Digital natives, practising medicine.
One physician. Five months. An entire clinical system, built with Claude.
German medical confidentiality is criminal law, not only data protection law. So the line is not a policy document — it is enforced in code, by a path fence that twelve tools obey. This is what a lawful German clinical system looks like today.
The boundary is in the protocol, not in a promise. Our practice tools are exposed to the model through an MCP server that simply does not offer patient paths — it cannot be talked into revealing them, because it does not know them. For § 203, that matters: necessity is not asserted, it is enforced. The same design gives every patient account its own server, holding only that patient’s record. One agent cannot reach across to another, because there is nothing there to reach.
Private medical practice, Berlin. In operation, seeing patients.
The telemedicine layer — intake, prescriptions, documentation, patient communication. Built with Claude Code, in production.
14.6 hectares in Brandenburg, in development. Treatment, retreat, and the server infrastructure.
Encrypted patient database with an append-only, hash-chained audit log
Prescription pipeline: creation, qualified electronic signature, encrypted delivery — the pharmacy copy carries no health data
Schengen medical certificates under Art. 75 SIS, with a verified legal matrix for 109 countries, because the position differs per state
Booking integration, intake forms, documentation under § 630f BGB
A local model on own hardware for everything patient-identifying
Seven live hosts on our own encrypted server, deployed from the same toolchain
Since 4 September we run three parallel Max subscriptions — purely to obtain a predictable ceiling. Three individual plans for one physician is plainly the wrong shape of the thing.
„What does Rivoir still need us for?“Germany’s leading practice-booking vendor, 3 September 2026 — their own engineer, after seeing our integration request. Relayed to us by their head of sales. The incumbent can see its own replacement, and said so out loud.
A running German practice. A physician with his licence at stake. A clinical system already architected around § 203. We will gladly walk your healthcare or legal team through it — what a processor must promise, where the line runs, what breaks. You will meet this question with every physician, hospital and payer in Germany. We have met it already.
We are digital natives who landed in the one profession where the law is still analogue. That is the whole story: this practice was built the way software is built — and then it had to survive § 203.
And plainly: we would prefer to build this with Anthropic — eleven euros to you for every one spent elsewhere. But the system gets built either way. What decides it is which vendor a German physician can lawfully sign with.
Emanuel Rivoir · physician in private practice
post@praxis-rivoir.de · +49 176 4666 73 49
Muskauer Straße 37 I · 10997 Berlin · Germany
Digital · dual · binary.
Natives by heart, by mathematics, by gravitation.
EADEM MUTATA RESURGO
Jakob Bernoulli, 1705 — though changed, I rise the same
INVICEM COGNOSCIMUR, ERGO SUMUS