Healthcare · Pharmacy & controlled substances

Everything worked. The drugs are gone.

Your access layer does exactly what it was built to do. Controlled-substance diversion doesn’t trip it — because the person is authorized. We build the record that lets the people whose job it is reconstruct what actually happened.

Can you reconstruct last Tuesday? — run the check →Why valid isn’t explainable

The sequence where nothing goes wrong

The badge works. The reader logs it. The cabinet opens for the person authorized to open it. The camera records exactly what it was installed to record — an authorized employee, doing an authorized thing, correctly. Every control performed.

Your access layer answers one question — was this person allowed? — and it answers it well. Diversion is a different question: does this person’s day make sense? That answer doesn’t live in one system. It lives in whether six of them agree.

What we build

Not detection — a record that reconciles.

Diversion becomes visible only when the badge record, the dispensing record, the order, the waste log, the shift roster, and the video fail to agree. That’s a comparison across six systems, and the physical layer’s job is to make its part of it retrievable, timestamped, and correlatable — so the reconciliation is possible at all.

—The access layer. Badge, reader, cabinet, log. It works — and we’ll say so plainly.

—The camera. A feed nobody watches is a recording, not a live control — and that’s fine, as long as the recording is retrievable and lines up with the rest.

—The record. Who was at that cabinet, at that minute, correlatable against dispensing, order, waste, shift, and video — when an investigator asks, months later.

—Retention. The video for that minute still existing when the question finally gets asked.

Why the access layer answers the wrong question — and what a reconcilable record actually is →

The physical layer we own

One seat at a table you don’t hand to a vendor.

A diversion program is a committee — pharmacy, nursing, HR, employee health, risk, and security, with security in one seat. We build the one part that’s physical: the record that says who was at that cabinet, at that minute, and whether it reconciles with everything else.

The record exists so that when a question is asked, it can be answered — which protects a nurse who did nothing wrong as much as it resolves anything else. When the investigation comes, that record either closes it or it doesn’t. That’s the part worth getting right, and it’s the part we build.

Start here

See whether your record reconciles — before an investigator needs it to.

The check

Everything in Part 1 will pass. Start at Part 2.

Walk to the cabinet — locked, logged, on camera, all yes. Then try to reconstruct last Tuesday at 2am across six systems. You’ll find the gap standing there. No email; nothing stored.

Run the check → The depth

Everything worked. The drugs are gone.

The access layer answers “was this person allowed?” The question that matters is whether their day makes sense — and the upsell to monitoring we won’t make.

Read the article →

Talk to a specialist →

Before you leave

The vault is the smallest part of the problem. The emergency department is the highest-volume controlled-substance administration point in the building — the most interrupted staff, the most legitimate reasons to break a routine. The director thinking about the vault has usually not thought about the ED dispensing cabinet. Open the emergency department →