Agentic AI revenue cycle management: from pilot to production for mid-market health systems
RCM costs US health systems over $140bn a year, yet only 20% of sub-$1bn systems pilot GenAI for it. The practical path from pilot to production.
Revenue cycle management costs US health systems more than $140 billion annually, yet mid-market organisations lag significantly behind larger peers in AI adoption — only 20% of health systems under $1 billion in revenue are actively piloting or implementing GenAI for RCM. This guide covers the practical path from pilot to production: where to start, how to design a pilot that scales, what the enterprise transition requires, and how to embed compliance from the start. It draws on verified data from McKinsey, Experian Health, Bain, and HFMA, alongside Vstorm's production experience in healthcare agentic AI.
Agentic AI revenue cycle management is no longer an experimental concept for US health systems. The tools exist, the ROI case is established, and the competitive gap between systems that have moved to production and those still running pilots is beginning to widen. The question for mid-market health systems, those with revenue between $25 million and $500 million, is no longer whether to adopt agentic AI in the revenue cycle, but how to move from a working proof of concept to an enterprise-grade system that operates reliably, scales across workflows, and does not require constant engineering intervention to sustain. This guide covers the practical steps to make that transition.
Why RCM still runs on manual labour #
Revenue cycle management is, at its foundation, an information processing problem which most health systems still solve with people. Billing teams manually verify patient eligibility through payer portals, chase prior authorisation approvals, correct coding errors after the fact, and follow up on denied claims individually. The result is a process that is expensive, slow, and highly sensitive to staffing levels.
The financial exposure is significant. Health systems collectively spend more than $140 billion annually on RCM, with the process typically consuming 3–4% of revenue at scale ( McKinsey, January 2026 , citing Harris Williams, June 2024). Nearly 20% of claims are denied on average, and as many as 60% of those denials are never appealed, each one representing recoverable revenue that is simply abandoned ( McKinsey, January 2026 , citing KFF, January 2025). Fifty-six percent of providers trace the root cause to patient information errors at intake ( Experian Health, 2025 ).
For mid-market health systems, where median operating margins held near 1% throughout 2025 ( Strata Decision Technology, December 2025 ), there is no financial buffer to absorb this inefficiency. Revenue leakage is a structural problem, not an operational inconvenience.
"The revenue cycle has never been more complex. We have regulatory pressures mounting, the financial squeeze of declining reimbursements, and the constant pressure to do more with less." — Jason Considine, President at Experian Health, describing the environment at the company's High-Performance Summit
Automation has been on the agenda for decades. The problem is that most of what health systems have deployed, such as rule-based tools, point solutions, early robotic process automation, was not designed to handle the complexity of modern payer environments. The rules keep changing and these systems do not adapt.
What agentic AI revenue cycle management actually means #
The term "agentic AI" has started appearing in vendor materials across healthcare, often applied to systems that are better described as standard automation. But the distinction matters operationally.
Traditional robotic process automation executes a defined sequence of steps. It is fast and reliable within its rules, but when a payer changes a portal layout or updates authorisation requirements, it breaks. GenAI adds language understanding, it can read documentation and produce useful outputs, but it does not take action. A billing specialist still needs to take its output and do something with it.
Agentic AI revenue cycle management operates differently. An agent makes plans, retrieves context from multiple systems, makes decisions based on that context, and executes follow-up actions across the workflow autonomously and end-to-end. McKinsey describes this as the difference between a tool and a coworker ( McKinsey, January 2026 ). In practice, it means a single agentic workflow can verify eligibility, identify authorisation requirements, retrieve clinical documentation from the EHR, flag coding gaps, submit claims, monitor payer response, and route denials for follow-up without staff managing each step. McKinsey analysis indicates this could reduce cost-to-collect by 30–60% ( McKinsey, January 2026 ).
The table below shows where each approach sits across five operational dimensions relevant to RCM.
| Dimension | Traditional RPA / GenAI | Agentic AI |
| Scope of automation | Single-step or task-level | End-to-end workflow across multiple systems |
| Adaptability | Breaks when payer rules or portal formats change | Re-plans based on new inputs and payer responses |
| EHR & payer integration | Limited — typically one system at a time | Multi-source: EHR, payer portals, and billing platforms simultaneously |
| Denial handling | Routes denials to staff queues for manual review | Identifies denial pattern, retrieves documentation, initiates appeal |
| Human oversight | Required at every step | Human-in-the-loop at exception points only |
The highest-ROI starting points for mid-market health systems #
Mid-market health systems are meaningfully behind larger organisations in RCM AI adoption. Among health systems with annual revenue between $500 million and $1 billion, only 20% are actively piloting or implementing GenAI for RCM, compared to 64% of larger health systems ( HFMA/AKASA survey, April 2025, via Fierce Healthcare ). Across all providers, only 15% have fully integrated AI into standard RCM operations ( Experian Health, January 2026 ).
The most common entry point is eligibility verification, it is low risk, has a measurable baseline, and is fast to integrate. It is a reasonable start, but it is not where the highest ROI lives.
The upstream case is stronger. Prior authorisation and clinical documentation improvement offer the greatest return because they prevent denials before claims are submitted. An anonymous CIO quoted in Bain's 2025 Provider and Payer Healthcare IT Survey put it plainly: "Every denial avoided is thousands of dollars we don't have to chase" ( Bain, 2025 ).
For mid-market health systems, we recommend a three-stage entry sequence for AI claims processing automation:
- Eligibility and benefits verification — establishes the data integration baseline and produces measurable results within weeks
- Prior authorisation automation — highest upstream ROI; requires clean eligibility data from stage one to work reliably
- Denial prediction before submission — the stage that produces compound value, catching errors that would otherwise become denial management tasks
Medical coding automation is a stage-two priority. It carries higher compliance risk and requires more historical data to train reliably. Deploying it before the integration foundation is established is a common over-reach that delays, rather than accelerates, the path to production.
How to structure a pilot that scales #
Most RCM AI pilots do not fail because the technology underperforms. They fail because they were designed in ways that make scaling structurally impossible. McKinsey identified this as a recurring pattern: health systems purchase pilot solutions without considering how they will extend across the enterprise, which caps impact and produces business cases that cannot justify further investment ( McKinsey, July 2023 ). The reassuring counterpoint: fewer than 5% of providers report AI failing to meet expectations in categories where it has actually been introduced ( Bain, 2025 ). The problem is design, not technology.
Three principles separate a pilot that scales from one that stalls.
Scope for integration breadth, not task depth. Choose a use case that requires connecting your EHR, a payer API, and your billing platform simultaneously. even at small volume. This validates the integration architecture you will need at scale, not just the point solution.
Define non-financial success metrics first. First-pass resolution rate, staff hours recaptured per week, and error rate reduction are all measurable within the pilot window. Financial ROI is real but lags by one to two billing cycles. Pilots evaluated solely on short-term revenue will disappoint by design.
Assign an operational owner before go-live. A COO, VP of Operations, or Revenue Cycle Director who is accountable for the pilot outcome, not just the engineering team, is the single most reliable indicator of whether a pilot transitions to production. Without internal ownership, momentum stalls when the external partner rolls off.
The practical timing window for a mid-market pilot is eight to twelve weeks. Beyond sixteen weeks without clear milestone metrics, the issue is structural, not technical.
The transition from RCM pilot to production #
The gap between adoption and integration is where mid-market health systems lose momentum. Sixty-three percent of providers use AI in some RCM capacity; only 15% have fully integrated it into standard operations ( Experian Health, January 2026 ). The RCM pilot to production transition requires three parallel workstreams, not a sequential handoff.
Technical scaling. A pilot typically automates one workflow. Production requires coordinated agents across front-end (eligibility, prior authorisation), mid-cycle (clinical documentation improvement, coding review), and back-end (denials, payment posting) operations, with a unified observability layer so every agent decision is logged and traceable. This architecture cannot be retrofitted onto a point-solution pilot; it must be planned before engineering begins.
Operational integration. Billing staff roles shift from full-cycle manual processing to exception handling. This is a change management task with a technology dependency, not the reverse. Staff who understand what the agent does, and when to override it, are the difference between a system that is used and one that is merely tolerated.
Governance formalisation. Before scaling volume, define who owns agent outputs, how errors are escalated, and what the audit trail looks like for payer or compliance review. These questions become significantly more expensive to answer after a denial dispute or audit.
McKinsey projects that leading health systems will move from pilots to production-scale agentic AI deployments across the revenue cycle within the next two to three years ( McKinsey, January 2026 ). Mid-market systems that structure the transition correctly now will not be starting from scratch when that window closes.
Compliance, data governance, and regulatory considerations #
Data privacy and security is the most commonly cited barrier to AI adoption in healthcare, raised by 50% of healthcare leaders, alongside accuracy concerns from 41% of providers ( Experian Health, January 2026 ). For mid-market health systems, these concerns are legitimate and addressable, but they require architectural decisions made before engineering begins, not after.
HIPAA requirements for agentic RCM systems. Any agentic system that processes patient billing data; such as eligibility records, prior authorisation documentation, claims, explanations of benefits; handles protected health information. HIPAA requirements apply to every system the agent connects to: EHR, payer portals, clearinghouses, and billing platforms. Business Associate Agreements must cover all third parties. Every agent decision must produce an auditable log entry, both for compliance and to maintain billing staff trust during the transition period. For production agentic AI healthcare billing systems handling PHI at scale, on-premise or private cloud deployment is the architecturally sound choice. Shared SaaS infrastructure introduces data residency and access control risks that are difficult to audit.
EU AI Act. Administrative billing automation; claims processing, prior authorisation, coding; does not clearly fall under Annex III high-risk classification under the current EU AI Act framework. High-risk healthcare AI under the Act is defined around clinical safety components in medical devices, public authority eligibility determinations for healthcare benefits, health insurance risk assessment, and emergency triage systems. RCM billing sits outside these categories under current guidance ( EU AI Act Annex III ). Organisations with EU operations should review the European Commission's classification guidelines, due for publication by February 2026, before production deployment.
The practical principle: compliance architecture is cheaper to build in than to retrofit. Treating it as a production requirement from day one removes the most common reason RCM AI implementations stall after a successful pilot.
What a production-grade agentic RCM deployment looks like #
We built a production-grade agentic AI system for a healthcare provider that demonstrates the architectural principles that apply equally to RCM deployments: multi-channel integration with live clinical systems, real-time autonomous decision-making, human-in-the-loop escalation for edge cases, and full observability across every agent action, all operating in a regulated environment. The same design patterns that make a patient-facing healthcare agent reliable in production are precisely the ones that make an RCM agent trustworthy at scale. You can review that deployment in our multi-channel AI agent for healthcare case study .
A production-grade agentic RCM system is not a single tool. It is a coordinated architecture of agents operating across three layers:
- Front-end agents handle eligibility verification, benefits checking, and prior authorisation, preventing upstream errors before they become downstream denials
- Mid-cycle agents review clinical documentation, flag coding gaps, and scrub claims before submission where AI claims processing automation generates the most durable ROI
- Back-end agents manage denial workflows, identify underpayments, and post payments; the highest-volume, most labour-intensive tasks in traditional RCM
Each layer feeds the next, and a unified observability layer logs every agent decision with its source data. This is not optional for production, it is the condition under which billing staff, compliance officers, and payers will accept expanded automation. A system that cannot explain its decisions will not scale beyond the pilot.
For mid-market health systems weighing the build-versus-partner decision: the specialised agentic engineering capability required to architect and deploy this across live clinical infrastructure is not easily assembled in-house. The model that produces long-term independence, rather than dependency, is a structured implementation partnership with full knowledge transfer to your internal IT team. Our TriStorm methodology is how we take organisations from use case discovery to a deployed, observable agentic system without losing continuity between the strategy and the build. You can read more about our work in healthcare on our healthcare industry page .
The mid-market window for structured adoption is narrowing. Larger health systems are moving from pilots to enterprise-wide deployments, and the operational and financial distance between early movers and late adopters is beginning to compound. The practical steps covered here — choosing the right use case sequence, designing pilots for scalability, building compliance in from the start, and transitioning through three parallel workstreams — are achievable within a mid-market budget and timeline. The question is not whether to make the move, but how quickly it can be done without repeating the structural mistakes that have kept most providers stuck between 63% adoption and 15% integration.
