Sell AI Prior-Auth Packets to US PT Clinics

Disclosure: this article contains affiliate links. If you open an account through one of them, Cashflow Abroad may earn a referral commission at no extra cost to you.

A US outpatient physical-therapy clinic that collects about $106 per completed visit still loses the next 8–12 visits when prior authorization sits in a billing queue. APTA’s 2025 administrative-burden survey found 30.2% of physical therapists now wait one to two weeks for a payer decision, and nearly 83% agreed those delays cause patients to abandon treatment. That is not a “paperwork annoyance.” At $106 a visit, a 10-visit episode that never starts is more than $1,000 of lost collections, plus the therapist’s empty slot.

This playbook is for an American or dollar-earner living abroad who wants one concrete offer in the AI Income & Cash Flow lane: an AI-assisted prior-authorization packet desk sold to independent US PT and chiropractic clinics. If you would rather hire the Slack ping than build it, Michael Heredia deploys owner-owned Telegram, Discord, Slack, and phone agents on your server with your keys; the packet desk itself stays a human-checked document operation, not a receptionist rewrite of the expat AI-freelancing formula.

What do you sell, and who actually buys it?

You sell a completed prior-authorization packet: payer-ready cover letter, extracted clinical facts, CPT/visit request, attachments list, and a transmission log. You do not sell medical advice, you do not “guarantee approval,” and you do not click Submit inside the clinic’s EHR unless the contract and BAA say so.

The buyer is a 1–4 therapist outpatient clinic

Primary buyer: the owner of an independent US outpatient PT clinic with one to four therapists, a part-time biller, and a commercial-plus-Medicare mix. Secondary buyer: a chiropractic or pain clinic that still faxes continuation-of-care requests to the same regional Blues, UHC, Aetna, and workers’-comp carriers. Hospital systems and national chains already have utilization-review teams. Skip them.

The pain is staff time, not software. APTA’s 2025 report still shows a large share of respondents spending more than 10 minutes preparing a single authorization, with the 11- to 30-minute band growing since 2018. Clinics also report that 12.9% of claims are denied even after authorization work, 72.4% of those denials get appealed, and 49.3% of appeals succeed. Your offer is speed and completeness on the first send, plus a clean appeal packet when the payer asks for more notes.

To test demand before you build a HIPAA stack, post the offer as a free listing on Brixaz and see who contacts you. Listings are free and the marketplace is US-side, which is the only geography that matters for this product.

Package names that close:

• Initial-eval packet: first 6–12 visits, from the PT evaluation and plan of care.
• Continuation packet: visits 13+ with progress notes, remaining deficits, and updated goals.
• Appeal packet: denial letter plus the missing clinical facts, billed as a separate SKU.

How much does the stack cost to run from abroad?

As of September 2026, a one-clinic pilot can sit under $90 a month in tools if you keep protected health information off consumer chat products and off n8n Cloud. n8n Cloud stores workflow data in Frankfurt. Do not put clinic notes there. Self-host n8n on a US-region host that will sign a BAA, or keep n8n as a router of Google Drive file IDs with no note text in the execution log.

Tool	Plan / rate (Sep 2026)	What it does on this desk	HIPAA note
Claude API (Sonnet 5)	$2 / million input tokens, $10 / million output	Draft cover letter, extract goals, flag missing elements	PHI only after a signed Anthropic BAA and HIPAA-ready org; Messages API is in scope, Files API is not
Google Workspace Business Starter	$8.40 per user per month on the flexible plan ($7 with annual)	Clinic drop folder, packet PDFs, audit trail	Accept the Workspace HIPAA BAA; keep PHI in Drive/Gmail, not in personal Gmail
Self-hosted n8n on DigitalOcean Droplet	$6–$12 / month for 1–2 GB RAM; BAA via DigitalOcean Sales	Watch the drop folder, call Claude, write the draft back	Droplets are HIPAA-eligible only after a BAA; n8n Cloud is the wrong place for PHI
SRFax Healthcare Lite / Basic	$12.60 / month for 200 pages, $16.05 for 500; $0.05 extra page	Send packets to payer fax numbers still in use	Healthcare plans; request the BAA
Twilio US long code SMS	$0.0083 per segment plus carrier fees (~$0.0035–$0.005); number $1.15 / month	Ping the biller: “Packet 184 ready for review”	Do not put diagnoses in the SMS body. Twilio HIPAA needs Security or Enterprise Edition plus a BAA
Twilio A2P 10DLC (low-volume standard)	$4 brand + $15 campaign vetting one-time; $1.50–$10 / month per campaign	Keep clinic-notification texts off the spam filter	Register a Low-Volume Mixed or notifications campaign; sole-proprietor is $4 + $15 + $2 / month if you have no EIN

Data note: Claude Sonnet 5’s $2 / $10 per million tokens is Anthropic’s posted standard as of September 2026. Twilio SMS list prices are current as of July 2026 on Twilio’s US SMS page. Google Workspace Business Starter flexible pricing is $8.40 per user per month in USD.

Token, fax, and SMS math per packet

A typical packet prompt is about 12,000–18,000 input tokens (evaluation, plan of care, last two progress notes, payer checklist) and 1,500–2,500 output tokens. At Claude Sonnet 5 rates that is roughly $0.03–$0.04 of input and $0.02 of output, or about $0.06 per draft. Prompt-cache hits on the clinic’s standing instructions drop the repeat cost: cache reads are $0.20 per million tokens on Sonnet 5.

Fax is the line that actually moves. Eight pages times 100 packets is 800 pages. Healthcare Basic Plus at $22.95 covers 800 combined send/receive pages. At 200 packets of eight pages you are at 1,600 pages, which is SRFax Healthcare Standard at $41.35 for 1,500 pages plus about $5 of $0.05 overage. SMS to the biller should be one segment with a job ID only: budget $0.013 effective per text after carrier pass-through.

Collect retainers into a US business account. Mercury Bank is the usual LLC checking account for invoicing clinics in dollars while you live abroad. Sweep surplus you do not need for payroll tax into a Charles Schwab brokerage account rather than leaving operating cash in six extra tools.

How should you price packets versus retainers?

Price against staff time and lost visits, not against “AI magic.” A biller at $22 an hour spending 25 minutes on a messy continuation request is already $9 of labor before denials. Your packet has to be cheaper than that labor and faster than the one-to-two-week wait APTA is documenting.

Offer	Price	Includes	When it breaks
Pilot sprint	$497 setup + $18 per accepted packet, 40-packet minimum	Payer checklist library for 5 plans, Drive folder, one revision pass	Clinic dumps unsigned evals; pause until the PT signs
Clinic retainer	$1,800 / month for up to 100 packets (~$18 blended)	Initial + continuation drafts, weekly aging report, Slack/email ping	Overage at $16 / packet; appeals billed at $45
Multi-location	$1,500 / location / month at 3+ clinics under one BAA	Shared payer library, one office-manager login	Each NPI still needs its own cover-letter identity

Quote the clinic a payback line they can repeat to the owner: if the desk recovers two abandoned 10-visit episodes a month at $106 net per visit, that is about $2,120 of collections against an $1,800 retainer. USPH, a public outpatient PT operator, reported about $106 net revenue per visit in FY2025; use that as a planning benchmark, not as the clinic’s contract rate.

Invoice Net 15 on the retainer, ACH to the Mercury account, and stop work on day 16 if the clinic is in arrears. Prior-auth volume is lumpy around holidays and summer sports, so a monthly cap with overage is safer than unlimited “we’ll handle the queue.”

How do you deliver a packet without leaking PHI?

You are a HIPAA business associate the moment you receive clinic notes to assemble a packet. HHS is explicit: claims processing, billing, and practice-management functions that involve PHI make you a business associate, and subcontractors who see that PHI need their own BAAs downstream. Sign the clinic BAA before the first PDF hits Drive.

Fourteen-day setup checklist

Day	Step	Done when
1–2	US LLC (if used), Mercury account, Workspace domain, accept Google HIPAA BAA	Super-admin screenshot of Legal and compliance BAA acceptance
3–4	Anthropic org: execute BAA, enable HIPAA-ready API; disable Console/Workbench for PHI	Messages API key from the HIPAA-enabled org only
5	DigitalOcean Droplet in a US region, request BAA, install n8n Community, lock SSH	n8n reachable over HTTPS, no public folder listing
6	SRFax Healthcare plan + BAA; Twilio number; 10DLC brand + campaign	Test fax to your own number; test SMS with a dummy job ID
7–8	Payer library: 8–12 local plans, required attachments, fax/portal URLs, visit-block sizes	A spreadsheet the model can be pointed at as standing instructions
9	Drive folders: inbox, drafts, human-review, sent, appeals	Clinic shared only inbox and sent
10–12	Prompt + JSON schema: missing-field list, CPT/units requested, cover letter, no invented ROM values	Ten gold-standard packets scored against real (de-identified) samples
13–14	Live clinic BAA, 10 paid pilot packets, weekly aging report	Clinic signs off that drafts are “sendable after 60-second review”

Standing system prompt, shortened:

You are a prior-authorization packet clerk, not a clinician.
Use only facts present in the uploaded notes. If a required field
is missing, list it under "blockers" and do not invent ROM, MMT,
or goal percentages. Output JSON with keys: patient_initials,
payer, requested_visits, cpt_units, clinical_summary,
cover_letter, attachment_list, blockers, confidence.
Never include SSN. Prefer MRN last four if present.

n8n flow in one sentence: Google Drive trigger on inbox → download PDF → Claude Messages API with cached payer checklist → write draft PDF to drafts → Slack or SMS with Drive link to the biller → after human moves the file to human-review, SRFax send → log confirmation to a Sheet that contains job IDs, not full notes.

If you would rather not own the Slack ping, that is the piece to hire. Keep packet generation and the BAA on your books.

What goes wrong: denials, BAAs, and US tax?

The expensive failures are compliance and invented clinical facts, not model cost.

Failure modes that kill the retainer

• No BAA, consumer ChatGPT. Pasting an evaluation into a personal Claude or ChatGPT account is a reportable incident waiting to happen. OpenAI’s API BAA also requires Modified Retention on the org and project; Anthropic’s BAA excludes the Files API and Claude Console. Read the vendor pages, then configure, then ingest PHI.
• Invented measurements. If the eval never recorded left-knee flexion, the packet cannot say “flexion 110°.” Payers deny, the clinic blames you, and you have a clinical-integrity problem. Force a blockers array.
• Wrong NPI or tax ID on the cover letter. Multi-clinic retainers mix letterhead. Template the identity block from a clinic record, not from the model’s memory.
• PHI in SMS. “Packet ready for Jane Doe ACL reconstruction” is a disclosure. Job ID only.
• Twilio without a HIPAA Edition. Standard Twilio is fine for non-PHI pings. The moment a text includes a name plus a condition, you needed a BAA you probably do not have. Keep SMS empty of clinical content so the cheap stack stays defensible.
• n8n Cloud execution history. Frankfurt-hosted logs of full notes are the silent leak. Self-host, or pass file IDs only.

Washington State’s 2025 prior-authorization report is a reminder that PT requests can show lower approval rates than many imaging codes in that dataset. You will see denials. Price appeals as a separate $45 SKU and track first-pass send quality, not “AI approval rate,” which you do not control.

US tax does not disappear because the clinics pay a LLC in Delaware while you live in Medellín. Net earnings of $400 or more generally mean self-employment tax at 15.3% (12.4% Social Security + 2.9% Medicare). For 2026 the Social Security wage base is $184,500 per SSA’s contribution and benefit base. The foreign earned income exclusion does not wipe SE tax. Run the numbers with the self-employment tax trap guide before you treat $5,400 of retainers as “tax-free geographic arbitrage.”

A related document desk already on this site is the intake-summary service for law and tax firms. The workflow rhyme is real: structured extraction, human review, no invented facts. The legal risk is not. Law firms are not automatically HIPAA covered entities. PT clinics are.

Data notes / Sources checked

Prices, BAA scopes, and survey figures were checked in September 2026 and can change when a vendor revises a rate card or when APTA fields another survey.

• APTA, The Impact of Administrative Burden on Physical Therapist Services (2025) — 30.2% wait 1–2 weeks; ~83% say delays cause abandonment; 12.9% claims denied; 72.4% appealed; 49.3% of appeals successful.
• HHS OCR, Business Associates guidance — BAA required when you create, receive, maintain, or transmit PHI for a covered entity; downstream subcontractors too.
• Anthropic Claude API pricing — Sonnet 5 at $2 / $10 per million tokens; cache reads $0.20 / million.
• Anthropic BAA for commercial customers — HIPAA-ready org required; Files API not covered.
• Twilio US SMS pricing — $0.0083 per segment; long-code lease $1.15 / month; carrier fees extra.
• Twilio A2P 10DLC — low-volume standard $4 + $15 + $1.50–$10 / month; sole proprietor $4 + $15 + $2 / month.
• SRFax healthcare plans — Healthcare Lite $12.60 / 200 pages; Basic $16.05 / 500; Standard $41.35 / 1,500; $0.05 extra page.
• n8n Cloud pricing — Starter 20€ / month billed annually (24€ monthly typical); Cloud data in Frankfurt — do not use for PHI.
• DigitalOcean HIPAA and Droplet pricing (official trust and pricing pages, September 2026) — Droplets are HIPAA-eligible after a sales BAA; 1 GB / 1 vCPU from $6 / month.
• Google Workspace business editions — Business Starter $8.40 flexible / $7 annual per user; accept the HIPAA BAA in Admin console.
• IRS self-employment tax — 15.3% rate; $400 net-earnings filing threshold.
• SSA contribution and benefit base — 2026 Social Security wage base $184,500.

Sell the packet, not the chatbot

Independent PT clinics are not shopping for a voice agent. They are shopping for Friday’s continuation-of-care faxes to leave the building before the payer’s timely-filing clock and before the patient ghosts. An $1,800 retainer covering about 100 human-reviewed packets, run on a BAA’d Claude + Drive + self-hosted n8n + SRFax stack that costs about $110 a month, is a cash-flow product you can operate from a low-cost country as long as the PHI never touches a consumer chat window.

Start with one clinic, 40 paid packets, and a blockers list that is longer than your cover letters. If the office manager still has to rewrite every draft, you do not have a product yet. If she only fixes the visit count, raise the retainer and take the next NPI.