Home Insights How we work Contact
Healthcare · Elopement & wandering

Your exits are alarmed and they work. The door was never the problem.

The same act — a person walking out — is routine paperwork or a sentinel event, depending on a capacity judgment made hours earlier, by someone else, maybe on another floor. The control sits downstream of a determination it can’t see. That’s why buying more hardware keeps not fixing it.

Take the door off the table

Concede the door first, because it is not broken. The exits are alarmed, the alarms fire, the badge readers read. The perimeter was specified correctly and does exactly what it was bought to do. This page is not going to sell you a better door — if it did, it would be doing the same thing that hasn’t moved the problem for you so far.

The break is upstream. A departure is a discharge when the patient has capacity and an elopement when they do not — and that is a clinical determination made elsewhere, sometimes hours before. The documented root causes are breakdowns in patient assessment and team communication, not hardware. In one case in AHRQ’s own analysis, a missing inpatient was found near the ED, registered as a new ED patient, medicated, and discharged — while still listed as admitted upstairs. The hospital encountered the person it had lost, and still lost him. No door would have helped.

What we build

Location and time — not more perimeter.

If elopement is an information failure, the answer is the layer that carries a judgment to the door in time to matter — and the record that shows whether it got there. That is a different purchase than another door contact.

—Location, with a name and a direction. An alert to a generic nursing-station inbox is not the same as one pushed to the assigned nurse’s device with the patient’s name, last confirmed location, and direction of travel. In elopement, that difference is measured in minutes.
—Escalation when nobody answers. A system that alerts once and waits is inadequate by design. The one that works escalates — charge nurse, security, supervisor — when the first notification goes unacknowledged. That is a design principle, not a product feature.
—Every way out, including the ones nobody calls exits. The stairwell, the elevator lobby, the service door — perimeter awareness that doesn’t stop at the doors marked EXIT.
—A record of who was told, and whether they acknowledged. Because the root cause is a communication breakdown, the record has to show more than that a door opened — it has to show who knew, when, and whether the message landed.

Why more hardware keeps not fixing an information problem →

The physical layer we own

The capacity call is the clinician’s. Carrying it to the door in time is ours.

A door can’t tell a patient leaving from a patient eloping — that difference is a capacity judgment your clinicians make, sometimes hours earlier, sometimes on another floor. We can’t make that call and wouldn’t want to. The risk assessment, the reassessment, the determination itself — all yours.

What we build is the layer that acts on that determination the moment it’s made: location, egress awareness, routing to the named responder, escalation when nobody acknowledges, and the record of who knew what and when. That answers the documented root cause directly — and it is honest about where our part starts, which is the moment the judgment exists.

Start here

Walk the exits — then trace what the exits know.

Before you leave

Elopement usually arrives through dementia — the confused elder, the wanderer. But the psych-hold population is the same problem with a different chart: patients admitted involuntarily may actively seek to leave, which makes their departures intentional rather than confused. Same control, different intent — and you’re very likely thinking about only one of them. Open behavioral health →