Oral Surgery Referral Intake: One Queue for Forms, CBCT Discs, Links and Letters
It is 8:10 on Monday morning. Over the weekend, fourteen referrals came in through web forms on two different form hosts. Three faxes are in the tray. A courier envelope holds a CBCT disc, there is a USB stick taped to a paper referral, and an email from a general dentist has a CT link that expires on Wednesday. The doctor line is ringing at the front desk, because that is where it forwards. Getting all of that into charts before the first consult, not only the submissions from your oral surgeon referral form, is what oral surgery referral intake really means.
This guide gives the intake coordinator, office manager or owner the parts to build that: a same-day routine, a safe way to open discs and USBs, what your oral surgeon referral form should collect, an if-then list for CT links, a report-back template, and a phone-line plan. It covers the systems behind referrals, not which cases to refer. It sits beside the oral surgery practice IT guide, and our page on oral surgery IT support explains how Legend looks after practices. Ian Lynch, who has 22 years in dental IT and oversees the NOC, onsite dispatch and client technology roadmaps, wrote it from the IT side of that work.
In this guide
- How do referral images get from the inbox into the chart the same day?
- Is it safe to open a CBCT disc or USB from another office?
- Where do oral surgery referrals actually come from?
- What should an oral surgeon referral form collect?
- What do you do with CBCT links, uploads and shares as they arrive?
- How do you send the op note and post-op images back to the referring dentist?
- Vendors in the referral chain: what the regulation's text says
- How should the referring-doctor phone line ring?
- The one-page referral intake setup checklist
- What to ask your IT provider about referral intake
- How Legend Networking can help
- Frequently asked questions
- The bottom line
How do referral images get from the inbox into the chart the same day?
Run one routine for every referral, whatever channel it arrives on: receive it, log it in a single referral queue, match it to one patient record, import the images into your imaging software, attach the referral and letter to the chart, tell the referring office you have it, then schedule. Each step has one owner, and nothing waits overnight in an inbox.
Give the routine below to the front desk and the intake coordinator, and ask your IT provider to own the IT column. A "referral queue" can be a task list in the practice software, a shared tracker or a group mailbox folder. What matters is that there is only one.
| Step | Front desk | Intake coordinator | IT |
|---|---|---|---|
| 1. Receive | Collects faxes, mail, discs, USBs and walk-in slips, and puts every item in one tray | Checks the web form host, records mailbox and e-fax inbox at set times | Keeps alerts going to a monitored group mailbox, not one person's inbox |
| 2. Log | Writes discs and USBs in the media log | Creates one queue entry per referral: patient, referrer, date, channel | Gives the queue to everyone who needs it, with named logins |
| 3. Match | Checks the caller or slip against the schedule | Finds or creates the patient record; checks name and date of birth against the images | Sets up a patient-match step in the practice software, if it has one |
| 4. Import images | Hands media to the coordinator, unopened | Imports DICOM studies and attaches pano, PA and photos | Maintains the intake PC, the import path and the scanner |
| 5. Attach | Scans paper referrals and insurance cards | Attaches the referral form, letter and images to the chart | Keeps a locally attached TWAIN scanner at each intake desk |
| 6. Acknowledge | Sends the "referral received" note by the channel it came on | Keeps the letter templates merging | |
| 7. Schedule | Calls the patient | Marks the queue entry complete |
Two vendor facts shape the IT column if your practice runs WinOMS. Carestream's WinOMS v10.1.x System Requirements (checked 26 Oct 2026) say "WinOMS has a one-way bridge to Dental Imaging Software" and that "OMS Imaging Software is our recommended, fully integrated solution." The same document says "Any TWAIN compliant scanner is acceptable" and "Network scanners are not supported," which is why step 5 needs a scanner plugged into each intake desk. WinOMS, CS OMS Imaging and OMSVision are software your practice runs; the vendor supports the application, and your IT provider keeps the computers, network and accounts around it working.
If the bridge between the practice software and imaging stops passing patients across, our guide to when imaging and the practice software stop talking walks through the usual causes, and our dental imaging support page covers the IT side.
Is it safe to open a CBCT disc or USB from another office?
Not on a networked clinical PC. A DICOM file has a 128-byte preamble that can hold executable code, a flaw catalogued as CVE-2019-11687 and published on 2 May 2019. The NIST vulnerability entry says such files "can be executable even with the .dcm file extension" and are "transported via removable media for patient care coordination."
That is a hygiene rule, not a judgement about any office that sends you discs. The point is that a disc or USB from outside the practice is the one thing on the intake desk that can run software, so it gets one safe PC and one procedure. The DICOM standard's own security guidance says programs that process DICOM media should take precautions "such as scanning the files with anti-virus software and not assuming they are safe," and that "Import systems should disable file execution when reading CDs or DVDs."
Opening referral discs and USBs: 8 steps
- 1Use one intake PCOne designated computer reads all outside media. It is not the server and not a surgical-suite PC, and it is kept apart from the clinical systems.
- 2Turn AutoPlay offYour IT provider switches off AutoPlay and AutoRun on that PC, so nothing on the disc starts by itself.
- 3Scan the media firstEndpoint protection scans the disc or USB before any file is opened.
- 4Leave the disc's viewer aloneNever run the viewer that ships on the disc on a networked clinical PC.
- 5Import with your own softwareUse the "import from media" or DICOMDIR function of the imaging software you run.
- 6Check the identifiersCompare the patient name, date of birth and study date with the referral form.
- 7Attach and logAttach the study to the chart and mark "images received" in the referral queue.
- 8Label and store or returnLabel the media and store or return it under your records policy, which is set by your state; check your dental board.
Viewer software has its own flaws, so keep it patched. In May 2025 the US Cybersecurity and Infrastructure Security Agency published advisory ICSMA-25-121-01 for a free DICOM viewer, noting that "The user must open a malicious DCM file for exploitation"; the fix was an update. HIPAA Journal reported a second viewer flaw later that month. Both point the same way: open outside files on a PC that is patched and kept apart from the systems you cannot afford to lose.
What program do we use to open a DICOM CD?
Open it with your own imaging software's import function, on the intake PC. That brings the study into the chart where the surgeon will read it. If you need to look before importing, use the disc's bundled viewer only on the isolated intake PC, never on a networked clinical computer.
The DICOM standard's page on DICOM CDs adds three checks worth teaching staff. A DICOM CD has a file named DICOMDIR, and its absence indicates a non-DICOM disc. Some discs carry images already converted to a consumer format such as JPEG, which lose information needed to import and manage them properly. And some manufacturers write discs in a proprietary format other viewers cannot read; the standard's advice is to ask whoever created the disc for a replacement in standard DICOM format. If your practice keeps hitting the same unreadable format, add it to the form (see below) so referring offices know before they burn the next one.
If you want a second opinion on how your intake PC and media handling are set up today, you can request a Free Dental IT Assessment.
Where do oral surgery referrals actually come from?
From at least eight places at once: web forms, fax, a records mailbox, CT share links, discs, USB drives, imaging-vendor cloud shares, phone calls and paper slips patients carry in. Listing them, with where each lands today and who fixes it, is the first job, because you cannot route into one queue what you have not found.
Fill in the third column for your own office. Most practices find at least one channel nobody owns.
| Channel | What arrives | Where it lands today | Common failure | Who fixes it |
|---|---|---|---|---|
| Web referral form | Patient, referrer and referral details; sometimes images | The form host's portal and an email alert | Two or more form hosts across locations; alerts to one person | Form vendor and IT |
| Fax or e-fax | Referral slips, notes, insurance | A fax machine or an e-fax inbox | Pages sit in a tray or an unwatched inbox | Front desk and phone provider |
| Records mailbox | Referral letters, attachments, CT links | A shared or personal mailbox | Personal inboxes, no group access | IT |
| CT or CBCT share link | A download link from the referring office or imaging center | An email | The link expires before anyone downloads it | Intake coordinator |
| Disc (CD or DVD) | DICOM study, sometimes with a viewer | The front desk | Opened on the nearest PC | Front desk and IT |
| USB flash drive | Images and documents | The front desk | Same as discs | Front desk and IT |
| Imaging-vendor cloud share | A study shared from the referring office's imaging software, such as Carestream imaging or Planmeca/Romexis | A vendor portal | Nobody has a login, or the share is never accepted | IT and imaging vendor |
| Phone call | Urgent referrals, doctor-to-doctor questions | Whoever picks up | The doctor line rings at the front desk | Practice and phone provider |
| Paper slip with the patient | A handwritten referral | The front desk at check-in | No images, no referrer contact details | Front desk |
Both ends of the technology range arrive in the same week: some university programs still send CBCT as DICOM files on a CD or flash drive, while some practices now ask for a CT link on their referral forms. Pick one primary channel per type and publish it to every referring office. If fax stays on that list, plan for when the copper phone lines go away.
What should an oral surgeon referral form collect?
Six groups of fields: the patient, the referring office, the referral itself, the images, attachments and the practice's own acknowledgement text. The image group is the one most forms miss, and it decides whether intake can finish the same day, so it asks what images exist, their dates, how they are coming and when any link expires.
Use this spec when you build or rebuild a dental referral form, whether it sits on your website or in a form vendor's portal. The clinical reason for referral is a free-text field your doctors define; this page does not say what clinical content to require.
| Field | Why intake needs it | Required? | Format or check | Where it goes |
|---|---|---|---|---|
| 1. Patient: name, date of birth, phone, dental and medical insurance | Matching, scheduling and billing both insurers | Yes | Date picker for date of birth; phone format check | Patient record |
| 2. Referrer: doctor, office, phone, preferred email for the report-back | The report-back goes to the right person | Yes | Pick list of known referring offices plus "other" | Referring-doctor record |
| "Contact the referring doctor before scheduling" | Some referrers want a call first | Optional | Checkbox | Queue entry |
| 3. Referral: surgeon requested or "no preference", area, urgency | Routing to the right schedule | Yes | Pick lists | Queue entry |
| Reason for referral | The doctor's own words | Yes | Free text, written by the referrer | Referral document in the chart |
| 4. Images: types available (pano, PA, CBCT, photos) | Know what to expect before it arrives | Yes | Checkboxes | Queue entry |
| Date of each image | Avoids re-imaging and wrong-study mix-ups | Yes | Date per type | Queue entry |
| How the images are coming | Uploaded here, a link, a disc in the mail or an imaging-vendor share | Yes | Single choice | Queue entry |
| DICOM files only, or DICOM files with a viewer | The desk knows whether the media carries software before it arrives | If a disc or link | Single choice | Queue entry |
| CT link and link-expiry date | Download before the link dies | If a link | URL field plus date | Queue entry |
| Formats your practice cannot open | Saves a wasted disc | Shown as text | A line you write | Form instructions |
| Patient name and date of birth as written on the images | Mismatches show up before import | Yes | Text | Checked at import |
| 5. Attachments: upload | Letters, notes, small images | Optional | "your form vendor's limit]" and allowed file types stated on the form | Chart documents |
| 6. Acknowledgement text | The practice's consent or notice wording | As the practice decides | Written by the practice and its adviser | Form footer |
Before you publish the form
- One form host for every location, so there is one portal to check
- The form vendor signs a business associate agreement with the practice (see the vendor list below)
- Submission alerts go to a monitored group mailbox, not one person
- Someone makes a test submission every month and confirms it reaches the queue
- Your IT provider checks that the form page loads no marketing or analytics tags that capture field contents, and your compliance adviser confirms the approach
- The doctor-line number and the formats you cannot open are printed on the form
If you are on the other side of the referral, ask each oral surgeon you refer to for their form link and save it in your practice software's referral-out template. The ADA's specialty referrals guidance covers the conversation with the patient.
What do you do with CBCT links, uploads and shares as they arrive?
Treat each arrival type with one fixed action the same day: download a link before it expires, import an upload from the form host, accept and import a vendor share, and import an email attachment, then clear the copy from wherever it landed under your records policy. Note the channel and date in the queue entry each time.
| If it arrives as | Do this today |
|---|---|
| A CT or CBCT link | Download before the expiry date, import into your imaging software, and note the expiry date and download date in the queue entry |
| An upload through your referral form | Import from the form host, then delete the copy from the download folder |
| An imaging-vendor cloud share | Accept the share, import the study and send the acknowledgement |
| An email attachment | Import it, then remove it from the mailbox as your records policy says |
Choosing which channel to ask referring offices for is a separate decision, best agreed once with your IT provider and then published to every referring office. One OMS-specific note: if your practice runs WinOMS Hosted, Carestream's Hosted system requirements (10.1.x, checked 26 Oct 2026) say "Due to the large size of dental images, Carestream Dental Imaging users should consider upgrading to a higher-speed service (download and upload)." Bandwidth for each WinOMS setup is covered in WinOMS on a server, Hosted or Sensei Cloud.
How do you send the op note and post-op images back to the referring dentist?
Send a short report-back by the same channel the referral came in on, built from a template in your practice software. It names the patient, the date, what was done in the surgeon's words, which images are attached or shared and how, the follow-up plan, and who sees the patient next. A decline or redirect gets its own version.
Build these fields into the template once, then let the surgeon fill in only the clinical summary:
- Patient name and date of birth
- Date of consult or surgery
- Procedure summary, written by the surgeon
- Images attached or shared: which ones, by which channel, and any link-expiry date
- Follow-up plan and who sees the patient when
- For implant cases, the restorative hand-off details the referring dentist will need, as the surgeon records them
- The doctor-line number and the surgeon's preferred contact
- Decline or redirect variant: the reason in the surgeon's words, and where the patient was redirected, sent to the referrer's preferred email
If those letters come out of WinOMS, the Word edition matters. The v10.1.x System Requirements (checked 26 Oct 2026, p.4) list mail merge with "Microsoft Word 2019 as a part of a Microsoft Office 32 or 64-bit Professional Edition" or Word 2021, plus Word 2016, 2013, 2010 and 2007 as approved earlier versions. They add: "WinOMS does not support Office 365, Home, or Student editions of Microsoft Word or the Office Suite," and having multiple Office versions across the practice "may cause document incompatibilities and is not recommended." So for mail merge in 10.1.x, 64-bit Office Professional is listed; the 32-bit-only rule in the same document (p.7) applies to the Digital Forms module, which it says "is not currently functioning in WinOMS v10." On WinOMS Hosted, the Hosted requirements say "IMAP or Exchange email are supported."
Whether those letter PCs sit on an office server or connect to a hosted session changes who installs Word and where, which the WinOMS server, Hosted or Sensei Cloud guide sets out.
Vendors in the referral chain: what the regulation's text says
Every outside service that touches a referral is worth listing in one place: the form host, e-fax, email, file shares, an answering service, your IT provider and the referring offices themselves. For each, note how it handles patient information and where its agreement is filed. Whether each needs a business associate agreement is a question for your compliance adviser.
| Party | How it touches patient information | What to file |
|---|---|---|
| Web referral form host | Receives and stores submissions and uploads | Its agreement with the practice; ask your compliance adviser whether a BAA is needed |
| E-fax service | Receives and stores faxed referrals | Same |
| Email provider | Carries and stores referral email and attachments | Same |
| Cloud file share or imaging-vendor cloud | Stores and shares studies | Same |
| Answering service on the referral or after-hours line | Takes messages about patients | Same |
| IT provider | Maintains the systems that hold referrals | Same |
| The referring dental office | Sends the patient's information for treatment | Ask your compliance adviser how the definition below applies |
The definition sits in 45 CFR 160.103. It describes a business associate as a person who, on behalf of a covered entity, "creates, receives, maintains, or transmits protected health information" for a regulated function, and it lists exceptions. The first reads: business associate does not include "A health care provider, with respect to disclosures by a covered entity to the health care provider concerning the treatment of the individual." (eCFR, 45 CFR 160.103, checked 26 Oct 2026.)
This is the regulation's wording. How it applies to your practice is a question for your compliance adviser.
For the wider safeguards picture, see the HIPAA compliance checklist for dental practices and our page on HIPAA support for dental practices.
How should the referring-doctor phone line ring?
Give referring doctors their own number that rings the surgical coordinator first, then the front desk, with a set after-hours route to the doctor on call or an answering service. Print that number on the referral form and in every report-back letter, so a doctor never has to queue behind patient calls.
Work through this table with your phone provider. It is a checklist for the practice to complete, not a recommended configuration.
| Line | Own number or extension | Business-hours route | After-hours route | Voicemail to email? | Who checks it |
|---|---|---|---|---|---|
| Referring-doctor line | Its own number | Surgical coordinator, then front desk | Doctor on call or answering service | If yes, to a monitored group mailbox | Surgical coordinator |
| Referring-office staff line | Number or extension | Intake coordinator | Voicemail | Group mailbox | Intake coordinator |
| New-patient consult line | Main number | Front desk | Voicemail or answering service | Group mailbox | Front desk |
| Post-op and after-hours line | Number published to patients | Front desk | Doctor on call or answering service | As the practice decides | Doctor on call |
| Fax number | Its own number | E-fax inbox or machine | Same | Fax to group mailbox | Intake coordinator |
When you review the phone setup, our pages on dental office phone systems and phone and practice-software integration show what to ask for, including caller details that open the patient record.
The one-page referral intake setup checklist
Twelve tasks set up referral intake end to end. Each carries the label of who usually does it: IT, a vendor or the front desk. Work down the list over a few weeks, test with one friendly referring office, and repeat the end-to-end test every quarter.
Referral intake setup: 12 tasks
- Front desk: list every inbound channel, using the inventory table above
- Vendor: consolidate to one referral form host for every location
- Front desk: ask your compliance adviser which vendors need a BAA, using the vendor list above
- IT: set up a group mailbox for referrals and images, with multi-factor sign-in
- IT: set up the intake PC with AutoPlay off and the 8-step media procedure posted beside it
- IT: test the import path on a sample DICOM disc and a sample CT link
- IT: put a locally attached TWAIN scanner at each intake desk
- IT: keep the letter PCs on a Word edition your practice software supports for mail merge
- Front desk: load the report-back and decline templates into the practice software
- Vendor: set up the doctor line and its after-hours route with your phone provider
- IT: confirm images and referral documents sit inside the backup set, using the dental backup checklist
- Front desk: run a test referral end to end with one friendly referring office each quarter
For task 11, our dental backup checklist lists what a backup should cover and how to test a restore.
What to ask your IT provider about referral intake
Ask these before you hand intake setup to anyone. Each comes with what a good answer sounds like.
Media and imaging
- Which PC will read outside discs and USBs, and how is it set up? A good answer names one computer, AutoPlay off and a scan before opening.
- How do studies get from a disc or link into our imaging software? A good answer walks through the import function and who to call when it fails.
- Who keeps the intake PC's viewer and imaging software patched? A good answer names a person and a schedule.
Mail, forms and letters
- Where do form alerts and the records mailbox go? A good answer is a group mailbox with named members and multi-factor sign-in.
- Which Word edition do our letter PCs run, and does our practice software support it for mail merge? A good answer quotes the vendor's current requirements and the date they were checked.
Backups and tests
- Are referral images and documents in the backup, and when did you last restore one? A good answer gives a date.
How Legend Networking can help
Referral intake runs across the computers, mailboxes, scanners and accounts an IT provider already looks after. These are Legend Networking's own facts:
- Practices: Served over 3,500 practices since 2004
- Experience: 22+ years in dental IT (since 2004)
- Engineering team: In-house engineers; no outsourced first-level triage
- Monitoring and helpdesk: 24/7 monitoring, and a helpdesk staffed 24/7 at 1-800-794-1588
- Onsite: Onsite dispatch by appointment across served dental markets; remote-first nationwide
- Imaging: Legend supports the IT environment for Carestream imaging and Planmeca/Romexis
- Google reviews: 4.8 rating · 173 Google reviews
Oral surgery practices on Legend's project pages include Ecker Oral Surgery in Miami, where the March 2026 project page shows the technology buildout of the network rack, computers, AV systems and security surveillance, and East Austin Oral Surgery in Austin, Texas. WinOMS, CS OMS Imaging, OMSVision and the other systems named on this page are software your practice runs; we keep the computers, network, server, backups and accounts around them working, and each vendor supports its own application.
Frequently asked questions
How should an oral surgery office handle incoming referrals?
Route every referral, from any channel, into one queue. Each entry is logged, matched to one patient record, has its images imported into your imaging software, and is attached to the chart the same day. Then send the referring office a "received" note and schedule the patient. Give each step one owner across the front desk, the intake coordinator and IT.
Is it safe to open a CBCT disc or USB from another office?
Not on a networked clinical PC. A DICOM file's 128-byte preamble can hold executable code, a flaw catalogued as CVE-2019-11687 and published on 2 May 2019. Use one designated intake PC with AutoPlay off, scan the media first, import with your own imaging software, and never run the disc's bundled viewer on a networked computer.
What program should we use to open a DICOM CD from a referring office?
Use your own imaging software's import function, on a designated intake PC, so the study goes straight into the chart. If you must look before importing, open the disc's bundled viewer only on that isolated intake PC. Check that the disc has a DICOMDIR file; if it does not, ask the sending office how the disc was made.
What should an oral surgeon referral form include?
Start with the images: which types exist, the date of each, how they are coming, any CT link with its expiry date, and the patient name and date of birth as written on the images. Then the patient's details and insurance, the referring doctor's contact and preferred report-back email, the surgeon requested, urgency and a free-text reason.
What should we do when a CT link expires before we download it?
Ask the referring office or imaging center to share the study again, and log the new link with its expiry date in the referral queue. To stop it recurring, add a link-expiry date field to your referral form and check the queue for links that expire soon at each intake session, downloading them first.
Should oral surgeons still accept faxed referrals?
That is the practice's choice. Some programs no longer accept faxed referrals and ask for an online form instead. If you keep fax, route every fax into the same referral queue as web forms and email, preferably through an e-fax inbox that a group can see, and check your fax plan before your carrier retires its copper phone lines.
Does WinOMS letter mail merge work with Microsoft 365?
No. The WinOMS v10.1.x System Requirements, checked 26 October 2026, say WinOMS does not support Office 365, Home or Student editions of Word. Mail merge is listed for Word 2019 in a 32- or 64-bit Office Professional edition, or Word 2021, with Word 2016 to 2007 approved as earlier versions. Mixed Office versions across the practice are not recommended.
How should a referring-doctor phone line be set up?
Give referring doctors their own number that rings the surgical coordinator first, then the front desk. Set an after-hours route to the doctor on call or an answering service, and send any voicemail to a monitored group mailbox. Print the number on your referral form and in every report-back letter, and work through the routing with your phone provider.
What should an oral surgeon send back to the referring dentist after surgery?
A short report-back by the channel the referral came in on: patient name and date of birth, date of consult or surgery, the surgeon's procedure summary, which images are attached or shared and how, the follow-up plan and who sees the patient next, and the doctor-line number. For implant cases, include the restorative hand-off details the referring dentist will need.
The bottom line
If referrals still reach you in more ways than anyone can list, you are welcome to request a Free Dental IT Assessment. It gives written findings and prioritized recommendations on your computers, software, network security, backups and performance; bring the list of every way referrals reach you today. Referring patients to an oral surgeon? The same assessment covers your office. You can also call 1-800-794-1588, or read more about IT support for oral surgeons.