Janeen Thompson remembers the old rhythm. Hours vanishing into phone trees. Fax machines churning out denials. And always, always, the math: rheumatology clinics fronting $80,000 to $150,000 per patient, per year, for biologic drugs under a system called buy-and-bill. If the insurer says no after the fact, the clinic absorbs the loss.
Thompson runs operations at San Mateo Rheumatology. These days, she says, her team "has time to play." The difference? A software platform called Ruma Care that promises to automate away the bureaucratic gauntlet standing between a prescription and an infusion.
It's a bold claim in a notoriously sticky corner of healthcare administration. But Ruma, which emerged from Y Combinator's Winter 2026 batch and launched publicly in late January, has chosen its target with precision. The company isn't trying to fix prior authorization writ large—a Sisyphean task that's crushed plenty of well-funded predecessors. Instead, it's zeroing in on a narrow, high-stakes niche: infusion clinics treating autoimmune conditions with some of the most expensive drugs in medicine.
Whether that focus proves to be strategic discipline or fatal limitation will determine if Ruma becomes the next essential healthcare infrastructure play—or another footnote in the long history of startups that underestimated the inertia of American healthcare.
Anatomy of a Chokepoint
The mechanics are deceptively simple. A rheumatologist prescribes a biologic for, say, rheumatoid arthritis. Before the patient can receive treatment, the clinic must secure prior authorization from the insurer—proof that the drug is medically necessary and meets specific coverage criteria.
What makes this maddening is the fragmentation. More than 70 separate payer portals, each with its own interface, documentation requirements, and submission protocols. Some accept electronic forms. Others demand faxes. A few still require phone calls. Mix in constantly shifting formularies—the lists of covered medications—and you have administrative quicksand.
Ruma's pitch is consolidation. The platform ingests patient, provider, and payer data directly from electronic health records, auto-generates completed prior authorization requests, then routes submissions through the appropriate channel. One interface replaces dozens.
But prior authorization is just the hook. Ruma bundles it with two related headaches: copay assistance enrollment and reimbursement tracking. For six-figure biologics, each step carries financial risk. Miss copay assistance, and patients can't afford their share of the bill. Lose track of reimbursement, and clinics discover months later they've administered expensive drugs they won't be paid for.
The platform learns from denial patterns, tailoring documentation to specific medications, diagnoses, and insurance plans. It's a vertical play, purpose-built for the economics and workflows of infusion centers, starting with rheumatology.
On January 21, Ruma released a free public tool called the Formulary Navigator—a natural-language search interface that answers coverage questions with citations from official payer documents. Call it good marketing, or call it table stakes. Either way, it signals how the company sees its moat: not just automation, but intelligence layered on top of fragmented data.
Regulatory Winds at Their Back
Ruma's timing is deliberate. As of New Year's Day 2026, new federal rules require insurers to provide specific reasons for denials and impose strict timelines: 72 hours for urgent requests, seven days for standard ones. By the end of March, plans must publicly report their first prior authorization metrics for 2025.
And on January 1, 2027—less than a year out—FHIR-based Prior Authorization APIs become mandatory. That's healthcare-speak for standardized data exchange protocols that should, in theory, make the current patchwork of portals and fax lines obsolete.
Should. Healthcare IT promises have a habit of aging poorly.
Meanwhile, the formulary churn continues. This January, LifeWise in Washington added prior authorization requirements for certain biologics, including eculizumab products and adalimumab biosimilars. OptumRx rolled out updates the same month. Last August, Independence Blue Cross switched from CoverMyMeds to the Surescripts ePA platform, cutting off a submission channel clinics had used for years.
Then there's the competition's own automation race. CVS Caremark announced in late February that it was expanding "Touchless Prior Authorization" to select specialty medications—approvals in as little as 22 seconds for qualifying requests. SamaCare, which crossed one million processed prior authorizations by June 2025, launched "SamaCare Plus" last November: AI-driven submissions with human checkpoints, now serving more than 40,000 providers. Plenful announced an AI suite for specialty pharmacy in September 2025, claiming 75 percent reductions in processing time.
The landscape is crowded. And moving.
What the Numbers Say (and Don't)
Ruma claims its platform has slashed denial rates by 50 to 55 percent and cut staff time per prior authorization by 20x at clinics currently live in California and Nevada. The company pegs baseline insurer denial rates for specialty medications at 37 percent annually, though independent studies show significant variation by payer and service type.
Context matters here. A 2022 analysis found delays for specialty medication prior authorizations ranging from just under a week to three weeks, with between 47 and 71 percent of biologics for conditions like rheumatoid arthritis requiring prior authorization at all. A February 2026 KFF analysis of Medicare Advantage found that in 2024, plans processed 52.8 million prior authorization requests. They denied 4.1 million. Of those denials, 80.7 percent were overturned on appeal.
The catch? Only 11.5 percent were appealed in the first place.
That's the silent crisis: not just bureaucracy, but abandonment. Patients who give up. Clinics that move on. Treatable conditions that go untreated because the paperwork proved insurmountable.
Ruma's early results come from its own pilots—no third-party audits yet, no peer-reviewed validation. The founders bring operational credibility, though. CEO Meng Fei Shen worked at Uber and Walmart Data Ventures before spending months embedded as a medical assistant in a rheumatology practice, studying clinic workflows from the inside. CTO Christina Huang came from Apple and Medallion, where she built integrations with UnitedHealthcare.
Both are based in San Francisco. Both went through Y Combinator's current batch. On January 24, they co-hosted a Biologics Access Symposium with Stanford School of Medicine. A founder blog post titled "The Hidden Costs of Medication Access" appeared in the company's newsroom in mid-February.
It's the standard playbook for a credible enterprise startup: domain expertise, institutional partnerships, thought leadership. Whether it's enough to crack this particular market is another question.
The Competitive Gauntlet
Ruma's competition splits into two camps: established infrastructure giants and nimble specialty-focused upstarts.
In the first camp, Surescripts operates formulary and ePA networks with broad coverage, plus specialty medication gateways. Availity offers AuthAI, a payer and provider network with AI-powered recommendations aligned to the 2027 FHIR APIs. Both emphasize scale and connectivity—the plumbing that moves data between thousands of providers and hundreds of payers.
On the specialty side, RxLightning handles digital enrollment, benefits verification, prior authorization, and patient assistance programs with HITRUST and HIPAA compliance. AssistRx runs iAssist, an ePA platform leveraging Surescripts and direct payer connections that reportedly cover more than 80 percent of covered lives. Infinitus uses voice AI to automate follow-up phone calls with payers after submissions, targeting rheumatology and dermatology among other specialties.
Ruma's bet is vertical depth over horizontal breadth. By combining prior authorization automation with copay enrollment and reimbursement tracking in one clinic-facing platform—and by focusing tightly on high-cost biologics where buy-and-bill risk is most acute—the company is wagering that solving one problem exceptionally well beats solving many problems adequately.
It's a strategy that's worked elsewhere in healthcare software. But it's also a strategy that limits addressable market, at least initially.
What Happens Next
Ruma is actively seeking introductions to infusion clinic administrators and hospital systems. The company hasn't disclosed pricing publicly. Specific EHR integrations remain vague. Security certifications—table stakes in healthcare—haven't been detailed.
Performance claims rest on early pilots. Scaling beyond California and Nevada is the immediate challenge. Infusion centers nationwide face the same prior authorization burden, and 2026's regulatory changes create urgency on both sides. Payers need to hit new transparency and speed requirements. Clinics need tools that work with the new APIs and faster timelines, without adding headcount.
The question isn't whether prior authorization is broken—it demonstrably is. The question is whether a Y Combinator startup with a sharp vertical focus and promising early metrics can convert operational improvements at a handful of rheumatology practices into a category-defining platform.
Plenty have tried. The graveyard of healthcare IT startups is vast and well-populated. But Ruma has picked its moment with care, launching just as regulatory tailwinds accelerate and incumbent solutions show their age.
Janeen Thompson's team has time to play now. Whether that translates into sustainable competitive advantage, or just a brief honeymoon before the next platform shift, remains an open question.
But in a system where clinics routinely gamble six figures per patient on paperwork, even incremental improvements carry weight.
