CROs & Contract Research

Contract research organizations — conducting clinical and nonclinical studies, bioanalysis, and pharmacovigilance under sponsor oversight.

Assess your quality system →Explore GxP disciplines →
WHAT THIS SECTOR DOES

Contract research organizations (CROs) run studies on behalf of sponsors — clinical trials, nonclinical/toxicology studies, bioanalysis, and, increasingly, pharmacovigilance case processing. They generate the data that supports a marketing application, so the integrity and traceability of that data is the product. CROs span the full development pipeline from first-in-human through post-marketing safety.

REGULATORY LANDSCAPE

Clinical work follows Good Clinical Practice (ICH E6(R2), moving to E6(R3)), the EU Clinical Trials Regulation (536/2014), and FDA 21 CFR 50/54/56/312. Nonclinical safety studies follow Good Laboratory Practice (FDA 21 CFR Part 58, OECD GLP). Pharmacovigilance work follows EU GVP and ICH E2A/E2D. Computerised systems throughout are governed by 21 CFR Part 11 and EU GMP Annex 11.

THE OVERSIGHT MODEL

The sponsor may delegate trial conduct to a CRO but cannot delegate accountability — under 21 CFR 312.52 any transferred obligation must be described in writing, and the sponsor retains oversight duty. The CRO executes to the protocol and its SOPs; the sponsor performs risk-based oversight, reviews the Trial Master File, and remains answerable to the health authority for the study.

24
Standards decoded
5
GxP disciplines
WHAT QUALITY MEANS HERE
01

Data integrity & the audit trail

ALCOA+ clinical and bioanalytical data with intact audit trails across EDC, LIMS, and eTMF — the evidence a regulator relies on to trust the submission.

02

Sponsor oversight & delegation

Clear written transfer of obligations, delegation logs, and the risk-based monitoring that lets the sponsor demonstrate real oversight of delegated work.

03

GLP study conduct

The study director model, protocol adherence, and independent Quality Assurance Unit that define a defensible 21 CFR Part 58 nonclinical study.

04

Pharmacovigilance timeliness

Case intake, assessment, and expedited reporting within GVP timelines — where a missed clock is itself a finding.

GXP DISCIPLINES IN THIS SECTOR
GCPGood Clinical PracticeGLPGood Laboratory PracticeGVPGood Pharmacovigilance PracticeGCLPGood Clinical Laboratory PracticeCSVComputerised System Validation
STANDARDS SPEQ DECODES · 24
Open the full library →
21 CFR Part 11FDAHIGH INSPECTION RISK
Electronic Records; Electronic Signatures
EU GMP Annex 11EMAHIGH INSPECTION RISK
Computerised Systems
ISPE GAMP 5 (2022)ISPE
Good Practice Guide: Compliant GxP Computerised Systems
ICH E6(R3)ICHHIGH INSPECTION RISK
Good Clinical Practice (GCP)
ICH E8(R1)ICH
General Considerations for Clinical Studies
21 CFR Part 312FDAHIGH INSPECTION RISK
Investigational New Drug Application (IND)
21 CFR Part 50FDAHIGH INSPECTION RISK
Protection of Human Subjects (Informed Consent)
21 CFR Part 56FDA
Institutional Review Boards (IRBs)
Regulation (EU) 536/2014EMAHIGH INSPECTION RISK
Clinical Trials Regulation (CTR)
21 CFR Part 58FDAHIGH INSPECTION RISK
Good Laboratory Practice for Nonclinical Laboratory Studies
OECD GLP PrinciplesOECD
OECD Principles of Good Laboratory Practice
Directive 2004/10/ECEC
Harmonisation of Laws Relating to the Application of GLP
EU GVP ModulesEMAHIGH INSPECTION RISK
EU Good Pharmacovigilance Practices (GVP)
21 CFR 314.80FDAHIGH INSPECTION RISK
Postmarketing Reporting of Adverse Drug Experiences
ICH E2B(R3)ICH
Electronic Transmission of Individual Case Safety Reports (ICSRs)
ICH E2AICH
Clinical Safety Data Management: Definitions and Standards for Expedited Reporting
WHO GCLP (2009)WHO
Good Clinical Laboratory Practice (GCLP)
VICH GL9VICH
Good Clinical Practice (Veterinary)
21 CFR Part 803FDAHIGH INSPECTION RISK
Medical Device Reporting (MDR)
IEC 62304:2006+A1:2015IEC
Medical Device Software — Software Life Cycle Processes
IMDRF/SaMD WG/N10IMDRF
Software as a Medical Device (SaMD): Key Definitions
IMDRF/SaMD WG/N12IMDRF
SaMD: Possible Framework for Risk Categorization and Corresponding Considerations
ISO/IEC 17025:2017ISO
General requirements for the competence of testing and calibration laboratories
ILAC MRAILAC
ILAC Mutual Recognition Arrangement
WHERE QUALITY FAILS
  • Data-integrity gaps in clinical, bioanalytical, or safety systems
  • Sponsor oversight that is documented on paper but not exercised in practice
  • Trial Master File that is incomplete or not inspection-ready
  • Expedited safety reports filed outside the required GVP/ICH timelines
KEY REGULATORY BODIES
FDAEMAISPEICHOECDECWHOVICHIECIMDRFISOILAC

Derived from the 24 standards SPEQ decodes for this sector.

REGULATED INDUSTRIES
The product industries this sector serves →
THE SPEQ FRAMEWORK
Regulatory intelligence → execution → maturity →
Weekly Briefing

Intelligence for CROs & Contract Research

The enforcement actions, guidance, and quality signals that shape sponsor–provider oversight — curated for CROs & Contract Research and delivered free each week.

Read a past issue →