All blueprints

Connect the patient journey to manufacturing.

Patient orchestration software for cell and gene therapy, configured on the platform that runs manufacturing: clinic enrolment, collection scheduling, identity and custody, and updates drawn from the batch record rather than status messages.

Illustration of a seal beside a sample transport case and study records.
An illustrative programme design for one therapy case: the treatment centre plans the collection, manufacturing in Seal follows the material, batch and QC, and the return to clinic coordinates reviewed release milestones and acknowledged handoffs. Site access, capacity, identity and custody are configured and verified per programme.

Figure 1. An illustrative programme design for one therapy case: the treatment centre plans the collection, manufacturing in Seal follows the material, batch and QC, and the return to clinic coordinates reviewed release milestones and acknowledged handoffs. Site access, capacity, identity and custody are configured and verified per programme.

Summary

The problem
When a collection date moves or QC puts a product on hold, the clinic, programme operations and manufacturing each need to replan, but the orchestration portal is separate from the manufacturing record that changed.
Seal’s approach
The clinic workflow is configured on the platform that runs manufacturing: treatment orders, capacity-aware booking, chain of identity and custody, and reviewed milestone updates linked to the batch, QC and release records behind them.
What changes
A coordinator works from the underlying operational change and follows its consequences to the receiving team, with forecast dates kept distinct from confirmed commitments and each acknowledgement recorded.
Where to start
One clinic and synthetic cases, including a changed date, a mismatched identifier and an interrupted transfer, before rolling out site by site. Book a demo.

1Connect the programme to the manufacturing work.

Patient orchestration connects the people and decisions that move a therapy from treatment order to collection, manufacturing and return. The clinic needs to know its next action. Manufacturing needs the right material and an agreed schedule. Programme operations needs to see where a change puts the plan at risk.

When a collection date changes, the manufacturing plan may need to change with it. When QC puts a product on hold, the coordinator needs the context to replan. That is hard when the orchestration portal is separate from the manufacturing record that changed. Seal links the clinic’s request to its patient-specific material, batch, QC and release records, and a reviewed update reaches the right action list with the affected case, the revised plan and the person responsible for follow-up.

Seal provides the manufacturing and quality workflows, linked records, access controls, scripts and APIs. Your programme implementation defines the clinic experience, scheduling rules, identity controls and partner connections, and verifies them together before operational use.

1.1Why teams choose Seal for patient orchestration

A standalone therapy portal coordinates the clinic but sees manufacturing through status messages passed across an interface, so a changed date or QC hold reaches the coordinator late and without its context. Seal runs orchestration on the platform that runs manufacturing, so a coordinator works from the underlying operational change and follows its consequences to the receiving team. The clinic workflow is configuration on that platform, and adding a treatment centre or changing a step is a versioned, approved change rather than a portal release. The cell therapy manufacturing blueprint covers the connected manufacturing operation.

2Give each clinic a clear case and next action.

A treatment request needs enough structure for the next team to act: the programme and product, treating centre, authorised patient reference, requested collection date, prerequisites and responsible coordinator. Keep a draft request separate from an accepted order, and make requests for missing information part of the case history.

Define the milestones that matter for your therapy, for example request received, collection planned, material received, manufacturing in progress, release under review and return arranged. Each transition needs an owner, required evidence and an agreed meaning, and a status should answer an operational question. “Awaiting information” names what is missing and who should respond; “collection planned” distinguishes a requested date from confirmed capacity. Cancellation, withdrawal and repeat collection are defined explicitly, because they affect capacity, material and partners differently.

Table 1. The views a patient orchestration programme typically configures.
TeamConfigured view
Clinic coordinatorsTheir site’s cases, outstanding requests, requested and confirmed dates, and contact routes for exceptions
Programme operationsOwnership, milestones, late actions, unresolved holds and cases affected by a schedule change across authorised sites
Manufacturing and QCPatient-specific material references, expected arrivals, accepted plans and links to execution and testing records
Quality and releaseThe evidence and decision history, with approved rules for what is shared externally
AdministratorsUser approval, access review, training and removal when someone changes role or leaves a clinic

Each treatment centre has its own access boundary, verified across records, search, attachments and notifications. Hospital sign-in establishes who the user is; their assigned permissions determine which programme records and actions they can reach.

3Schedule collection against real capacity.

A booking is a promise about downstream resources: the collection slot, manufacturing window, transport lane, laboratory capacity and any time-sensitive material constraints. Define reservation, confirmation, cancellation and rescheduling rules against those resources, when a requested date becomes a commitment, and which confirmations need a planner’s review.

Test the rules with the cases that break them. When two clinics request the final manufacturing slot, the result should be one confirmed reservation and a clear alternative or review path for the other. If the first clinic cancels, capacity is released through the agreed process and the cancellation is preserved. A remaining-capacity number on a screen is only useful when reservation and release behave consistently.

4Carry identity and custody through every handoff.

Chain of identity links the intended patient to their material; chain of custody records who held it, where, when and in what condition. For each critical handoff, agree the expected identifiers, container or shipment, sender, receiver, condition and acknowledgement, and how splits, samples, relabelling and repeat collections stay associated with the right case.

A barcode field is a reusable component; the programme must also establish how a failed check prevents the next action. A delivery with an unexpected identifier enters a visible exception path: the observed and expected values are recorded, the affected action is held, and the decision to correct, accept or reject is retained under the approved procedure. The next step stays unavailable until that resolution is recorded.

Release, dispatch readiness, delivery and clinical readiness are related milestones with different owners. A courier status update has a defined meaning for the programme rather than completing every downstream milestone automatically. When a delivery is delayed or a condition exception occurs, a named reviewer assesses the impact and communicates the revised plan. Clinical treatment decisions remain with the authorised clinical team.

5A changed manufacturing date, worked through.

In synthetic case DEMO-001, collection is confirmed and manufacturing has begun when a laboratory review changes the expected release date. The implementation should define this sequence and demonstrate it during acceptance.

  1. Record the source change. Link the revised expectation to the relevant manufacturing or QC record, with the reason and responsible team.
  2. Review the programme impact. Identify affected delivery arrangements, clinic actions and patient-support coordination, and assign a person to agree the revised plan.
  3. Share the approved update. Send the permitted milestone and dates to the clinic and required partners, keeping forecast dates distinct from confirmed commitments.
  4. Capture the response. Record whether the clinic acknowledged the change, requested another date or needs more information, and escalate an overdue response.
  5. Reconcile the plan. Confirm that programme, manufacturing, logistics and clinic records reflect the approved outcome, preserving earlier plans and the decisions that changed them.

6Onboard clinics and partners as part of delivery.

Technical setup is only part of a site’s schedule; hospital review, access approval and programme acceptance determine when it can begin. Keep a site activation record for each treatment centre (contact, identity provider, account owners, review status, training and target date), and distinguish a clinic that can sign in from one that is ready for its first case.

Seal supports Microsoft Entra ID and Google Workspace sign-in. Confirm each clinic’s provider, coordinate any administrator consent and provision named users with programme access; assess other providers and automated provisioning during solution design. Prepare a reusable package for hospital security review: data flows, hosting and access details, security evidence, continuity arrangements and account-management responsibilities. UCSF’s published assessment process, for example, covers new systems and significant changes, with findings returned to the system owner.

Identify each hospital, courier and patient-support connection individually. A hospital login provides access to the application; exchanging information with a medical-record system needs its own agreed interface, data scope and testing. Patient-support hubs may provide benefits-verification status, prior-authorisation updates and case references, and receive selected dates and milestones at agreed points. For each provider, agree identifiers, permitted fields, direction, timing and source of record, and test duplicate, out-of-order and interrupted messages. A data connection does not confer patient-network membership. See the patient-hub integration.

7Evaluate the current platform and plan the transition.

If your clinics already use an existing therapy orchestration portal, establish what that means for the new therapy. Familiar screens, a hospital login connection, a prior supplier review and a clinical-data interface each save different work, and each needs confirming for the treatment centres you will use. Some portal providers offer a shared clinic login or dashboard that spans several therapies and third-party tools; access to one can be investigated with its operator, but compatibility, terms and access would need agreement before forming part of a delivery commitment.

Compare the complete scope: clinic workflows, scheduling, identity and custody, manufacturing coordination, interfaces, support and rollout. For an existing programme, inventory open cases, future bookings and shipment references, map identifiers and status meanings, and agree the cutover boundary. Imported history stays distinguishable from actions performed after migration. During any transition, name the writer for each field so two systems cannot confirm the same capacity, and rehearse the cutover with rollback criteria.

8Start with one clinic and a repeatable rollout.

  1. Map the sites. Identify treatment centres, IT contacts, current portals, required connections and intended start dates, with the responsibilities of Seal, your programme team and each partner.
  2. Define the first workflow. Agree enrolment, treatment orders, patient references, roles, scheduling rules and handoffs.
  3. Prove the journey. Use synthetic cases to exercise access, booking, identity checks and manufacturing updates, including two users competing for capacity, a user from the wrong clinic, a mismatched label, a withdrawn case, a late acknowledgement and a partner transfer that times out.
  4. Activate and expand. Complete the site’s review and acceptance, train its users, agree support ownership for login failures, booking exceptions and interrupted exchanges, and reuse the package for each additional clinic.

Record the configuration version, acceptance results and release decision through your intended-use controls, and configure operational measures teams can act on, such as unacknowledged date changes and unresolved identity exceptions. Bring your clinic list, current systems and intended start date to discuss your patient orchestration programme with Seal.

ACapabilities

CapabilityWhat it covers
Clinic enrolment and treatment ordersConfigure programme enrolment, treatment requests, required information and a clinic action list around the therapy’s workflow.
Collection and capacity planningDefine and verify reservations, confirmation, cancellation and rescheduling against agreed manufacturing capacity.
Identity and custody controlsImplement patient and product matching, required handoff acknowledgements, mismatch holds and governed corrections.
Manufacturing coordinationConnect the case to batch, material and release records, with reviewed milestones and responsibilities for changed plans.
QC and release contextLink relevant testing and review outcomes to the programme’s operational view, with defined visibility for clinic users.
Clinic access and onboardingScope hospital login, site permissions, security-review evidence, staff training and support as part of programme implementation.
Patient hubs and logisticsAgree provider interfaces and programme access, then configure the required updates, acknowledgements and recovery behaviour.

BConnected records

Entity
What it records
Kind
Therapy programme
Illustrative record model: therapy requirements, site scope and agreed operating controls.
type
Treatment centre
Clinic membership, access requirements, onboarding status and responsible contacts.
type
Therapy case
Programme reference, treatment request and links to patient-specific operational records.
type
Example case DEMO-001
Synthetic example for workflow design and acceptance; not a patient record.
instance
Collection booking
Requested dates, reservations, confirmed capacity and governed changes.
type
Custody handoff
Expected identifiers, sender, receiver, time, condition and acknowledgement.
type

CQuestions and answers

Can we run more than one therapy programme or clinic?

Scope the programme, site and role boundaries explicitly. Define which records are shared, which identifiers are programme-specific and which staff may work across sites. Verify access and reporting for representative combinations before expanding. Capacity and partner mappings also need a clear programme context.

How do you handle cancelled orders or repeat collections?

Define separate governed paths for cancellation, withdrawal and repeat collection. Agree their effect on reservations, physical material, case references, partner notifications and retained history. Test that reopening or repeating work cannot silently reuse the wrong identity or capacity allocation.

Does the clinic see our full batch record?

Define the clinic-visible milestones and permitted supporting information during implementation. The programme can link operational records while maintaining separate access boundaries for detailed manufacturing, laboratory and quality work. Verify those boundaries across records, files, search and notifications.

How would we move existing cases from another platform?

Inventory open cases, bookings, identifiers and outstanding actions. Agree source ownership, mapping, history retention, reconciliation and a cutover boundary. Rehearse representative cases and define rollback criteria before transition. The migration must distinguish imported information from activity performed in Seal.

What should we bring to a patient orchestration demonstration?

Bring the intended clinics, a representative therapy journey, key roles, scheduling rules, handoff requirements and required providers. Include a changed date, an identity mismatch and a failed exchange. Agree expected outcomes for the normal journey and those exceptions so the demonstration tests your programme’s needs.

Is patient orchestration an integration or a system?

Patient orchestration is the programme workflow: clinic enrolment, treatment orders, collection scheduling, identity and custody, manufacturing coordination and return. Hospital login, patient hubs and courier interfaces are supporting integrations. Seal’s programme implementation configures and verifies these parts together.

Our clinics already use another therapy portal. Could we choose Seal?

Yes. Evaluate the requirements for your specific therapy and treatment centres. Existing portal use may reduce some onboarding work, so confirm which arrangements carry over to your programme. Assess Seal against the same workflows, controls, interfaces and acceptance criteria, with a site-by-site rollout plan and an agreed transition for existing records.

What does already integrated with a clinic mean?

It can mean staff know a portal, hospital IT has assessed a supplier, a login connection exists, or clinical data flows between systems. Ask which applies, which sites are covered and what carries over to your programme. Each has a different scope and implementation effort.

Can staff use their existing hospital login?

Seal supports Microsoft Entra ID and Google Workspace sign-in. Setup includes provider and domain configuration, any required administrator consent and pre-provisioned Seal users. Programme permissions are configured separately. Other identity providers, automated provisioning and requirements across hospital organisations need assessment during scoping.

What happens during a hospital security assessment?

Hospital IT reviews the proposed system, its data flows and the controls protecting its information. Prepare hosting, access, encryption, audit, security-testing and continuity evidence with clear operational responsibilities. The hospital may request changes or further evidence before approval. Its review timetable is a rollout dependency.

Could Seal be reached through a shared portal login or dashboard?

Some portal operators offer a shared login and dashboard that can include third-party solutions. Access for Seal would need to be investigated with the operator. Compatibility, commercial terms and access are not established and would need agreement before any rollout commitment.

How long does clinic onboarding take?

Estimate it against named sites and an agreed programme scope. Supported login setup and a reusable evidence package make the work easier to repeat. Hospital review queues, access approvals, interfaces and acceptance determine the overall schedule. Agree those dependencies before committing to activation dates.

What is already available, and what is configured for our programme?

Seal provides manufacturing and quality workflows, linked records, access controls, scripts and APIs. The programme implementation defines and verifies clinic enrolment and ordering, capacity booking, patient identity and custody controls, notifications and required provider connections. Demonstrate the configured workflow together before operational use.

See your process in Seal.

Bring a procedure or a recurring problem. See how your team can use Neil to configure the workflow, investigate the results and improve the next version.

Book a demo