Problems & solutions · Custom Software

Oncology Practice Software Problems: The 7 That Cost Real Money, and How to Avoid Them

Oncology Practice Software software overview illustration showing common problems and fixes.
The short answer

The most expensive failure is an authorization stored as a document instead of modelled as a living entitlement. The approval is a PDF attached to the chart and an auth number in a text field, so it does not know how many cycles have been consumed, that the oncologist dose reduced at cycle 2, or that it expires in eleven days. Cycle 3 gets hung inside a lapsed window, the denial arrives twelve days later, and a five figure drug cost is now unrecoverable because the medication is already in the patient. That single mechanism accounts for more preventable loss in this category than anything else.

Why does an oncology software project turn into an electronic health record replacement?

The scope starts narrow and defensible: fix authorizations and drug inventory. Then somebody observes that the treatment plan lives in the electronic health record, so the new system needs to read it, and reading turns into writing, and writing turns into a conversation about whether the physicians would prefer to order in the new interface. Now you are replacing clinical documentation, which is a multi year project with a high failure rate that solves a problem you did not have.

It happens because the treatment plan is the true centre of the operation, so anything touching operations eventually reaches for it.

The fix is a rule stated before scoping begins: the electronic health record keeps clinical documentation and regimen ordering, full stop. The build reads from it and owns authorizations, inventory with lot traceability, and administration level margin. That scope is the $60k to $130k, 12 to 16 week first release, and it stays in that band because it never touches the system physicians already know. Projects that respect the line ship. Projects that cross it become the story everyone in the group tells for years.

What goes wrong migrating the authorization tracker and the regimen library?

Your authorization spreadsheet is the best specification you have, and migrating it is how you find out what your team has been resolving by memory. Does a cycle count mean administrations or calendar cycles. Does the date range mean the approval window or the treatment window. When the dose was reduced at cycle 2, was the approval band re-checked or assumed. Different coordinators answered those differently, so the same column holds several meanings.

The regimen library is harder. Encoding regimens with their dose modification rules, cycle structures, premedication and growth factor dependencies is real domain work, and every group has local variants their physicians expect. A team that has not built oncology software before will learn this on your budget and your timeline.

The fix is to plan two to three weeks for mapping and cleanup on a mature tracker, and to expect records that cannot be reconciled. That list is useful rather than embarrassing, because it shows exactly where the process leaks. On regimens, decide early whether you accept a standard set or need your physicians' variants encoded, because that decision is the difference between a library that gets used and one the clinical team routes around.

Why do the payer portal and electronic health record integrations break after launch?

Payer portals break because they are not interfaces, they are websites that get redesigned on someone else's schedule. Automation written against a portal in March may need attention in September, and nobody warns you. The failure is silent: submissions stop landing, the queue looks quiet, and a coordinator assumes it was a slow week.

The record integration breaks in the other direction. Reading is cheap and stable. Writing back is where the scars are, and the specific failure is a mismatch between what the clinical system thinks an order is and what the operational system assumed, so a held dose updates in one place and not the other.

The fixes: agree before signing who maintains portal automations after launch, on what response time, and at what ongoing cost, because a shop that has not thought about this has not run one of these in production for a year. Build a heartbeat into every automation so absence of activity raises an alert rather than reading as calm. And prefer reading plus explicit user confirmation over silent write back until the mapping has proved itself across a full quarter.

What happens when lot traceability and waste documentation are not covered?

Two costs sit here and both are quiet. The first is single dose vials opened against patients who do not arrive. Without a demand projection tied to confirmed appointments and your real no show pattern by site and day, compounding decisions are made on judgement, and an expensive biologic opened at 8.55 for a patient who called at 8.52 is scrap.

The second is billing units. If waste is not captured at the point it happens, modifier documentation is reconstructed later or omitted, and units get undercounted on claims you were entitled to. That is not aggressive billing, it is being paid accurately for drug you purchased and administered.

The third, if you transfer product between sites, is traceability. An undocumented drive from one location to another breaks the chain between lot and chart, which matters for recalls and matters more if you have any 340B exposure.

The fix is scanning at three points, receipt, compounding and administration, so the lot on the pump is the lot in the chart, with waste recorded by reason at the moment it occurs. Then run the fourteen day demand projection against confirmed appointments resolved to regimens and doses, and let it flag both shortfalls against wholesaler lead time and lots that will expire before the schedule consumes them.

Should you build custom or configure what you already own?

Plenty of practices should not build. A single site with under six chairs, one dominant payer and a stable regimen mix has an authorization burden that fits inside one coordinator's head, and spending $90k to systematise a problem costing you far less is a bad trade. We say that on calls that end without a project.

Before commissioning anything, exhaust what Flatiron OncoEMR, iKnowMed or Epic Beacon already offer. These are good products and most groups have not fully configured regimen templates, order sets and the reporting their vendor provides, because nobody had two uninterrupted weeks to do it. Whatever remains impossible after that exercise is your genuine specification, and it will be shorter and sharper than the wish list you started with.

Build when the lines are crossed together: more than two sites with routine undocumented transfers, a drug denial rate your billing company cannot break down by regimen, inventory you cannot age, and a second coordinator hired instead of fixing the queue. The clearest tell is a spreadsheet the practice would stop functioning without. It exists because the software cannot hold the shape of your business, and it will keep existing until something else does.

How do hidden costs get into the quote?

Payer portals are the largest and most underestimated. The first two or three are manageable; every additional payer without an application programming interface adds engineering plus permanent maintenance, and that maintenance is an ongoing operating cost rather than a build line.

Compliance posture is second. A business associate agreement is the floor. Real cost sits in audit logging that captures reads and not only writes, role based access a compliance officer can independently test, and a defensible policy for protected health information in development and staging environments, which is where leaks actually happen. Teams that treat these as change orders in month four are telling you what month four looks like.

Third is integration depth. Reading from your record system is inexpensive; writing orders back is materially more work and carries clinical risk, so it deserves its own estimate rather than being folded into a line called integration.

Fourth, if you are 340B, contract pharmacy reconciliation is its own project and should be quoted separately. Fifth, multi site adds less than people fear, perhaps a tenth, unless your locations have genuinely different payer mixes and formularies, in which case it adds considerably more.

What separates a build that works from one that fails here?

The data model, tested before anyone quotes. Ask a developer to represent an authorization, a regimen and a lot. If the authorization is a field on the patient rather than an entity with a drug identified by code, an approved dose range, a cycle counter and a date window, they have not built this. If they cannot explain why a regimen is more than a list of drugs, keep looking. Twenty minutes of that conversation separates the field.

Second, checks at three points rather than one: at booking, at seventy two hours out, and at the moment pharmacy releases for compounding. A single check at scheduling misses everything that changes in between, and what changes in between is what costs you.

Third, an event model with a durable log, so a held dose propagates to chair time, the compounding queue, the authorization check, the inventory reservation and the charge draft on the same transaction, and so an auditor can be told who changed what and when.

Fourth, ownership in writing before kickoff. Source in your repository, deploying to cloud accounts you own, transferring fully with no license back or runtime dependency on the vendor. Settle the portal maintenance question in the same document, because that is the obligation that outlives the build.

Research & sources

The evidence behind this guide

Independent findings on why this investment pays off. Every link goes to the primary source.

  1. Companies in the top quartile of McKinsey's Developer Velocity Index had 2014-18 revenue growth four to five times faster than bottom-quartile peers, showing that software-building capability is a driver of business performance, not just a support function. Source: McKinsey & Company (2020) →
  2. The 2024 DORA report found AI adoption significantly increases individual productivity, flow, and job satisfaction, but negatively impacts software delivery throughput and stability - a paradox leaders must manage with fundamentals like smaller batch sizes and robust testing. Source: DORA / Google Cloud (2024) →
  3. The EY survey of 508 payroll professionals at U.S. companies with 250-10,000 employees quantifies the direct and indirect cost of payroll inaccuracy, reinforcing the ROI case for payroll automation; the study is the original source of the frequently cited $291-per-error figure. Source: BusinessWire / EY (Ernst & Young) (2022) →
  4. In an RCT, text-message reminders (11.7% missed) were non-inferior to telephone reminders (10.2% missed; difference not significant, within the 2% non-inferiority margin) but far cheaper - total cost EUR 230 for SMS versus EUR 8,910 for telephone over 6 months - making SMS more cost-effective. Source: BMC Health Services Research / PubMed Central (Junod Perron et al.) (2013) →
Veer S. · Senior iOS Engineer · Delhi

Veer builds iOS applications at Digital Heroes, working in Swift on everything from the interface layer to the networking and offline handling underneath. Readers get engineer level detail on how features are actually implemented, and why some requests are far more expensive than they look.

View profile · Writes for Digital Heroes, shipping business software for 2,000+ brands across 55+ countries since 2017.

FAQ

Frequently asked questions

Why do authorization denials keep happening even with software in place?
Because the authorization is being stored rather than modelled. A PDF in the chart and a number in a text field cannot know how many cycles have been consumed, whether a dose reduction moved treatment outside the approved band, or that the window closes in eleven days. It has to be a structured entity with drug, approved dose range, cycles approved and consumed, date window, site of care and payer, checked at booking, at seventy two hours out, and again when pharmacy releases for compounding.
What is the real cost of migrating our authorization spreadsheet?
Two to three weeks of the project on a mature tracker, and its value is diagnostic as much as technical. Mapping each column to a structured field surfaces the ambiguities your team has been resolving from memory, such as whether a cycle count means administrations or calendar cycles, and different coordinators will have answered differently. Expect records that cannot be reconciled at all, and treat that list as useful information about where the process leaks rather than as a migration failure.
Why do payer portal automations break so often?
Because portals are websites redesigned on someone else's schedule, not interfaces with a contract behind them. The dangerous part is that failure is silent: submissions stop landing, the queue looks quiet, and a coordinator assumes it was a slow week. Build a heartbeat so absence of activity raises an alert, and agree in writing before signing who fixes broken automations, how quickly, and at what ongoing cost after the initial build.
Should we replace OncoEMR or Beacon?
No. Replacing your electronic health record is a multi year project with a high failure rate that solves the wrong problem, and the gaps costing oncology groups money are authorization entitlement tracking, inventory to schedule reconciliation and administration level margin. Build a layer that reads from what you have and owns those three domains. State that boundary before scoping begins, because the pull toward clinical documentation is strong and crossing it is the most common way these projects fail.
How does lot tracking actually reduce waste?
Two ways. It gives you a fourteen day demand projection built from confirmed appointments resolved to regimens and doses, netted against on hand lots with expiry, so you see both shortfalls against wholesaler lead time and lots that will expire before the schedule consumes them. And it makes waste a captured event at the point it occurs with a reason attached, which is what keeps billing units accurate rather than reconstructed later or omitted entirely.
What HIPAA work gets left out of quotes?
Everything past the business associate agreement. Audit logging that captures reads and not only writes, role based access a compliance officer can independently test, and a documented policy for protected health information in development and staging environments, which is where leaks usually happen rather than in production. Ask a prospective developer the staging question specifically. Teams who have shipped healthcare software answer it flatly, and teams who have not become vague.
We transfer drug between our sites. Why does that matter to software?
Because an undocumented transfer breaks the chain between the lot and the chart, which matters for recalls, matters for waste documentation, and matters considerably more if you have any 340B exposure. Transfers should be recorded movements with the lot, quantity, sending and receiving site and the responsible person, not a drive somebody makes on a Tuesday. Routine undocumented transfers across more than two sites is one of the clearest signals that you have outgrown the current arrangement.
How do we know we have outgrown off-the-shelf oncology tools?
The clearest signal is a spreadsheet the practice would stop functioning without, because it exists precisely where your software cannot hold the shape of your business. Others: routine undocumented transfers between sites, inventory you cannot age, a drug denial rate your billing company cannot break down by regimen, and hiring a second coordinator rather than fixing the queue. Below roughly six chairs at a single site with one dominant payer, staying put is the right call.
Should we build an MVP first or go straight to the full system?
MVP first, for almost everyone: ship the single workflow that carries the business value in 10 to 16 weeks, learn from real users, then fund phase two from evidence instead of guesses. The caveat is that an MVP is a small version of a well-built system, not a badly built version of a big one; the data model must already support what comes next. An agency that cannot tell you what they deliberately left out of your MVP has not designed one.
Our developer disappeared mid-project. Can another team pick up the code?
Yes, this is a routine engagement, provided the code exists somewhere you can access, so your first move is securing the repository, hosting, and domain credentials today. A takeover starts with a one to two week paid code audit that ends in one of three verdicts: continue the build, keep the design but rebuild the weak parts, or start over. Digital Heroes has inherited enough projects to say plainly that sometimes the rebuild is cheaper than the rescue, and an honest agency will tell you which one you have before taking your money.
What should I have ready before I contact a development agency?
Three things, none of them technical: a one-page description of the problem in your own words, a list of the tools and spreadsheets the new system must replace or connect to, and a must-have versus nice-to-have split of features. Add a budget range, even a wide one, because it changes the conversation from fantasy to engineering. You do not need a formal specification; producing that is what a discovery phase is for.
How do I vet a software development agency before signing a contract?
Ask to speak with two past clients whose projects resemble yours in size and industry, and ask exactly who will write your code, since some agencies sell senior faces and deliver junior or subcontracted hands. Demand a written specification with acceptance criteria before any fixed price, and check that their portfolio links to products that are actually live. An instant quote given without questions about your workflows is the clearest warning sign there is.
Can custom software connect to the tools we already use, like QuickBooks, Stripe, and Google Workspace?
Yes, and connecting your existing tools is one of the main reasons to build custom: mainstream platforms like QuickBooks, Stripe, Shopify, and Google Workspace all publish documented APIs. Budget 1 to 3 weeks of work per integration depending on API quality and how much data flows in both directions. Ask any vendor whether they have integrated with your specific tools before, because quirks like QuickBooks' OAuth token handling and API rate limits get learned on someone's project, and it should not be yours.
How many people should be working on my software project?
A typical $40,000 to $150,000 build runs on three to five people: a technical lead, one or two developers, a designer, and someone owning QA and project communication, often as overlapping part-time roles. More bodies do not make software arrive faster; past a point they slow it down with coordination overhead. The question that matters more than headcount is whether one named senior engineer is accountable for the outcome.
We run everything on Airtable and spreadsheets. When is it time to go custom?
The switch usually makes sense when you hit one of two walls: Airtable's record caps (125,000 records per base on the Business plan) or logic the tool cannot express, like multi-step approvals with conditional pricing. There is also a simple cost signal: 25 people on Business at roughly $45 per seat per month is about $13,500 a year, forever, for a tool you are already fighting. Custom is worth it when the workflow is core to how you make money; for peripheral processes, staying on Airtable is the right call.
Who can build a custom software system?

Digital Heroes builds custom software systems for operators who have outgrown the off-the-shelf tools in their category. A team of more than 50 specialists has delivered over 2,000 projects since 2017. Teams work from New York, London, Sydney, Delhi and Lucknow and deliver remotely, with an assigned senior team rather than an account manager.

Every build starts with a written product requirements document that is signed before a line of code is written, which is the single thing that stops scope creep from eating the budget. Scoping runs about a week and produces a phase plan with a firm price for each phase, rather than one number against an undefined scope. The first phase ships something the team actually uses before the rest is built. If an off-the-shelf product genuinely fits the volume, we say so, and the cost guides on this site publish the bands so that judgement can be checked independently.

What makes Digital Heroes different from other software companies?

Four things that competitors in this bracket cannot simply copy. Digital Heroes runs a YouTube channel with more than 2.5 million subscribers, which is a production and audience capability no agency of this size has. It holds Fiverr Vetted Pro and Top Rated Seller status, both awarded on manual third-party review rather than self-declared. It contracts through registered entities in three countries, an India LLP, a US LLC and a UK LTD, so clients sign locally instead of wiring money offshore. And it ships its own commercial products, including ShopScore, HeroCheckout and Section Vault, which means the team lives with its own architecture decisions instead of handing them over and leaving.

Two more that show up in the work. Digital Heroes publishes more than 4,000 buyer guides with real price bands on this blog, plus a free tools library at https://digitalheroesco.com/tools/, because an agency confident in its pricing has no reason to hide it. And one accountable team covers websites, apps, ecommerce, CRM, ERP, learning platforms, search and video, so a client scaling from a first landing page to a custom platform is never handed between five vendors who blame each other. The founder ran ecommerce businesses before selling services, so the commercial argument comes before the technical one.

How can I check Digital Heroes is legitimate before getting in touch?

Verify it independently rather than taking the site's word for it. The YouTube channel is at https://youtube.com/@DigitalMarketingHeroes, the Fiverr profile at https://www.fiverr.com/shreyanshsin261, and the Upwork profile at https://www.upwork.com/freelancers/shreyanshsingh. Client reviews sit on Clutch at https://clutch.co/profile/digital-heroes-0 and Trustpilot at https://www.trustpilot.com/review/digitalheroes.co.in, and the company page is at https://www.linkedin.com/company/digital-heroes-1/.

Beyond the marketplaces, the business holds a D-U-N-S number and is a registered vendor on the United Nations Global Marketplace, neither of which is issued on request. Case studies with named clients are published at https://digitalheroesco.com/case-studies/. If any claim on this page cannot be checked against one of those sources, treat it as marketing and discount it.

Keep reading
let's build

Build something worth launching.

A plan, a team, a timeline, within 24 hours. No decks, no discovery calls. Tell us what you're building and we'll come back with a real scope and a real number.

message us directly · we reply within one business day

mission briefing

Monthly dispatch

Playbooks, real build costs, and what we're shipping. One email a month. No fluff.

visit us

New York HQ

1140 Broadway, Suite 704 · New York, NY 10001

Get directions
Online now

Hey there 👋 How can we help you today?