Skip to Content
HIPAA • 49 CFR PART 40 • FMCSA C/TPA • CORDANT SENTRY SOAP API • AWS TEXTRACT OCR • ZERO-TRUST ECS FARGATE

Toxicology Operations Suite

The Complete, Autonomous ERP Ecosystem for High-Volume Drug Testing Clinics, DOT/FMCSA Consortiums (C/TPAs), Judicial Probation Contractors, Alcohol Testing, and DNA Agencies.

Engineered natively on Odoo 19 Community & AWS Serverless Infrastructure. From 15-second 1-Tap QR Smartphone Check-In and AWS Textract Driver's License & Lab PDF OCR to live Cordant Sentry IVR verification, Mini POS County Voucher split-billing, 49 CFR Part 40 Shy Bladder timers, and 1-Click DOT Audit Defense.

 Audit Your Architecture  Explore Input & Data Architecture  View All 60+ Workflows
15s
1-Tap Returning QR Check-In
60+
Automated Clinical SOPs
6-Tier
Deterministic Identity Engine
85%
Manual Data Entry Eliminated
23+
Toxicology, DOT & DNA Panels
100%
49 CFR Part 40 & HIPAA Trail
Unified Clinical & Financial Core

Unrivaled End-to-End Operational Power

Replace fragmented SaaS subscriptions, paper clipboards, and vulnerable spreadsheets with a single, deterministic ERP platform engineered specifically for the regulatory rigor of modern toxicology agencies.

Running a Drug Testing, Alcohol Testing, or DNA Consortium agency typically forces operators to duct-tape five or six disconnected platforms together: one for appointment scheduling, one for lobby check-in, one for Chain of Custody (CCF) tracking, one for DOT Random Pools, an e-Fax utility, and external accounting software for B2B invoicing. Every manual bridge between those tools introduces transcription errors, lost probation vouchers, and severe HIPAA compliance exposure. The Toxicology Operations Suite replaces them all inside a single, KMS-encrypted PostgreSQL core.

Built natively on Odoo, the suite orchestrates the entire lifecycle of a specimen: routing walk-in donors from a 1-Tap QR Smartphone or Tablet Kiosk (powered by synchronous AWS Textract Driver's License OCR) straight to the collector's live Kanban board; processing Cash, Card (with automated 3.5% surcharge logic), County Probation Vouchers, and Blanket MOUs in a purpose-built Mini POS; firing Star TSP100 80mm thermal receipts and 2.25"×1.25" Code128 barcode specimen labels; enforcing 49 CFR Part 40 collection guardrails; synchronizing live with Cordant Sentry judicial SOAP APIs; and automating End-of-Month Net-30 employer & county consolidated billing.

Toxicology Operations Suite
Data Ingestion • Normalization • Strict ORM Validation

Software Input Architecture: Six Deterministic Ingestion Channels

Clinical databases fail when raw, unvalidated human input is allowed to corrupt the ledger. The Toxicology Operations Suite intercepts, sanitizes, and validates data across six specialized software input pipelines before a single record is committed to PostgreSQL.

INPUT 01

Kiosk, QR & 1-Tap Fast-Pass

Routes: /kiosk, /intake, /intake/fast_submit, /donor/fastpass

  • 1-Tap Returning Donor Input: Returning probation or corporate donors enter only Last Name + DOB or 10-digit Phone. The controller resolves their master res.partner profile in milliseconds, inheriting saved Employers, Probation Officers, and Authorized Receivers without redundant typing.
  • Full New-Donor Intake: Captures legal demographics, SSN/CDL, Testing Authority (DOT FMCSA/FAA/FRA/FTA/PHMSA/USCG or Non-DOT), Test Reason, and embedded HTML5 Canvas (signature-pad) finger/stylus e-signatures for 49 CFR Part 40 & HIPAA ROI consent.
  • Employer Pre-Authorized Fast-Pass: Cryptographic token links allow corporate employees to bypass front-desk payment inputs entirely, auto-binding the intake to the employer's Net-30 or card-on-file account.
INPUT 02

AWS Textract AI OCR Engine

Modules: intake_form.py, fax_inbox.py, boto3 Textract API

  • Driver's License & State ID Scanner: Invokes Textract analyze_id. Includes an automatic 90° clockwise Pillow image rotation fallback when smartphone camera uploads arrive sideways, plus built-in pypdfium2 PDF-to-JPEG conversion, extracting Name, DOB, Address, License #, and Expiration Date.
  • Quantitative Lab PDF & Cup OCR: Parses multi-page laboratory reports via detect_document_text and pypdf, mapping detected drug analytes, ng/mL cutoffs, and Positive/Negative results directly into the cdta.instant.result.wizard checklist.
  • Paperless e-Fax Webhook Inbox: Ingests incoming faxes into cdta.fax.inbox, pre-extracting Donor Name, DOB, and CCF Barcode for side-by-side human-in-the-loop triage—protected by a daily AWS spend circuit breaker (cdta.ocr_daily_limit).
INPUT 03

Cordant Sentry SOAP XML Bridge

Facade: cdta_sentry_client.py (cdta.sentry.client AbstractModel)

  • 1-Click Live IVR Verification: Constructs sanitized soapenv:Envelope XML payloads over HTTPS to query judicial databases in real time—confirming if a probation donor called the IVR line today and pulling their exact mandated drug panel.
  • 6-Tier Deterministic Identity Cascade: Resolves external court records against internal contacts via (1) Exact Sentry IVR Code, (2) SSN, (3) Normalized First + Last Name + Exact DOB, (4) Last Name + DOB + First Initial, (5) 10-Digit Sanitized Phone + DOB, and (6) Discrepancy Hold.
  • Name Discrepancy Warning Banner: If a judicial roster spelling differs from the donor's scanned Driver's License, the ORM flags sentry_name_discrepancy = True and displays an alert banner rather than corrupting the legal name.
INPUT 04

2D Barcode & Hardware Peripherals

Constraints: @api.constrains('ccf_barcode') & Serial Tracking

  • Chain of Custody (CCF) Barcode Scan: Collectors scan physical lab Custody and Control Form barcodes directly into the intake record. A synchronous PostgreSQL constraint rejects duplicate CCF barcodes at the source before saving.
  • PharmChek Sweat Patch Serial Input: Captures unique manufacturer patch serial numbers (patch_serial_number) during application and cross-verifies the exact serial upon removal 7–14 days later.
  • SMS Self-Service Receiver Input: Donors receive a tokenized SMS link (/intake/receivers/) to input or update their Probation Officer, Attorney, or Court email on their own smartphone, syncing two-way in real time with open clinic intakes.
INPUT 05

B2B Roster & DER Portal Inputs

Routes: /employer-signup, /my/random_pool, /my/authorize_test

  • 5-Step Consortium Onboarding Wizard: Corporate employers self-onboard by inputting USDOT numbers, Designated Employer Representative (DER) credentials, testing program selections, and legally binding digital C/TPA contract signatures.
  • Bulk CSV/Excel CDL Roster Parser: Employers download the standardized template (/employer-signup/sample-roster) and upload driver rosters; the backend sanitizes phone numbers, dates, and CDL/SSN identifiers into active random pools.
  • Digital Test Authorization & Card Vault: DERs log in to authorize Reasonable Suspicion, Post-Accident, or Pre-Employment screens online and vault payment cards via /my/payment_authorization.
INPUT 06

County Voucher & Ledger ETL

Wizards: cdta.voucher.upload.wizard & cdta.payment.collection.wizard

  • Automated County Voucher Reconciliation: Billing staff upload state and county probation voucher spreadsheets (CSV/XLSX); the ETL parser matches rows against clinical intakes using deterministic SHA-256 anonymized_id hashes and dates of service.
  • Protected Mini POS Price Overrides: Receptionists input Cash, Card, Voucher Co-Pays, or Manager Price Overrides (has_manual_price_override) that lock the custom unit price against accidental ORM recalculation while dynamically computing card processing fees.
  • Weighted Duplicate Merger: cdta.merge.intakes.wizard evaluates field completeness across duplicate walk-in inputs and merges them in 1 click without losing signatures or attachments.
End-to-End Clinical Execution

Six Core Clinical & Regulatory Pillars

Engineered directly on a live clinic floor to eliminate lobby bottlenecks, stop $2,500/month billing reconciliation leaks, and enforce mathematical federal compliance.


1-Tap QR Fast-Pass & AI ID OCR

Donors check in via lobby QR code or tablet kiosk in 15 seconds. AWS Textract auto-rotates, crops, and extracts Driver's License data while inheriting historical Authorized Receivers, Probation Officers, and Employers.


Mini POS, Vouchers & Thermal Print

Enforces strict provider contract fee schedules, standardized walk-in Cash/Card processing, County Voucher ledger tracking, and Blanket MOUs—instantly printing Star TSP100 80mm thermal receipts and 2.25"×1.25" Code128 specimen vial labels.


49 CFR Part 40 Collection Engine

Built-in 3-Hour Shy Bladder countdown timer & 40oz fluid log (§ 40.193), out-of-range temperature (90°F–100°F) direct-observation alerts (§ 40.67), PharmChek 14-day Sweat Patch serial tracking, and 1-click POCT-to-Lab confirmation spawning.


Live Cordant Sentry & IVR Sync

Direct SOAP XML integration with Cordant Sentry: verify in 1 click if a probation donor called the IVR line today, reconcile donors via a 6-tier demographic engine, push e-COCs & instant results, and flag name discrepancies automatically.


DOT Consortium & Audit Defense

FMCSA-compliant cryptographic randomization (secrets.SystemRandom() for 50% drug / 10% alcohol quotas) and retainer billing. Generate and email gold-seal Certificates of Enrollment, Active CDL Driver Rosters, and Annual DOT MIS 40.26 Reports in 1 click.


AI Result OCR & PIN-Gated Dispatch

1-Click AWS Textract OCR parses uploaded lab PDFs and incoming e-Faxes directly into quantitative analyte checklists. Coordinates seamless handoffs with associated external MRO partners and dispatches expirable, PIN-locked result links (/results/secure/).

Collector Floor Precision • Zero Unhandled Edge Cases

Every Edge Case Engineered Out of the Clinic Floor

Standard medical software collapses when confronted with Shy Bladder protocols, adulterated specimens, split-specimen confirmations, or case-by-case manager result holds. We engineered dedicated state machines for every clinical reality.

3-Hour Shy Bladder State Machine

When a donor cannot provide sufficient urine volume, clicking Start Shy Bladder launches a deterministic 3-hour countdown timer and unlocks the cdta.fluid.log table—enforcing the federal 40oz fluid ceiling and logging every attempt for MRO review.

Temperature & Direct Observation

Collectors record specimen temperature within 4 minutes of voiding. Any reading outside 90°F–100°F (32°C–38°C) or sign of tampering immediately triggers a mandatory Direct Observation Collection alert and requires gender-matched observer sign-off.

1-Click POCT-to-Lab Confirmation

When an instant 5/8/10/12/14-panel POCT cup reads presumptive positive or inconclusive, collectors click Spawn Lab Confirmation to automatically generate a linked GC/MS or LC/MS/MS laboratory test—preserving all donor signatures, IDs, and receivers.

PharmChek 14-Day Sweat Patch

Full two-phase lifecycle tracking for PharmChek Sweat Patches: logs the manufacturer serial number (patch_serial_number), anatomical placement location, and application witness, then tracks the 7-to-14-day wear window until removal and lab shipment.

No-Show, Walkout & Refusal Logs

Under 49 CFR § 40.191, leaving the collection site after check-in constitutes a Refusal to Test. Dedicated collector buttons timestamp No-Shows, Walkouts, and Refusals, lock the audit trail, alert the DER or Probation Officer, and log non-refundable fees.

Case-by-Case Manager Result Lock

Employee PIN-protected Manager Lock directly inside Intake records: managers lock sensitive or complex cases on a case-by-case basis so no unauthorized staff can confirm or send results over until that exact manager reviews the file and unlocks it with their Employee PIN.

2-Second Hover Staff Trainer

Built-in interactive onboarding: hovering over any workflow button for 2 seconds displays an educational popover explaining What It Means clinically and What Happens Next in PostgreSQL and Accounting—turning the live UI into a staff training simulator.

High-Res Photo ID Magnifier

Full-screen ID inspection modal with 100%–300% smooth zoom, 90° rotation controls, automatic pypdfium2 PDF-to-image rendering, and instant visual warnings when a donor's Driver's License or State ID is expired.

Persistent Two-Way Receivers Sync

Authorized Result Receivers (cdta.result.receiver) synchronize bidirectionally between the master Donor card, open intakes, and the donor's SMS self-update link—ensuring Probation Officers, Courts, and Employers never miss a final report.

Pre-Configured Product & Analyte Catalog

23+ Mapped Toxicology, Alcohol, DOT & DNA Panels

Every testing service is mapped directly to Odoo's product catalog (product.template), complete with pre-configured analyte checklists, federal/clinical cutoff thresholds (ng/mL), eCommerce booking rules, and B2B price lists.

Urine & POCT Panels
  • DOT 5-Panel Urine (49 CFR Part 40: Marijuana, Cocaine, Amphetamines, Opioids, PCP)
  • Instant POCT Cups: 5-Panel, 8-Panel, 10-Panel, 12-Panel, and 14-Panel Rapid Screens
  • EtG / EtS Urine Alcohol (80-Hour Detection Window)
  • Specialty Forensic Add-Ons: Fentanyl, Xylazine, Kratom, K2/Spice (Synthetic Cannabinoids), Tramadol, Buprenorphine, Gabapentin
  • Lab GC/MS & LC/MS/MS Confirmations
Hair, Nail, Saliva & Sweat
  • 90-Day Hair Follicle Panels: 5-Panel, 9-Panel, 12-Panel, and 17-Panel Extended Opioids + EtG Hair
  • Nail Bed Toxicology: Fingernail & Toenail 3-to-6 Month Long-Term Detection Panels
  • Oral Fluid / Saliva: Lab-Based & Instant Observed Saliva Screens (DOT & Non-DOT)
  • PharmChek Sweat Patch: 14-Day Continuous Wear Patch Application, Overlay & Removal Panels
Alcohol, DOT & Consortium
  • DOT & Non-DOT Breath Alcohol (BAT): Evidential Breath Testing (EBT) Screening & 15-Minute Confirmation
  • DOT Medical Examiner Physicals: Commercial Driver Medical Certification & Recertification
  • Annual C/TPA Consortium Membership: Automated Random Pool Enrollment, Certificates & MIS Reporting
  • Mobile / On-Site & Post-Accident Emergency Dispatch
Forensic & Clinical DNA
  • AABB-Accredited Legal Paternity DNA: Full court-admissible chain-of-custody buccal swab collection & photo ID attestation
  • Non-Legal Peace-of-Mind Paternity DNA
  • Siblingship, Grandparentage & Avuncular DNA
  • Immigration DNA Collection
  • Peekaboo Early Gender DNA: Clinical blood draw gender reveal at 7+ weeks pregnancy
Pure Odoo Web Controllers & QWeb Portals • Zero Third-Party iFrames

Production Web Controller & Portal Architecture

Every external donor, corporate employer, Designated Employer Representative (DER), and Probation Officer interacts through hardened, mobile-responsive Odoo 19 HTTP controllers backed by PostgreSQL Row-Level Security (ir.rule).

Donor, Lobby Kiosk & Public Routes

  • GET/POST /kiosk — Distraction-free Waiting Room Tablet UI with 1-Tap Returning Donor Fast Check-In and New Donor Registration.
  • GET/POST /intake & /toxicology — Smartphone QR Code Check-In with live camera Driver's License OCR and HTML5 Canvas e-signatures.
  • GET/POST /donor/fastpass — Pre-authorized corporate employee check-in link that bypasses front-desk POS payment queues.
  • GET/POST /book — Public self-service appointment scheduling & eCommerce test pre-purchase portal.
  • GET/POST /intake/receivers/ — Tokenized SMS self-service portal allowing donors to add or update Authorized Result Receivers on their phone.

B2B Employer, Court & Security Routes

  • GET/POST /employer-signup & /employer-signup/sample-roster — 5-step C/TPA Consortium self-onboarding, CDL CSV roster upload, and digital contract signing.
  • GET /my/intakes & /my/lab_results — Row-level isolated B2B dashboard for real-time donor check-in tracking and signed PDF result downloads.
  • GET/POST /my/random_pool — Active CDL driver roster management, quarterly random selection history, and 1-click DOT Enrollment Certificates.
  • GET/POST /my/authorize_test & /my/payment_authorization — Online DER test order authorization and PCI-compliant card-on-file vaulting.
  • GET/POST /results/secure/ — Expirable, PIN-gated clinical report portal with brute-force lockout protection.
Terraform-Provisioned Cloud Fortress

Zero-Trust AWS ECS Fargate & Self-Healing PostgreSQL Architecture

Engineered via declarative Terraform Infrastructure-as-Code (terraform/aws_prod/) to deliver enterprise HIPAA & 49 CFR Part 40 sovereignty without bloated cloud spend.

Serverless ECS Fargate + POSIX EFS

Stateless Odoo 19 containers run on AWS ECS Fargate (2 vCPU / 4 GB RAM) anchored to an indestructible AWS Elastic File System (EFS) volume mounted at /var/lib/odoo via a strict POSIX Access Point (uid=101, gid=101)—ensuring signed PDFs and filestores survive container replacements with zero data loss.

Private-Subnet KMS RDS & AWS WAFv2

The PostgreSQL 15 RDS instance sits inside isolated private subnets (publicly_accessible = false) encrypted at rest with a dedicated AWS KMS Master Key. Public traffic terminates at an Application Load Balancer protected by AWS WAFv2 (AWSManagedRulesCommonRuleSet) blocking SQLi and XSS at the edge.

Self-Healing DDL Zero-Downtime CI/CD

Custom _register_hook methods execute idempotent ALTER TABLE ... ADD COLUMN IF NOT EXISTS migrations directly against PostgreSQL before ORM view validation begins—enabling live mid-day production deployments while the front desk is actively checking in donors.

Technical & Hardware Specifications Summary:

Supported Platforms: Odoo 17, 18, 19 & 20 (Community & Enterprise) • Core Dependencies: Contacts, Invoicing/Accounting, Website, eCommerce, HR, Portal • Cloud Stack: AWS ECS Fargate, RDS PostgreSQL 15 (KMS Encrypted), AWS EFS (POSIX uid/gid 101), ALB (TLS 1.3), AWS WAFv2 • AI & External APIs: AWS Textract OCR (analyze_id & detect_document_text with daily spend cap), Cordant Sentry SOAP XML API, e-Fax Webhook Gateway • Supported Clinic Peripherals: Star Micronics TSP100 80mm Thermal Receipt Printers, 2.25"×1.25" (57mm×32mm) Code128 Barcode Vial Printers, 2D USB/Bluetooth Barcode Scanners, iPad/Android Kiosk Tablets.

“My mission is to navigate complex challenges and inspire new possibilities, building intelligent solutions that transform ideas into real-world impact for businesses and individuals. This journey is dedicated to my grandmother, Delia Torres🌸, whose patience and guidance shaped the person I am today and taught me through the years the value of knowledge and education.”

Ramon Rios Jr. — Principal Systems Architect & Creator of the Toxicology Operations Suite

Ready to Replace Legacy Chaos with Deterministic Architecture?

Whether you operate a high-volume toxicology clinic, a DOT/FMCSA C/TPA consortium, or a multi-site healthcare enterprise, let's architect a sovereign Odoo & AWS ecosystem tailored to your exact workflows.

 Schedule an Architecture Audit