Clinical decision support · medication safety

PharmaDeux CDSS. Checks medication safety while the prescription is written.

Clinical decision support software alerting physicians to cumulative organ burden and toxicity at the moment of prescription. Each alert is shown with the rule and threshold that triggered it; the physician makes the final decision.
  • P06Liver · ALT24U/LStable
  • P07QTc (Fridericia)410msTisdale 0 · low risk
  • P05Kidney · eGFR90mL/min/1.73 m²No dose adjustment
CustomiseeGFRAzithromycin
Patient
66 years, male
Order
Ramipril · Atorvastatin · Metformin · Acetylsalicylic acid · Pantoprazole
Finding
No finding above threshold. All 10 pairwise combinations of the five drugs and their cumulative burden were checked.

Example cases · not real patient data · not for clinical decisions

Safety planes
18
Automated tests
2,480+
Data standard
FHIR R4
Technology readiness level
TRL 4

Problem

Tracking risk by hand in polypharmacy is hard.

Risk does not come only from two drugs interacting. The number of drugs, kidney and liver function, and the total burden on a single organ have to be assessed together.

Polypharmacy

In a patient on five or more drugs, the number of possible interactions grows quickly. Screening them by hand on every prescription is not realistic.

Changing kidney and liver function

A prescription that is safe at an eGFR of 90 may need a dose adjustment at 30. The check has to look at the current lab value.

Cumulative burden

Drugs that are acceptable on their own can add up to a risk in the same organ. An interaction check that looks at two drugs at a time does not see this.

Alert fatigue

Alerts that ignore context fire so often that physicians learn to override them all. The alert that matters gets lost in the noise.

Pairwise combinations

For n drugs, the number of pairwise combinations is n(n−1)/2. Three-way and more complex effects are not included.

DrugsPairs
510
828
1045
15105

The World Health Organization estimates the global annual cost of medication errors at about USD 42 billion. WHO, Medication Without Harm (2017)

How it works

Six steps from prescription to record.

Data comes in from standard resources, is assessed by rules, and the result is shown to the physician with its reason. No step uses probabilistic prediction.

  1. 01

    Data intake

    Patient, medication order, laboratory, diagnosis and allergy data arrive as HL7 FHIR R4 resources.

    • Patient
    • MedicationRequest
    • Observation
    • Condition
    • AllergyIntolerance
  2. 02

    Mapping

    Active substance, dose, unit and route are mapped to shared codes. Missing information is flagged, not skipped.

    • ATC
    • UCUM units
    • missing-data flag
  3. 03

    Rule assessment

    The prescription is checked against versioned rules across 18 safety planes. The same input always gives the same result.

    • 18 planes
    • versioned rules
  4. 04

    Finding and reason

    A finding is shown with its severity: which rule, which value, which threshold.

    • rule ID
    • triggering value
    • threshold
  5. 05

    Physician decision

    The physician decides. Accepting the alert, changing the order or overriding it with a reason is recorded.

    • accept
    • change
    • override with reason
  6. 06

    Record

    Input, rule version, finding and the physician's decision are written to an append-only log.

    • append-only
    • digest chain

18 safety planes

18 checks under four headings

Each check has its own version and tests. Thresholds can be set to match the institution's policy.

Interactions

4
  • P01Drug–drug interaction
  • P02Therapeutic duplication
  • P03Drug–disease interaction
  • P04Allergy and contraindication

Organ toxicity

4
  • P05Nephrotoxicity
  • P06Hepatotoxicity
  • P07Cardiotoxicity / QT prolongation
  • P08Haematological toxicity

Cumulative burden

5
  • P09Anticholinergic burden
  • P10Serotonergic burden
  • P11Sedative / CNS depressant burden
  • P12Bleeding risk burden
  • P13Hyperkalaemia risk

Patient and dose

5
  • P14Dose range check
  • P15Renal dose adjustment
  • P16Hepatic dose adjustment
  • P17Geriatric appropriateness
  • P18Pregnancy and lactation

Hospital system integration

Integration matrix for IT teams.

The four questions hospital IT and biomedical engineering teams ask first: how it connects, how clients are authenticated, where it runs and what it logs.

INT-01

Protocols

Clinical data arrives over HL7 FHIR R4. HL7 v2 messages from systems that have not moved to FHIR are converted to FHIR R4.

FHIR R4
RESTful API · Subscription (rest-hook)
HL7 v2
MLLP listener · FHIR R4 conversion layer
Coding
ATC · ICD-10 · UCUM
INT-02

Security and authorisation

Every request comes from an authenticated client and can reach only the data its role allows.

Authorisation
OAuth 2.0 · SMART on FHIR
Transport
mTLS (mutual TLS)
Access
RBAC · least privilege
INT-03

Deployment models

The system runs on the institution's own infrastructure; patient data does not leave the institution.

On-premises
Docker container · isolated virtual machine
Network
Air-gapped network support
Cloud
Isolated VPC dedicated to the institution
INT-04

Logging and traceability

Application logs go to the institution's central log system; clinical decisions are also kept in a log that cannot be changed.

System log
Syslog · RFC 5424
Audit trail
Append-only · digest chain
Scope
Input · rule version · user · time

The matrix describes the integration architecture. Which interface is set up at your institution, and how, is agreed with your IT team during technical discovery before the pilot.

Verification

What we test, and how.

Every rule is linked to a clinical requirement and to the tests that verify it. A change that fails its tests is not released.

Automated tests
2,480+
The rule engine, data transformations and integrations run through automated tests on every change.
Data standard
HL7 FHIR R4
Integration tests run against real FHIR R4 resource structures.
Readiness level
TRL 4
Components have been validated in a laboratory environment. The next step is validation on anonymised real cases.
Reproducibility
Same input, same result
The same input and rule version give the same result every time. Regression tests check this on every release.

Regulation

We are targeting Class IIa under the MDR.

PharmaDeux provides information used in drug therapy decisions, so it falls under Rule 11 of the EU Medical Device Regulation (MDR). It does not have a CE mark yet.

Intended use (draft)

To support the decision of a qualified healthcare professional by showing possible safety risks of a prescription, with their reasons. The system does not diagnose, does not recommend treatment and does not replace the physician's decision.

FrameworkStatus

EU MDR 2017/745

Medical Device Regulation · Annex VIII Rule 11

Class IIa target

IEC 62304

Medical device software life cycle

Architecture aligned

ISO 14971

Risk management for medical devices

Architecture aligned

ISO 13485

Quality management system

On the roadmap

IEC 62366-1

Usability engineering

On the roadmap

PharmaDeux is not on the market yet. For details, see Quality and MDR.

Clinical validation plan

We measure it on past cases before anyone uses it.

PharmaDeux's performance will be measured on anonymised real cases against an independent panel of experts.

  1. Phase 0

    Protocol and ethics committee

    Primary and secondary endpoints and the data management plan are written, and the ethics application is submitted.

    In preparation
  2. Phase 1

    Historical data

    Anonymised past prescription and laboratory data are obtained from the partner institution in line with KVKK.

    Planned
  3. Phase 2

    Reference standard

    An independent panel of a clinical pharmacist and physicians, blind to the system, assesses the same cases.

    Planned
  4. Phase 3

    Blinded comparison

    The system's findings are compared with the panel's decisions. Sensitivity, specificity, positive predictive value and alert count are reported.

    Planned
  5. Phase 4

    Clinical evaluation report

    Results feed into the MDR clinical evaluation file and the design of a prospective pilot.

    Planned

Partner institutions can take part in writing the protocol. Data is used only under ethics committee approval and a data processing agreement signed with the institution.

Pilot programme

Write to us about a PharmaDeux pilot.

To join a validation study on past cases, or to set up a pilot at your own institution, we can start with a non-binding Letter of Intent (LOI).

  • Clinical pharmacy and medication safety teams
  • University and training-and-research hospitals
  • Institutions able to run a validation study on historical data