What it is
ChartVoyant’s prescribing flow is draft → safety alerts → clinician sign. A sig is built rather than typed. The patient’s pharmacy is on the chart from check-in. Production does not transmit a prescription to a pharmacy: the prescribing adapter is synthetic, and controlled-substance transmission stays off until EPCS is credentialed. The gate that transmission would have to clear is identity-proofed EPCS, DEA-compliant two-factor, and a PDMP check against Tennessee’s Controlled Substance Monitoring Database (CSMD) via Bamboo Health’s PMP Gateway — not Ohio’s OARRS.
On the clinic floor
Each office connects its own PDMP credentials in Admin. Tennessee offices query CSMD at treatment start, before each new controlled-substance script for 90 days, then every six months. Georgia is next on the same card. Production still needs the office’s Bamboo agreement before a live query runs. DoseSpot is the Surescripts intermediary the product is built against. Production has no DoseSpot credentials, so the adapter stays synthetic: fake pharmacies, fake message ids, nothing leaves the process. Controlled-substance transmit is refused until EPCS is credentialed. That is a fail-safe, not a missing button.
What AI does, and what a clinician confirms
AI may propose a drug, a dose, and a quantity from the conversation. Drug-drug and allergy alerts are still reviewed by a person. App-level TOTP is a synthetic EPCS stand-in in demo; it is not DEA-compliant two-factor and will not be presented as such. A clinician signs. The model does not. Inbox AI does not open prescriptions.
Non-Device CDS
A suggested medication is a draft with an evidence trail. ChartVoyant does not autonomously start, stop, or change therapy. EPCS and CSMD are gates on the human, not permissions for the model.
Where this sits vs bolted-on tools
A standalone e-prescribing portal that does not know the note, the UDS panel, or the last CSMD check is how pain clinics end up with a second login and a paper printout “just in case.” ChartVoyant keeps the script in the same chart as the encounter, the PDMP row, and the claim. Surescripts transmission is a later credentialed go-live. It is not on in production, and the demo is not sending real scripts.