investigator notification system - QFINITY
QFINITY · References · Case Study

Case Study: Investigator Notification System.

How we helped an international CRO build a bespoke solution for notifying investigators electronically. The solution is GxP-compliant, integrated and validated using a risk-based approach per GAMP 5.

The problem

Manual, error-prone and without a solution on the market.

Notifying investigators about safety-related issues such as SUSARs by hand, day after day, was resource-intensive and error-prone. With no commercial product on the market able to meet the requirements, a bespoke solution was the only way forward. The customer set out to achieve:

  • Robust, compliant processes for distributing safety information to investigators electronically
  • Process control through metrics and reports
  • Electronic signatures for key steps, such as investigators acknowledging receipt of the information
  • Integration of the solution into the customer's CTMS
  • Risk-based validation per GAMP 5 to meet international requirements
Project execution

From new processes to a validated solution.

We began by designing new data-entry and distribution processes that reflected pharmacovigilance and clinical-trial regulations alongside the customer's own expectations, then translated them into detailed requirements for development with an external partner. Throughout development and rollout, QFINITY's contribution centered on:

Supplier evaluation (audit) of the system development partner's QMS
Reviewing and reworking processes against ICH E6(R2), pharmacovigilance rules, 21 CFR Part 11 and GDPR
Risk-assessing the processes and system to keep the validation effort lean
Designing integrations to cut processing times and strengthen data integrity
System validation: requirements, strategy, IQ, configuration review (OQ) and UAT
Designing and verifying reports and metrics in the CRO's BI platform
Result & benefit

A solution that makes compliance demonstrable.

A key success factor was the excellent communication between the customer, the external development partner and the validation team. It made an end-to-end validation approach possible, one that ran from the business process all the way through to the development specifications.

Delivered successfully, with validation scaled appropriately to the risk
End-to-end approach spanning business process, user requirements and development specifications
Detailed compliance data and metrics to demonstrably meet the compliance expectations of customers and regulators
A first of its kind, thoroughly assessed and signed off with no major deficiencies
Framing today.

The project ran under ICH E6(R2). The solution was validated using a risk-based approach per GAMP 5. The QFINITY-co-authored ISPE GAMP eClinical Good Practice Guide (2nd edition, 2024) sets out that methodology for GCP-relevant systems. Today, ICH E6(R3) and the EMA guideline on computerised systems are the framework we work in.

Result

First of its kind, assessed with no major deficiencies.

An industry first, the bespoke solution was thoroughly assessed and released with no major deficiencies, backed by solid compliance data for customers and regulators alike.

GCP 21 CFR Part 11 GDPR
More case studies

More from our project work.

Custom GxP systems, demonstrably validated.

You need a solution the market does not offer. We support you from process design and supplier audit through to risk-based validation per GAMP 5. In a free intro call (about 30 minutes), we map out your requirements, the right validation depth, and the integration points your project needs.

Book an intro call