Care coordination, built around your caseload.

How does Mallowa pay for itself?

Because the coordination you already do for qualifying Medicare and dual-eligible clients — care-plan updates, med reconciliation, phone calls, chasing referrals — is billable time under Chronic Care Management (CCM, codes 99490/99439) once the patient is enrolled and consented. Mallowa captures that time as you work, tracks the consent, enrollment, and eligibility requirements that have to come first, and generates the chart-ready superbill. A handful of enrolled patients' reimbursement covers the subscription many times over — and that's the smaller half of the story. For qualifying practices, this is a new recurring revenue stream: coordination you were already doing, unbilled, becomes monthly reimbursement that grows with your panel.

The opportunity is mostly unclaimed: just 4.0% of potentially eligible Medicare fee-for-service beneficiaries — about 22.6 million people — received any CCM services in 2019, the most recent federal analysis (HHS ASPE, 2022).

Running more than CCM? Estimate all six 2026 coordination programs — APCM, BHI, PCM, CHI, and PIN included. Or start with the 7-question unbilled-revenue quiz.

Our commitments to your practice.

These aren't marketing words. They're constraints we've built into how Mallowa works for clinicians.

1. 1.

   New overlapping checkout is blocked.

   When provider coverage is active, Mallowa blocks a new overlapping checkout. If someone already has a paid individual subscription, it remains customer-managed in Stripe through Manage billing. We do not automatically cancel, refund, or rewrite live billing.

2. 2.

   Continuity if you ever leave.

   If provider coverage ends, access resolves to the person's own active plan or Roots. Their data remains; no paid plan is created or repaired automatically.

3. 3.

   No PHI ever reaches a third-party AI.

   Mallowa runs a 7-layer de-identification pipeline before any prompt reaches Claude. The pipeline scrubs the 18 HIPAA identifiers, validates the result, and re-identifies the response inside our boundary. The AI provider never sees a name, DOB, address, or any other identifier.

4. 4.

   Audit log is the source of truth.

   Every read, write, update, and delete on PHI lands in an immutable audit log. Reads are recorded by the server, in the same transaction that returns the record — so a read cannot happen without its entry. Family-role members can request a §164.528 disclosure log at any time. Your team can pull their own activity log for credentialing or supervisory review.

5. 5.

   Published self-serve pricing.

   Every tier is on this page with a number next to it. If you outgrow Practice, talk to us about an enterprise plan — but until then, the price you see is the price you pay.

Mallowa is HIPAA-aligned end to end. Providers complete Business Associate Agreement signing during provider onboarding. Every subprocessor that touches PHI is on a signed BAA. Every read and write is audited — reads server-side, before the record is shown. AI features run through a 7-layer de-identification pipeline so the AI provider never sees a name, DOB, or address — and care data is never used to train models.

Full details on our trust pages.