TransTrack is the offline-first transplant operations platform that sits between your EHR and OPTN/UNet. It surfaces the non-clinical reasons candidates get inactivated — and tells your coordinators exactly which intervention will move the score the most.
Most candidates aren't lost because of medicine. They're lost because an evaluation expired, an insurance form sat in a queue, labs aged out, or a status change slipped through three handoffs. Existing tools — UNet, EHR transplant modules, legacy systems, spreadsheets — weren't built to catch any of that.
Evaluations, labs, and aHHQ documents quietly age out of currency. By the time a coordinator notices, the candidate has already been moved to inactive.
Insurance, transport, caregiver support, financial review — these are the real blockers. They live in inboxes and spreadsheets, not in your transplant system.
Candidates flapping between active and inactive create downstream risk that no UNet view, EHR module, or dashboard surfaces in time to intervene.
UNet does allocation. EHRs do encounters. Legacy transplant systems do data entry. TransTrack does the one thing none of them do well: tell you, in real time, which candidates are about to slip — and why — and what to do about it.
Deterministic, auditable scoring with full per-factor decomposition (SHAP-style additive) and 30 / 60 / 90-day calibrated probabilities. No black-box ML. No cloud inference. Same inputs → same output, every time.
"If you resolve this insurance barrier, the score drops from 78 to 41." TransTrack hands the coordinator the highest-impact action first — with the projected score change already calculated.
Time-since-last-update, open barriers, lab gaps, next expiration, team load, and a live pulse rate that rises as risk accumulates. All computed locally. A heartbeat for the entire program.
AES-256 SQLCipher database, deterministic encryption, no telemetry, no cloud calls, no external AI. Air-gappable by design. The optional server tier is yours, on your infrastructure, when you want it.
Append-only audit log with a SHA-256 hash chain enforced by database triggers — UPDATE and DELETE are physically blocked. A verification endpoint proves chain integrity to your auditors.
FHIR R4 + HL7 v2 in. OPTN-shaped exports out. TransTrack doesn't try to be your EHR or your registry. It fills the operational layer the others ignore — coordination, readiness, and inactivation prevention.
Most teams cobble together UNet, an EHR module, a couple of spreadsheets, and a vendor system from the 2000s. Here's what each actually delivers.
| Capability | TransTrack | UNOS UNet | EHR transplant module | Legacy systems · Spreadsheets |
|---|---|---|---|---|
| Operational risk intelligence (non-clinical inactivation) | ✓ Core focus, with explainable scoring | — Allocation only | — Encounter-centric | — Manual tracking |
| Counterfactual "what if" interventions | ✓ Ranked by score impact | — | — | — |
| Offline-first, no cloud required | ✓ AES-256 local SQLCipher | Cloud-only | Cloud / hospital network | Mixed |
| Tamper-evident audit (DB-level immutability) | ✓ SHA-256 hash chain + triggers | App-level only | App-level only | — |
| FHIR R4 + HL7 v2 ingestion | ✓ MLLP/TLS, ADT/ORU, ACK | — | ✓ Vendor-specific | — |
| Full clinical calculator suite (MELD/MELD-Na/3.0/PELD/LAS/KDPI/EPTS) | ✓ Reference-grade, audited | ✓ | Partial | — |
| Real-time operational pulse / Transplant Clock | ✓ Computed locally | — | — | — |
| 21 CFR Part 11 architecture | ✓ Validation package included | N/A | Partial | — |
| Deployable on-prem or fully air-gapped | ✓ | — | — | — |
UNOS UNet, OPTN, Epic, Cerner, OTTR, Phoenix and other names are trademarks of their respective owners and are referenced for comparison only.
Built as a single Electron desktop app or a Postgres-backed thin client. Same UI. Same code. Your choice of deployment.
8-factor weighted model, calibrated 30/60/90-day probabilities, center-level dollar-impact projection, recalibratable per site during PQ.
Pulse rate (Hz), operational freshness, team load indicator, average resolution time, next expiration countdown.
Demographics, evaluations, configurable readiness indicators, status workflows, search and filter at scale.
Track non-clinical obstacles — insurance, logistics, caregiver support — assigned to social work, financial, or coordinator roles.
PENDING → ACCEPTED_PROVISIONAL → ACCEPTED_FINAL / DECLINED / EXPIRED / RESCINDED, with structured decline-reason codes.
Transplant events, immunosuppression regimens, rejection episodes, biopsies, post-tx readmissions.
Separate donor record, evaluation steps, status state machine, auto-generated 6/12/24-month OPTN Policy 14-style follow-ups.
Inbound MLLP/TLS with ACK generation, ADT^A01/A03/A04/A08 + ORU^R01, FHIR R4 Patient/Observation/Encounter/MedicationRequest/ AllergyIntolerance.
MELD · MELD-Na · MELD 3.0 · PELD · LAS · KDPI/KDRI · EPTS — with percentile mapping. Reference-only; allocation stays in UNet.
Append-only with DB-trigger UPDATE/DELETE blocks. SHA-256 prev/ entry hashes. Verification endpoint for auditors. Optional SIEM forwarding.
SAML 2.0, OIDC, TOTP MFA with recovery codes, account lockout, password policy + history. Argon2id at rest.
Encrypted local backups, restore tooling, validation IQ/OQ/PQ templates, runbooks, and incident response policies in the box.
TransTrack is architected to support HIPAA Security Rule controls and aligned with 21 CFR Part 11 electronic-records requirements. "Aligned" describes the design controls — formal certification is performed by the deploying organization.
Download the Windows, macOS, or Linux build. Or build from source in three commands. No accounts, no cloud, no telemetry.