XyDromatics Encounter Engine Specialized engine · Encounter-driven workflow

XyDromatics Encounter Engine — no more orphan studies.

The encounter-driven imaging engine. Solves the orphan- study problem for POCUS, bedside ultrasound, ED / ICU imaging, intra-operative imaging, trauma bay, and any imaging where a clinician scans a patient without a pre-existing order in the EMR. Receives DICOM, matches against HL7 ADT, gates on mandatory human verification, forwards to PACS / VNA, back-fills the EMR with HL7 ORM or FHIR ServiceRequest. The encounter loop, closed.

Same family-platform features as the rest of the router- pattern hosts — keyed-hash pseudonymization, built-in honest-broker capability, shared site encryption key when deployed alongside other Synthology products.

The orphan-study problem

When imaging happens before the order does.

Traditional radiology workflow assumes a specific order: EMR-side order placed first, patient identified and ordered, modality acquires per the order, study lands in PACS attached to the order, radiologist reads, report flows back to the EMR. Clean. Linear. Easy to bill.

POCUS, bedside ultrasound, ED imaging, ICU imaging, intra- operative imaging, trauma bay imaging, and outpatient point-of-care workflows all break that assumption. The clinician scans the patient first; the order (if it ever gets entered) comes later. The study lands in PACS as an orphan — no order to attach to, often no proper patient ID match, no billing capture, EMR has no record the imaging happened.

Without Encounter Engine

  • Orphan studies in PACS, hard to find
  • Lost billing revenue (no order = no charge)
  • EMR doesn’t know the imaging happened
  • Clinical attribution unclear
  • Manual cleanup eats clinical-IT time

With Encounter Engine

  • Orphans caught at intake, before PACS
  • Clinician verifies patient match in seconds
  • EMR back-filled with HL7 ORM / FHIR ServiceRequest
  • Charge-capture tag emitted for revenue cycle
  • Verified study lands in PACS properly tagged

Capabilities

Catch the orphan, verify the patient, close the loop.

Six capability areas covering the full encounter-driven workflow: DICOM ingest, ADT matching, the mandatory human- verification gate, EMR back-fill, downstream forwarding, and the family-wide platform features that come with every router-pattern host.

DICOM ingest from any modality

Same DICOM ingest surface as the rest of the family. Modalities don't need any special integration — they just send their imaging where they always have, and Encounter Engine becomes the front door.

  • C-STORE SCP for any DICOM-conformant modality
  • STOW-RS for HTTP-based modalities
  • Per-AE-Title access control with configurable allowlists
  • Backpressure semantics during burst-load periods
  • No modality-side configuration changes required

HL7 ADT matching

The Admission-Discharge-Transfer feed tells Encounter Engine who's in which bed at any given moment. Match incoming imaging against that feed to identify candidate patient(s).

  • HL7 v2 ADT subscription (A01 admission, A02 transfer, A03 discharge, A08 update, A11 cancel)
  • Per-location patient-bed mapping kept current
  • FHIR Encounter resource subscription as alternative to HL7 v2
  • Configurable match windows (by location, by time-of-imaging, by clinician on shift)
  • Multi-candidate disambiguation when ADT shows multiple patients in scope
  • No-match fallback to manual identification

Mandatory human-verification gate

The regulated boundary that keeps this product non-device software. A clinician confirms patient identity before the study moves downstream. Engine never auto-attributes.

  • Clinician-facing UI shows ADT-matched candidate(s) and the imaging in question
  • Required confirmation step (no time-saving auto-bypass)
  • Reason text required when overriding ADT-suggested match
  • Audit trail records the verifying clinician's identity, timestamp, and chosen match
  • Re-verification workflow if downstream review flags an issue
  • Quarantine queue for studies where no confidence-eligible match exists

EMR back-fill (the encounter loop)

Once a study is verified, Encounter Engine generates the order retroactively in the EMR — closing the loop that started without an order in the first place.

  • HL7 ORM^O01 generation back to the EMR (creates the order retrospectively)
  • FHIR ServiceRequest generation as alternative to HL7 v2
  • Per-encounter-type ordering profile (different encounter types map to different order types)
  • Charge-capture tag emission for revenue-cycle integration
  • Audit trail captures every back-fill with reason text
  • EMR-side rejection handling (if the EMR refuses the order, study returns to verification queue)

Forward to PACS / VNA after verification

Verified-and-tagged studies flow to the standard archive destinations with proper patient ID, accession number, and order linkage now attached.

  • C-STORE SCU forwarding to PACS / VNA
  • STOW-RS for HTTP-based downstream targets
  • Tag transformation during forward (apply the verified patient ID + accession number)
  • Multi-destination fan-out (PACS + VNA + AI vendor concurrent forwarding)
  • Failed-forward retry with dead-letter queue
  • Audit trail end-to-end

Family-platform features

Same family-wide platform features as the rest of the router-pattern hosts.

  • Keyed-hash pseudonymization with shared site encryption key
  • Built-in honest-broker capability for studies anonymized by Encounter Engine
  • AI-vendor PHI-shielded round-trip workflow
  • Web administration UI with shared sidebar shell
  • Role-based access control with full permission catalog
  • Hash-chain audit log + 21 CFR Part 11-aligned audit trail

Architecture

Three inputs, one verification gate, two outputs.

The diagram below shows the encounter-loop closure. Modalities feed imaging; the EMR feeds ADT context; clinicians confirm matches at the gate; verified studies forward to PACS / VNA; the EMR receives the back-filled order.

XyDromatics Encounter Engine architecture Modalities (POCUS, bedside US, ED imaging, ICU imaging, intra-op imaging, trauma bay) feed DICOM into the Encounter Engine. The EMR feeds HL7 ADT context. The engine matches imaging against ADT-derived patient location, presents candidates at a mandatory human-verification gate, and after clinician confirmation forwards the verified study to PACS/VNA and emits HL7 ORM^O01 (or FHIR ServiceRequest) back to the EMR — closing the encounter loop. MODALITIES EMR (ADT IN) Imaging input POCUS · bedside US ED · ICU imaging Intra-op imaging Trauma bay Point-of-care clinic imaging DICOM C-STORE / STOW-RS EMR ADT context Epic / Cerner / others HL7 ADT subscription A01 · A02 · A03 · A08 · A11 FHIR Encounter resource who is in which bed, when XyDromatics Encounter Engine Non-device software 1. ADT match candidate patient(s) by location 2. Mandatory human-verification gate clinician confirms identity · audit-trailed no auto-attribution 3. Forward + back-fill PACS/VNA + EMR ORM/ServiceRequest Family features: keyed-hash anon · honest-broker capability · shared site encryption key verified study retroactive order PACS / VNA Verified study with proper accession + patient ID C-STORE · STOW-RS EMR (back-fill) Retroactive order created HL7 ORM^O01 · FHIR ServiceRequest

Use cases

Six encounter-driven workflows.

The same orphan-study problem shows up across many clinical contexts. The patterns below cover the most common deployment shapes; institutions typically combine two or three.

Pattern 1

POCUS (point-of-care ultrasound) at the bedside

The defining use case. A hospitalist, intensivist, or ED physician grabs a portable ultrasound, scans a patient at the bedside, and walks away. Without Encounter Engine, that study lands in PACS as an orphan: no order, no billing capture, no record in the EMR. Encounter Engine closes the loop.

Flow

  1. 1 Clinician scans patient with portable ultrasound (no pre-existing order)
  2. 2 Modality emits DICOM to Encounter Engine
  3. 3 Engine queries HL7 ADT for patient(s) in the scanning location
  4. 4 Clinician sees candidate match(es) in the verification UI, confirms patient identity
  5. 5 Engine generates HL7 ORM^O01 back to EMR (order created retroactively)
  6. 6 Verified study forwarded to PACS / VNA with proper accession number + patient ID
  7. 7 EMR shows the encounter has imaging; revenue cycle captures the charge
Pattern 2

ED bedside imaging

The ED is a chaotic environment where pre-ordering imaging isn't always feasible — a trauma comes in, the FAST exam happens before anyone enters an order. Encounter Engine catches the orphan study at intake, verifies the patient, and back-fills the order so the encounter is complete in the EMR.

Flow

  1. 1 Patient arrives in ED, FAST or other point-of-care exam performed before formal order
  2. 2 Modality (portable US, X-ray, etc.) emits DICOM to Encounter Engine
  3. 3 Engine matches against ED-bed ADT feed
  4. 4 ED clinician verifies match in the UI (often the same clinician who did the exam)
  5. 5 EMR ORM^O01 back-fills the order
  6. 6 Study forwards to PACS / VNA with proper attribution
Pattern 3

ICU bedside imaging

ICU patients receive frequent bedside imaging (chest X-ray, US for line placement, etc.) where the imaging often happens before the EMR-side order catches up. Same pattern: catch at the engine, verify, back-fill the order.

Flow

  1. 1 ICU bedside imaging happens (chest film, US line-placement, etc.)
  2. 2 Modality emits DICOM to Encounter Engine
  3. 3 Engine matches against ICU-bed ADT feed (typically 1:1 mapping by bed)
  4. 4 Bedside RN or RT verifies the patient match in the UI
  5. 5 EMR back-fill generates the order retrospectively
  6. 6 Study forwards to PACS / VNA
Pattern 4

Intra-operative imaging

Sterile-field intra-operative imaging (C-arm fluoroscopy, intra-op US, intra-op MRI / CT) often happens without an EMR-side order because the surgeon can't step away from the field to enter one. Encounter Engine handles the orphan-study cleanup post-procedure.

Flow

  1. 1 Intra-op imaging happens during a procedure
  2. 2 Modality emits DICOM to Encounter Engine
  3. 3 Engine matches against OR-schedule ADT feed (which case is in which OR)
  4. 4 Verification happens post-procedure (circulating nurse or surgeon-of-record)
  5. 5 EMR back-fill generates the order against the surgical encounter
  6. 6 Study forwards to PACS / VNA, attached to the right surgical case
Pattern 5

Trauma bay imaging

Trauma activations are urgent: a trauma patient needs imaging immediately, and the formal order placement happens later. Encounter Engine keeps the imaging from going orphan during the time-critical window.

Flow

  1. 1 Trauma activation, patient arrives in trauma bay
  2. 2 Imaging (CT, X-ray, FAST US) happens immediately
  3. 3 Modality emits DICOM with whatever placeholder demographics the tech entered
  4. 4 Engine matches against trauma-bay ADT feed
  5. 5 Trauma team member verifies match (often a tech or RN who knows the patient)
  6. 6 EMR back-fill creates the trauma-encounter orders post-hoc
  7. 7 Studies forward to PACS / VNA, properly attached
Pattern 6

Outpatient point-of-care workflows

Outpatient clinics increasingly do point-of-care imaging (cardiology echo for new-symptom evaluation, MSK ultrasound during a clinic visit, primary-care POCUS). Same orphan-study problem; same fix.

Flow

  1. 1 Clinic visit triggers point-of-care imaging during the encounter
  2. 2 Modality emits DICOM to Encounter Engine
  3. 3 Engine matches against outpatient-clinic ADT or scheduling feed
  4. 4 Clinician verifies patient match
  5. 5 EMR back-fill generates the order against the clinic encounter
  6. 6 Study forwards to PACS / VNA, attached to the clinic encounter

Integration points

Modalities, EMR, archive — three integration surfaces.

Imaging input (modalities)

  • Portable ultrasound (POCUS) — any DICOM-conformant US scanner
  • ED bedside imaging — portable US, portable X-ray
  • ICU bedside imaging — portable chest X-ray, US for line placement
  • OR / intra-op — C-arm fluoroscopy, intra-op US, intra-op MRI / CT
  • Trauma bay — any modality emitting DICOM
  • Outpatient point-of-care — clinic-deployed US, echo, MSK
  • Any DICOM-conformant SCU emitting C-STORE or STOW-RS

EMR integration (ADT in, ORM out)

  • HL7 v2 ADT subscription (A01 / A02 / A03 / A08 / A11) for patient-location tracking
  • FHIR Encounter resource subscription as an alternative to HL7 v2
  • HL7 ORM^O01 outbound for retroactive order creation
  • FHIR ServiceRequest outbound as alternative to HL7 v2
  • Epic + Cerner are the two EMRs we've done this against most often; HL7 v2 / FHIR conformance means any EMR with those interfaces is integrable
  • Charge-capture tags emitted per institutional revenue-cycle integration

Downstream archive

  • PACS via C-STORE SCU forwarding
  • XyDromatics VNA Repository / Clinical / Research / Clinical Research
  • Any DICOM-conformant VNA via C-STORE or STOW-RS
  • AI vendor endpoints for downstream analysis (with PHI-shielding via family-wide round-trip if applicable)

Cross-product orchestration

  • Shared site encryption key (consistent anon-IDs across the customer's portfolio)
  • XyDromatics Router can forward orphan studies to Encounter Engine for verification before they hit PACS
  • Encounter Engine can forward verified studies through the rest of the family for further routing / archive
  • SynthQMS integration for verification-workflow change control

Identity, audit, observability

  • OIDC / SAML for the web admin UI
  • Active Directory / Azure AD federation
  • Per-verification audit trail entries (verifying clinician identity, timestamp, match decision)
  • Hash-chain audit log
  • Prometheus metrics + structured JSON logs
  • Webhook outputs for SIEM integration

System requirements & sizing

Sized to verified-encounter volume.

Encounter Engine sizing follows the verified-encounter volume per day. The verification gate is the throughput floor — even a low-spec deployment can handle thousands of encounters a day at human-verification speed (the gate isn’t the bottleneck; clinician availability is).

Tier Encounter volume CPU RAM Typical site
Small (single department) < 100 verified encounters / day 4 vCPU 8 GB ED-only or ICU-only deployment, single-department POCUS workflow.
Medium (hospital-wide) 100 – 500 verified encounters / day 8 vCPU 16 GB Hospital-wide deployment covering ED + ICU + OR + outpatient point-of-care.
Large (multi-site) 500 – 2,000 verified encounters / day 16 vCPU (HA pair) 32 GB per node Multi-hospital health system, multi-site POCUS programs, busy academic ED + ICU.
Enterprise > 2,000 verified encounters / day 32 vCPU (HA cluster) 64 GB per node Large IDN with distributed POCUS programs across many sites.

Licensing

Three packages.

Core covers DICOM ingest, ADT matching, the verification gate, and PACS / VNA forwarding. The EMR Loop tier adds the retroactive-order back-fill capability (HL7 ORM / FHIR ServiceRequest). Enterprise unlocks the family-platform features (keyed-hash, broker, AI round-trip) and HA pairing.

Encounter Engine Core

The base engine — DICOM ingest, ADT matching, mandatory human-verification gate, forward to PACS / VNA. Suited for smaller deployments without EMR back-fill.

  • C-STORE SCP / STOW-RS DICOM ingest
  • HL7 v2 ADT subscription with location-bed mapping
  • Mandatory human-verification UI
  • Forward to PACS / VNA after verification
  • Web admin UI + RBAC
  • Audit trail

Encounter Engine + EMR Loop

Adds the EMR back-fill capability — HL7 ORM^O01 generation, FHIR ServiceRequest emission, charge-capture tags. The full encounter loop closed.

  • Everything in Core
  • HL7 ORM^O01 outbound to EMR (retroactive order creation)
  • FHIR ServiceRequest outbound (alternative to HL7 v2)
  • Charge-capture tag emission for revenue-cycle integration
  • Per-encounter-type ordering profiles
  • EMR-side rejection handling

Encounter Engine Enterprise

Everything, plus keyed-hash pseudonymization for AI-vendor PHI shielding, multi-host deployment, and HA pairing.

  • Everything in Core + EMR Loop
  • Keyed-hash pseudonymization for AI-vendor PHI shielding
  • Built-in honest-broker capability for re-identification
  • AI-vendor PHI-shielded round-trip workflow
  • Active-active HA pair
  • Cross-product site-key sharing (with Router / VNA family / SR Engine / Migration Engine / Pathology Engine)
  • Premium support tier eligible

Per-deployment licensing. Multi-product bundles (Encounter Engine + Router + VNA family + other engines) get bundle pricing and shared site-key provisioning.

Documentation

The controlled-document set.

Every Encounter Engine deployment ships with the documents below, all managed under SynthQMS document control. The DICOM Conformance Statement is publicly available; the rest are shared under mutual NDA.

Document Title Notes
DOC-2026-311 Hardware & Software Requirements (Encounter Engine) Sizing, OS support, dependencies
DOC-2026-312 DICOM Conformance Statement (Encounter Engine) Public — full SOP class + transfer-syntax matrix
DOC-2026-314 EULA Annex (Encounter Engine) Annex to the Synthology Master EULA (DOC-2026-063)
DOC-2026-308 Penetration Test Results (Encounter Engine) Available under NDA
DOC-2026-399 QA Runner Manual (Encounter Engine) Internal QA + customer-validated test runs
DOC-2026-183 User Guide (Encounter Engine) Operator + clinician + administrator workflows
DOC-2026-313 Installation Guide (Encounter Engine) MSI deploy + Linux tarball install + EMR integration setup

Additional documents

Encounter Engine-specific documents beyond the standard set. Items marked Pending are tracked for authoring under SynthQMS change control.

Document Title Notes
DOC-2026-408 HL7 v2 / FHIR Conformance (Encounter Engine) ADT subscription + ORM^O01 emission specs
DOC-2026-409 Verification Workflow Specification (Encounter Engine) How the human-verification gate functions; clinician training material

Frequently asked

The questions clinical IT asks.

What is "POCUS-style encounter workflow" and what problem does it solve?

POCUS = point-of-care ultrasound -- bedside ultrasound performed by a clinician (hospitalist, intensivist, ED physician) without a pre-existing order in the EMR. The traditional radiology workflow assumes the order exists first, then the imaging happens. POCUS reverses that: imaging first, no order. The study lands in PACS as an "orphan" -- no order to attach to, no patient ID match, no billing capture, EMR doesn't know the imaging happened. Multiply that across an ED, ICU, OR, and clinic and you have meaningful revenue leakage and incomplete patient records. Encounter Engine catches the orphan, verifies the patient via human-confirmed ADT match, back-fills the EMR order retroactively, and forwards the cleaned-up study to the archive.

Why a mandatory human-verification gate? Why not auto-match?

Two reasons. Regulatory: the human gate is what keeps this product on the Non-device software side of the line. Auto-attribution of imaging to a patient without human verification crosses into clinical-decision territory that would push the regulatory classification up. Clinical: ADT matching gives candidates, but wrong-patient errors at the verification stage are clinically significant. A clinician confirming "yes, this is patient X" is the right safeguard. Engine never auto-attributes; the gate is mandatory and audit-trailed.

How does ADT matching actually work?

Encounter Engine subscribes to the EMR's HL7 v2 ADT feed (A01 admission, A02 transfer, A03 discharge, A08 update, A11 cancel) or to the FHIR Encounter resource. From those events it maintains a real-time per-location patient-bed map: which patient is in which bed at any given moment. When imaging arrives, the engine queries the map for the imaging location and returns candidate match(es). Match windows are configurable by location, time of imaging, and clinician on shift. The verification UI shows the candidate(s) with enough context for the clinician to confirm or override.

What if the wrong patient is selected during verification?

Audit trail captures every verification decision with the verifying clinician's identity, the chosen match, and any reason text. If a downstream review (radiologist, QA, RIS reconciliation) flags a mis-attribution, a re-verification workflow lifts the study back into the verification queue with the original decision visible. The corrected match generates a cancellation HL7 ORM for the wrong order and a new ORM for the right one. Both events are audit-trailed end-to-end. Mis-attributions happen rarely in practice but the workflow has to handle them cleanly when they do.

How does Encounter Engine integrate with Epic / Cerner specifically?

Standard HL7 v2 / FHIR interfaces -- ADT subscription inbound, ORM^O01 / ServiceRequest outbound. Both Epic and Cerner expose these natively; the integration is straightforward HL7 / FHIR work, not vendor-specific custom development. Charge-capture tag emission is configurable to match institutional revenue-cycle integration. We've done this against both EMRs; other EMRs with HL7 v2 / FHIR support work the same way.

Can Encounter Engine handle modalities that don't emit DICOM?

No. Encounter Engine is a DICOM-receive front door. Modalities that emit non-DICOM formats (proprietary US streaming, raw image files, etc.) need a converter upstream. For ultrasound specifically, modern POCUS scanners emit DICOM by default; older scanners or research-grade devices may need a DICOMization layer first.

How does the AI-vendor PHI-shielding workflow work here?

Same family-wide mechanism as the Router, VNA family, SR Engine, Migration Engine, and Pathology Engine. Encounter Engine uses keyed-hash pseudonymization on the way out (de-identifies the verified study before forwarding to AI vendor), retains the source ↔ anon-ID mapping, re-identifies AI-returned findings on the way back, and forwards findings linked to the correct patient. Available in the Enterprise license tier.

What's the regulatory classification?

Non-device software under FD&C Act §520(o)(1)(D), the 21st Century Cures Act §3060 carve-out for software that transfers, stores, converts, or displays device data without interpreting or analyzing it. No FDA Device Listing required. Same framework as the rest of the engines family. The mandatory human-verification gate is what keeps the product within the non-device carve-out -- auto-attribution of imaging to a patient without human confirmation would push the regulatory posture to a device classification; the gate preserves the storage-and-forwarding-without-clinical-interpretation framing of §520(o)(1)(D).

Is Encounter Engine cross-platform?

Yes -- Windows and Linux, same as the rest of the router-pattern family except for Pathology Engine. MSI installer for Windows, self-contained Linux tarball for Linux. HA pairs can mix OS platforms.

Plan an encounter-driven workflow.

Tell us where the orphan-study problem hits hardest in your environment — POCUS, ED, ICU, OR, trauma, outpatient — and we’ll come back within one business day with a proposed deployment and EMR-integration approach.