Daily care: a changed trigger, the wrong chart and an unknown outcome
A late estradiol result, a newly signed trigger time, the wrong chart caught before publishing, and a lost confirmation checked rather than blindly resent.
Safeguards
A calm stop before the wrong chart.
Designed stops for the moments that go wrong: wrong chart, stale link, duplicate send, mismatched label.
The check
One prepared note. Two open charts.
Verification rings check the patient, the episode and the destination field at the moment of action.
- Right chartMaya Chen's chart is openPatient, episode and destination field all match the prepared note, so it is ready for an authorized person to review in the EMR.
- Wrong chartAlex Chen's chart is open insteadSame surname, different person. The patient check fails, placement stops, nothing is written to either chart, and the draft waits for the right one.
Prepared noteVisit note · reviewedFor Maya ChenDraft kept · not placed
Open chartMaya ChenPatientEpisodeFieldReady for review in the EMR
Open chartAlex ChenSurname matchesPatient doesn’t matchEpisode doesn’t matchDifferent chart open, nothing written
For your team
What changes for your team
The costly mistakes in fertility coordination are small, fast and ordinary: a look-alike chart was left open in another tab, an older text link was tapped, a reminder went twice, or a specimen label differed by one digit.
- The wrong chart is open
TodayA note can be pasted into whichever chart happens to be open.
With OvaFlowPlacement stops when the open chart isn't the person the work belongs to, and the draft is kept.
- An old link is tapped
TodayA patient opens an older text and follows an instruction that has been replaced.
With OvaFlowOlder links open the current signed instruction instead.
- A reminder may not have gone
TodayStaff resend to be safe, and the patient gets two.
With OvaFlowThe original is found first. Nothing is repeated until it has been checked.
- A label doesn't match
TodayA mismatch is noticed late, or not at all.
With OvaFlowReview stops until the specimen label matches its source report.
How it works
Every safeguard protects one of three things
The costly mistakes in fertility coordination are small, fast and ordinary: a look-alike chart was left open in another tab, an older text link was tapped, a reminder went twice, or a specimen label differed by one digit.
- 13Right patientThe prepared work, the open chart, the specimen and the people on a thread have to be the same person before anything moves.designed safeguards
- 11Right ownerResponsibility changes hands only when someone explicitly accepts it, and clinical decisions stay with the clinicians who make them.designed safeguards
Statuses you’ll see
Catalog
Every designed stop, in one index
Filter by what each safeguard protects or by delivery stage, or search for the moment you have in mind. On a wide screen, the preview follows the row you are reading and shows a walkthrough where it happens.
Showing 12 of 38 safeguards
Wrong-chart stop
If the open chart isn't the patient the work belongs to, placement stops and the draft is kept.
Seen inDaily care: a changed trigger, the wrong chart and an unknown outcomeArtisan: trigger approval, the wrong chart and an interrupted viewWorkstation failure and recovery catalog
Changed destination check
If the target field changes mid-draft, the destination has to be confirmed again.
Read is not accept
Seeing or reading a handoff never transfers responsibility. Only an explicit accept does.
Seen inDaily care: a changed trigger, the wrong chart and an unknown outcomeDaily care: the 8:20 PM report and the evening handoffArtisan: portal distribution, lab change order, read vs accept
Decline keeps the owner
If an offer is declined or expires, the original owner stays responsible, so there is never a gap.
Seen inDaily care: the 8:20 PM report and the evening handoffArtisan: portal distribution, lab change order, read vs acceptOn-call nurse iPhone: seeing isn't accepting, declining leaves no gap
Audience change pause
When someone new joins a thread, a pending clinical message waits until the recipients are confirmed.
Seen inCare conversations: audience change, duplicate send, clinical routingCare channels: iPhone Messages handoff, templates and opt-ins
Clinical questions go to a person
Dose and symptom questions are routed to a nurse, never answered by an automated reply.
Seen inCare conversations: audience change, duplicate send, clinical routingElena's iPhone: the current instruction, an old link, an honest reportElena's episode: one change, four commitments, recovery and freeze-all
Label mismatch stop
A specimen or biopsy label that doesn't match its source report stops review.
Seen innAbleIVF: allergy check, monitoring note, save check, specimen stopeIVF: note save, financial blocker, e-prescribing handoff, PGT stopEmbryology: PGT-M readiness, a media recall and warming authorization
Duplicate barcode stop
A duplicate specimen barcode is handed to the lab's own two-person check in its electronic witnessing system.
Seen inLab & pharmacy core: witnessing, prior auth, delivery and readiness
Prescribing stays in the EMR
Dose changes are handed to the clinic's own e-prescribing workflow. OvaFlow never prescribes.
Seen ineIVF: note save, financial blocker, e-prescribing handoff, PGT stopLab & specialty pharmacy: accession hold, amended PGT, cryo signalLab & pharmacy core: witnessing, prior auth, delivery and readiness
Consent before the mic
The patient, the encounter and consent are confirmed before any listening begins.
Seen inWindows companion: docking, audio setup, practice and call captureClinician iPhone: in-room capture, consent and an offline deskApple Watch: wrist capture, offline retention and privacy
Recording is always visible
A clear indicator stays on screen while capture runs, and pause is always one step away.
Seen inWindows companion: docking, audio setup, practice and call captureClinician iPhone: in-room capture, consent and an offline deskApple Watch: wrist capture, offline retention and privacy
Private by default
Lock Screen and lowered-wrist views hide patient names; details appear only after unlocking.
Seen inMaya's iPhone: a chosen pause and a private support callApple Watch: wrist capture, offline retention and privacyiOS widgets, Live Activity, Dynamic Island and Face ID
Protected window guard
When a remote desktop or protected window blocks text transfer, the draft is held instead of forced in.
Seen inWorkstation failure and recovery catalogAlways-on clinic workspace: routines people release
Chart re-check before resuming
Paused routines confirm the open chart again before they continue.
Routines your team releases
Routine follow-through runs only under rules your team sets, with a visible trail from release to delivery and a quick pause.
Conflicting instructions hold
When two people give conflicting storage instructions, nothing is carried out until it is resolved.
Seen inCryo custody, donor updates, outages and model governance
Sent isn't accepted
A referral or transfer of care counts only when the receiving team accepts it.
Seen inFrozen transfer, early pregnancy, loss and returning after a pause
Successor acceptance
When someone leaves, their open work moves only when a named successor accepts it.
Seen inCryo custody, donor updates, outages and model governance
Model update gate
Model changes wait for the medical director's review and stay within operational, non-clinical scope.
Seen inCryo custody, donor updates, outages and model governance
Consent on the right chart
A consent form filed under the wrong person is moved to the right chart, with a visible trail.
Seen inCare coordination: procedure team, cost changes, consent and access
Clearance per attempt
Clearance recorded for one transfer attempt isn't reused for the next one.
Seen inCare coordination: procedure team, cost changes, consent and access
Whole-team commitment
A procedure slot counts only when every required team member has committed to it.
Seen inTwo-person intake, sperm source and urgent preservationElena's episode: one change, four commitments, recovery and freeze-allCare coordination: procedure team, cost changes, consent and access
Urgent help, one tap away
Recovery check-ins show the clinic's 24/7 line and 911, with no automated symptom advice.
Seen inElena's iPhone: the current instruction, an old link, an honest reportPatient and clinic, side by side
26 more below, in the same order
38 safeguards in 3 groups. Open a group to see each one.
Right patient13
Wrong-chart stop
If the open chart isn't the patient the work belongs to, placement stops and the draft is kept.
Changed destination check
If the target field changes mid-draft, the destination has to be confirmed again.
Audience change pause
When someone new joins a thread, a pending clinical message waits until the recipients are confirmed.
Label mismatch stop
A specimen or biopsy label that doesn't match its source report stops review.
Duplicate barcode stop
A duplicate specimen barcode is handed to the lab's own two-person check in its electronic witnessing system.
Consent before the mic
The patient, the encounter and consent are confirmed before any listening begins.
Recording is always visible
A clear indicator stays on screen while capture runs, and pause is always one step away.
Private by default
Lock Screen and lowered-wrist views hide patient names; details appear only after unlocking.
Protected window guard
When a remote desktop or protected window blocks text transfer, the draft is held instead of forced in.
Chart re-check before resuming
Paused routines confirm the open chart again before they continue.
Exact-embryo authorization
Warming goes ahead only for the embryo named in the authorization.
Consent on the right chart
A consent form filed under the wrong person is moved to the right chart, with a visible trail.
Clearance per attempt
Clearance recorded for one transfer attempt isn't reused for the next one.
Right owner11
Read is not accept
Seeing or reading a handoff never transfers responsibility. Only an explicit accept does.
Decline keeps the owner
If an offer is declined or expires, the original owner stays responsible, so there is never a gap.
Clinical questions go to a person
Dose and symptom questions are routed to a nurse, never answered by an automated reply.
Prescribing stays in the EMR
Dose changes are handed to the clinic's own e-prescribing workflow. OvaFlow never prescribes.
Routines your team releases
Routine follow-through runs only under rules your team sets, with a visible trail from release to delivery and a quick pause.
Conflicting instructions hold
When two people give conflicting storage instructions, nothing is carried out until it is resolved.
Sent isn't accepted
A referral or transfer of care counts only when the receiving team accepts it.
Successor acceptance
When someone leaves, their open work moves only when a named successor accepts it.
Model update gate
Model changes wait for the medical director's review and stay within operational, non-clinical scope.
Whole-team commitment
A procedure slot counts only when every required team member has committed to it.
Urgent help, one tap away
Recovery check-ins show the clinic's 24/7 line and 911, with no automated symptom advice.
Stopping mistakes before they land
Why calm inline stops work where dismissible pop-up alerts fail
Health informatics studies consistently show that clinicians override 49% to 96% of interruptive pop-up medication and workflow alerts because high-volume, low-specificity modals disrupt thought and train staff to click “OK” on reflex [1]. Meanwhile, randomized trials demonstrate that wrong-patient electronic orders occur regularly when similar names or multiple tabs are open, and require targeted two-identifier verification at the moment of action [2].
In reproductive medicine, the stakes extend beyond chart notes to laboratory specimen witnessing, PGT-M biopsy label matching, exact-embryo warming authorizations, and donor quarantine eligibility under ESHRE, ASRM, and federal tissue rules [3, 4, 5]. OvaFlow replaces dismissible warning pop-ups with 38 specific, calm inline stops grouped into Right patient, Right owner, and Right next step: when a mismatch occurs, only that action pauses, the draft is preserved in the holding rail, and laboratory or prescribing boundaries hand straight back to your clinic’s own systems.
Why pop-up warnings fail in busy clinics
Halts only the mismatched step · Keeps the draftHow a point-of-action inline stop replaces dismissible warning pop-ups
Interruptive pop-up modal (Conventional EHRs)49%–96% override rate
Fires while browsing and trains staff to click “OK”
- Interrupts reading: Blocks the screen with generic warnings before any action is taken.
- Allows force-past: A single “Continue anyway / OK” button lets a wrong-chart paste slip through during a busy morning shift.
- Discards work on cancel: Cancelling out of a modal often drops the unsaved note text on the clipboard.
OvaFlow calm inline stop38 point-of-action checks
Checks identity, revision, audience, and label at the moment of action
- No force-past button on wrong chart: If Jordan Patel’s chart is open when placing Elena Rivera’s note, placement stops until Elena’s chart is opened.
- Holding rail preserves the draft: The full note, audio recording, or message waits intact so nothing is re-typed.
- Respects clinic systems: Duplicate specimen barcodes hand off to the lab’s electronic witnessing system, and dose changes hand off to e-prescribing.
Step-by-step walkthrough
Four moments in one shift where a check prevents a chart or lab mix-up
- Wrong-chart stopElena’s draft kept off Jordan’s chart
Nora attempts to place Elena Rivera’s monitoring note while Jordan Patel’s chart is open in the EMR. Placement stops immediately with a plain explanation, and Elena’s draft stays safe in the holding rail.
- Label mismatch stopBiopsy ID vs. PGT-M report check
During pre-transfer readiness review, a trophectoderm biopsy label digit does not match the attached PGT-M reference lab report. Review pauses until the embryology and genetics source documents are reconciled.
- Duplicate barcode stopHanded to lab witnessing check
When a duplicate specimen barcode is detected during dish preparation, OvaFlow halts coordination sign-off and routes the discrepancy to the laboratory’s own electronic witnessing system for a two-person check.
- New decision requiredWarming non-survival hold
Under exact-embryo authorization, warming proceeds only for the specific embryo named on the signed consent. If that embryo does not survive warming, OvaFlow stops and requires a new clinician and patient authorization before any second embryo is warmed.
System boundaries
What OvaFlow handles and what stays with your EMR and clinical team
Clear operational boundaries keep clinical authority, prescribing, and laboratory witnessing inside your clinic’s own systems. See AI & clinical boundaries for full governance rules.
What OvaFlow does here
- Verifies patient identity, active episode, target field, recipient list, and specimen label right at the moment of action.
- Preserves the full text draft, audio recording, or message in the holding rail whenever a stop triggers.
- Separates permission to ship reproductive tissue from clinical eligibility to use it in treatment.
- Pauses routine and celebratory prompts immediately after a pregnancy loss or a patient-chosen pause.
What OvaFlow never does
- Never uses a “Click OK to ignore” modal that lets a wrong-chart paste or mismatched embryo label slip through under time pressure.
- Never performs laboratory witnessing itself—specimen barcode resolution stays inside the lab’s electronic witnessing system.
- Never prescribes medications—dose changes hand off to the clinic’s own e-prescribing workflow.
- Never classifies stored embryos as abandoned based on a single bounced email or unreturned reminder.
Questions & primary sources
Answers for clinicians, practice leaders, and patients
Won’t 38 safeguards slow down our nurses with constant pop-up warnings?Clinicians & coordinators
No, because OvaFlow does not fire speculative pop-up warnings while you browse. A stop triggers only at the exact moment an action contradicts a verified fact—such as pasting Elena’s note into Jordan’s open chart—and keeps your draft intact so switching to Elena’s chart finishes the job in one click.
How does OvaFlow handle conflicting embryo disposition instructions or unclaimed cryostorage?Practice leaders & owners
If two intended parents submit conflicting storage or disposition instructions, “Conflicting instructions hold” freezes execution until resolved. And before any abandonment review, OvaFlow surfaces the full multi-channel contact history in line with ASRM ethics guidance.
What happens if I experience a cycle cancellation or loss—will I keep getting automated cycle reminders?Patients & families
No. The “Respectful prompt pause” safeguard immediately halts routine check-ins and celebratory prompts after a loss or a chosen pause in care.
Primary clinical & safety references (5 sources)View citations
- van der Sijs H, Aarts J, Vulto A, Berg M (2006). Overriding of drug safety alerts in computerized physician order entry. Journal of the American Medical Informatics Association 13(2):138-147. — Demonstrates that 49%–96% of interruptive modal safety alerts are overridden due to alert fatigue and workflow disruption.
- Adelman JS, Kalkut GE, Schechter CB, et al. (2013). Understanding and preventing wrong-patient electronic orders: a randomized controlled trial. Journal of the American Medical Informatics Association 20(2):305-310. — Shows that point-of-action identity verification significantly reduces wrong-patient electronic actions.
- ESHRE Guideline Group on Good Practice in IVF Labs (De los Santos MJ et al.) (2016). Revised guidelines for good practice in IVF laboratories. Human Reproduction 31(4):685-686. — Defines mandatory double-witnessing, traceability, and identity verification protocols across every gamete and embryo handling step.
- Practice Committee & Ethics Committee of the American Society for Reproductive Medicine (ASRM) (2021–2023). Comprehensive guidance for human embryology laboratories (2022), PGT-M management (2023), and Disposition of unclaimed embryos (2021). Fertility and Sterility / ASRM Practice & Ethics Committee Opinions. — Establishes US standards for embryo labeling, PGT-M result reconciliation, warming consent specificity, and diligent multi-attempt contact before any unclaimed embryo determination.
- Code of Federal Regulations (2026). 21 CFR Part 1271 Subpart C — Donor Eligibility & Quarantine of Human Cells, Tissues, and Cellular and Tissue-Based Products. eCFR Title 21 Part 1271. — Requires distinct tracking of quarantine status, transport labeling, and completed donor-eligibility determination prior to clinical use.
See it
Walkthroughs that show it
Recorded from an interactive design prototype. Every patient, clinician and clinic is fictional, and EMR screens are modeled reconstructions.
Prototype walkthrough · Fictional patient data
Artisan: trigger approval, the wrong chart and an interrupted view
Beside a modeled Artisan view, the companion compares Dr. Priya Shah's approval with the unchanged Artisan fields, stops on Maya's open chart, and won't assume an update it didn't see.
Workstation failure and recovery catalog
Fourteen designed recovery states, from an unplugged headset to a blocked remote-desktop clipboard, each keeping the draft and the right patient.
Care conversations: audience change, duplicate send, clinical routing
When someone new joins the thread just before a clinical update, the send pauses. Duplicate reminders are caught, and dose questions go to a nurse instead of an automated reply.
Elena's iPhone: the current instruction, an old link, an honest report
An old text link can't send Elena to a superseded injection time. Reporting a late dose is simple and honest, and urgent help is one tap away.
eIVF: note save, financial blocker, e‑prescribing handoff, PGT stop
A note isn't done until it's saved, a cycle doesn't start with prior authorization unresolved, dose changes go to eIVF's own e-prescribing, and a PGT label mismatch stops the review.
Next step
Bring us the stop your team worries about.
We will walk through how it behaves in a modeled workflow example, with fictional records only. Please don't send patient data.