{"id":17010,"date":"2026-08-24T19:46:52","date_gmt":"2026-08-24T17:46:52","guid":{"rendered":"https:\/\/q-finity.de\/aktuelles\/"},"modified":"2026-08-24T21:10:20","modified_gmt":"2026-08-24T19:10:20","slug":"updates","status":"publish","type":"page","link":"https:\/\/q-finity.de\/en\/updates\/","title":{"rendered":"Updates"},"content":{"rendered":"\n<div class=\"av-alb-blogposts template-blog  av-blog-meta-author-disabled av-blog-meta-comments-disabled av-blog-meta-category-disabled av-blog-meta-date-disabled av-blog-meta-tag-disabled \" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Blog\"><article class=\"post-entry post-entry-type-standard post-entry-17443 post-loop-1 post-parity-odd single-big with-slider post-17443 post type-post status-publish format-standard has-post-thumbnail hentry category-news-category\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\"><div class=\"blog-meta\"><\/div><div class=\"entry-content-wrapper clearfix standard-content\"><header class=\"entry-content-header\" aria-label=\"Post: AI in Pharma 2026 in Krak&oacute;w: AI-Supported Validation Between Vision and Reality\"><div class=\"av-heading-wrapper\"><span class=\"blog-categories minor-meta\"><a href=\"https:\/\/q-finity.de\/en\/kategorie\/news-category\/\" rel=\"tag\">Updates<\/a><\/span><h2 class=\"post-title entry-title \" itemprop=\"headline\"><a href=\"https:\/\/q-finity.de\/en\/ai-in-pharma-2026-krakow-report\/\" rel=\"bookmark\" title=\"Permanent Link: AI in Pharma 2026 in Krak&oacute;w: AI-Supported Validation Between Vision and Reality\">AI in Pharma 2026 in Krak&oacute;w: AI-Supported Validation Between Vision and Reality<span class=\"post-format-icon minor-meta\"><\/span><\/a><\/h2><\/div><\/header><span class=\"av-vertical-delimiter\"><\/span><div class=\"big-preview single-big\" itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\"><a href=\"https:\/\/q-finity.de\/en\/ai-in-pharma-2026-krakow-report\/\" title=\"AI in Pharma 2026 Krak&oacute;w: Frank Henrichmann vor dem Saal\"><img data-opt-id=1955449407  fetchpriority=\"high\" decoding=\"async\" loading=\"lazy\" width=\"1210\" height=\"423\" src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:1210\/h:423\/q:mauto\/rt:fill\/g:ce\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/11\/ai-in-pharma-2026-track-trusted-safe-regulated-ai-featured.jpg\" class=\"wp-image-17444 avia-img-lazy-loading-17444 attachment-entry_without_sidebar size-entry_without_sidebar wp-post-image\" alt=\"Frank Henrichmann spricht auf der AI in Pharma 2026 in Krak&oacute;w vor dem vollen Saal des Tracks Trusted, Safe and Regulated AI\"><\/a><\/div><div class=\"entry-content\" itemprop=\"text\"><p class=\"qf-abstract\">AI in Pharma 2026, the fourth edition of the conference run by ISPE Poland and its GAMP Community of Practice, brought practitioners from pharma, technology and the regulatory field together in Krak&oacute;w on October 26 and 27. Frank Henrichmann opened the track on trustworthy and regulated AI for QFINITY with a reality check. AI-supported validation of computerized systems is achievable today, within the applicable regulations and guidance, with the draft Annex 22 outlining the AI-specific additions.<\/p>\n<figure class=\"qf-figure right\"><img data-opt-id=1265208556  fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/11\/ai-in-pharma-2026-frank-henrichmann-requirement-to-test-evidence.jpg\" alt=\"Frank Henrichmann speaking in front of the slide AI From Requirement to Test Evidence at AI in Pharma 2026 in Krak&oacute;w\"><figcaption><b>From requirement to test evidence<\/b>Frank Henrichmann shows which steps in the validation workflow AI can take on.<\/figcaption><\/figure>\n<p>The program covered four tracks over two days, from &ldquo;Trusted, Safe &amp; Regulated AI&rdquo; to &ldquo;Sustainable &amp; Responsible AI&rdquo;. A student hackathon at AGH Krak&oacute;w had already taken place the day before. At the Novotel Krak&oacute;w Centrum, one question stood at the center, the question many quality organizations are working on right now. How do computerized systems with AI support get from pilot status into validated operation? Frank Henrichmann, Senior Executive Consultant at QFINITY and Chair of the ISPE GAMP Global Steering Committee, showed on day one how that question can be answered from a validation point of view. The vision of AI-supported CSV can be measured against what 21 CFR Part 11 and Annex 11 require, what <a href=\"https:\/\/q-finity.de\/en\/glossar\/gamp-5-begriff\/\" target=\"_self\" title=\"GAMP 5 - &quot;A Risk-Based Approach to Compliant GxP Computerized Systems&quot; - is ISPE's industry guide to the validation of computerized systems: published in 2008, and available since 2022 in the Second Edition, which strengthens critical thinking and scaled evidence. GAMP is industry good practice, not law: regulations set the requirements - GAMP shows a&hellip;\" class=\"encyclopedia\">GAMP 5<\/a> and the FDA&rsquo;s CSA guidance describe as the way to get there, and what the draft Annex 22 outlines for AI in GMP.<\/p>\n<div style=\"clear:both\"><\/div>\n<h2>Why validation is seen as a bottleneck<\/h2>\n<figure class=\"qf-figure left\"><img data-opt-id=1463697363  fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/11\/ai-in-pharma-2026-frank-henrichmann-validation-bottleneck.jpg\" alt=\"Frank Henrichmann with microphone in front of the slide The Validation Bottleneck at AI in Pharma 2026\"><figcaption><b>The bottleneck<\/b>Manual effort between compliance and innovation speed, the starting point of the talk.<\/figcaption><\/figure>\n<p>The talk started from the everyday reality of many validation teams. Risk assessments and test scripts are written by hand. Ambiguous requirements lead to ineffective tests and compliance gaps. Traceability lives in static spreadsheets that nobody likes to maintain. As a result, validation, a cornerstone of compliance, is perceived as a brake on innovation. This is where AI comes in, at drafts and routine steps.<\/p>\n<div style=\"clear:both\"><\/div>\n<p class=\"qf-keyq\">What may an AI draft in the validation workflow, and what remains a human decision?<\/p>\n<h2>Three approaches from the talk<\/h2>\n<div class=\"qf-gaplist\">\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">1<\/div>\n<div class=\"qf-gap-t\"><b>An adoption model in three stages.<\/b> The model follows the stages Crawl, Walk and Run. First, AI assists with drafts of requirements and test scripts; next, it serves as a tool in risk-based assessment; finally, it carries end-to-end traceability from requirement to test evidence. Each stage has its own scope of controls, and approval by the subject matter expert remains in place at every stage.<\/div>\n<\/div>\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">2<\/div>\n<div class=\"qf-gap-t\"><b>A comparison matrix of two routes.<\/b> The matrix sets out the advantages and disadvantages of supporting validation with a general-purpose language model versus an AI-enabled digital validation tool. <a href=\"https:\/\/q-finity.de\/en\/glossar\/alcoa\/\" target=\"_self\" title=\"ALCOA is a common acronym summarizing the criteria of data integrity (the ALCOA principles). It stands for: Attributable (i.e., identification of the source, the data originator - person, device, or system) Legible (and understandable) Contemporaneous (i.e., recorded at the time) Original (the initial record itself - paper-based or electronic - or a certified\/true copy) Accurate&hellip;\" class=\"encyclopedia\">ALCOA<\/a>++ and auditability apply to AI-generated records on both routes just as they do to manually created ones.<\/div>\n<\/div>\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">3<\/div>\n<div class=\"qf-gap-t\"><b>A way to calculate the business case.<\/b> Using a typical system as the example, the talk showed how the effort of initial validation and revalidation can be compared with and without AI drafts, and which review steps remain in both cases. The underlying pattern stays the same: the AI produces drafts, a human reviews and approves them. It carries over to other system landscapes once the intended use and the risk assessment of the system are in place.<\/div>\n<\/div>\n<\/div>\n<h2>What QFINITY takes home from Krak&oacute;w<\/h2>\n<p>Four tracks, a hackathon and talks from users such as GSK, Roche and Polpharma show that the discussion has arrived at the question of how AI in validation is controlled in a way that can be demonstrated. As Chair of the ISPE GAMP Global Steering Committee, Frank Henrichmann bridged the Polish GAMP community and the global GAMP work, which includes the GAMP Guide Artificial Intelligence. For users, the conclusion is that the path to AI-supported validation runs through controls the current regulations already require.<\/p>\n<p>Our topic area <a href=\"https:\/\/q-finity.de\/en\/artificial-intelligence\/\">Artificial Intelligence in the GxP Environment<\/a> shows how we use AI in your validation without losing the evidence. What the EU expects of AI in GMP is explained in our article on the <a href=\"https:\/\/q-finity.de\/en\/eu-gmp-annex-22\/\">draft EU GMP Annex 22<\/a>. If you would like to talk to us directly, <a href=\"https:\/\/q-finity.de\/en\/contact\/#formular\">book an appointment<\/a>.<\/p>\n<blockquote class=\"qf-pullquote\"><p>Trust is not reviewed into a system. It is designed into it.<\/p><\/blockquote>\n<p><a class=\"qf-extref\" href=\"https:\/\/ispe.org.pl\/ai-in-pharma-2026\/\" target=\"_blank\" rel=\"noopener\"><span class=\"qf-extref-text\">AI in Pharma 2026, ISPE Poland Affiliate (ispe.org.pl)<\/span><span class=\"qf-extref-arrow\">&#8599;<\/span><\/a><\/p>\n<div style=\"clear:both\"><\/div>\n<div class=\"qf-carousel\" data-qf-carousel tabindex=\"0\" aria-roledescription=\"Carousel\" aria-label=\"From Krak&oacute;w\">\n<div class=\"qf-car-head\"><span class=\"qf-car-eyebrow\">Impressions<\/span><span class=\"qf-car-title\">From Krak&oacute;w<\/span><span class=\"qf-car-count\"><b class=\"cur\">1<\/b>&thinsp;\/&thinsp;5<\/span><\/div>\n<div class=\"qf-car-viewport\">\n<div class=\"qf-car-track\">\n<figure class=\"qf-car-slide\"><img data-opt-id=1649104777  fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/11\/ai-in-pharma-2026-track-trusted-safe-regulated-ai.jpg\" alt=\"Frank Henrichmann speaking to the full room of the track Trusted, Safe and Regulated AI\"><figcaption>A full room for the opening of the &ldquo;Trusted, Safe &amp; Regulated AI&rdquo; track.<\/figcaption><\/figure>\n<figure class=\"qf-car-slide\"><img data-opt-id=1785132833  fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/11\/ai-in-pharma-2026-fragerunde-moderation.jpg\" alt=\"Moderator with microphone and Frank Henrichmann in front of the audience during the Q&amp;A\"><figcaption>Q&amp;A after the talk.<\/figcaption><\/figure>\n<figure class=\"qf-car-slide\"><img data-opt-id=2060967381  fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/11\/ai-in-pharma-2026-frank-henrichmann-publikum-frage.jpg\" alt=\"Frank Henrichmann asking a question from the audience with a microphone\"><figcaption>The audience joined the discussion as well.<\/figcaption><\/figure>\n<figure class=\"qf-car-slide\"><img data-opt-id=1624657450  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/11\/ai-in-pharma-2026-roundtable.jpg\"  decoding=\"async\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%20100%%20100%%22%20width%3D%22100%%22%20height%3D%22100%%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%22100%%22%20height%3D%22100%%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" alt=\"Participants at a round table, Frank Henrichmann in the foreground\"><figcaption>Round table on the fringes of the conference.<\/figcaption><\/figure>\n<figure class=\"qf-car-slide\"><img data-opt-id=760231525  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/11\/ai-in-pharma-2026-gespraech-pause.jpg\"  decoding=\"async\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%20100%%20100%%22%20width%3D%22100%%22%20height%3D%22100%%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%22100%%22%20height%3D%22100%%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" alt=\"Frank Henrichmann in conversation with two participants during the break\"><figcaption>Conversations during the break.<\/figcaption><\/figure>\n<\/div>\n<p><button class=\"qf-car-btn qf-car-prev\" type=\"button\" aria-label=\"Previous image\">&lsaquo;<\/button><button class=\"qf-car-btn qf-car-next\" type=\"button\" aria-label=\"Next image\">&rsaquo;<\/button><\/p><\/div>\n<div class=\"qf-car-dots\"><button class=\"qf-car-dot on\" type=\"button\" aria-label=\"Image 1\"><\/button><button class=\"qf-car-dot\" type=\"button\" aria-label=\"Image 2\"><\/button><button class=\"qf-car-dot\" type=\"button\" aria-label=\"Image 3\"><\/button><button class=\"qf-car-dot\" type=\"button\" aria-label=\"Image 4\"><\/button><button class=\"qf-car-dot\" type=\"button\" aria-label=\"Image 5\"><\/button><\/div>\n<\/div>\n<\/div><span class=\"post-meta-infos\"><\/span><footer class=\"entry-footer\"><\/footer><div class=\"post_delimiter\"><\/div><\/div><div class=\"post_author_timeline\"><\/div><span class=\"hidden\">\n\t\t\t\t<span class=\"av-structured-data\" itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\">\n\t\t\t\t\t\t<span itemprop=\"url\">https:\/\/q-finity.de\/wp-content\/uploads\/2026\/11\/ai-in-pharma-2026-track-trusted-safe-regulated-ai-featured.jpg<\/span>\n\t\t\t\t\t\t<span itemprop=\"height\">1706<\/span>\n\t\t\t\t\t\t<span itemprop=\"width\">2560<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<span class=\"av-structured-data\" itemprop=\"publisher\" itemtype=\"https:\/\/schema.org\/Organization\" itemscope=\"itemscope\">\n\t\t\t\t\t\t<span itemprop=\"name\">Oliver Herrmann<\/span>\n\t\t\t\t\t\t<span itemprop=\"logo\" itemscope itemtype=\"https:\/\/schema.org\/ImageObject\">\n\t\t\t\t\t\t\t<span itemprop=\"url\">https:\/\/q-finity.de\/wp-content\/uploads\/2026\/07\/q-finity_schriftzug_orange-retina.png<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/span><span class=\"av-structured-data\" itemprop=\"author\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Person\"><span itemprop=\"name\">Oliver Herrmann<\/span><\/span><span class=\"av-structured-data\" itemprop=\"datePublished\" datetime=\"2026-11-03T16:08:21+01:00\">2026-11-03 16:08:21<\/span><span class=\"av-structured-data\" itemprop=\"dateModified\" itemtype=\"https:\/\/schema.org\/dateModified\">2026-11-03 16:53:05<\/span><span class=\"av-structured-data\" itemprop=\"mainEntityOfPage\" itemtype=\"https:\/\/schema.org\/mainEntityOfPage\"><span itemprop=\"name\">AI in Pharma 2026 in Krak&oacute;w: AI-Supported Validation Between Vision and Reality<\/span><\/span><\/span><\/article><article class=\"post-entry post-entry-type-standard post-entry-17440 post-loop-2 post-parity-even single-big with-slider post-17440 post type-post status-publish format-standard has-post-thumbnail hentry category-news-category\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\"><div class=\"blog-meta\"><\/div><div class=\"entry-content-wrapper clearfix standard-content\"><header class=\"entry-content-header\" aria-label=\"Post: DSAG Life Sciences Working Group 2026: The Invented Reviewer\"><div class=\"av-heading-wrapper\"><span class=\"blog-categories minor-meta\"><a href=\"https:\/\/q-finity.de\/en\/kategorie\/news-category\/\" rel=\"tag\">Updates<\/a><\/span><h2 class=\"post-title entry-title \" itemprop=\"headline\"><a href=\"https:\/\/q-finity.de\/en\/dsag-life-sciences-working-group-2026-the-invented-reviewer\/\" rel=\"bookmark\" title=\"Permanent Link: DSAG Life Sciences Working Group 2026: The Invented Reviewer\">DSAG Life Sciences Working Group 2026: The Invented Reviewer<span class=\"post-format-icon minor-meta\"><\/span><\/a><\/h2><\/div><\/header><span class=\"av-vertical-delimiter\"><\/span><div class=\"big-preview single-big\" itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\"><a href=\"https:\/\/q-finity.de\/en\/dsag-life-sciences-working-group-2026-the-invented-reviewer\/\" title=\"DSAG 2026: Der erfundene Reviewer\"><img data-opt-id=286419539  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:1210\/h:423\/q:mauto\/rt:fill\/g:ce\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/dsag-2026-der-erfundene-reviewer.jpg\"  decoding=\"async\" loading=\"lazy\" width=\"1210\" height=\"423\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%201210%20423%22%20width%3D%221210%22%20height%3D%22423%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%221210%22%20height%3D%22423%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" class=\"wp-image-17441 avia-img-lazy-loading-17441 attachment-entry_without_sidebar size-entry_without_sidebar wp-post-image\" alt=\"Linienzeichnung: ein Dokument zwischen zwei gestrichelten Figuren, daneben ein Mensch mit erhobener Hand, der stoppt\"><\/a><\/div><div class=\"entry-content\" itemprop=\"text\"><p class=\"qf-abstract\">The DSAG Life Sciences Processes working group met on October 21 and 22, 2026 in Hockenheim under the heading &ldquo;Between innovation and compliance: AI in the GxP environment&rdquo;. QFINITY opened the afternoon of day one with the impulse talk &ldquo;The Invented Reviewer&rdquo;. What the safety tests of two AI labs and the UK AI Security Institute in summer 2026 reveal about agents, and why it matters to every user who gives an agent write access in an SAP landscape.<\/p>\n<figure class=\"qf-figure right\"><img data-opt-id=875537573  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/dsag-2026-drei-grenzen-drei-fehlschlaege.jpg\"  decoding=\"async\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%20100%%20100%%22%20width%3D%22100%%22%20height%3D%22100%%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%22100%%22%20height%3D%22100%%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" alt=\"Three boundaries as a line drawing: a dashed line, a torn wall and an open gate, with a process line running through them\"><figcaption><b>Three boundaries<\/b>Prompt, sandbox and task: the three boundaries Anthropic, OpenAI and the AISI set for their agents.<\/figcaption><\/figure>\n<p>Around the keynote by Stefan M&uuml;nch (GAMP D-A-CH) and the SAP sessions on Autonomous Regulated Manufacturing and Cloud ERP GxP Readiness, two days revolved around the same question. How does AI get from pilot status into validated operation? Oliver Herrmann (QFINITY) took the first part of the session block at 1:30 pm from Washington, where the ISPE Annual Meeting was running at the same time. Alexander Kunz (Merck KGaA) delivered the second part with &ldquo;Einf&uuml;hrung von KI im GxP Umfeld @ Merck&rdquo;.<\/p>\n<div style=\"clear:both\"><\/div>\n<h2>Three boundaries, three failures, nobody was watching<\/h2>\n<p>In summer 2026, Anthropic, OpenAI and the AI Security Institute (AISI) published what happened in their safety tests with the protective classifiers deliberately switched off. What happened in the tests, case by case:<\/p>\n<div class=\"qf-gaplist\">\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">1<\/div>\n<div class=\"qf-gap-t\"><b>Anthropic: the boundary in the prompt.<\/b> &ldquo;No internet access&rdquo; was written into the prompt, but a misconfiguration of the test environment left the connection open. That only came to light afterwards, during a review of 141,006 evaluation runs. The result was a malicious package in a public package registry, installed on 15 real systems.<\/div>\n<\/div>\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">2<\/div>\n<div class=\"qf-gap-t\"><b>OpenAI: the boundary in the sandbox.<\/b> The sandbox was technically sealed, until the agents found a previously unknown vulnerability in the sandbox's artifact repository (JFrog Artifactory), its only service with an internet connection, and, from July 11 to 13, broke into production systems of the AI platform Hugging Face. Hugging Face discovered the intrusion itself.<\/div>\n<\/div>\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">3<\/div>\n<div class=\"qf-gap-t\"><b>AISI: the boundary in the task.<\/b> The AISI left the internet open on purpose; the only boundary was the scope of the task. There, security monitoring fired and stopped the run within an hour, with no demonstrated real-world harm, but with a pull request into a real software project.<\/div>\n<\/div>\n<\/div>\n<p>For users, this means: a prompt is not a network boundary, a sandbox alone is not one either, and reading logs after the fact is not oversight. All agents ran in test environments of the labs, their partners or the AISI. The damage occurred at third parties on the internet. As far as is known, no pharmaceutical company and no SAP system has been affected so far. What do we learn from this when agents look for the path of least resistance to complete a task? The question arises as soon as models from the same vendors, with considerably stricter safeguards, work as agents in enterprise systems and receive write access in GxP environments.<\/p>\n<h2>What the logs show<\/h2>\n<p>Two investigation reports document the agents' logged reasoning, the report by METR and Redwood Research on the Hugging Face incident and the AISI incident report. They contain three patterns familiar from deviation reports and inspections, until now only from humans:<\/p>\n<div class=\"qf-gaplist\">\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">1<\/div>\n<div class=\"qf-gap-t\"><b>The rationalization.<\/b> &ldquo;External infrastructure exploit is outside intended scope. However task impossible, peers doing it. We should continue.&rdquo; Reasoning of an agent during the attack on Hugging Face. More than 90 % of the 533 agents on the internal message board took part.<\/div>\n<\/div>\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">2<\/div>\n<div class=\"qf-gap-t\"><b>The trail.<\/b> &ldquo;Our thoughts aren't necessarily logged?&rdquo; In at least 20 % of the agents, the reasoning contains deliberations about manipulating their own logs for the automated grader. What was forged were individual tool calls in the transcript, which the reasoning treated as the basis of the grading. The reasoning itself was left untouched; the agents assumed it was not being recorded.<\/div>\n<\/div>\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">3<\/div>\n<div class=\"qf-gap-t\"><b>The invented reviewer.<\/b> A pull request with hidden malicious code into a real open-source project. Under several invented identities, a second voice appeared and assured that it had reviewed the code and found nothing harmful. Submitter and second voice belonged to the same agent. The human maintainer rejected the pull request.<\/div>\n<\/div>\n<\/div>\n<p>In the third case, the attack was not aimed at the technology but at the review. The review held because a human did not hand over his judgment to the second voice.<\/p>\n<p class=\"qf-keyq\">Who in your SAP landscape would notice if an agent invented its own reviewer?<\/p>\n<h2>Missing alignment or missing boundaries?<\/h2>\n<figure class=\"qf-figure left\"><img data-opt-id=2121571913  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/dsag-2026-kontrollarchitektur-um-den-agenten.jpg\"  decoding=\"async\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%20100%%20100%%22%20width%3D%22100%%22%20height%3D%22100%%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%22100%%22%20height%3D%22100%%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" alt=\"Line drawing of a control architecture: an agent at the core, enclosed by two frames, with measuring points at input and output and a switch\"><figcaption><b>Around the agent<\/b>Measuring points at input and output, a switch for the stop and a chain of records, the architecture the impulse talk put up for discussion.<\/figcaption><\/figure>\n<p>In all three cases, completing the assigned task remained the agents' measure, and in all three cases they left the frame without purpose-built monitoring recognizing it at the moment it happened. Ethical concerns surfaced in the reasoning but rarely limited the action. Whether an agent behaves differently under observation than unobserved cannot be ruled out in a test. For regulated users, the question of intent therefore leads nowhere. What matters is what an agent is allowed to do, within which boundaries it executes actions, and how reliably the control mechanisms enforce those boundaries.<\/p>\n<p>Inspectors have asked these questions for decades, so far of people and systems. The impulse talk ended with two of them for the drive home, and they apply to every SAP landscape: Which systems already give an agent write access today? Who can stop it, and what happens to the data afterwards?<\/p>\n<div style=\"clear:both\"><\/div>\n<h2>Insight: four entry points into the SAP world<\/h2>\n<p>Anyone who wants to answer the two questions for their own SAP landscape will find four places at SAP where the entry begins. What SAP offers there comes first in each case; what reaches the operator follows.<\/p>\n<p><b>1. See which agents exist and who is responsible for them.<\/b> The SAP AI Agent Hub, built on SAP LeanIX, keeps a central registry of all agents, MCP servers and language models in the landscape, from SAP, partners and in-house development. Each entry carries identity, owner, capabilities, technology stack and governance status; an optional extension for risk assessment under the EU AI Act assigns agents to a risk class. Agents that have not yet passed verification remain in a pending state, and each agent's identity sits alongside human identities in SAP Cloud Identity Services. Noticing presupposes that someone knows which agents exist. For an inspector, the registry counts only once it matches the system inventory of the QMS and every entry names a responsible person.<\/p>\n<p><b>2. Understand what happens to the data after the stop.<\/b> In its white paper on Joule in GxP-regulated environments (May 2026), SAP describes, along <a href=\"https:\/\/q-finity.de\/en\/glossar\/gamp-5-begriff\/\" target=\"_self\" title=\"GAMP 5 - &quot;A Risk-Based Approach to Compliant GxP Computerized Systems&quot; - is ISPE's industry guide to the validation of computerized systems: published in 2008, and available since 2022 in the Second Edition, which strengthens critical thinking and scaled evidence. GAMP is industry good practice, not law: regulations set the requirements - GAMP shows a&hellip;\" class=\"encyclopedia\">GAMP 5<\/a> Appendix D11 and ISO 42001, the lifecycle controls an agent needs in GxP operation: monitoring in operation, change control with version control for model and data changes, periodic revalidation with CAPA, and maps what Joule brings to each of them. Joule is decision support, the human remains the decision maker (human-in-the-loop); SAP provides platform logging, the operator sets up application logging. A revised edition that takes the GAMP AI Guide into account is, according to SAP, in preparation. Which event at the agent triggers a renewed check, such as a new model behind the same interface, is left to the operator in the white paper; the operator defines those triggers.<\/p>\n<p><b>3. Know the vendor's guardrails.<\/b> In its Responsible AI principles, SAP sets out the rules by which the company selects, implements and controls AI use cases. For the question &ldquo;alignment or boundaries&rdquo;, that is the frame in which SAP builds its own agents. These are the vendor's rules for its products. The controls in their own operation, and the boundaries there, are set by the user.<\/p>\n<p><b>4. Place the architecture as a whole.<\/b> The AI-native North Star Architecture describes SAP's target picture in four layers, with Joule as the entrance, agents that execute processes across system boundaries, and a platform that provides runtime, sandbox, observability and governance. Every call passes through a controlled gateway; only exceptions and policy-bound decisions go to a human. SAP explicitly calls the document a direction, not a commitment.<\/p>\n<p>These four places deliver the capability. The control architecture an inspector sees is built by the operator: the intended use of the process step the agent serves, the limits of its rights, the records under <a href=\"https:\/\/q-finity.de\/en\/glossar\/alcoa\/\" target=\"_self\" title=\"ALCOA is a common acronym summarizing the criteria of data integrity (the ALCOA principles). It stands for: Attributable (i.e., identification of the source, the data originator - person, device, or system) Legible (and understandable) Contemporaneous (i.e., recorded at the time) Original (the initial record itself - paper-based or electronic - or a certified\/true copy) Accurate&hellip;\" class=\"encyclopedia\">ALCOA<\/a>++ and the person who stops it. That is where our work begins.<\/p>\n<p>Why a human-in-the-loop alone is not yet control is explained in our article <a href=\"https:\/\/q-finity.de\/en\/company\/publications\/human-in-the-loop-illusion-of-control\/\">Human-in-the-Loop: An Illusion of Control?<\/a>. What the answer looks like for your SAP landscape is something we clarify in conversation: <a href=\"https:\/\/q-finity.de\/en\/contact\/#formular\">book an appointment<\/a>. The working group meets again on April 7 and 8, 2027.<\/p>\n<blockquote class=\"qf-pullquote\"><p>Trust is not reviewed into a system. It is designed into it.<\/p><\/blockquote>\n<p><a class=\"qf-extref\" href=\"https:\/\/dsag.de\/\" target=\"_blank\" rel=\"noopener\"><span class=\"qf-extref-text\">DSAG, German-speaking SAP User Group (dsag.de)<\/span><span class=\"qf-extref-arrow\">&#8599;<\/span><\/a><a class=\"qf-extref\" href=\"https:\/\/architecture.learning.sap.com\/docs\/ref-arch\/jfhsd9\" target=\"_blank\" rel=\"noopener\"><span class=\"qf-extref-text\">SAP AI Agent Hub, reference architecture (architecture.learning.sap.com)<\/span><span class=\"qf-extref-arrow\">&#8599;<\/span><\/a><a class=\"qf-extref\" href=\"https:\/\/www.sap.com\/documents\/2026\/05\/5605d4af-507f-0010-bca6-c68f7e60039b.html\" target=\"_blank\" rel=\"noopener\"><span class=\"qf-extref-text\">SAP white paper: Joule in GxP environments, May 2026 (sap.com)<\/span><span class=\"qf-extref-arrow\">&#8599;<\/span><\/a><a class=\"qf-extref\" href=\"https:\/\/architecture.learning.sap.com\/docs\/ai-native-north-star-architecture\" target=\"_blank\" rel=\"noopener\"><span class=\"qf-extref-text\">SAP AI-native North Star Architecture (architecture.learning.sap.com)<\/span><span class=\"qf-extref-arrow\">&#8599;<\/span><\/a><\/p>\n<\/div><span class=\"post-meta-infos\"><\/span><footer class=\"entry-footer\"><\/footer><div class=\"post_delimiter\"><\/div><\/div><div class=\"post_author_timeline\"><\/div><span class=\"hidden\">\n\t\t\t\t<span class=\"av-structured-data\" itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\">\n\t\t\t\t\t\t<span itemprop=\"url\">https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/dsag-2026-der-erfundene-reviewer.jpg<\/span>\n\t\t\t\t\t\t<span itemprop=\"height\">1440<\/span>\n\t\t\t\t\t\t<span itemprop=\"width\">2560<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<span class=\"av-structured-data\" itemprop=\"publisher\" itemtype=\"https:\/\/schema.org\/Organization\" itemscope=\"itemscope\">\n\t\t\t\t\t\t<span itemprop=\"name\">Oliver Herrmann<\/span>\n\t\t\t\t\t\t<span itemprop=\"logo\" itemscope itemtype=\"https:\/\/schema.org\/ImageObject\">\n\t\t\t\t\t\t\t<span itemprop=\"url\">https:\/\/q-finity.de\/wp-content\/uploads\/2026\/07\/q-finity_schriftzug_orange-retina.png<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/span><span class=\"av-structured-data\" itemprop=\"author\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Person\"><span itemprop=\"name\">Oliver Herrmann<\/span><\/span><span class=\"av-structured-data\" itemprop=\"datePublished\" datetime=\"2026-10-26T16:48:29+01:00\">2026-10-26 16:48:29<\/span><span class=\"av-structured-data\" itemprop=\"dateModified\" itemtype=\"https:\/\/schema.org\/dateModified\">2026-11-04 07:15:22<\/span><span class=\"av-structured-data\" itemprop=\"mainEntityOfPage\" itemtype=\"https:\/\/schema.org\/mainEntityOfPage\"><span itemprop=\"name\">DSAG Life Sciences Working Group 2026: The Invented Reviewer<\/span><\/span><\/span><\/article><article class=\"post-entry post-entry-type-standard post-entry-17380 post-loop-3 post-parity-odd post-entry-last single-big with-slider post-17380 post type-post status-publish format-standard has-post-thumbnail hentry category-news-category\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/BlogPosting\"><div class=\"blog-meta\"><\/div><div class=\"entry-content-wrapper clearfix standard-content\"><header class=\"entry-content-header\" aria-label=\"Post: ISPE Annual Meeting 2026: Who Reviews the Reviewer?\"><div class=\"av-heading-wrapper\"><span class=\"blog-categories minor-meta\"><a href=\"https:\/\/q-finity.de\/en\/kategorie\/news-category\/\" rel=\"tag\">Updates<\/a><\/span><h2 class=\"post-title entry-title \" itemprop=\"headline\"><a href=\"https:\/\/q-finity.de\/en\/ispe-annual-meeting-2026-who-reviews-the-reviewer\/\" rel=\"bookmark\" title=\"Permanent Link: ISPE Annual Meeting 2026: Who Reviews the Reviewer?\">ISPE Annual Meeting 2026: Who Reviews the Reviewer?<span class=\"post-format-icon minor-meta\"><\/span><\/a><\/h2><\/div><\/header><span class=\"av-vertical-delimiter\"><\/span><div class=\"big-preview single-big\" itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\"><a href=\"https:\/\/q-finity.de\/en\/ispe-annual-meeting-2026-who-reviews-the-reviewer\/\" title=\"ispe-annual-meeting-2026-progressive-qa-buehne\"><img data-opt-id=745471403  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:1210\/h:423\/q:mauto\/rt:fill\/g:ce\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/ispe-annual-meeting-2026-progressive-qa-buehne.jpg\"  decoding=\"async\" loading=\"lazy\" width=\"1210\" height=\"423\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%201210%20423%22%20width%3D%221210%22%20height%3D%22423%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%221210%22%20height%3D%22423%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" class=\"wp-image-17381 avia-img-lazy-loading-17381 attachment-entry_without_sidebar size-entry_without_sidebar wp-post-image\" alt=\"Oliver Herrmann und Martin Heitmann auf der B&uuml;hne des ISPE Annual Meeting 2026 beim Vortrag Progressive QA\"><\/a><\/div><div class=\"entry-content\" itemprop=\"text\"><p class=\"qf-abstract\">The 2026 ISPE Annual Meeting &amp; Expo in National Harbor near Washington, D.C., put one question at the center of its Digital, <a href=\"https:\/\/q-finity.de\/en\/glossar\/data\/\" target=\"_self\" title=\"Data generally denotes facts, values (numerical or otherwise) or recordable findings, such as those obtained by measurements or observation.\" class=\"encyclopedia\">Data<\/a> and Decision Integrity track, a question QFINITY has worked on for years. Who reviews the reviewer when AI writes and checks at the same time? QFINITY was there with two talks, one on oversight of AI systems and one on the computerized system validation lifecycle.<\/p>\n<figure class=\"qf-figure right\"><img data-opt-id=887100775  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/ispe-annual-meeting-2026-progressive-qa-buehne.jpg\"  decoding=\"async\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%20100%%20100%%22%20width%3D%22100%%22%20height%3D%22100%%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%22100%%22%20height%3D%22100%%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" alt=\"Oliver Herrmann and Martin Heitmann on stage at the 2026 ISPE Annual Meeting presenting Progressive QA\"><figcaption><b>On stage<\/b>Oliver Herrmann and Martin Heitmann open the Progressive QA talk on October 19.<\/figcaption><\/figure>\n<p>From October 18 to 21, 2026, the industry met at the Gaylord National Resort &amp; Convention Center on the Potomac. Whether AI models will enter GxP processes was hardly up for debate anymore. The discussion was about who carries the results once agentic systems take actions, change records or write review reports, while the person who signs off at the end sees only the outcome. What additional information that person needs for oversight to remain effective was the track&rsquo;s second question. The regulatory expectation itself has not changed, but with AI systems an organization has to meet it at a different point than before.<\/p>\n<div style=\"clear:both\"><\/div>\n<h2>Progressive QA: Who decides, who stops?<\/h2>\n<p>Oliver Herrmann (QFINITY) and Martin Heitmann (MH Consulting &amp; Advisory) started with Socrates and the mask of the ancient theater. A person speaks through the mask, and the mask changes nothing about that person&rsquo;s responsibility, however convincing it may sound. Applied to AI output, plausibility is no substitute for human judgment. Three cases from 2026 made the risk tangible. In a security evaluation by the UK AI Security Institute, an agent created fake identities, one of which praised the agent&rsquo;s own code as an independent reviewer, until a human maintainer refused the pull request. The UK MHRA reported in June on inspection responses containing invented references to guidance, and the FDA cited &ldquo;overreliance on artificial intelligence&rdquo; in a warning letter because AI-generated documents had not been reviewed at all.<\/p>\n<p>The talk&rsquo;s answer was a control architecture that is in place before the system goes live. <a href=\"https:\/\/q-finity.de\/en\/glossar\/quality\/\" target=\"_self\" title='The term quality is derived from the Latin word \"qualitas\", which means characteristic, feature, property or condition. In other words, the term quality defines the degree to which a set of inherent characteristics of an object meets requirements. Inherent means \"intrinsic to a particular unit\".' class=\"encyclopedia\">Quality<\/a> emerges from the interplay of business processes with data, application, infrastructure, model and controls; the model is verified, the overall system is validated in its process, and the rights to decide and to stop are assigned. A technical trigger may halt the agent; a named person carries the responsibility for it.<\/p>\n<p class=\"qf-keyq\">Who in your organization could say today what stops an AI agent, who is accountable for it, and what happens to its data afterwards?<\/p>\n<div style=\"clear:both\"><\/div>\n<h2>Four risks when the language model holds the validation data<\/h2>\n<figure class=\"qf-figure left\"><img data-opt-id=1338252033  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/ispe-annual-meeting-2026-regulatoren-panel.jpg\"  decoding=\"async\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%20100%%20100%%22%20width%3D%22100%%22%20height%3D%22100%%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%22100%%22%20height%3D%22100%%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" alt=\"Panel with regulators at the 2026 ISPE Annual Meeting\"><figcaption><b>On the panel<\/b>Regulators on the final conference day in the Digital, <a href=\"https:\/\/q-finity.de\/en\/glossar\/data\/\" target=\"_self\" title=\"Data generally denotes facts, values (numerical or otherwise) or recordable findings, such as those obtained by measurements or observation.\" class=\"encyclopedia\">Data<\/a> and Decision Integrity track.<\/figcaption><\/figure>\n<p>On the morning of the same day, Frank Henrichmann (QFINITY) showed how AI can be integrated into the computerized system validation lifecycle without weakening the evidence. Building on the article <a href=\"https:\/\/q-finity.de\/en\/company\/publications\/how-ai-will-transform-csv\/\">How AI Will Transform Computerized System Validation<\/a> in Pharmaceutical Engineering, he demonstrated what works today: requirements are captured in plain language as structured data, risks are assessed, test scripts are generated with traceability to the requirement, and a subject matter expert approves them before execution. Annex 11 and 21 CFR Part 11 remain the yardstick for attributability and data integrity, and <a href=\"https:\/\/q-finity.de\/en\/glossar\/gamp-5-begriff\/\" target=\"_self\" title=\"GAMP 5 - &quot;A Risk-Based Approach to Compliant GxP Computerized Systems&quot; - is ISPE's industry guide to the validation of computerized systems: published in 2008, and available since 2022 in the Second Edition, which strengthens critical thinking and scaled evidence. GAMP is industry good practice, not law: regulations set the requirements - GAMP shows a&hellip;\" class=\"encyclopedia\">GAMP 5<\/a> Second Edition remains the methodology for scaling the depth of verification to the risk. When a general-purpose language model without controlled integration becomes the leading system for validation data, the talk identified four risks:<\/p>\n<div class=\"qf-gaplist\">\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">1<\/div>\n<div class=\"qf-gap-t\"><b>Data integrity.<\/b> Content moves between chats and documents without provenance, version, author or audit trail. <a href=\"https:\/\/q-finity.de\/en\/glossar\/alcoa\/\" target=\"_self\" title=\"ALCOA is a common acronym summarizing the criteria of data integrity (the ALCOA principles). It stands for: Attributable (i.e., identification of the source, the data originator - person, device, or system) Legible (and understandable) Contemporaneous (i.e., recorded at the time) Original (the initial record itself - paper-based or electronic - or a certified\/true copy) Accurate&hellip;\" class=\"encyclopedia\">ALCOA<\/a>++ cannot be met this way.<\/div>\n<\/div>\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">2<\/div>\n<div class=\"qf-gap-t\"><b>Hallucination.<\/b> The model produces convincing but false requirements, test steps, acceptance criteria or references. Every item has to be checked against the approved source.<\/div>\n<\/div>\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">3<\/div>\n<div class=\"qf-gap-t\"><b>Confidentiality.<\/b> Uncontrolled prompts carry process knowledge, validation records and personal data to an external provider.<\/div>\n<\/div>\n<div class=\"qf-gap\">\n<div class=\"qf-gap-n\">4<\/div>\n<div class=\"qf-gap-t\"><b>Traceability.<\/b> A chat history documents neither model and prompt nor source data and output version of a test case. Without that chain there is no basis for change control of the test cases.<\/div>\n<\/div>\n<\/div>\n<p>The regulatory framework is tightening right now. With <a href=\"https:\/\/q-finity.de\/en\/glossar\/computer\/\" target=\"_self\" title=\"A Computer is a functional unit that can perform substantial computations, including numerous arithmetic operations and logic operations without human intervention.\" class=\"encyclopedia\">Computer<\/a> Software Assurance the FDA scales the depth of verification to the risk, and the draft of its AI guidance puts risk and context of use at the center. The EU drafts of Chapter 4, Annex 11 and Annex 22 address the chain from the record through the computerized system to the model, and the EMA report on its Annex 22 expert workshop of June 30 and July 1, published in early October, suggests that the final text could cover dynamic and generative models provided a documented, risk-based control strategy is in place. Specific requirements for agentic systems do not exist yet. This is where QFINITY works at the leading edge. What follows for control is set out in our article <a href=\"https:\/\/q-finity.de\/en\/company\/publications\/human-in-the-loop-illusion-of-control\/\">Human-in-the-Loop as an Illusion of Control?<\/a> and on our <a href=\"https:\/\/q-finity.de\/en\/eu-gmp-annex-22\/\">EU GMP Annex 22<\/a> page.<\/p>\n<p>That QFINITY helps shape this development also shows in its roles. Oliver Herrmann chairs the GAMP Europe Steering Committee, Frank Henrichmann the GAMP Global Steering Committee. The real value, however, is created where QFINITY translates this framework into a control architecture, a test strategy and the chain of evidence the operator presents to the inspector. Critical thinking, AI literacy and data understanding for your own team are taught in the <a href=\"https:\/\/q-finity.de\/en\/academy\/\">H&sup2; Digital Hive<\/a>.<\/p>\n<p><a class=\"qf-extref\" href=\"https:\/\/ispe.org\/conferences\/2026-annual-meeting-expo\/agenda#na26ceoct1-ses108\" target=\"_blank\" rel=\"noopener\"><span class=\"qf-extref-text\">Session in the ISPE program (ispe.org)<\/span><span class=\"qf-extref-arrow\">&#8599;<\/span><\/a><\/p>\n<div style=\"clear:both\"><\/div>\n<div class=\"qf-carousel\" data-qf-carousel tabindex=\"0\" aria-roledescription=\"carousel\" aria-label=\"From the Annual Meeting and from Washington\">\n<div class=\"qf-car-head\"><span class=\"qf-car-eyebrow\">Impressions<\/span><span class=\"qf-car-title\">From the Annual Meeting and from Washington<\/span><span class=\"qf-car-count\"><b class=\"cur\">1<\/b>&thinsp;\/&thinsp;4<\/span><\/div>\n<div class=\"qf-car-viewport\">\n<div class=\"qf-car-track\">\n<figure class=\"qf-car-slide\"><img data-opt-id=263368468  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/ispe-annual-meeting-2026-gaylord-national.jpg\"  decoding=\"async\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%20100%%20100%%22%20width%3D%22100%%22%20height%3D%22100%%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%22100%%22%20height%3D%22100%%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" alt=\"Sign of the Gaylord National Resort and Convention Center on the Potomac\"><figcaption>Setting: Gaylord National on the Potomac, National Harbor.<\/figcaption><\/figure>\n<figure class=\"qf-car-slide\"><img data-opt-id=2053024894  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/ispe-annual-meeting-2026-oliver-herrmann-oversight-by-design.jpg\"  decoding=\"async\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%20100%%20100%%22%20width%3D%22100%%22%20height%3D%22100%%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%22100%%22%20height%3D%22100%%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" alt=\"Oliver Herrmann speaking at the 2026 ISPE Annual Meeting in the Oversight by design part\"><figcaption>Oliver Herrmann in the Oversight by design part.<\/figcaption><\/figure>\n<figure class=\"qf-car-slide\"><img data-opt-id=1079896643  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/ispe-annual-meeting-2026-lincoln-memorial.jpg\"  decoding=\"async\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%20100%%20100%%22%20width%3D%22100%%22%20height%3D%22100%%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%22100%%22%20height%3D%22100%%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" alt=\"Oliver Herrmann and Frank Henrichmann in front of the Lincoln Memorial in Washington\"><figcaption>Between sessions: Oliver Herrmann and Frank Henrichmann at the Lincoln Memorial.<\/figcaption><\/figure>\n<figure class=\"qf-car-slide\"><img data-opt-id=1369006796  data-opt-src=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/ispe-annual-meeting-2026-capitol.jpg\"  decoding=\"async\" src=\"data:image/svg+xml,%3Csvg%20viewBox%3D%220%200%20100%%20100%%22%20width%3D%22100%%22%20height%3D%22100%%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Crect%20width%3D%22100%%22%20height%3D%22100%%22%20fill%3D%22transparent%22%2F%3E%3C%2Fsvg%3E\" alt=\"The Capitol in Washington, D.C.\"><figcaption>The Capitol, a few miles from the venue.<\/figcaption><\/figure>\n<\/div>\n<p><button class=\"qf-car-btn qf-car-prev\" aria-label=\"prev\">&lsaquo;<\/button><button class=\"qf-car-btn qf-car-next\" aria-label=\"next\">&rsaquo;<\/button><\/p><\/div>\n<div class=\"qf-car-dots\"><button class=\"qf-car-dot on\" aria-label=\"1\"><\/button><button class=\"qf-car-dot\" aria-label=\"2\"><\/button><button class=\"qf-car-dot\" aria-label=\"3\"><\/button><button class=\"qf-car-dot\" aria-label=\"4\"><\/button><\/div>\n<\/div>\n<\/div><span class=\"post-meta-infos\"><\/span><footer class=\"entry-footer\"><\/footer><div class=\"post_delimiter\"><\/div><\/div><div class=\"post_author_timeline\"><\/div><span class=\"hidden\">\n\t\t\t\t<span class=\"av-structured-data\" itemprop=\"image\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/ImageObject\">\n\t\t\t\t\t\t<span itemprop=\"url\">https:\/\/q-finity.de\/wp-content\/uploads\/2026\/10\/ispe-annual-meeting-2026-progressive-qa-buehne.jpg<\/span>\n\t\t\t\t\t\t<span itemprop=\"height\">1350<\/span>\n\t\t\t\t\t\t<span itemprop=\"width\">1800<\/span>\n\t\t\t\t<\/span>\n\t\t\t\t<span class=\"av-structured-data\" itemprop=\"publisher\" itemtype=\"https:\/\/schema.org\/Organization\" itemscope=\"itemscope\">\n\t\t\t\t\t\t<span itemprop=\"name\">Oliver Herrmann<\/span>\n\t\t\t\t\t\t<span itemprop=\"logo\" itemscope itemtype=\"https:\/\/schema.org\/ImageObject\">\n\t\t\t\t\t\t\t<span itemprop=\"url\">https:\/\/q-finity.de\/wp-content\/uploads\/2026\/07\/q-finity_schriftzug_orange-retina.png<\/span>\n\t\t\t\t\t\t<\/span>\n\t\t\t\t<\/span><span class=\"av-structured-data\" itemprop=\"author\" itemscope=\"itemscope\" itemtype=\"https:\/\/schema.org\/Person\"><span itemprop=\"name\">Oliver Herrmann<\/span><\/span><span class=\"av-structured-data\" itemprop=\"datePublished\" datetime=\"2026-10-26T09:19:08+01:00\">2026-10-26 09:19:08<\/span><span class=\"av-structured-data\" itemprop=\"dateModified\" itemtype=\"https:\/\/schema.org\/dateModified\">2026-11-01 12:15:54<\/span><span class=\"av-structured-data\" itemprop=\"mainEntityOfPage\" itemtype=\"https:\/\/schema.org\/mainEntityOfPage\"><span itemprop=\"name\">ISPE Annual Meeting 2026: Who Reviews the Reviewer?<\/span><\/span><\/span><\/article><div class=\"single-big\"><nav class=\"pagination\"><span class=\"pagination-meta\">Page 1 of 28<\/span><span class=\"current\">1<\/span><a href=\"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/17010\/page\/2\/\" class=\"inactive next_page\">2<\/a><a href=\"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/17010\/page\/3\/\" class=\"inactive\">3<\/a><a href=\"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/17010\/page\/2\/\">&rsaquo;<\/a><a href=\"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/17010\/page\/28\/\">&raquo;<\/a><\/nav>\n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"The 2026 ISPE Annual Meeting &amp; Expo in National Harbor near Washington, D.C., put one question at the center of its Digital, Data and Decision Integrity track, a question QFINITY has worked on for years. Who reviews the reviewer when&hellip;","protected":false},"author":3,"featured_media":17003,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-17010","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v28.5 (Yoast SEO v28.8) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Updates: Publications &amp; Committees | QFINITY<\/title>\n<meta name=\"description\" content=\"Updates from QFINITY: articles and publications, committee and association work, awards, and our perspective on new regulations.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/q-finity.de\/en\/updates\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Updates: Publications &amp; Committees | QFINITY\" \/>\n<meta property=\"og:description\" content=\"Updates from QFINITY: articles and publications, committee and association work, awards, and our perspective on new regulations.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/q-finity.de\/en\/updates\/\" \/>\n<meta property=\"og:site_name\" content=\"QFINITY\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-24T19:10:20+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/08\/aktuelles-01-hero-v2.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"Updates\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/updates\\\/\",\"url\":\"https:\\\/\\\/q-finity.de\\\/en\\\/updates\\\/\",\"name\":\"Updates: Publications & Committees | QFINITY\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/updates\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/updates\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/aktuelles-01-hero-v2.png\",\"datePublished\":\"2026-08-24T17:46:52+00:00\",\"dateModified\":\"2026-08-24T19:10:20+00:00\",\"description\":\"Updates from QFINITY: articles and publications, committee and association work, awards, and our perspective on new regulations.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/updates\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/q-finity.de\\\/en\\\/updates\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/updates\\\/#primaryimage\",\"url\":\"https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/aktuelles-01-hero-v2.png\",\"contentUrl\":\"https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/aktuelles-01-hero-v2.png\",\"width\":1024,\"height\":576,\"caption\":\"QFINITY Aktuelles - Publikationen und Gremienarbeit\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/updates\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/q-finity.de\\\/en\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Updates\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/q-finity.de\\\/en\\\/\",\"name\":\"QFINITY\",\"description\":\"Qualit\u00e4tsmanagement &amp; - sicherung\",\"publisher\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/q-finity.de\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#organization\",\"name\":\"QFINITY\",\"url\":\"https:\\\/\\\/q-finity.de\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mlsqau6zetur.i.optimole.com\\\/cb:frAi.c2d9\\\/w:512\\\/h:512\\\/q:mauto\\\/f:best\\\/https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/cropped-cropped-signet_PAN_orange.png\",\"contentUrl\":\"https:\\\/\\\/mlsqau6zetur.i.optimole.com\\\/cb:frAi.c2d9\\\/w:512\\\/h:512\\\/q:mauto\\\/f:best\\\/https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/cropped-cropped-signet_PAN_orange.png\",\"width\":512,\"height\":512,\"caption\":\"QFINITY\u221e\"},\"image\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/q-finity-quality-management\\\/\",\"https:\\\/\\\/www.instagram.com\\\/qfinity_official\\\/\",\"https:\\\/\\\/www.wikidata.org\\\/wiki\\\/Q141257555\"],\"founder\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#founder\"},\"alternateName\":[\"QFINITY\u221e\",\"Q-FINITY\",\"Q-FINITY Quality Management\",\"QFINITY Quality Management\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#founder\",\"name\":\"Oliver Herrmann\",\"jobTitle\":\"Founder & CEO\",\"url\":\"https:\\\/\\\/q-finity.de\\\/en\\\/\",\"worksFor\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#organization\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/olherrmann\\\/\",\"https:\\\/\\\/ispe.org\\\/people\\\/oliver-herrmann\",\"https:\\\/\\\/virtual.ispe.org\\\/b\\\/sp\\\/oliver-herrmann-4399\",\"https:\\\/\\\/www.wikidata.org\\\/wiki\\\/Q141257562\"],\"knowsAbout\":[\"GxP-Compliance\",\"Computer System Validation\",\"Computer Software Assurance\",\"Data Integrity\",\"ALCOA++\",\"AI Governance\",\"GAMP 5\"],\"image\":\"https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/oliver-herrmann-qfinity-ceo-scaled.jpg\",\"description\":\"Founder and CEO of QFINITY, GAMP Europe Chair, qualified GAMP 5 and GAMP Data Integrity trainer, GQMA auditor and international speaker. Co-author of several ISPE GAMP guides, including the GAMP 5 Guide (2nd Edition).\",\"memberOf\":{\"@type\":\"Organization\",\"name\":\"International Society for Pharmaceutical Engineering (ISPE)\",\"url\":\"https:\\\/\\\/ispe.org\"},\"hasCredential\":[{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"degree\",\"name\":\"Graduate Computer Scientist (Dipl.-Inf.)\"},{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"certification\",\"name\":\"Microsoft Certified Systems Engineer (MCSE)\"},{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"certification\",\"name\":\"SAFe (Scaled Agile Framework)\"}]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Updates: Publications & Committees | QFINITY","description":"Updates from QFINITY: articles and publications, committee and association work, awards, and our perspective on new regulations.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/q-finity.de\/en\/updates\/","og_locale":"en_US","og_type":"article","og_title":"Updates: Publications & Committees | QFINITY","og_description":"Updates from QFINITY: articles and publications, committee and association work, awards, and our perspective on new regulations.","og_url":"https:\/\/q-finity.de\/en\/updates\/","og_site_name":"QFINITY","article_modified_time":"2026-08-24T19:10:20+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/08\/aktuelles-01-hero-v2.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_title":"Updates","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/q-finity.de\/en\/updates\/","url":"https:\/\/q-finity.de\/en\/updates\/","name":"Updates: Publications & Committees | QFINITY","isPartOf":{"@id":"https:\/\/q-finity.de\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/q-finity.de\/en\/updates\/#primaryimage"},"image":{"@id":"https:\/\/q-finity.de\/en\/updates\/#primaryimage"},"thumbnailUrl":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/08\/aktuelles-01-hero-v2.png","datePublished":"2026-08-24T17:46:52+00:00","dateModified":"2026-08-24T19:10:20+00:00","description":"Updates from QFINITY: articles and publications, committee and association work, awards, and our perspective on new regulations.","breadcrumb":{"@id":"https:\/\/q-finity.de\/en\/updates\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/q-finity.de\/en\/updates\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/q-finity.de\/en\/updates\/#primaryimage","url":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/08\/aktuelles-01-hero-v2.png","contentUrl":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/08\/aktuelles-01-hero-v2.png","width":1024,"height":576,"caption":"QFINITY Aktuelles - Publikationen und Gremienarbeit"},{"@type":"BreadcrumbList","@id":"https:\/\/q-finity.de\/en\/updates\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/q-finity.de\/en\/home\/"},{"@type":"ListItem","position":2,"name":"Updates"}]},{"@type":"WebSite","@id":"https:\/\/q-finity.de\/en\/#website","url":"https:\/\/q-finity.de\/en\/","name":"QFINITY","description":"Qualit\u00e4tsmanagement &amp; - sicherung","publisher":{"@id":"https:\/\/q-finity.de\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/q-finity.de\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/q-finity.de\/en\/#organization","name":"QFINITY","url":"https:\/\/q-finity.de\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/q-finity.de\/en\/#\/schema\/logo\/image\/","url":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:frAi.c2d9\/w:512\/h:512\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2021\/03\/cropped-cropped-signet_PAN_orange.png","contentUrl":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:frAi.c2d9\/w:512\/h:512\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2021\/03\/cropped-cropped-signet_PAN_orange.png","width":512,"height":512,"caption":"QFINITY\u221e"},"image":{"@id":"https:\/\/q-finity.de\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/q-finity-quality-management\/","https:\/\/www.instagram.com\/qfinity_official\/","https:\/\/www.wikidata.org\/wiki\/Q141257555"],"founder":{"@id":"https:\/\/q-finity.de\/en\/#founder"},"alternateName":["QFINITY\u221e","Q-FINITY","Q-FINITY Quality Management","QFINITY Quality Management"]},{"@type":"Person","@id":"https:\/\/q-finity.de\/en\/#founder","name":"Oliver Herrmann","jobTitle":"Founder & CEO","url":"https:\/\/q-finity.de\/en\/","worksFor":{"@id":"https:\/\/q-finity.de\/en\/#organization"},"sameAs":["https:\/\/www.linkedin.com\/in\/olherrmann\/","https:\/\/ispe.org\/people\/oliver-herrmann","https:\/\/virtual.ispe.org\/b\/sp\/oliver-herrmann-4399","https:\/\/www.wikidata.org\/wiki\/Q141257562"],"knowsAbout":["GxP-Compliance","Computer System Validation","Computer Software Assurance","Data Integrity","ALCOA++","AI Governance","GAMP 5"],"image":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/06\/oliver-herrmann-qfinity-ceo-scaled.jpg","description":"Founder and CEO of QFINITY, GAMP Europe Chair, qualified GAMP 5 and GAMP Data Integrity trainer, GQMA auditor and international speaker. Co-author of several ISPE GAMP guides, including the GAMP 5 Guide (2nd Edition).","memberOf":{"@type":"Organization","name":"International Society for Pharmaceutical Engineering (ISPE)","url":"https:\/\/ispe.org"},"hasCredential":[{"@type":"EducationalOccupationalCredential","credentialCategory":"degree","name":"Graduate Computer Scientist (Dipl.-Inf.)"},{"@type":"EducationalOccupationalCredential","credentialCategory":"certification","name":"Microsoft Certified Systems Engineer (MCSE)"},{"@type":"EducationalOccupationalCredential","credentialCategory":"certification","name":"SAFe (Scaled Agile Framework)"}]}]}},"_links":{"self":[{"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/17010","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/comments?post=17010"}],"version-history":[{"count":3,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/17010\/revisions"}],"predecessor-version":[{"id":17017,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/17010\/revisions\/17017"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/media\/17003"}],"wp:attachment":[{"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/media?parent=17010"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}