CROs & Contract Research
Contract research organizations — conducting clinical and nonclinical studies, bioanalysis, and pharmacovigilance under sponsor oversight.
What this page does not claim
A sector is an organization’s role in the value chain, not a legal category. SPEQ maps the disciplines and standards that role typically operates under; it does not determine which apply to your organization, and a count of decoded standards measures SPEQ’s coverage.
WHAT THIS SECTOR DOES
Contract research organizations (CROs) run studies on behalf of sponsors — clinical trials, nonclinical/toxicology studies, bioanalysis, and, increasingly, pharmacovigilance case processing. They generate the data that supports a marketing application, so the integrity and traceability of that data is the product. CROs span the full development pipeline from first-in-human through post-marketing safety.
REGULATORY LANDSCAPE
Clinical work follows Good Clinical Practice (ICH E6(R3), adopted January 2025, replacing E6(R2)), the EU Clinical Trials Regulation (536/2014), and FDA 21 CFR 50/54/56/312. Nonclinical safety studies follow Good Laboratory Practice (FDA 21 CFR Part 58, OECD GLP). Pharmacovigilance work follows EU GVP and ICH E2A/E2D. Computerised systems throughout are governed by 21 CFR Part 11 and EU GMP Annex 11.
WHAT TO DO FIRST
- HOW-TO GUIDEHow to Implement Risk-Based Quality Management →Put oversight where the risk to participants and data actually sits.
- HOW-TO GUIDEHow to Set Up a Trial Master File →Keep the trial reconstructable from its essential records.
- TOOLQuality Tolerance Limit (QTL) Check →Check a trial parameter against its quality tolerance limit.
THE OVERSIGHT MODEL
The sponsor may delegate trial conduct to a CRO but cannot delegate accountability — under 21 CFR 312.52 any transferred obligation must be described in writing, and the sponsor retains oversight duty. The CRO executes to the protocol and its SOPs; the sponsor performs risk-based oversight, reviews the Trial Master File, and remains answerable to the health authority for the study.
WHAT QUALITY MEANS HERE
Data integrity & the audit trail
ALCOA+ clinical and bioanalytical data with intact audit trails across EDC, LIMS, and eTMF — the evidence a regulator relies on to trust the submission.
Sponsor oversight & delegation
Clear written transfer of obligations, delegation logs, and the risk-based monitoring that lets the sponsor demonstrate real oversight of delegated work.
GLP study conduct
The study director model, protocol adherence, and independent Quality Assurance Unit that define a defensible 21 CFR Part 58 nonclinical study.
Pharmacovigilance timeliness
Case intake, assessment, and expedited reporting within GVP timelines — where a missed clock is itself a finding.
STANDARDS SPEQ DECODES · 56
Open the full library →WHERE QUALITY FAILS
- Data-integrity gaps in clinical, bioanalytical, or safety systems
- Sponsor oversight that is documented on paper but not exercised in practice
- Trial Master File that is incomplete or not inspection-ready
- Expedited safety reports filed outside the required GVP/ICH timelines
CROs & Contract Research: frequently asked questions
Reference answers on what a cros & contract research does, what governs it, and who is accountable for quality.
What is a CRO?
A contract research organization runs studies on behalf of sponsors — clinical trials, nonclinical/toxicology studies, bioanalysis, and increasingly pharmacovigilance case processing. It generates the data that supports a marketing application, so the integrity and traceability of that data is the product, spanning the pipeline from first-in-human through post-marketing safety.
Which regulations govern a CRO?
Clinical work follows Good Clinical Practice (ICH E6(R3), adopted January 2025, replacing E6(R2)), the EU Clinical Trials Regulation 536/2014, and FDA 21 CFR 50/54/56/312. Nonclinical safety studies follow Good Laboratory Practice (FDA 21 CFR Part 58, OECD GLP), pharmacovigilance follows EU GVP and ICH E2A/E2D, and computerised systems fall under 21 CFR Part 11 and EU GMP Annex 11.
Can a sponsor delegate accountability to a CRO?
No. A sponsor may delegate trial conduct but not accountability. Under 21 CFR 312.52 any transferred obligation must be described in writing, and the sponsor retains its oversight duty. The CRO executes to the protocol and its SOPs; the sponsor performs risk-based oversight, reviews the Trial Master File, and remains answerable to the health authority.
PUT IT TO WORK
- HOW-TO GUIDEHow to Process an Individual Case Safety Report →From first awareness of an adverse event to a submitted, coded, follow-up-tracked case.
- HOW-TO GUIDEHow to Validate a Computerized System →Take a GxP computerized system from requirements to a documented validated state.
- ASSESSBaseline your quality system →Twelve GxP domains, about ten minutes, free with an account.
A free account keeps what you save, remembers where you are across devices, and can send you the weekly regulatory briefing. Create a free account