Grounding on the way in
The FHIR record becomes an ordered registry of atomic facts, each with a stable ID. The prompt hands the model only these facts and requires every claim line to cite the IDs it uses. Generation runs at temperature 0.
On-premises · FHIR R4 · EN / HY
The clinical note the model wrote,
proven line by line.
Quill drafts discharge summaries, progress notes and referral letters from a patient's FHIR record — then checks every number, date and diagnosis against the source before a clinician signs. The language model is treated as untrusted, and bracketed on both sides.
No patient data leaves your infrastructure. No telemetry. Ever.
0bytes of egress at runtime
12/12adversarial fabrications caught
2languages, first-class EN + HY
1clinician signature per document
The safety model
A draft is never a document.
Quill brackets the model on both sides and refuses to let an unverifiable claim reach a signature.
Verification on the way out
A deterministic pass checks the draft line by line: fabricated values, miscited facts, uncited claims and missing required entities — each surfaced with a severity, not hidden.
Clinical plausibility
A separate layer flags what citation checking cannot see: conflicting dates across resources, a stopped medication dated before it started, an inactive allergy rendered as current.
Human sign-off & audit
A licensed clinician reviews and signs; signing locks the run. Every action is appended to a hash-chained, verifiable audit log. Content-addressed provenance lets any signed document be reproduced.
How it works
FHIR in, a signed document out.
- →Ingest
Load a FHIR R4 bundle or paste one. Quill parses Patient, Encounter, Conditions, Medications, Observations, Reports, Imaging, Immunizations and more.
- →Draft
Bilingual EN + HY drafts are generated from the fact registry — locally, via Ollama or the offline stub.
- →Verify
The verdict panel shows what traces to the record and what does not, down to the individual value.
- →Sign & export
The clinician edits, re-verifies, signs, and exports a print-ready document. Unsigned exports carry a draft watermark.
Pricing
Priced to the value it returns.
On-prem deployment, sold direct or through a platform partner. Annual contracts; a one-time deployment fee covers on-site install and setup.
Loading plans…
See it draft and verify a real record.
The live demo runs in offline stub mode — deterministic, fully cited, no model download.