XyDromatics Encounter Engine —
no more orphan studies.
The encounter-driven imaging engine. Solves the orphan-
study problem for POCUS, bedside ultrasound, ED / ICU
imaging, intra-operative imaging, trauma bay, and any
imaging where a clinician scans a patient without a
pre-existing order in the EMR. Receives DICOM, matches
against HL7 ADT, gates on mandatory human verification,
forwards to PACS / VNA, back-fills the EMR with HL7 ORM
or FHIR ServiceRequest. The encounter loop, closed.
Same family-platform features as the rest of the router-
pattern hosts — keyed-hash pseudonymization, built-in
honest-broker capability, shared site encryption key when
deployed alongside other Synthology products.
Traditional radiology workflow assumes a specific order:
EMR-side order placed first, patient identified and ordered,
modality acquires per the order, study lands in PACS
attached to the order, radiologist reads, report flows back
to the EMR. Clean. Linear. Easy to bill.
POCUS, bedside ultrasound, ED imaging, ICU imaging, intra-
operative imaging, trauma bay imaging, and outpatient
point-of-care workflows all break that assumption. The
clinician scans the patient first; the order (if it ever
gets entered) comes later. The study lands in PACS as an
orphan — no order
to attach to, often no proper patient ID match, no billing
capture, EMR has no record the imaging happened.
Without Encounter Engine
Orphan studies in PACS, hard to find
Lost billing revenue (no order = no charge)
EMR doesn’t know the imaging happened
Clinical attribution unclear
Manual cleanup eats clinical-IT time
With Encounter Engine
Orphans caught at intake, before PACS
Clinician verifies patient match in seconds
EMR back-filled with HL7 ORM / FHIR ServiceRequest
Charge-capture tag emitted for revenue cycle
Verified study lands in PACS properly tagged
Capabilities
Catch the orphan, verify the patient, close the loop.
Six capability areas covering the full encounter-driven
workflow: DICOM ingest, ADT matching, the mandatory human-
verification gate, EMR back-fill, downstream forwarding, and
the family-wide platform features that come with every
router-pattern host.
DICOM ingest from any modality
Same DICOM ingest surface as the rest of the family. Modalities don't need any special integration — they just send their imaging where they always have, and Encounter Engine becomes the front door.
C-STORE SCP for any DICOM-conformant modality
STOW-RS for HTTP-based modalities
Per-AE-Title access control with configurable allowlists
Backpressure semantics during burst-load periods
No modality-side configuration changes required
HL7 ADT matching
The Admission-Discharge-Transfer feed tells Encounter Engine who's in which bed at any given moment. Match incoming imaging against that feed to identify candidate patient(s).
FHIR Encounter resource subscription as alternative to HL7 v2
Configurable match windows (by location, by time-of-imaging, by clinician on shift)
Multi-candidate disambiguation when ADT shows multiple patients in scope
No-match fallback to manual identification
Mandatory human-verification gate
The regulated boundary that keeps this product non-device software. A clinician confirms patient identity before the study moves downstream. Engine never auto-attributes.
Clinician-facing UI shows ADT-matched candidate(s) and the imaging in question
Required confirmation step (no time-saving auto-bypass)
Reason text required when overriding ADT-suggested match
Audit trail records the verifying clinician's identity, timestamp, and chosen match
Re-verification workflow if downstream review flags an issue
Quarantine queue for studies where no confidence-eligible match exists
EMR back-fill (the encounter loop)
Once a study is verified, Encounter Engine generates the order retroactively in the EMR — closing the loop that started without an order in the first place.
HL7 ORM^O01 generation back to the EMR (creates the order retrospectively)
FHIR ServiceRequest generation as alternative to HL7 v2
Per-encounter-type ordering profile (different encounter types map to different order types)
Charge-capture tag emission for revenue-cycle integration
Audit trail captures every back-fill with reason text
EMR-side rejection handling (if the EMR refuses the order, study returns to verification queue)
Forward to PACS / VNA after verification
Verified-and-tagged studies flow to the standard archive destinations with proper patient ID, accession number, and order linkage now attached.
C-STORE SCU forwarding to PACS / VNA
STOW-RS for HTTP-based downstream targets
Tag transformation during forward (apply the verified patient ID + accession number)
Multi-destination fan-out (PACS + VNA + AI vendor concurrent forwarding)
Failed-forward retry with dead-letter queue
Audit trail end-to-end
Family-platform features
Same family-wide platform features as the rest of the router-pattern hosts.
Keyed-hash pseudonymization with shared site encryption key
Built-in honest-broker capability for studies anonymized by Encounter Engine
AI-vendor PHI-shielded round-trip workflow
Web administration UI with shared sidebar shell
Role-based access control with full permission catalog
Hash-chain audit log + 21 CFR Part 11-aligned audit trail
Architecture
Three inputs, one verification gate, two outputs.
The diagram below shows the encounter-loop closure.
Modalities feed imaging; the EMR feeds ADT context; clinicians
confirm matches at the gate; verified studies forward to
PACS / VNA; the EMR receives the back-filled order.
Use cases
Six encounter-driven workflows.
The same orphan-study problem shows up across many clinical
contexts. The patterns below cover the most common deployment
shapes; institutions typically combine two or three.
Pattern 1
POCUS (point-of-care ultrasound) at the bedside
The defining use case. A hospitalist, intensivist, or ED physician grabs a portable ultrasound, scans a patient at the bedside, and walks away. Without Encounter Engine, that study lands in PACS as an orphan: no order, no billing capture, no record in the EMR. Encounter Engine closes the loop.
Flow
1Clinician scans patient with portable ultrasound (no pre-existing order)
2Modality emits DICOM to Encounter Engine
3Engine queries HL7 ADT for patient(s) in the scanning location
4Clinician sees candidate match(es) in the verification UI, confirms patient identity
5Engine generates HL7 ORM^O01 back to EMR (order created retroactively)
6Verified study forwarded to PACS / VNA with proper accession number + patient ID
7EMR shows the encounter has imaging; revenue cycle captures the charge
Pattern 2
ED bedside imaging
The ED is a chaotic environment where pre-ordering imaging isn't always feasible — a trauma comes in, the FAST exam happens before anyone enters an order. Encounter Engine catches the orphan study at intake, verifies the patient, and back-fills the order so the encounter is complete in the EMR.
Flow
1Patient arrives in ED, FAST or other point-of-care exam performed before formal order
2Modality (portable US, X-ray, etc.) emits DICOM to Encounter Engine
3Engine matches against ED-bed ADT feed
4ED clinician verifies match in the UI (often the same clinician who did the exam)
5EMR ORM^O01 back-fills the order
6Study forwards to PACS / VNA with proper attribution
Pattern 3
ICU bedside imaging
ICU patients receive frequent bedside imaging (chest X-ray, US for line placement, etc.) where the imaging often happens before the EMR-side order catches up. Same pattern: catch at the engine, verify, back-fill the order.
Flow
1ICU bedside imaging happens (chest film, US line-placement, etc.)
2Modality emits DICOM to Encounter Engine
3Engine matches against ICU-bed ADT feed (typically 1:1 mapping by bed)
4Bedside RN or RT verifies the patient match in the UI
5EMR back-fill generates the order retrospectively
6Study forwards to PACS / VNA
Pattern 4
Intra-operative imaging
Sterile-field intra-operative imaging (C-arm fluoroscopy, intra-op US, intra-op MRI / CT) often happens without an EMR-side order because the surgeon can't step away from the field to enter one. Encounter Engine handles the orphan-study cleanup post-procedure.
Flow
1Intra-op imaging happens during a procedure
2Modality emits DICOM to Encounter Engine
3Engine matches against OR-schedule ADT feed (which case is in which OR)
4Verification happens post-procedure (circulating nurse or surgeon-of-record)
5EMR back-fill generates the order against the surgical encounter
6Study forwards to PACS / VNA, attached to the right surgical case
Pattern 5
Trauma bay imaging
Trauma activations are urgent: a trauma patient needs imaging immediately, and the formal order placement happens later. Encounter Engine keeps the imaging from going orphan during the time-critical window.
Flow
1Trauma activation, patient arrives in trauma bay
2Imaging (CT, X-ray, FAST US) happens immediately
3Modality emits DICOM with whatever placeholder demographics the tech entered
4Engine matches against trauma-bay ADT feed
5Trauma team member verifies match (often a tech or RN who knows the patient)
6EMR back-fill creates the trauma-encounter orders post-hoc
7Studies forward to PACS / VNA, properly attached
Pattern 6
Outpatient point-of-care workflows
Outpatient clinics increasingly do point-of-care imaging (cardiology echo for new-symptom evaluation, MSK ultrasound during a clinic visit, primary-care POCUS). Same orphan-study problem; same fix.
Flow
1Clinic visit triggers point-of-care imaging during the encounter
2Modality emits DICOM to Encounter Engine
3Engine matches against outpatient-clinic ADT or scheduling feed
4Clinician verifies patient match
5EMR back-fill generates the order against the clinic encounter
6Study forwards to PACS / VNA, attached to the clinic encounter
Integration points
Modalities, EMR, archive — three integration surfaces.
Imaging input (modalities)
Portable ultrasound (POCUS) — any DICOM-conformant US scanner
ED bedside imaging — portable US, portable X-ray
ICU bedside imaging — portable chest X-ray, US for line placement
FHIR Encounter resource subscription as an alternative to HL7 v2
HL7 ORM^O01 outbound for retroactive order creation
FHIR ServiceRequest outbound as alternative to HL7 v2
Epic + Cerner are the two EMRs we've done this against most often; HL7 v2 / FHIR conformance means any EMR with those interfaces is integrable
Charge-capture tags emitted per institutional revenue-cycle integration
Downstream archive
PACS via C-STORE SCU forwarding
XyDromatics VNA Repository / Clinical / Research / Clinical Research
Any DICOM-conformant VNA via C-STORE or STOW-RS
AI vendor endpoints for downstream analysis (with PHI-shielding via family-wide round-trip if applicable)
Cross-product orchestration
Shared site encryption key (consistent anon-IDs across the customer's portfolio)
XyDromatics Router can forward orphan studies to Encounter Engine for verification before they hit PACS
Encounter Engine can forward verified studies through the rest of the family for further routing / archive
SynthQMS integration for verification-workflow change control
Identity, audit, observability
OIDC / SAML for the web admin UI
Active Directory / Azure AD federation
Per-verification audit trail entries (verifying clinician identity, timestamp, match decision)
Hash-chain audit log
Prometheus metrics + structured JSON logs
Webhook outputs for SIEM integration
System requirements & sizing
Sized to verified-encounter volume.
Encounter Engine sizing follows the verified-encounter volume
per day. The verification gate is the throughput floor —
even a low-spec deployment can handle thousands of encounters
a day at human-verification speed (the gate isn’t the
bottleneck; clinician availability is).
Tier
Encounter volume
CPU
RAM
Typical site
Small (single department)
< 100 verified encounters / day
4 vCPU
8 GB
ED-only or ICU-only deployment, single-department POCUS workflow.
Medium (hospital-wide)
100 – 500 verified encounters / day
8 vCPU
16 GB
Hospital-wide deployment covering ED + ICU + OR + outpatient point-of-care.
Large (multi-site)
500 – 2,000 verified encounters / day
16 vCPU (HA pair)
32 GB per node
Multi-hospital health system, multi-site POCUS programs, busy academic ED + ICU.
Enterprise
> 2,000 verified encounters / day
32 vCPU (HA cluster)
64 GB per node
Large IDN with distributed POCUS programs across many sites.
Licensing
Three packages.
Core covers DICOM ingest, ADT matching, the verification gate,
and PACS / VNA forwarding. The EMR Loop tier adds the
retroactive-order back-fill capability (HL7 ORM / FHIR
ServiceRequest). Enterprise unlocks the family-platform
features (keyed-hash, broker, AI round-trip) and HA pairing.
Encounter Engine Core
The base engine — DICOM ingest, ADT matching, mandatory human-verification gate, forward to PACS / VNA. Suited for smaller deployments without EMR back-fill.
C-STORE SCP / STOW-RS DICOM ingest
HL7 v2 ADT subscription with location-bed mapping
Mandatory human-verification UI
Forward to PACS / VNA after verification
Web admin UI + RBAC
Audit trail
Encounter Engine + EMR Loop
Adds the EMR back-fill capability — HL7 ORM^O01 generation, FHIR ServiceRequest emission, charge-capture tags. The full encounter loop closed.
Everything in Core
HL7 ORM^O01 outbound to EMR (retroactive order creation)
FHIR ServiceRequest outbound (alternative to HL7 v2)
Charge-capture tag emission for revenue-cycle integration
Per-encounter-type ordering profiles
EMR-side rejection handling
Encounter Engine Enterprise
Everything, plus keyed-hash pseudonymization for AI-vendor PHI shielding, multi-host deployment, and HA pairing.
Everything in Core + EMR Loop
Keyed-hash pseudonymization for AI-vendor PHI shielding
Built-in honest-broker capability for re-identification
AI-vendor PHI-shielded round-trip workflow
Active-active HA pair
Cross-product site-key sharing (with Router / VNA family / SR Engine / Migration Engine / Pathology Engine)
Premium support tier eligible
Per-deployment licensing. Multi-product bundles (Encounter
Engine + Router + VNA family + other engines) get bundle
pricing and shared site-key provisioning.
Documentation
The controlled-document set.
Every Encounter Engine deployment ships with the documents below, all
managed under SynthQMS document control. The DICOM Conformance
Statement is publicly available; the rest are shared under mutual NDA.
How the human-verification gate functions; clinician training material
Frequently asked
The questions clinical IT asks.
What is "POCUS-style encounter workflow" and what problem does it solve?
POCUS = point-of-care ultrasound -- bedside ultrasound performed by a clinician (hospitalist, intensivist, ED physician) without a pre-existing order in the EMR. The traditional radiology workflow assumes the order exists first, then the imaging happens. POCUS reverses that: imaging first, no order. The study lands in PACS as an "orphan" -- no order to attach to, no patient ID match, no billing capture, EMR doesn't know the imaging happened. Multiply that across an ED, ICU, OR, and clinic and you have meaningful revenue leakage and incomplete patient records. Encounter Engine catches the orphan, verifies the patient via human-confirmed ADT match, back-fills the EMR order retroactively, and forwards the cleaned-up study to the archive.
Why a mandatory human-verification gate? Why not auto-match?
Two reasons. Regulatory: the human gate is what keeps this product on the Non-device software side of the line. Auto-attribution of imaging to a patient without human verification crosses into clinical-decision territory that would push the regulatory classification up. Clinical: ADT matching gives candidates, but wrong-patient errors at the verification stage are clinically significant. A clinician confirming "yes, this is patient X" is the right safeguard. Engine never auto-attributes; the gate is mandatory and audit-trailed.
How does ADT matching actually work?
Encounter Engine subscribes to the EMR's HL7 v2 ADT feed (A01 admission, A02 transfer, A03 discharge, A08 update, A11 cancel) or to the FHIR Encounter resource. From those events it maintains a real-time per-location patient-bed map: which patient is in which bed at any given moment. When imaging arrives, the engine queries the map for the imaging location and returns candidate match(es). Match windows are configurable by location, time of imaging, and clinician on shift. The verification UI shows the candidate(s) with enough context for the clinician to confirm or override.
What if the wrong patient is selected during verification?
Audit trail captures every verification decision with the verifying clinician's identity, the chosen match, and any reason text. If a downstream review (radiologist, QA, RIS reconciliation) flags a mis-attribution, a re-verification workflow lifts the study back into the verification queue with the original decision visible. The corrected match generates a cancellation HL7 ORM for the wrong order and a new ORM for the right one. Both events are audit-trailed end-to-end. Mis-attributions happen rarely in practice but the workflow has to handle them cleanly when they do.
How does Encounter Engine integrate with Epic / Cerner specifically?
Standard HL7 v2 / FHIR interfaces -- ADT subscription inbound, ORM^O01 / ServiceRequest outbound. Both Epic and Cerner expose these natively; the integration is straightforward HL7 / FHIR work, not vendor-specific custom development. Charge-capture tag emission is configurable to match institutional revenue-cycle integration. We've done this against both EMRs; other EMRs with HL7 v2 / FHIR support work the same way.
Can Encounter Engine handle modalities that don't emit DICOM?
No. Encounter Engine is a DICOM-receive front door. Modalities that emit non-DICOM formats (proprietary US streaming, raw image files, etc.) need a converter upstream. For ultrasound specifically, modern POCUS scanners emit DICOM by default; older scanners or research-grade devices may need a DICOMization layer first.
How does the AI-vendor PHI-shielding workflow work here?
Same family-wide mechanism as the Router, VNA family, SR Engine, Migration Engine, and Pathology Engine. Encounter Engine uses keyed-hash pseudonymization on the way out (de-identifies the verified study before forwarding to AI vendor), retains the source ↔ anon-ID mapping, re-identifies AI-returned findings on the way back, and forwards findings linked to the correct patient. Available in the Enterprise license tier.
What's the regulatory classification?
Non-device software under FD&C Act §520(o)(1)(D), the 21st Century Cures Act §3060 carve-out for software that transfers, stores, converts, or displays device data without interpreting or analyzing it. No FDA Device Listing required. Same framework as the rest of the engines family. The mandatory human-verification gate is what keeps the product within the non-device carve-out -- auto-attribution of imaging to a patient without human confirmation would push the regulatory posture to a device classification; the gate preserves the storage-and-forwarding-without-clinical-interpretation framing of §520(o)(1)(D).
Is Encounter Engine cross-platform?
Yes -- Windows and Linux, same as the rest of the router-pattern family except for Pathology Engine. MSI installer for Windows, self-contained Linux tarball for Linux. HA pairs can mix OS platforms.
Plan an encounter-driven workflow.
Tell us where the orphan-study problem hits hardest in your
environment — POCUS, ED, ICU, OR, trauma, outpatient — and
we’ll come back within one business day with a proposed
deployment and EMR-integration approach.