase Cloud Messaging, Cloudflare and possibly Google Analytics on the marketing site. Indicative exposure medium. Not legal advice.

Data processing agreement (B2B)
Vendor claimed

Public Art. 28 subcontracting agreement accepted at signup/order; printable signature annex available.

Vendor claimed

Privacy policy §9 states processing on behalf of healthcare providers under contractual arrangements (data processing agreement). Request the current DPA and named subprocessor schedule.

EU AI Act
Not applicable

Face grouping on photos is a biometric-adjacent feature for the account holder's own library; product is not marketed as a general-purpose AI system.

Unknown

Product is AI-centric for administrative preparation with human approval. No public EU AI Act classification or conformity statement found.

SecNumCloud / HDS
Not found

Vendor materials do not claim SecNumCloud or HDS; submitter also stated none.

Niet vermeld
Considerations & known limitations: ArkiaSuite vs Unomed Flows
Considerations & known limitationsLogo: ArkiaSuiteArkiaSuiteLogo: Unomed FlowsUnomed Flows
No disk encryption at rest on site
Medium

Vendor states Frontenex disks are protected by physical lock, not encryption at rest. Off-site backups are encrypted because they travel. Theft of powered-off disks or physical access is a different threat model than hyperscaler encrypted volumes.

Niet vermeld
No end-to-end encryption
Medium

Administrator access can technically read stored files. Fine for many SMEs that need server-side search and previews; incompatible with E2EE mandates.

Niet vermeld
Single-operator support and admin
Medium

Art. 28 text states only Gérald Sonzogni has admin access and answers support. Strong accountability, weak redundancy for holidays, illness or exit planning.

Niet vermeld
Limited non-Windows clients
Medium

Windows app ships; Android and Apple clients are not fully released. Browser access mitigates some gaps but not all mobile workflows.

Niet vermeld
No SecNumCloud, HDS or public audit
High

No independent audit, ISO 27001, SOC 2, SecNumCloud or HDS found. Public-sector and health buyers with those gates must look elsewhere.

Niet vermeld
US-group payment subprocessor
Low

Stripe Payments Europe processes cards. Content is said not to leave GS Informatique servers, but payment metadata still involves a US-group processor.

Niet vermeld
US-group cloud services on the data pathNiet vermeld
Medium

Despite Swiss hosting claims, observed and disclosed paths include AWS services and Firebase push. Sovereignty-sensitive buyers should obtain the named processor list and assess CLOUD Act / transfer risk with counsel.

No public independent security auditNiet vermeld
Medium

No ISO 27001, SOC 2 or independent audit artefacts were found on the public site. Healthcare procurement may need questionnaires, penetration-test summaries or on-request reports before production use.

AI preparation errors in clinical administrationNiet vermeld
Medium

Vendor openly states suggestions can be wrong. Residual risk remains if practices over-trust auto-prepared codes, patient matches or report drafts; approval UX and training matter.

PIS coverage and desktop limitsNiet vermeld
Low

Supported browser-based systems are listed, but missing PIS brands and non-browser desktop software may block adoption until Unomed confirms feasibility.

Geschiktheid

ArkiaSuite

Best fit when

  • Small French SMEs, associations or municipalities that want one account for files, mail, light office docs and calendar
  • Buyers who treat operator-owned French hardware (not rented hyperscaler VMs) as a hard filter
  • Teams that need a printable GDPR Art. 28 contract without a long sales cycle
  • Windows-first users who can wait on Android/iOS client maturity
  • Organisations that prefer a named local operator reachable by phone over anonymous ticket queues

Poor fit when

  • Regulated workloads that require SecNumCloud, HDS, ISO 27001 or a published independent audit
  • Organisations that require end-to-end encryption or encrypted disks at rest
  • Apple-heavy fleets that need shipping macOS/iOS apps today
  • Enterprises needing contractual uptime SLAs or multi-person follow-the-sun support
  • Buyers who need self-hosting rather than a vendor-operated SaaS

Consider instead when

  • When: You need a mail-centric European suite with a longer public track record

    Consider: mailbox.org or Proton Mail

    Stronger mail heritage; less emphasis on operator-owned photo backup in Savoie

  • When: You want groupware with calendar/mail and more mature multi-platform clients

    Consider: Kolab Now

    Swiss/European groupware peer in the catalog

  • When: You want to operate the stack yourself on chosen EU infrastructure

    Consider: Nextcloud

    Self-host platform rather than GS Informatique-operated SaaS

Unomed Flows

Best fit when

  • Swiss medical practices on supported browser-based PIS wanting less retyping of referrals and findings
  • Teams that require a visible approve step before AI-prepared data enters the record
  • Clinics standardising ICD-10-GM suggestion and dictation-to-report drafting inside current software
  • Buyers prioritising Swiss legal entity and Swiss-claimed workflow hosting over US productivity suites

Poor fit when

  • Organisations replacing the practice information system itself rather than automating adjacent admin steps
  • Desktop-only PIS environments with no browser UI unless Unomed confirms a custom connection
  • Procurement that forbids US-parent cloud subprocessors (AWS/Firebase/Cloudflare paths observed or disclosed)
  • Buyers needing published ISO 27001/SOC 2 reports or a fully public named subprocessor register on day one

Consider instead when

  • When: You only need dictation or meeting transcription, not multi-step referral and filing workflows

    Consider: LiteScribe or HappyScribe

    Those catalog peers focus on transcription/notes rather than Swiss PIS overlay automation.

  • When: You need general-purpose cross-app automation across Office/Google stacks outside Swiss healthcare templates

    Consider: Microsoft 365 or Google Workspace automation

    Broader ecosystems, different jurisdiction and healthcare workflow depth.

Open questions for due diligence

ArkiaSuite

  • Which office engine powers ArkiaDocs (OnlyOffice, Collabora, or custom), and what are the known format limits?
  • Will the vendor share a dated subprocessor list and restore-test evidence under NDA for procurement files?
  • What is the realistic RTO/RPO after a Frontenex site loss, beyond the Faverges backup claim?
  • Timeline and feature parity for Android, macOS and iOS apps?
  • Is face grouping acceptable under your DPIA for employee or citizen photos (biometric templates, opt-out process)?

Unomed Flows

  • Will Unomed provide the current named subprocessor list (legal entities) and sign a DPA covering Flows workflows before go-live?
  • Which exact Swiss datacentre operator hosts primary databases, and is any AWS account/region used for primary patient workflow storage versus only identity or object storage?
  • Are ISO 27001, SOC 2, or health-sector assessments available under NDA?
  • What does Enterprise 'own deployment' include (VPC, on-prem components, customer-managed keys)?
  • How is EU AI Act applicability assessed for administrative AI with mandatory human approval in Swiss practices serving cross-border patients?