WorkflowSupply Chain

DSCSA Exception Management

DSCSA exception management that finds the broken link and gets held stock released the same day

Trade-data exceptions fixed with partners and held stock released same day

See one case, screen by screen ↓
demo$2.09Mof Veltrimab pens held on one pallet for one wrong case serial — released the same morning
demo19 h 01 mstill on the 24-hour clock when the correction was signed and sent
demo1,279checksserial verification requests answered automatically in one day, median 0.31 s
target9.4hmedian from a partner's exception to released stock
In short

What is DSCSA Exception Management?

It is the work of resolving the mismatches a trading partner raises when the product on its dock does not match the EPCIS data it received — product with no data, data with no product, data issues, packaging and labeling, and product unavailable for distribution. DSCSA Exception Management adds six agents that classify each exception, trace it along its event chain to the broken link and draft the corrected events and the partner message, for the serialization lead to sign.

How to choose AI solutions for life sciences →

Updated

The problem

Why one wrong serial holds a whole pallet for a day

Since FDA's DSCSA exemptions for manufacturers and wholesale distributors ended in 2025, the product on a wholesaler's dock has to match the EPCIS data the manufacturer sent. When one case serial is wrong in the aggregation data, the wholesaler quarantines the whole pallet and emails an exception. The serialization team then traces the cause by hand: the commissioning, aggregation and shipping events in the serial repository, the ERP delivery, the pack-station re-work log and the dock scan log, compared serial by serial.

Meanwhile the clocks keep running. Every verification request — a saleable return, a status check from a pharmacy — must be answered within 24 hours, and a serial whose history conflicts, a pen recorded destroyed that comes back as a saleable return, is a possible suspect product, not a routine answer. Held stock waits for the investigation, and the transaction information has to be kept for at least six years.

demo720pensquarantined at the dock because one case serial was wrong in our data
typical24hto answer every request to verify a product identifier
typical6yearsat least, to keep transaction information
Where an exception's hours goestimated
By hand26 days
With the solution9.4 days
  • Logging the exception and reading the partner's message1.5 → 0.1 d
  • Pulling EPCIS events, the ERP delivery, re-work and dock logs6 → 0.1 d
  • Comparing case by case and finding the cause7 → 0.2 d
  • Drafting the corrected events and the partner reply3 → 0.5 d
  • Review and signature4 → 4 d
  • Partner re-scan and release from quarantine4.5 → 4.5 d

Estimated split for a typical product-no-data exception, from the partner's email to released stock, by hand and with the solution.

How it works

How an exception moves

Six agents trace each exception along its event chain, draft the fix and the partner message, and keep every request on a 24-hour clock; the serialization lead signs.

What comes in
Exception inPartner exceptions · rejections, mailbox, receiving scans
Agents at work
Exchange watcherraises it, starts the clock
Then
Exception classifierindustry categories
Then
Shipment reconcilersent vs scanned
Root-cause analystfinds the broken link
Then
Correction & reply writerevents + partner message
A person decides
Serialization leadsigns inside the 24 hours
What comes out
Corrected data to the partner
Held stock released
Six-year record kept
One case, step by step

One quarantined pallet, from the dock scan to released stock

7 October, 05:31: Crestline Health Supply's receiving dock in Columbus, OH scans a pallet from Northwind Bio: 12 cases, 720 Veltrimab 40 mg pens, lot VP26-0711, PO 4500088213. Here is what happens next, screen by screen, in the working solution.

  1. 0105:31

    A pallet held in Columbus, and the clock starts

    Exchange watcher

    Marcus Bell in Crestline's receiving exceptions sends CR-COL-26-0917: 11 of 12 cases matched, and case …0617 is on the pallet but not in Northwind's aggregation data. Crestline quarantines the whole pallet — $2.09 M held at receiving. The Exchange watcher reads the email and the receipt status, raises EX-1041 and starts its 24-hour clock.

    Header: “$2.09 M held at receiving · 19 h 01 m left to answer Crestline.”

  2. 02Seconds later

    Product, no data — 11 of 12 cases match

    Exception classifier · Shipment reconciler

    The Exception classifier files it under the industry category Product, no data, sub-type aggregation error, at 96% confidence. The Shipment reconciler builds both hierarchies — our aggregation and shipping events against Crestline's dock scan — and matches case by case: 12 cases sent, 12 scanned, 11 match, case …0617 not in our data. Every step shows its time and the record behind it.

    The Shipment reconciler is read-only on the serial repository; every difference cites both records.

  3. 03In 2.1 s

    The broken link: a re-work at the Memphis pack station

    Root-cause analyst

    Case …0598 was crushed at Memphis pack station PS-2 on 5 October and its 60 pens were moved into a new case, …0617 (re-work RW-2291). The repository update that should have swapped the case on pallet …4217 timed out and was never retried, so the ship data still lists …0598. On the event chain the shipping event is marked as the broken link, and the two records sit side by side underneath.

    “Broken link · Ship data says case …0598 · the dock scanned case …0617.” A cause without a cited record is reported as unknown.

  4. 04In 3.4 s

    The smallest set of EPCIS events that fixes it

    Correction & reply writer

    Four events are drafted: an aggregation DELETE that removes case …0598 from pallet …4217, an aggregation ADD for case …0617 with its 60 pens, a destruction event for the empty …0598, and the shipping event for PO 4500088213 re-sent to Crestline Columbus. The draft is marked “needs a signature”.

  5. 05The reply

    The message to Marcus Bell, in the fields Crestline expects

    Correction & reply writer

    The reply names the pallet's SSCC, the replacement case, the PO, lot VP26-0711 and expiry 2028-06-30, explains the re-work, and asks Crestline to release the pallet from quarantine. Sam Patel in trade customer service is copied. It can be edited before it goes.

    “Please release the pallet from quarantine and let us know if anything still does not match.”

  6. 0610:30

    She signs with the meaning of her signature

    Dana Okafor · Serialization & DSCSA lead

    Dana reads what will be sent to Crestline Health Supply — the four steps — and signs: “I approve this correction and its release to the trading partner.” Sent now, the correction answers Crestline with 19 h 01 m left on its 24-hour clock. Above $3 M a second signature from Omar Haddad would be required; this pallet is below it.

    “Signed electronically by Dana Okafor · Oct 7, 2026 10:30 · recorded on the audit trail and kept 6 years.”

  7. 0710:35

    Twelve of twelve match — released to stock

    Exchange watcher

    Crestline accepts the corrected data and re-scans at 10:34: 12 of 12 cases match. At 10:35 the pallet is released to stock and the 720 pens are back in the channel. On the chain, the corrected events turn green and the header reads “19 h 01 m to spare · answered inside 24 hours”.

    “Chain whole again · Crestline matched.”

  8. 08Same morning

    A destroyed pen comes back as a saleable return

    Verification responder

    Bayfield Drug Distribution's Sacramento returns desk asks whether a Veltrimab pen is ours (VR-77310). Its life story says it was shipped to Bayfield Dallas, reported damaged under credit CM-5512 and witnessed destroyed on 30 September. The responder stops for a person and recommends “not verified” — a possible suspect product. Lena Ortiz in distribution quality decides.

    Conflicts are never answered automatically. The routine ones — 1,279 today — are, at a median of 0.31 s.

  9. 09The month

    What breaks, whose side it starts on, and how fast stock comes back

    Omar Haddad · Head of trade compliance

    Over the last 30 days, 205 of 212 exceptions were resolved, $38.6 M of held product went back into the channel and 38,940 verification requests were answered — 100% within 24 hours, none late. The top cause is aggregation not updated after re-work, the same cause as EX-1041.

    “Answered within 24 h · 100% · none late · 6-year record kept.”

Who it’s for

Built for everyone who answers for a held pallet.

The same exception, seen by the five people who carry it — what their day looked like, and what it looks like now.

DO
Dana OkaforSerialization & DSCSA lead, Northwind Bio US · signs corrections
Serialization & DSCSA lead
Before
Pulls events, deliveries and pack-station logs by hand to find which case is wrong, while a wholesaler holds a pallet.
Now
Opens the exception on its event chain with the broken link marked, the cause cited and the correction drafted — and signs.
SP
Sam PatelTrade customer service · sends partner replies and routine answers
Trade customer service
Before
Chases the investigation so he can answer a wholesaler; “Crestline wants an answer, not an investigation.”
Now
Gets the reply drafted in the partner's fields and approves the routine verification answers in one click.
LO
Lena OrtizDistribution quality · decides suspect and illegitimate product
Distribution quality
Before
Hears about a conflicting serial late, if at all; “A destroyed pen does not come back as a return.”
Now
Gets every conflicting history stopped for her, with the serial's life story cited and a recommended answer.
PR
Priya RamanWarehouse lead, Memphis DC (Lakeview Logistics) · confirms what shipped
Warehouse lead
Before
Runs the pack stations and docks, and learns of a failed re-work update only when a partner rejects a pallet.
Now
Her signed re-work log is the record the cause is traced to; “If a case is re-worked, the repository has to know before it ships.”
OH
Omar HaddadHead of trade compliance · second signature above $3 M
Head of trade compliance
Before
Audits the six-year record and answers for any verification that was answered late.
Now
Sees every exception, hold and answer against its clock, by partner and cause, and signs second on the large releases.
Built on the engine

6 agents. Each with one job, and hard limits.

Six agents trace each exception along its event chain, draft the fix and the partner message, and keep every request on a 24-hour clock; the serialization lead signs.

Exchange watcher

Watches EPCIS acknowledgements and rejections, the exceptions mailbox and partner receiving status; raises one exception per pallet and partner reference, starts its clock, and re-sends late data under the rule.

  • Never alters an event — only re-sends what exists
  • One exception per pallet and reference
Exception classifier

Puts each exception in the industry categories — product no data, data issue, data no product, packaging and labeling, unavailable for distribution — with a sub-type such as aggregation error, late data, wrong GTIN, short ship or duplicate serial.

  • A possible suspect product always goes to a person
  • Confidence below 85% goes to a person
Shipment reconciler

Lines up what we sent — pallet, cases and packs from our aggregation and shipping events — against what the partner scanned, case by case and pack by pack, and pulls the ERP delivery.

  • Every difference cites both records
  • Read-only on the serial repository
Root-cause analyst

Finds why the data and the product differ — re-work at a pack station, a failed message, master data, a short pick — from pack-station, dock scan and gateway logs and master-data changes, and says whether the cause is on our side or the partner's.

  • A cause without a cited record is reported as unknown
Correction & reply writer

Drafts the smallest set of EPCIS events that makes our data match the physical shipment — aggregation DELETE and ADD, destruction for destroyed items, a re-sent shipping event — and the partner reply with GLN, GTIN, serial, lot, PO and tracking.

  • Nothing leaves the company without a signature
  • Above the threshold a second signature is required
Verification responder

Answers verification requests from the serial repository inside 24 hours — “verified” automatically only when the serial is active, lot and expiry match and its history allows it.

  • Destroyed, recalled, shipped-elsewhere or never-assigned serials are never answered automatically
  • Every answer is logged for 6 years
Serialization lead

Signs every correction. The agents propose; a named person decides.

Ask in plain words

Ask about any hold, clock or partner

Ask in plain words why a pallet is held, what is still on the clock or which partner sends the most exceptions — or tell it what to do. Every answer points to its records.

Why is the Crestline Columbus pallet held?

Crestline is holding pallet …4217 — 720 Veltrimab pens, $2.09 M — because case …0617 is on the pallet but not in our data. Case …0598 was crushed at the Memphis pack station on Oct 5 and its pens moved into …0617; the aggregation update failed, so our data still lists …0598. The fix is two aggregation events and a re-sent shipping event.

Answer the routine verification requests now

Done. 2 routine requests were waiting from the phone line and email — VR-77318 from Pinecrest Hospital Pharmacy and VR-77319 from Riverbend Specialty Pharmacy — both answered verified. Both serials are active and the lot and expiry match. The three requests with a conflict stay with a person; the most urgent is VR-77310, a pen recorded destroyed on Sep 30.

Add a rule: re-aggregate every re-worked case before it ships

Done. A pallet with a re-worked case now cannot ship until the repository shows the new case on it. This is the cause behind 31% of our exceptions in the last 30 days, including EX-1041. The rule is on in Settings, Priya Raman is told, and it is on the audit trail.

Which partner sends us the most exceptions?

Bayfield has the most and the slowest release — 83 exceptions in 30 days, 98.2% of cases matched, release in 11.6 h — and 58% of its exceptions start on our side, mostly master data. Crestline has 74 at 7.8 h, Summit Rx 55 at 9.1 h.

Every screen

The working solution, as it ships.

12 screens from the working solution, on its sample data. Pick one to see it large.

The event chainEvery open request on its 24-hour clock, and the selected exception as its chain of EPCIS events from the plant to the partner's dock, the broken link marked.
Where the chain breaksOur shipping data against the partner's dock scan, case by case, the cited finding, the correction, the drafted message and the clock.
The full exception recordShipment facts, the partner's message, each agent's step with its timing, the pallet case by case and the evidence opened at the passage.
The correctionWhat the correction does in plain words, and the four EPCIS events it sends — removed, added, destroyed and re-sent.
The partner replyThe message to the wholesaler's exceptions contact in the fields it expects, ready to edit, sent only with the signed correction.
Sign and sendWhat will be sent, the meaning of the signature, the time left on the clock and the audit-trail line.
Chain whole againCorrected events in green, the partner's re-scan, stock released and the clock answered with time to spare.
All exceptionsEvery exception by industry category, partner dock, product, units, value held, age, stage and owner.
Verification requestsAnswered automatically today, the ones that need a person, the identifier, how the agents checked it and the serial's life story.
Trading partner scorecardsMatch rate on arrival, open exceptions and value held, exceptions by type, whose side the cause started on and time to release.
The dashboardExceptions opened and resolved, what breaks by type and cause, partner by type, hours to release and answers within 24 hours.
Your rulesWho signs corrections, replies and suspect-product decisions, the second-signature threshold, what runs by itself and the clocks.
Governance

Built for DSCSA: cited, signed, on the clock, on the record.

Every statement cites its recordEach finding links to the record behind it — the partner email, the EPCIS event, the re-work log, the serial repository, the ERP delivery or the exception handling guideline — opened at the passage.
A signature before anything leavesNo corrected event or partner message is sent until a named person signs with the meaning of the signature; corrections that release more than $3 M need a second signature.
Conflicts always go to a personA serial that was destroyed, recalled, shipped elsewhere or never assigned is never answered automatically. Suspect product goes to distribution quality, and the illegitimate-product notification goes out only on that person's signed decision.
The data is corrected, never rewrittenThe agents never alter an event and are read-only on the serial repository; the fix is a new set of EPCIS events that a person approves.
Every request on its own clockEach exception and verification request runs on its own 24-hour clock, sorted by time left, with a warning to the owner when 6 hours remain.
Six years on the record, per partnerExceptions, events, answers, decisions and signatures are kept 6 years, and each trading partner sees only its own messages and scorecard.
Configuration

Your signers, your rules, your clocks

Who decides, what runs by itself and the clocks every request runs on are settings — every change is on the audit trail.

SettingDefaultChoose from
Signs corrected EPCIS eventsDana OkaforDana Okafor · Omar Haddad
Sends partner repliesSam PatelSam Patel · Dana Okafor
Suspect product decisionsLena OrtizLena Ortiz · Omar Haddad
Second signature above$3 MStep from $1 M to $10 M, $1 M at a time
What runs by itselfAnswer routine verification requests · re-send late data · draft the partner reply with every correctionEach rule on or off · weekly scorecard to each partner, Monday 07:00 (off) · stopping for a person on a history conflict is locked on
Verification answer warning6 h leftStep from 2 h to 12 h left
Release target for a held shipment24 hStep from 8 h to 72 h, 4 h at a time
Record retention6 yearsLocked
Connections

Works with the data your trade already exchanges

EPCIS exchangecommissioning, aggregation and shipping events, acknowledgements and rejections — EPCIS 1.2 over AS2 or EPCIS 2.0
Partner exceptionsthe exceptions mailbox and each wholesaler's receiving status
Serial repositoryevery serial's status and its events from commissioning onward
ERP deliveriesthe delivery, PO, quantities and lots behind each shipment
Warehouse logspack-station re-work and dock scan logs from your DC or 3PL
Verification requestsfrom the verification router, email and phone
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
9.4h
median from exception to released stock
By hand≈ 26 h
With agents9.4 h
target
99.3%
of serial checks answered automatically, every one inside 24 hours
answered automatically
estimated
≈ 50%
less effort per exception, so the same team clears twice as many
TodayWith agents

“demo” = seen in the working solution, on its sample data · “target” = the design goal, measured in the live solution · “estimated” = our estimate · “typical” = published figures (21 U.S.C. 360eee-1 — 24 hours to answer a verification request, transaction records kept not less than 6 years; FDA DSCSA exemptions for missing or incorrect trade data, 2024–2025). The five exception categories are those of HDA's Exceptions Handling Guidelines for the DSCSA. People, companies and products named on this page — Northwind Bio, Crestline Health Supply, Bayfield Drug Distribution, Summit Rx Wholesale, Lakeview Logistics, Veltrimab — are fictional: characters and sample data in the working solution.

Questions

What serialization and trade teams ask us.

What is DSCSA exception management?

It is the work of resolving the mismatches a trading partner raises when the product on its dock does not match the EPCIS data it received — product with no data, data with no product, data issues, packaging and labeling, and product unavailable for distribution. DSCSA Exception Management adds six agents that classify each exception, trace it along its event chain to the broken link and draft the corrected events and the partner message, for the serialization lead to sign.

How does it find the root cause of a product-no-data exception?

The Shipment reconciler matches our aggregation and shipping events against the partner's scan, case by case. The Root-cause analyst then searches pack-station re-work logs, dock scan logs, gateway logs and master-data changes, and states the cause with a citation for every statement — or reports it as unknown when no record supports it.

Does it answer product verification requests automatically?

Routine ones, yes: the Verification responder answers from the serial repository when the serial is active, the lot and expiry match and its history allows it. In the working solution that was 1,279 requests in one day at a median of 0.31 s. A destroyed, recalled, shipped-elsewhere or never-assigned serial stops for a person with its life story and a recommended answer.

How does it handle suspect product?

The Exception classifier and Verification responder route any duplicate, conflicting or never-assigned serial to distribution quality. The requestor can be asked to quarantine the product, and if it is determined illegitimate, the notification to FDA and the immediate trading partners is drafted and goes out only when distribution quality signs the decision.

Does the AI change our EPCIS data?

No. The agents never alter an existing event and are read-only on the serial repository. They draft new corrective events — aggregation DELETE and ADD, destruction, a re-sent shipping event — and nothing is sent to a partner until a person signs.

Do people stay in control?

Yes. The serialization lead signs every correction with the meaning of the signature, a second person signs above $3 M, trade customer service sends partner replies, and distribution quality decides suspect product. Every signature and agent step is on the audit trail and kept 6 years.

Can we set our own signers, rules and clocks?

Yes. Who signs corrections, replies and suspect-product decisions, the second-signature threshold, which rules run by themselves, the verification warning and the release target are all settings. Record retention is fixed at 6 years.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your partner connections, exception handling guideline, signers and a sample of past exceptions and verification requests — and it goes live once every quality gate has passed. We will walk you through it on your own exceptions first.

See it on
your exceptions.

We'll run DSCSA Exception Management on a sample of your own past partner exceptions and verification requests.