WorkflowManufacturing & Quality

Health Hazard Evaluation

A cited first draft of every health hazard evaluation, with the gaps declared and the conclusion left to the people who sign

A cited first draft of every health hazard evaluation in half the hours, with every gap declared.

See one case, screen by screen ↓
demo20factsextracted from 8 documents and 77 pages, each with its document and page
demo32/32sentences in the draft carry a page citation
demo9of 11sections drafted — one gap declared, the conclusion left for the signers
target12hper evaluation, against 26 hours by hand
The problem

Why a health hazard evaluation takes days to write and longer to sign

A complaint trend crosses a threshold and the question lands on Medical: how much harm could this cause? Answering it means reading the complaint summary, the risk management file, the design verification, the supplier’s 8D, the clinical literature, the field data by lot and the instructions for use — and writing injuries to date, populations at risk, seriousness, likelihood and consequences into the HHE form, one section at a time.

Every line has to stand up, because Medical, Quality and Regulatory all sign it and the recall decision rests on it. So the hours go on finding the page that supports each sentence, and on the numbers that are not there yet — the distribution figures for the latest lots, the supplier’s root cause. Under time pressure, the temptation is to reason around a missing number instead of saying it is missing.

target26hto write one evaluation by hand
demo14daysmedian from case open to the last signature, before the agents
demo52%of evaluations where the agents could draft the likelihood section — field failure rates are the evidence most often missing
Where an evaluation’s working days godemo
By hand3.3 days
With the solution1.4 days
  • Gathering documents0.8 → 0.1 d
  • Extracting evidence0.9 → 0.1 d
  • Drafting the sections1.1 → 0.3 d
  • Review and judgement0.5 → 0.9 d

The working solution’s dashboard figures for hours per evaluation by phase on its sample cases — 26 hours before the agents, 11 with them — shown here in 8-hour working days. Review time goes up on purpose.

How it works

How an evaluation moves

Five specialist agents gather, extract, map, draft and check the evidence; Medical, Quality and Regulatory sign.

What comes in
Case documents in1 document set · complaint, risk file, literature, field data
Agents at work
Intake agentdocument set
Then
Evidence extractorharms · citations
Then
Section mapper11 sections
Then
Grounded draftercited sentences
Then
Completeness checkercoverage · gaps
A person decides
Medical, Quality, Regulatoryall three sign
What comes out
Signed evaluation
Citation coverage
Gaps declared
One case, step by step

One evaluation, from document set to Medical signature

Complaint trending flags 37 complaints of a loose or detached needle shield on a prefilled syringe. Here is what happens next, screen by screen, in the working solution.

  1. 01Morning

    Everything waiting on Medical, on one screen

    Dr. Maya Chen · Medical safety officer

    Maya opens the solution to 7 open evaluations, 4 of them due in the next two days, and 3 waiting for her Medical sign-off. Two gaps are declared across the open cases — “missing evidence, never guessed”. At the top of her list: HHE-118, eight documents received, the agents ready to read the set and draft.

  2. 02Opened

    HHE-118, read as one case

    Dr. Maya Chen · Medical safety officer

    Syringe needle shield detachment on the Veltrimab 150 mg/mL prefilled syringe, due in three days. Complaint trending opened it from 37 complaints on lots 26F11 to 26G09, and Dana Okafor attached the field data extract. The document set holds 8 files and 77 pages: the complaint summary, the risk management file (rev F), the design verification of shield pull-off force, the supplier’s 8D on the shield moulding, two literature papers, field data by lot and the instructions for use.

    “The agents extract only what the documents say, cite every sentence to a page, and declare what is missing. They do not write the health hazard conclusion or the recall class.”

  3. 03One click

    “Read the document set and draft”

    The agents

    Each file turns from Waiting to Reading to a count of the facts taken from it. The run is shown step by step: intake reads the case as one set, the evidence extractor finds 4 harms and 20 facts, each with its page, the section mapper lays them onto the 11 sections of the HHE form, version 4, and the grounded drafter writes only from what is cited.

  4. 04Seconds later

    A draft — and one thing it would not write

    Completeness checker

    “Draft ready — 4 harms, 20 cited facts, 9 of 11 sections drafted.” Every sentence carries a citation. The completeness checker has declared one gap — the field failure rate cannot be computed — and left section 11 for the signers. Maya’s slot on the sign-off bar now reads “Your signature”.

    “100 % of sentences carry a citation · 1 gap declared instead of guessed · conclusion left for the signers”

  5. 05Evidence

    Every harm, with the risk file row behind its severity

    Evidence extractor

    The evidence matrix lists four harms: needlestick injury (2 – Minor, 3 reported), injection-site infection in patients on immunosuppressants (3 – Serious, none reported), a delayed dose with loss of disease control (2 – Minor, 6 reported), and injection-site pain or bleeding from a bent needle (2 – Minor, 1 reported). Each severity is read from a row of the hazard analysis, and every number opens the exact passage — step 2 of the instructions for use, highlighted, for the infection risk.

    “Severity is never estimated by an agent — it is read from the risk file row and cited.”

  6. 06Drafted

    The HHE form, section by section, a citation on every sentence

    Grounded drafter

    Product data, problem definition, injuries and events reported to date — each section under its reference, 21 CFR 7.41(a)(1) for injuries. Section 2 states what the supplier found: shields from moulding cavity 7, after a tool change on 2 Jun 2026, pulled off at 3.2 to 7.9 N against a 12 to 35 N acceptance criterion — and cavity 7 makes one in eight shields. Every section shows how many sentences it has and how many are cited, with Edit and Redraft beside it.

  7. 07Section 7

    Likelihood: what the data supports, and what it does not

    Completeness checker

    The draft gives the historic rate — 0.01 complaints per 1,000 units before June 2026 — and the rate it can compute: 28 complaints over 41,800 units, 0.67 per 1,000, for three of the five lots. Units distributed for lots 26G02 and 26G09 are missing, because the field data extract stops at June production. So the rate across all five affected lots is not written.

    “Not written — Field failure rate cannot be computed. … The agents will not estimate it.”

  8. 08Requested

    The gap goes to the person who has the numbers

    Dr. Maya Chen · Medical safety officer

    Maya presses “Request from Supply chain”. Dana Okafor is asked for the distribution figures for the two lots, and the request is logged in the case activity. The gap stays declared, and blocks the Quality sign-off, until the figures arrive — then the agents read only the new file and draft section 7.

    “Request sent to Dana Okafor — the gap stays declared until the data arrives”

  9. 09Sign as Medical

    Her assessment, in her words, with its meaning stated

    Dr. Maya Chen · Medical safety officer

    The signing window states what the signature means: the harms, severities, populations at risk and consequences in sections 3–6 and 8 are supported by the cited evidence. Maya writes the medical assessment for section 11 herself — “written by you, never by an agent” — and re-enters her password. A notice reminds her that section 7 has a declared gap: her signature covers the medical sections; Quality signs after the gap is closed.

  10. 10Signed

    Medical signed — Quality is next

    Dr. Maya Chen · Medical safety officer

    Her assessment sits in section 11 with her name and time: the evidence supports a remote probability of a serious harm, no serious injury reported to date, signed pending the field failure rate. The recommended class is left for Quality and Regulatory to write when they sign. The sign-off bar moves to Sam Patel for Quality, with Omar Haddad for Regulatory last.

    “The recommended class is written by Quality and Regulatory when they sign. Agents do not propose it.”

Who it’s for

Built for the three people who sign — and the people who supply the data.

The same evaluation, seen by Medical, Quality, Regulatory and Supply chain — what their week looked like, and what it looks like now.

MC
Dr. Maya ChenMedical safety officer
Medical signer
Before
Reads every document in the set to find the page behind each harm, severity and population before she can judge them.
Now
Starts from an evidence matrix and a cited draft, checks any sentence against its page, and spends her time on the medical assessment.
SP
Sam PatelHead of quality
Quality signer
Before
Signs product data, the problem definition and likelihood without a clear view of what evidence is still outstanding.
Now
Sees every open gap with its owner, signs once each one is closed or accepted, and watches days to signed on the dashboard.
OH
Omar HaddadRegulatory affairs lead
Regulatory signer
Before
Gets an evaluation to classify that has not yet been checked line by line against its sources.
Now
Signs last, after Medical and Quality, confirming the recommended class and the reporting decisions against an evaluation that is fully cited.
DO
Dana OkaforSupply chain analyst
Contributor
Before
Hears that distribution figures were needed when the evaluation is already late.
Now
Gets a named request for the exact lots that are missing, the day the gap is declared.
Built on the engine

5 agents. Each with one job, and hard limits.

Five specialist agents gather, extract, map, draft and check the evidence; Medical, Quality and Regulatory sign.

Intake agent

Assembles the case as one document set — complaint, risk file, verification, supplier investigation, literature, field data and instructions for use — lists what is missing and requests it from its owner.

  • Reads only documents linked to the case or its product
  • Asks a person by name for anything missing
Evidence extractor

Extracts each harm, hazardous situation, population at risk and severity, with page-level citations.

  • Severity is copied from a risk file row, never estimated
  • Every fact carries a document and page
  • No medical judgement
Section mapper

Maps cited facts to the 11 sections of the HHE form, following 21 CFR 7.41, and reports sections with no facts.

  • A fact may serve several sections; a section may have none
Grounded drafter

Writes sections 1 to 10 only from their mapped evidence, in plain, precise language — every sentence carries a citation.

  • A sentence without a citation is removed
  • Never writes section 11 — conclusion and class belong to the signers
  • No new facts from general knowledge
Completeness checker

Checks citation coverage and template completeness, and declares what is missing — naming the data needed and who owns it — instead of reasoning around it.

  • Declares a gap rather than inferring a value
  • Blocks signing while any sentence is uncited
Medical, Quality, Regulatory

Stay accountable, all three sign. The agents propose; a named person decides.

Ask in plain words

Ask about any evaluation, in plain words

Signers and contributors can ask about the evidence in any case, request missing data, or add a drafting rule. It answers from the cited evidence and does not write medical conclusions or recall classes.

What evidence supports the severity of the needlestick harm?

Needlestick injury (H1) is rated 2 – Minor. The rating is copied from the risk management file, row HZ-14 — not estimated. It is consistent with the complaints: three finger punctures, first aid only. Patients with reduced grip have a 2.4-fold higher rate of needle contact, which raises likelihood, not severity.

Which sections of HHE-118 are still missing evidence?

One gap is declared: section 7, likelihood. Units distributed for lots 26G02 and 26G09 are not in the field data extract, so the complaint rate for the affected lots cannot be computed. Section 11 is reserved for the signers. Everything else is drafted and cited.

What recall class should HHE-118 get?

That decision belongs to the signers — the agents do not propose a recall class or a medical conclusion. What it can give you is the evidence they sign against: highest severity 3 – Serious (infection, none reported), three minor needlesticks, and a likelihood that waits for the distribution figures.

Always flag cases where distribution data is missing

Added a drafting rule: “Flag missing distribution data at intake”. From the next case, the intake agent checks units distributed for every lot in scope and declares the gap before drafting starts. You can switch it off in Settings.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

HomeWhat waits on the Medical signer today: open evaluations, signatures due, gaps declared, and what the agents did this morning.
Every evaluationEach case with its harms and highest severity, sentences cited, gaps, the three sign-offs, due date and stage.
The document setEight files and 77 pages read as one case, with the agents ready to draft.
Agents at workEach step runs in view, with the facts taken from each document as it is read.
Draft readyHarms, cited facts and sections drafted — with the gap declared and the conclusion left for the signers.
The evidence matrixEach harm with its hazardous situation, population at risk, severity from the risk file and events reported — every number opens the source at the exact passage.
The cited draftThe HHE form section by section, each under its 21 CFR 7.41 or risk file reference, with a citation on every sentence.
A declared gapSection 7 states the rate the data supports, and declares the rate it cannot compute — with a request to its owner.
A gap, requestedThe missing figures asked of their owner by name; the gap stays declared and blocks the Quality sign-off until they arrive.
Sign as MedicalThe meaning of the signature, the medical assessment written by the signer, and a re-entered password.
Section 11, for the signersThe Medical assessment signed and timed; the recommended class left for Quality and Regulatory.
The dashboardDays to the last signature, hours by phase, sections drafted by agents and declared gaps by kind.
Your rulesDrafting rules and the three signers; the signing order, the template and the due date are set below them.
Governance

Built to be defended line by line: cited, declared, signed.

Every sentence cites its pageClick any citation in the draft or the evidence matrix to see the exact passage, highlighted, in the source document. Sign buttons stay off until every sentence is cited.
Severity from the risk file, never estimatedEach harm’s severity is copied from the cited row of the risk management file, on its five-level ISO 14971 scale — an agent never rates it.
Gaps declared, never guessedWhen a section has no source, it stays unwritten and the gap goes to a named owner. On the sample dashboard, 33 gaps were declared and none was filled by an agent.
The conclusion belongs to peopleSection 11 — the health hazard conclusion and recommended class — is written by the signers. The agents never write a medical conclusion or propose a class.
Three signatures, each with its meaningMedical, Quality and Regulatory each sign electronically with a stated meaning and a re-entered password. Medical and Quality sign in either order; Regulatory signs last.
Every action on the recordEach agent step, request and signature is kept in the case activity — people and agents alike — and exported with the evaluation.
Configuration

Your drafting rules, your signers, your form

How the agents draft, who signs and in what order, and the template every evaluation follows are settings.

SettingDefaultChoose from
Draft only from cited evidenceAlways onLocked on — a sentence without a page citation is not written
Leave the conclusion and the class to the signersAlways onLocked on
Copy severity from the risk management fileOnOn · Off
Block signing while a sentence is uncitedOnOn · Off
Search the literature when a population has no sourceOffOn (adds up to 5 papers for review) · Off
Signing orderRegulatory lastRegulatory last · Strict order · All at once
Evaluation templateHHE form · version 4 (11 sections)Version 4 (11 sections) · Version 3 (9 sections)
Evaluation due5 working daysWorking days from case open to the last signature
Connections

Works with the records you already keep

Your complaint systemcomplaint summaries and trends that open a case
Risk management fileshazard analysis rows — the only source of severity
Document controldesign verification, supplier investigations, instructions for use
Clinical literaturepapers on the populations at risk
Field datacomplaints and units distributed, by lot
Emailrequests for missing documents, sent to their owners
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
12h
per evaluation, more than half the effort saved
By hand26 h
With agents≈ 12 h
target
100%
of assertions cited to a source page
zero unsupported claims
target
80%+
of template sections drafted by agents
9 of 11 sections
section 11 is for the signers

“demo” = seen in the working solution, on its sample cases · “target” = the design goal, measured in the live solution · The working days by phase are the working solution’s dashboard hours on its sample cases, at 8 hours a day · Sources: 21 CFR 7.41, health hazard evaluation. People and products named on this page are characters in the working solution.

Questions

What safety, quality and regulatory teams ask us.

What is a health hazard evaluation?

It is the assessment of how much harm a product issue could cause, used to decide whether and how to recall. FDA’s recall rules (21 CFR 7.41) list what it weighs: injuries already reported, conditions that could lead to a hazard, the populations at risk, the seriousness and likelihood of harm, and the immediate and long-range consequences. The solution drafts each of these as a section of your HHE form.

How does it draft an HHE?

Five agents work in order. The intake agent gathers the document set, the evidence extractor pulls out each harm with its page, the section mapper lays the facts onto the form, the grounded drafter writes sections 1 to 10 only from cited evidence, and the completeness checker confirms coverage and declares what is missing.

Does the AI decide the recall class?

No. Section 11 — the health hazard conclusion and recommended class — is reserved for the signers, and that rule cannot be switched off. Asked for a class, the assistant gives the evidence the signers sign against instead.

What happens when evidence is missing?

The section is not written. The completeness checker declares a gap, names the data needed and who owns it, and the request goes to that person. When the file arrives, the agents read only the new file and draft the section; Quality signs once each gap is closed or accepted.

Where do the severity ratings come from?

From your risk management file. The evidence extractor copies each harm’s severity from the cited hazard analysis row, on the ISO 14971 five-level scale, and never estimates one. The citation opens that row.

Do people stay in control?

Yes. Medical, Quality and Regulatory each sign electronically, with the meaning of the signature stated and the password re-entered. Signers can edit or redraft any section, and every action by people and agents is kept in the case activity.

Which documents does it read?

The complaint or issue description, the risk management file, design verification and supplier investigations, clinical literature, field data by lot and the instructions for use — whatever is linked to the case or its product. Add a file and the agents re-read only what changed.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your HHE form, your risk management files and a set of past cases — and it goes live once every quality gate has passed. We will walk you through it on one of your own past cases first.

See it on
your product issues.

We’ll run Health Hazard Evaluation on the document set of one of your own past cases.