mailbox (formerly mailbox.org) vs Unomed Flows

Vergelijk mailbox (formerly mailbox.org) en Unomed Flows op mogelijkheden, rechtsgebied, waarborgen en geschiktheid voor Europese kopers.

Beide vermeld als alternatief voor: Microsoft 365

Logo: Unomed Flows

Unomed Flows

Switzerland· Office Productivity Suite

Needs review

Shortlist for Swiss practices wanting AI-prepared referrals, filing, ICD-10-GM suggestions and dictation drafts inside an existing browser-based PIS with mandatory human approval. Skip if you need a full PIS replacement, no US-group cloud processors, or public ISO/SOC evidence before pilot. Consider LiteScribe or HappyScribe when the only gap is transcription rather than multi-step practice administration.

Swiss-operatedHuman approval gateExisting PIS overlaySwiss hosting (claimed)No patient-data training (claimed)
mailbox (formerly mailbox.org) vs Unomed Flows: Overzicht
KenmerkLogo: mailbox (formerly mailbox.org)mailbox (formerly mailbox.org)Logo: Unomed FlowsUnomed Flows
Land van herkomstGermanySwitzerland
CategorieOffice Productivity SuiteOffice Productivity Suite
Open sourceNeeNee
Self-hostedNeeNee
HoofdkantoorNiet vermeldSwitzerland
Juridische entiteitNiet vermeldUnomed AG, Tramstrasse 9, 8050 Zurich, Switzerland (CHE-374.858.885)
Toepasselijk rechtNiet vermeldSwiss law / Swiss FADP (DSG) framing on privacy pages; German legal texts stated as binding
VS-moeder / zeggenschapNiet vermeldGeen bekende VS-moeder
CLOUD Act-blootstelling (indicatief)Niet vermeldMiddel
EU-hostingstatusNiet vermeldGedeeltelijk
Hosting / residentieNiet vermeldVendor claims Swiss data-centre hosting and a locally operated LLM in Switzerland. Privacy lists CH for hosting/DB, file storage, email and SMS; Ireland for identity/liveness; Denmark for speech. Observed api.unomed.ch CSP references AWS S3 eu-central-2 and AWS Rekognition/Cognito eu-west-1. Firebase Cloud Messaging for push; Cloudflare/Google Analytics on the website. Full named processor list on request.
Samenvatting

German paid digital workplace from Heinlein Hosting GmbH: secure email with PGP/S/MIME, Drive, browser Office, Meet, and business Admin on dual Berlin data centres.

Swiss AI workflow automation that prepares referrals, filing, coding and report drafts inside existing browser-based medical practice software for human approval.

Tags
In één oogopslag: mailbox (formerly mailbox.org) vs Unomed Flows
In één oogopslagLogo: mailbox (formerly mailbox.org)mailbox (formerly mailbox.org)Logo: Unomed FlowsUnomed Flows
HQNiet vermeldZurich, Switzerland
Legal entityNiet vermeldUnomed AG (CHE-374.858.885)
Product focusNiet vermeldAI admin workflows inside existing practice software
Commercial modelNiet vermeldPer finished workflow run; free first-run trial path; monthly cancel
Open sourceNiet vermeldNo
Self-hostedNiet vermeldNot offered as standard (Enterprise mentions own deployment; details not public)
Key capabilities: mailbox (formerly mailbox.org) vs Unomed Flows
Key capabilitiesLogo: mailbox (formerly mailbox.org)mailbox (formerly mailbox.org)Logo: Unomed FlowsUnomed Flows
Swiss-operatedNiet vermeldJa
Human approval gateNiet vermeldJa
Existing PIS overlayNiet vermeldJa
Swiss hosting (claimed)Niet vermeldJa
No patient-data training (claimed)Niet vermeldJa

mailbox (formerly mailbox.org)

  • Encrypted Email and Aliases

    Emails benefit from PGP and S/MIME support, with server-side encryption simplifying secure communication. Spam and virus protection filters incoming messages effectively. Plans include aliases—up to 3 on Light, 25+50 on Standard, and 25+250 on Premium—plus custom domains. Unlimited filters and rules help manage inboxes. Tor compatibility adds anonymity options.

  • Cloud Drive and Office Suite

    Drive offers expandable storage in redundant Berlin data centers. Standard provides 5 GB, Premium 50 GB, with further options. The integrated office suite handles word processing, spreadsheets, and collaboration. Shared calendars and address books support teams. Files sync across devices securely.

  • Video Conferencing and Admin Tools

    Meet delivers GDPR-compliant video calls without external providers. For businesses, Admin panels manage users, quotas, and access centrally. XMPP chat integrates for messaging. All powered by green energy, with full GDPR adherence.

Unomed Flows

  • Trigger-and-step workflows with mandatory approval

    Practices assemble workflows from listed triggers (referral arrived, dictation finished, lab result, refill request, insurer question, and more) and preparation steps (extract, match patient, suggest codes, draft report, file, encrypt-send). The vendor states the last step is always human review and approval before results are used.

  • Referral intake without retyping

    Ready-made template path: when a referral PDF arrives, Flows reads patient and referrer fields, prepares patient creation in the practice system, and prepares a receipt confirmation. Staff confirm the match before anything is written. Aimed at Swiss referral volume rather than generic OCR demos.

  • ICD-10-GM code suggestions from documentation

    After a consultation is documented, Flows can suggest matching ICD-10-GM codes and only enters them once approved. Coding responsibility stays with the professional; the product prepares candidates inside the practice process.

  • Runs inside existing browser-based PIS UIs

    Unomed claims to work on the visible interface of the practice software (like an assistant), without database access or replacing the system. Public list covers 16-plus systems with official partnerships named for Swiss-MR, Axenita, inSuite, Nereida, ePaad and roaadent among others. Desktop-only stacks need a custom discussion.

  • Dictation and findings preparation

    Workflows can turn finished dictations into structured report drafts (including referrer-short versions) and prepare findings for naming and filing into the proposed record. Unclear patient matches are meant to be resolved before filing, not auto-committed.

Assurance & compliance: mailbox (formerly mailbox.org) vs Unomed Flows
Assurance & complianceLogo: mailbox (formerly mailbox.org)mailbox (formerly mailbox.org)Logo: Unomed FlowsUnomed Flows
Independent security / no-logs auditNiet vermeld
Not found

No public independent audit PDF or no-logs audit page found on unomed.ch.

ISO 27001Niet vermeld
Not found

No ISO 27001 certificate claim located on product, security or trust pages.

SOC 2 / SOC 3Niet vermeld
Not found

No SOC 2/3 report claim found.

GDPR / EU data protectionNiet vermeld
Vendor claimed

Swiss FADP (DSG) and GDPR both referenced in the privacy policy; Unomed AG is Swiss controller/processor depending on context. Confirm DPA for B2B healthcare use.

US CLOUD Act exposure (indicative)Niet vermeld
Partial

Swiss entity / no known US parent, but US-group subprocessors appear: AWS (S3 eu-central-2, Rekognition/Cognito eu-west-1 per CSP), Firebase Cloud Messaging, Cloudflare and possibly Google Analytics on the marketing site. Indicative exposure medium. Not legal advice.

Data processing agreement (B2B)Niet vermeld
Vendor claimed

Privacy policy §9 states processing on behalf of healthcare providers under contractual arrangements (data processing agreement). Request the current DPA and named subprocessor schedule.

EU AI ActNiet vermeld
Unknown

Product is AI-centric for administrative preparation with human approval. No public EU AI Act classification or conformity statement found.

Considerations & known limitations: mailbox (formerly mailbox.org) vs Unomed Flows
Considerations & known limitationsLogo: mailbox (formerly mailbox.org)mailbox (formerly mailbox.org)Logo: Unomed FlowsUnomed Flows
US-group cloud services on the data pathNiet vermeld
Medium

Despite Swiss hosting claims, observed and disclosed paths include AWS services and Firebase push. Sovereignty-sensitive buyers should obtain the named processor list and assess CLOUD Act / transfer risk with counsel.

No public independent security auditNiet vermeld
Medium

No ISO 27001, SOC 2 or independent audit artefacts were found on the public site. Healthcare procurement may need questionnaires, penetration-test summaries or on-request reports before production use.

AI preparation errors in clinical administrationNiet vermeld
Medium

Vendor openly states suggestions can be wrong. Residual risk remains if practices over-trust auto-prepared codes, patient matches or report drafts; approval UX and training matter.

PIS coverage and desktop limitsNiet vermeld
Low

Supported browser-based systems are listed, but missing PIS brands and non-browser desktop software may block adoption until Unomed confirms feasibility.

Geschiktheid

mailbox (formerly mailbox.org)

Best fit when

Niet vermeld

Poor fit when

Niet vermeld

Unomed Flows

Best fit when

  • Swiss medical practices on supported browser-based PIS wanting less retyping of referrals and findings
  • Teams that require a visible approve step before AI-prepared data enters the record
  • Clinics standardising ICD-10-GM suggestion and dictation-to-report drafting inside current software
  • Buyers prioritising Swiss legal entity and Swiss-claimed workflow hosting over US productivity suites

Poor fit when

  • Organisations replacing the practice information system itself rather than automating adjacent admin steps
  • Desktop-only PIS environments with no browser UI unless Unomed confirms a custom connection
  • Procurement that forbids US-parent cloud subprocessors (AWS/Firebase/Cloudflare paths observed or disclosed)
  • Buyers needing published ISO 27001/SOC 2 reports or a fully public named subprocessor register on day one

Consider instead when

  • When: You only need dictation or meeting transcription, not multi-step referral and filing workflows

    Consider: LiteScribe or HappyScribe

    Those catalog peers focus on transcription/notes rather than Swiss PIS overlay automation.

  • When: You need general-purpose cross-app automation across Office/Google stacks outside Swiss healthcare templates

    Consider: Microsoft 365 or Google Workspace automation

    Broader ecosystems, different jurisdiction and healthcare workflow depth.

Open questions for due diligence

mailbox (formerly mailbox.org)

Niet vermeld

Unomed Flows

  • Will Unomed provide the current named subprocessor list (legal entities) and sign a DPA covering Flows workflows before go-live?
  • Which exact Swiss datacentre operator hosts primary databases, and is any AWS account/region used for primary patient workflow storage versus only identity or object storage?
  • Are ISO 27001, SOC 2, or health-sector assessments available under NDA?
  • What does Enterprise 'own deployment' include (VPC, on-prem components, customer-managed keys)?
  • How is EU AI Act applicability assessed for administrative AI with mandatory human approval in Swiss practices serving cross-border patients?