WorkflowManufacturing & Quality

Health Hazard Evaluation

A cited health hazard evaluation in half the hours, every harm on the grid and every gap declared

A cited first draft in half the hours, every gap declared.

See one case, screen by screen ↓
demo3.6sfor the agents to read an 8-document, 77-page case and draft 9 of 11 sections
demo2gapsdeclared on the particulate case — the cell stays hatched until the files arrive
target12hper evaluation, half the hours of a hand-written draft
target100%of sentences cited to a source page
In short

What is Health Hazard Evaluation?

It is the assessment of how much harm a product issue could cause, made before a recall decision. FDA’s recall rule, 21 CFR 7.41, lists what it weighs: injuries already reported, conditions that could lead to a hazard, the populations at risk, the seriousness and likelihood of harm, and the consequences. Health Hazard Evaluation drafts each of these as a section of your HHE form, with a citation on every sentence.

How to choose AI solutions for life sciences →

Updated

The problem

Why a health hazard evaluation takes days to write and longer to sign

A complaint trend, a CAPA or a deviation shows a product issue in the field, and before anyone decides on a recall, Medical, Quality and Regulatory have to say how much harm it could cause. The answer is built by hand from the complaint summary, the risk management file, the supplier and laboratory investigations, the clinical literature, field data by lot and the instructions for use — injuries to date, conditions that could lead to a hazard, populations at risk, seriousness, likelihood and consequences, one section of the HHE form at a time.

Every severity and every probability has to be defensible, because all three functions sign and the recall class rests on it. Severity gets re-argued from memory instead of read from the risk file. Likelihood is the weakest section: the field failure rate is the figure most often missing, and under time pressure a missing figure is reasoned around — and that guess can set the class.

demo26hto write one evaluation by hand, before the agents
demo14daysmedian from case open to the last signature, before the agents
demo52%of evaluations where the agents could draft the likelihood section — field failure rates are the evidence most often missing
Where an evaluation’s hours godemo
By hand26 days
With the solution12 days
  • Gathering documents6 → 0.5 d
  • Extracting evidence7 → 1 d
  • Drafting the sections9 → 3.5 d
  • Review and judgement4 → 7 d

The working solution’s dashboard figures for hours per evaluation by phase on its sample cases — 26 hours before the agents, 12 with them. Review time goes up on purpose: people spend their hours on judgement, not on searching.

How it works

How an evaluation moves

Six agents gather, extract, place, map, draft and check the evidence; Medical, Quality and Regulatory sign.

What comes in
Case documents in1 document set · complaint, risk file, literature, field data
Agents at work
Intake agentdocument set
Then
Evidence extractorharms · citations
Then
Hazard placerseverity × probability
Section mapper11 sections
Then
Grounded draftercited sentences
Then
Completeness checkercoverage · gaps
A person decides
Medical, Quality, Regulatoryall three sign
What comes out
Hazard matrix
Signed evaluation
Gaps declared
One case, step by step

One particulate case, from open placement to ready to sign

Seven complaints of visible particles after reconstitution come in on Corventa 20 mg vials, lots 26H03 and 26H10 — 6,200 vials in the US. A CAPA opens HHE-114 on 1 October, due 12 October. Here is what happens next, screen by screen, in the working solution.

  1. 01Morning

    Twelve evaluations, three waiting for her signature

    Dr. Maya Chen · Medical officer

    Maya signs the harm assessment on every evaluation. Her list shows each case with its harms and highest severity, sentences cited, declared gaps, the Medical, Quality and Regulatory sign-offs, the due date and the stage. HHE-114, the vial stopper case, is drafting with 6 days to go; HHE-118, a needle shield case, has just arrived at intake with 8 documents.

  2. 02The hazard matrix

    Particles infused — placed at Serious · Remote, and still open

    Hazard placer

    Each harm sits on a 5 × 5 grid: severity rows copied from the risk management file, probability columns from complaints over units in the field. H1, particles infused with a local or vascular reaction, is Severity 3 – Serious from risk file row HZ-18. No reaction has been reported; there are seven particle complaints over 6,200 vials, and a fragment must be missed at inspection and pass the in-line filter. The proposal moves it one band up from the file’s Improbable, to Remote. H2, a dose discarded, is Minor · Probable: 3 discarded doses over 6,200 vials.

    “Copied from the risk management file, not estimated.”

  3. 03Two gaps

    Two things nobody knows yet — declared, never guessed

    Completeness checker

    The stopper supplier has not sent the coring investigation, so no one knows whether other lots used the same stopper batch; section 2 states the defect only. The laboratory identified all seven particles as stopper rubber but did not size or count them, so the share small enough to pass the filter is unknown. Both cells stay hatched. Maya requests each one from its owner — Lena Ortiz in supplier quality, Tomas Reyes in the QC laboratory.

    “Request sent to Tomas Reyes — the cell stays hatched until the data arrives.”

  4. 046 October

    The files arrive, and the hatching clears

    Lena Ortiz and Tomas Reyes

    The supplier’s 8D, 8D-ST-2026-044, shows stopper batch ST-5512 was used only in lots 26H03 and 26H10, with coring traced to needle-guide wear on the crimping line. The retained-sample inspection, RSI-26H-0412, found fragments in 3 of 400 vials (0.75 %), all 180 to 600 µm — well above the 0.2 µm filter pore size. The agents read only what is new, and the placement is confirmed at Serious · Remote.

    “Placement confirmed on cited evidence. Ready for Medical signature.”

  5. 05The draft

    Ten sections, fifteen sentences, fifteen citations

    Grounded drafter

    The HHE form follows 21 CFR 7.41 section by section, from product data and problem definition to mitigating factors. Section 2 now carries the root cause, cited to the 8D. Every sentence has a citation chip that opens the page it came from — the risk file row HZ-18 opens beside the draft. Section 11, the conclusion and recommended class, is left for the signers.

  6. 06One click, 3.6 seconds

    A new case: 8 documents, 77 pages, read as one

    The agents

    For HHE-118, a needle shield that comes loose on a Veltrimab 150 mg/mL prefilled syringe, Maya runs the agents on the document set: complaint summary, risk file, design verification, the supplier’s 8D, two papers, field data and the instructions for use. Four harms are placed, all four rated higher in the field than in the risk file, and 9 of 11 sections drafted with 32 of 32 sentences cited.

    “Draft ready — 4 harms, 20 cited facts, 9 of 11 sections drafted.”

  7. 07Evidence

    Every harm, every fact, with its page

    Evidence extractor

    The evidence matrix lists each harm with its hazardous situation, population at risk, severity and what has been reported: three needlesticks, six delayed doses, one report of pain or bleeding, and an injection-site infection that is Serious but not reported to date. Twenty cited facts come from all 8 documents — among them the supplier’s finding that shields from cavity 7 pulled off at 3.2 to 7.9 N, below the 12 to 35 N acceptance criterion.

    “Severity is never estimated by an agent — it is read from the risk file row and cited.”

  8. 08Section 7

    Likelihood stays blank until the figures exist

    Completeness checker

    Units distributed for lots 26G02 and 26G09 are missing: the field data extract stops at June production, so the complaint rate across all five affected lots cannot be computed. The gap blocks Quality sign-off and names who can close it — Dana Okafor in supply chain. When the figures arrive, the agents read only the new file and draft section 7.

    “The completeness checker declares a gap whenever a template field has no source. It never fills one from general knowledge.”

  9. 09Sign-off

    Three signatures, each with its meaning

    Dr. Maya Chen, Sam Patel and Omar Haddad

    Maya and Sam sign in either order. Maya confirms the harms, severities, populations at risk and consequences — sections 3 to 6 and 8. Sam confirms product data, problem definition and likelihood, and that each declared gap is closed or accepted. Omar Haddad signs last, after both, confirming the recommended class and the reporting decisions that follow.

    “Your medical assessment — section 11 · written by you, never by an agent.”

Who it’s for

Built for the three people who sign — and the people who hold the missing data.

The same evaluation, seen by Medical, Quality, Regulatory, supplier quality and risk management — what their week looked like, and what it looks like now.

MC
Dr. Maya ChenMedical officer · Medical signer
Medical officer
Before
Signs the harm assessment on seven open evaluations and has to trust that each severity and rate was found, not remembered. “Show me why it sits in that cell, page by page.”
Now
Opens each harm on the grid with the evidence for both axes and every gap named, and writes her medical assessment in section 11 herself.
SP
Sam PatelHead of quality · Quality signer
Head of quality
Before
Owns problem definition and likelihood, and sees rates quoted on part of the lots. “A rate on three lots out of five is not a rate.”
Now
Signs sections 1, 2 and 7 once each declared gap is closed or accepted, and watches days to signature and hours per evaluation fall.
OH
Omar HaddadRegulatory affairs lead · Regulatory signer
Regulatory affairs lead
Before
Signs last and writes the recommended class. “I need the gaps named before I put my name on it.”
Now
Sees what the other two signed, the sentences cited, the gaps declared and the highest severity before he signs the class.
LO
Lena OrtizSupplier quality engineer · Contributor
Supplier quality engineer
Before
Chases supplier 8D reports by email. “The stopper supplier owes us the coring investigation.”
Now
Gets one named request for the file the evaluation is waiting on; when she attaches it, the agents read only what is new.
IM
Ines MoreauRisk management · keeps the ISO 14971 files current
Risk management
Before
Learns late that the field rates a harm higher than her file does. “If the field says Occasional and the file says Remote, I need to know.”
Now
Gets every harm rated higher in the field than in the risk file, with its basis, sent to her for review — she decides the update.
Built on the engine

6 agents. Each with one job, and hard limits.

Six agents gather, extract, place, map, draft and check the evidence; Medical, Quality and Regulatory sign.

Intake agent

Assembles the case as one document set — complaint summary, current risk management file, instructions for use, field data by lot, and any supplier or engineering investigation — and lists what is missing.

  • Reads only documents linked to the case or its product
  • Asks a person by name for anything missing
Evidence extractor

Records each harm, its hazardous situation, the population at risk, events reported to date and the severity from the cited risk file row — every fact quoting its passage and page.

  • Severity is copied from a risk file row, never estimated
  • Every fact carries a document and page
  • No medical judgement
Hazard placer

Places each harm on the 5 × 5 severity by probability grid: computes the rate from cited complaint and distribution figures, maps it to its probability band and shows the risk file rating beside it.

  • Never changes a severity
  • Never places a harm on a rate it cannot compute — the placement stays open and a gap is declared
  • Never proposes a recall class
Section mapper

Maps each cited fact to the 11 sections of the HHE form, following 21 CFR 7.41, and reports sections with no facts.

  • A fact may serve several sections; a section may have none
  • Never invents a section’s content
Grounded drafter

Writes sections 1 to 10 in plain, precise language from the mapped evidence only, with a citation on every sentence.

  • A sentence without a citation is removed
  • Never writes section 11 — the conclusion and class belong to the signers
  • No new facts from general knowledge
Completeness checker

Confirms a cited source for every template field, produces the citation coverage report and declares each gap with the data needed and who owns it.

  • Declares a gap rather than inferring a value
  • Blocks signing while any sentence is uncited
Medical, Quality, Regulatory

Stay accountable, all three sign. The agents propose; a named person decides.

Ask in plain words

Ask about any evaluation, its evidence or its gaps

Ask why a harm sits where it does, what is missing or who is waiting — every answer points to its source.

Why is HHE-114 placed at Serious, Remote?

Severity 3 – Serious is copied from risk file row HZ-18, not estimated. Remote: no reaction reported; seven particle complaints over 6,200 vials, and a fragment must be missed at inspection and pass the 0.2 micron in-line filter. The risk file rated it Improbable, so the proposal moves it one band up. Two gaps keep the cell hatched; I will not fill them from general knowledge.

What would move HHE-114 to another cell?

Only new evidence, and only on the probability axis — severity stays as the risk file rates it. If retained vials show fragments small enough to pass the 0.2 micron filter, the proposal moves to Occasional, the Not acceptable zone for a Serious harm. If the stopper batch reached other lots, the population grows and the rate is recomputed. The recall class is written by the signers.

What is the failure rate for the affected lots?

For all five lots I cannot give one, and I will not estimate it. Lots 26F11, 26F18 and 26F25: 28 complaints over 41,800 units, 0.67 per 1,000. Lots 26G02 and 26G09: 9 complaints, units not reported. Before June 2026 the rate was 0.01 per 1,000. The missing distribution figures are the declared gap in section 7.

What recall class should HHE-118 get?

That decision belongs to the signers — the agents do not propose a recall class or a medical conclusion. What I can give you is the evidence they sign against: highest severity 3 – Serious (infection, none reported), three minor needlesticks, and a likelihood that waits for the distribution figures.

Every screen

The working solution, as it ships.

13 screens from the working solution, on its sample data. Pick one to see it large.

The hazard matrixEach harm on the 5 × 5 severity by probability grid, the risk file rating beside it, the evidence for each axis and the declared gaps.
All open evaluationsThe highest-rated harm of every open case on one grid, with open placements hatched.
EvaluationsEvery case with its harms, highest severity, sentences cited, gaps, the three sign-offs, due date and stage.
Gaps requestedRoot cause and fragment size requested from their named owners — the placement stays open until the files arrive.
Placement confirmedBoth gaps filled from cited files, the probability evidence updated and the placement confirmed for Medical signature.
The cited draftThe 11-section HHE form with a citation on every sentence and the source page open beside it.
Agents at workThe document set with facts per file, each agent’s step and what it found, and the case activity.
The evidence matrixEach harm with its situation, population, risk-file severity and reports, and every cited fact with its document and page.
A declared gapSection 7 left blank: what is missing, which sign-off it blocks, and who is asked to supply it.
Sign-offThe meaning of each signature, the signing order, and what the signers sign against.
Risk file updatesEvery harm rated higher in the field than in the risk management file, with its basis, sent to risk management for review.
DashboardDays to the last signature, hours by phase, sections drafted by agents, gaps by kind and the sign-off board.
Your rulesDrafting rules, signers for Medical, Quality and Regulatory, signing order, template and due clock.
Governance

Every sentence cited, every gap declared, every signature with its meaning.

Every sentence and every axis citedEach sentence in the draft, and both the severity and the probability of every placement, carry a document and page; the citation opens the source at the passage.
Severity comes only from the risk fileSeverity is read from the cited risk management file row on the ISO 14971 five-level scale. No agent estimates or changes it.
Gaps are declared, never guessedA missing figure becomes a declared gap with a named owner. A placement that rests on it stays hatched and open until the file arrives and the agents have read it.
The conclusion and the class stay with peopleSection 11 — the health hazard conclusion and recommended class — is reserved for the signers, and that drafting rule is always on.
Three signatures, each with its meaningMedical, Quality and Regulatory each sign electronically with a stated meaning, a re-entered password and a time stamp; Regulatory signs last. Signing stays blocked while any sentence is uncited.
Every step on the activity trailEvery action by people and agents is kept in the case activity and exported with the evaluation. Field-versus-file differences go to risk management for review; agents never edit the risk file.
Configuration

Your drafting rules, your signers, your form

How the agents draft, who signs and in what order, the template and the clock are settings.

SettingDefaultChoose from
Draft only from cited evidenceAlways onLocked on — a sentence without a page citation is not written
Declare a gap when a section has no sourceAlways onLocked on — the section stays blank and the gap is sent to a person
Leave the conclusion and the class to the signersAlways onLocked on
Copy severity from the risk management fileOnOn · Off
Block signing while a sentence is uncitedOnOn · Off
Search the literature when a population has no sourceOffOn (adds up to 5 papers for review) · Off
Signing orderRegulatory lastRegulatory last · Strict order · All at once
Evaluation templateHHE form · version 4 (11 sections)Version 4 (11 sections) · Version 3 (9 sections)
Evaluation due5 working daysWorking days from case open to the last signature
Connections

Works with the records a product issue already has

Complaint handlingcomplaint summaries and trends, CAPAs and deviations that open a case
Risk management fileshazard analysis rows — the only source of severity
Supplier and laboratory investigations8D reports, particle identification, retained-sample inspection
Clinical literaturepapers on the populations at risk
Field datacomplaints and units distributed, by lot
Instructions for useIFUs and prescribing information — the mitigating factors
What it changes

The difference, in numbers.

Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.

target
12h
per evaluation, half the hours of a hand-written draft
By hand26 h
With agents≈ 12 h
target
100%
of sentences cited to a source page
zero unsupported claims
target
0
probabilities guessed: a missing figure keeps the cell hatched
2 of 2 gaps declared
in the particulate case

“demo” = seen in the working solution, on its sample cases · “target” = the design goal, measured in the live solution · The hours by phase are the working solution’s dashboard figures on its sample cases · Sources: 21 CFR 7.41, health hazard evaluation and recall classification · ISO 14971:2019, risk management. People, products, lots and documents named on this page are characters and sample data in the working solution.

Questions

What quality, safety and regulatory teams ask us.

What is a health hazard evaluation?

It is the assessment of how much harm a product issue could cause, made before a recall decision. FDA’s recall rule, 21 CFR 7.41, lists what it weighs: injuries already reported, conditions that could lead to a hazard, the populations at risk, the seriousness and likelihood of harm, and the consequences. Health Hazard Evaluation drafts each of these as a section of your HHE form, with a citation on every sentence.

How does it place a harm on the severity and probability matrix?

Severity is copied from the cited row of your risk management file. Probability is computed from complaints over units in the field and mapped to its band — Improbable below 1 in 1,000,000 up to Frequent at 1 in 1,000 or more. The risk file rating is shown beside the proposed cell, and the zones come from your risk policy.

What happens when evidence is missing?

Nothing is guessed. The completeness checker declares a gap, names the data needed and who owns it, and the request goes to that person. A placement that rests on the gap stays hatched, and the section stays blank; when the file arrives the agents read only what is new.

Does the AI decide the recall class?

No. Section 11 — the health hazard conclusion and recommended class — is reserved for the signers, and that rule is always on. Asked for a class, the assistant gives the evidence the signers sign against instead.

Which documents does it read?

The complaint or issue description, the risk management file, design verification, supplier and laboratory investigations, clinical literature, field data by lot and the instructions for use or prescribing information — whatever is linked to the case or its product.

Does it update our risk management file?

No. Where the field evidence rates a harm higher than the risk file, the harm appears under Risk file updates with its basis, and you send it to risk management for review. Risk management decides; the agents never edit the risk file.

Do people stay in control?

Yes. Medical, Quality and Regulatory each sign electronically with the meaning of the signature stated, and all three are needed to issue. Any section can be edited or redrafted from the same cited evidence, signing is blocked while a sentence is uncited, and every action by people and agents is on the activity trail.

How long does it take to go live?

The Agentic Solution Engine builds and deploys it from your requirements and documents — your HHE form, your risk policy, your risk management files and a set of past cases — and it goes live once every quality gate has passed. We will walk you through it on one of your own past cases first.

See it on
your product issues.

We’ll run Health Hazard Evaluation on the document set of one of your own past cases.