Matthew Gallagher tested his customer service bot by asking it for lasagna recipes. It answered. He tweaked it until it stopped.
That detail sits in the New York Times profile of 2 April 2026, which verified that his telehealth company, Medvi, did $401 million in sales in 2025 and $65 million in net profit. He started it from his house in Los Angeles in September 2024 with $20,000. His only employee is his brother.
Six weeks before that profile ran, on 20 February 2026, the FDA issued warning letter 721455. It was addressed to Medvi LLC.
The lasagna test checks whether the bot stays on topic. The other test is the one nobody runs: when something goes wrong, whose name is on the envelope.
The thesis
The one-person company did not remove the org chart. It rented it. AI made renting cheap enough that a founder can run a nine figure business through partners, contractors and agents, so headcount now measures payroll, not the organisation. Every consequence of the work still comes home to the brand. Headcount has become the least informative number in a small company, and the number that replaced it is one almost nobody writes down: the functions you answer for that somebody else performs.
What actually changed
Here is the Medvi org chart as the Times describes it. CareValidate and OpenLoop Health supply the doctors, the pharmacies, shipping, compliance and the customer service calls. Two engineers are on contract. A law firm replaced LegalZoom. An accounting firm replaced the AI accounting tools. Media agencies buy the ads. ChatGPT, Claude and Grok built the website, Midjourney and Runway make the images, ElevenLabs does the voice. The brother, hired in April, filters communications. Gallagher himself told the Times it is not technically a one-person company.
That is not a small organisation. It is a large one with a short payroll.
What AI changed is the coordination cost. Renting six functions used to mean six account managers, six contracts and a full time operations hire to hold them together. Gallagher built custom agents so his software systems talk to each other. The glue that used to need people became code, so a founder can rent almost everything and still run the machine from a laptop.
What AI did not change is where the consequences land. The FDA letter cited the website for presenting compounded drugs under the Medvi name, which implied Medvi compounds them, and for the line “Same active ingredient as Wegovy and Ozempic”. A partner pharmacy does the compounding. The letter still went to the brand. Regulators, customers and courts do not read your vendor list. They read your logo.
I have written code for 30 years and I now build software for private equity. When a small company tells me its headcount, I ask for a second list before I read anything else: every function a regulator, a customer or a court would hold the company responsible for, and the name of the person or firm that actually performs it. The gap between those two lists is the real size of the company.
Three cases
The supplier you share with your rivals. On 12 March 2026 STAT reviewed more than 70 telehealth companies the FDA had warned in the previous six months. At least 30% publicly listed affiliations with the same four nationwide medical groups: Beluga Health, OpenLoop, MD Integrations and Telegra. The rented org chart is not exclusive. It is the same org chart rented to your competitors, so its failures arrive for all of you at once.
The breach that was not yours. OpenLoop’s systems were breached on 7 and 8 January 2026. The federal breach portal now lists up to 716,000 individuals, and the Texas Attorney General separately lists 68,160 Texas residents. OpenLoop sells platform services to many healthcare brands, so the people affected sit across many client organisations. I am not claiming any particular brand’s patients were among them. The point is structural. If you rent the platform, the incident belongs to somebody else and the patient’s anger belongs to you.
The price of the people. Wix bought Base44 in June 2025 for $80 million in cash. It was six months old, bootstrapped, and celebrated as a solo founder’s company. It had eight employees, and $25 million of the $80 million was set aside as retention for them. Thirty one percent of the price of the most famous one-person exit was paid to keep the people. The acquirer did the arithmetic the headcount story skips.
Carta’s data says the pattern is spreading and that capital has noticed. Solo founders started 23.7% of new US startups in 2019 and 36.3% in the first half of 2025. In 2024 solo-led companies took 14.7% of the cash raised in priced equity rounds. More than a third of the companies. Under a sixth of the money.
Where this breaks
Renting is usually the right call. OpenLoop can carry more clinical compliance capacity than any founder could hire in year one, and Medvi’s 16.2% net margin against 5.5% at Hims & Hers says the rented model can beat the owned one on the P&L. I agree with all of that. The argument is not that you should hire. It is that you should stop reading a short payroll as a short list of exposures.
It also matters less where the liability surface is small. A developer tool sold to developers can rent nearly everything with little regulatory exposure. Healthcare, finance, food, anything with a licence or a patient: that is where the rented org chart bites.
Dario Amodei, asked in May 2025 when the first billion dollar company with one human employee would appear, answered “2026.” On revenue he may well be right. My objection is to the word employee. It was always a payroll term, and payroll was never where the risk lived.
What I would do on Monday
Write two columns: every function the business answers for, and who performs it. Mark each rented line.
For every rented line, find out which of your competitors rent the same supplier. A shared supplier is a shared failure point.
Put one named internal owner on every rented function, even if that owner is you, with hours budgeted each week to read what the partner is doing in your name.
Rewrite partner contracts so any incident and any regulator contact reach you within 24 hours, with the right to review every claim made under your brand before it runs.
If you are buying or funding one of these companies, price it the way Wix did. Ask what share of the price depends on people staying, and whose payroll those people are on.
The other test
Gallagher’s lasagna test was a good one. It caught a bot drifting off its job, and he fixed it.
Run the second test before you need it. Pick any line on your rented list, assume it fails tonight, and ask who gets the letter.
At Medvi, the letter came to Medvi.
Most of what I write about here started as a client problem. If you are deciding what to rent and what to own, grab thirty minutes with me.