Clinical Trial Labels, Expiry Changes and RTSM Kit Accountability in 2026
TL;DR
A shelf-life decision, a correct physical label and a dispensable kit are three linked facts. A database date change establishes only the fact actually authorized and recorded; the applicable labeling and quality process determines whether the inventory can be used. Clinical supply teams should keep those decisions visible at product, country, batch and kit level [1] [2] [3].
For the EU, distinguish product role from legal authorization and modification status. Annex VI Section A concerns unauthorized IMPs, B unauthorized auxiliary medicinal products, C additional labeling for authorized IMPs and D replacement of information under specified conditions. The 2022/2239 immediate-packaging amendments are conditional; an RTSM system alone supplies no general exemption from physical expiry labeling [1] [4].
The current crosswalk separates requirements from proposed controls. Comparator repackaging, blinding-related date alignment and destruction each have specific prerequisites in the EU, Canadian and Chinese sources. A useful supply record preserves the assessed rule and the actual evidence for the kit decision [3] [5] [6].
Establish the product's legal position before configuring supply
Trial role is an input to the assessment
A test product, comparator, placebo and auxiliary product have different roles in the protocol. Role helps identify the relevant question, but the exact product's authorization and any changes also need assessment. The CTR definitions, manufacturing provisions and labeling provisions answer related but distinct questions. An operational product record should preserve those distinctions rather than reduce them to one “Annex VI class” field [1].
For example, an authorized product used as a comparator may still be an IMP in the trial. Changing its packaging for blinding raises quality and manufacturing questions; the underlying commercial marketing authorization remains a separate legal fact. Article 64 applies manufacturing/import/GMP provisions to modifications not covered by the marketing authorization. Article 65 separately addresses unauthorized AxMPs and modifications to authorized AxMPs, with GMP or at least an equivalent standard as stated there. These distinctions matter before imposing an IMP-specific QP process on every auxiliary medicine [1] [7] [8].
A proposed assessment record can identify the exact product, strength, form, source authorization, trial role, intended use, modification, applicable country and supporting documents. It should show who reached the regulatory and quality decisions, which version applies and what remains unresolved. Store a legal conclusion as an assessed conclusion with evidence; a registry's numerical dictionary code is an inadequate substitute for that assessment.
CTAG’s current AxMP recommendations were endorsed October 15, 2025 and published October 30. They apply to new applications from December 1, 2025 without retrospective enforcement. Section 3.2 distinguishes authorised, modified authorised and unauthorised AxMPs; Annex 2 maps labeling. A product authorised only outside the EU/EEA is unauthorised for this purpose even if an EU product shares its brand. An authorised AxMP used outside its marketing authorisation remains authorised; labeling changes alone do not constitute a quality-affecting modification. Section 3.2.2 recommends treating an authorised AxMP modified outside its marketing authorisation like an unauthorised AxMP. Preserve the underlying marketing-authorisation fact separately from that modified-presentation treatment [8].
EU product status and packaging-level assessment
Assess authorisation and changes separately from protocol role.
Scroll sideways for the full figure.
| Pathway | Governing provision | Packaging assessment |
|---|---|---|
| Unauthorised IMP | CTR Article 66; Annex VI A | General particulars plus applicable limited-immediate-pack arrangements |
| Unauthorised AxMP | CTR Article 66; Annex VI B | General particulars; B 6.2/B 6.3 conditions where applicable |
| Authorised product without the quality-affecting AxMP modification described below | CTR Article 67 | Article 66(1) or commercial-label route; authorised IMP additional particulars where protocol circumstances require |
| Modified authorised AxMP | CTAG Section 3.2.2 recommendation | Modified outside its marketing authorisation: treated like unauthorised AxMP; underlying authorisation remains separate |
| Alternative information | Annex VI D | Protocol justification; safety/data reliability preserved; required on-label particulars remain |
No registry field establishes the legal pathway; diagnostic radiopharmaceuticals need Article 68 assessment.
Read the EU label provisions by their actual scope
CTR Article 66 addresses unauthorized IMPs and unauthorized AxMPs. Article 67 allows authorized products to be labeled in accordance with Article 66(1) or the commercial-label framework in Title V of Directive 2001/83/EC, with additional particulars for authorized IMPs where the protocol's specific circumstances require them for safety or data reliability. Article 69 leaves the label language to the Member State concerned and permits multiple languages. The choice of booklet or another pack design follows the actual language and use assessment [1].
Annex VI Section A sets out unauthorized-IMP particulars and limited-immediate-packaging arrangements. Section B concerns unauthorized AxMPs. Section C supplies the additional particulars for authorized IMPs under Article 67(2). Section D permits some information to be provided by other means, such as a centralized information or randomization system, with protocol justification and preservation of safety and data reliability. Paragraph 9 identifies particulars that remain on the label, including the relevant period-of-use conditions. The section letters identify those specific contents; product authorization and modification need a separate assessment [1].
The practical label review should identify which paragraph applies, which particulars appear on each packaging level and what evidence supports any omission. For small units, inspect the actual container and outer package rather than approve an omission from a generic “small vial” flag. Record whether the two packaging levels are intended to remain together. The pharmacy and participant-facing handling instructions should be consistent with that condition throughout the intended use.
Diagnostic radiopharmaceuticals have a distinct Article 68 provision. Products with such characteristics need their own assessment instead of an unqualified application of the general table. Similarly, choosing a commercial-label route should follow the actual authorized product and trial circumstances. A system configuration should point to the decision, including any trial-specific additional particulars, rather than infer it from the name “comparator” or “rescue medication” [1] [8].
What 2022/2239 changed
Delegated Regulation 2022/2239 was adopted September 6, 2022, published November 15 and entered into force on the twentieth day after publication, December 5, 2022. It removed period-of-use particulars from the limited-immediate-packaging lists in A.2.1.4 and A.2.2.5, added the B.6.2/B.6.3 arrangements for unauthorized AxMPs and changed the related Section D references. These amendments permit the specified immediate-pack omissions while retaining the applicable outer-packaging and Section D labeling conditions [4].
For the A.2.1 arrangement, the immediate and outer packaging are intended to remain together and the outer package carries the general particulars. A.2.2 addresses blister packs or small units with an outer package carrying the required information. B.6.2 and B.6.3 similarly preserve outer-pack information under their stated conditions. The applicable arrangement should be documented and reflected in handling. Separating an inner unit from the dated outer packaging can change the premise on which a label decision was made [1] [4].
The regulation's recitals recognize risks from opening complex packs and exposing sensitive products during expiry updates. That rationale explains the targeted change; it neither measures the frequency of damage nor establishes that all relabeling is unsafe. A quality team still assesses the actual product and operation. The article therefore treats an outer-only update as a possible result of the applicable rule, rather than a promised operational shortcut for every trial product.
Compare expiry and relabeling requirements across jurisdictions
United States: separate the exemption from ongoing suitability
21 CFR 312.6 prescribes the investigational-use caution for the immediate package and prohibits false or misleading labeling and representations that the drug is safe or effective for the investigated purpose. That provision should be read with the other applicable IND and quality requirements. The applicable clinical-supply framework also includes the sponsor and investigator record duties [2].
Section 211.137(g) exempts investigational new drugs from that section's expiration-dating requirements when the stated appropriate standards/specifications are met as demonstrated by stability studies during clinical use. For an investigational new drug product reconstituted at dispensing, paragraph(g) still requires expiry information for the reconstituted product. Its scope and conditions matter. The process retains the need for stability support and a properly authorized decision; an RTSM can record and apply that decision according to its intended use. Any protocol, submitted information, sponsor instructions and other applicable obligations also remain relevant [9].
The sponsor's shipping/disposition records and the investigator's drug-disposition records have distinct requirements under 312.57, 312.59 and 312.62(a). A proposed reconciliation connects quantity, dates, batch/code and recipients as relevant to those duties. It should preserve the original transaction and correction history. The organization should identify which record is authoritative for each fact, including when a pharmacy uses a local record separate from the sponsor's RTSM [2].
FDA's 2024 guidance on decentralized elements discusses suitability and handling of investigational products delivered outside the traditional site model. Product characteristics, shipping/storage conditions, accountability and participant instructions belong in that assessment. A package logger, participant mobile scan or particular courier interface is a design choice to justify for the actual product and process [10].
European Union: distinguish GMP framework and detailed relabeling guidance
Delegated Regulation 2017/1569 specifies GMP principles and guidelines for IMPs. The detailed Commission GMP guideline's Section 6.6, Labelling, supplies the relabeling discussion relevant here. The detailed guideline and delegated regulation have distinct roles; the operation should identify both the applicable legal basis and the relevant technical guidance [7] [5].
Section 6.6 describes an additional label when the expiry date changes, including the new date, batch number and clinical-trial reference, with protection of the original batch number. It addresses the appropriately authorized manufacturing site and the stated conditions for operations at a trial site, trained staff, checking and documentation. The responsible quality team should establish which provisions apply to its operation and preserve that rationale. An electronic second signature can record a check, but the implementation needs its own assessment against the applicable record requirements [5].
The release assessment also remains distinct from physical relabeling. Whether a change needs a regulatory submission, a quality authorization or another action depends on the actual approved dossier and applicable framework. A proposed system can track those dependencies separately. It should apply each inventory update only after its relevant dependencies are met, with the actual regulatory-impact assessment controlling any required submission [1] [7].
CTR Article 61(5)(a) provides a specific manufacturing-authorisation exception for relabeling/repackaging in hospitals, health centres or clinics by pharmacists or other persons legally authorised in the Member State. The products must be used exclusively in participating establishments in the same trial and Member State. Article 61(6) requires appropriate, proportionate national requirements and regular inspection. An operation outside those conditions needs its applicable authorisation route; an individual’s training alone does not establish eligibility [1].
Site relabeling: eligibility precedes execution
Training and a second check support the operation; legal eligibility is a separate decision.
Scroll sideways for the full figure.
| Framework | Eligibility / location | Execution and record |
|---|---|---|
| EU normal route | Appropriately authorised manufacturing operation | Detailed GMP 6.6 procedures, check and documentation |
| EU CTR 61(5)(a) | Hospital, health centre or clinic; pharmacist or nationally authorised person; exclusive same-trial/same Member State use | Article 61(6): appropriate proportionate national requirements and regular inspection |
| China GMP 33 | At trial institution after applicant assessment | Applicant-approved procedure; trained/approved personnel; onsite check; traceable record; applicant quality review |
| Canada GUI 0036 | Assess actual national/local authority and operation | Trained staff; second check; batch documentation; separate area/line clearance; label reconciliation and discrepancies investigated |
No universal visiting-monitor or software-signature exception.
China: current GCP and the actual 2022 annex articles
The revised GCP under Announcement 2026 No.50 took effect September 1, 2026 and replaced the 2020 text. Article 28 assigns investigational-product management responsibilities to the principal investigator and institution, with appropriately qualified personnel and records for receipt, handling, storage, distribution, use, recovery, return and destruction. Article 46(2) addresses sponsor product responsibilities, including written storage/transport conditions, period of use, instructions and relevant records. [11].
Article 46 also separates several operational responsibilities. Product is supplied after the relevant ethics approval and regulatory permission or filing. The sponsor establishes supply/management procedures covering receipt through disposal, with written records and accurate counting throughout. Returned and unused product is returned to the sponsor or disposed of by another sponsor-authorized method. The article addresses preservation of stability, supply within the period of use and the applicable retention-sample requirements. In blinded trials, its emergency-unblinding mechanism should allow rapid identification where medically necessary while preserving other participants' treatment allocation blind. These explicit duties provide a better basis for a supply record than assuming that one software state proves every condition [11].
Articles 29, 48, 51 and 53 address related record, data and system controls. Article 29's medical-record provision concerns relevant medical records for patient participants in outpatient/inpatient record systems, rather than a universal requirement to place every sponsor supply database in a hospital architecture. Article 48(2) requires justification and prior written investigator agreement for sponsor changes to investigator-entered data. Articles 51 and 53 provide relevant metadata, transfer, validation, permission and audit-trace controls. A proposed integration should satisfy the applicable duties without overstating one article as a mandate for a unified vendor database [11].
For physical labels, the 2022 No.43 GMP annex's Article 31 lists the usual particulars, including applicant/product identification, batch or code, trial identifier, investigational-use statement, expiry, specifications/use instructions, pack size, storage and special marking for home use. Article 32 addresses both packaging levels and allows the smaller inner label to retain at least Article 31(1)–(4) where its dimensions prevent the full content. The inner-label assessment should preserve that explicit size-related condition [3].
Article 33 addresses changing expiry: the additional label states the new expiry, covers the old expiry and preserves the original batch or drug code. Site relabeling follows applicant assessment; the approved procedure, trained/approved personnel, on-site checking, traceable documentation and applicant quality review remain explicit. Article 34 concerns checking and recording similarity of packaging appearance and other characteristics for blinding. The operating procedure should identify the personnel, checking and records required for that specific operation [3].
For a site operation, identify the applicant-approved procedure, the approved personnel and the person checking the work at the location. Connect each relabeled batch or kit to the operation record and the quality review. A later database update should reference that evidence rather than stand in for it.
United Kingdom and Canada: use their current documents
MHRA's labeling guidance became effective with the amended UK Clinical Trials Regulations on April 28, 2026. Its expiry discussion expects the date on primary packaging, with justified arrangements for cases where that is impracticable and a dated secondary package kept with the container. It states that an expiry accessible only through IRT is insufficient and that a retest date is not an acceptable substitute in that discussion. Proposed omission of the primary-pack expiry must be justified in the clinical-trial approval application for licensing-authority assessment. Apply current regulation 46 and the product’s actual authorization and transition position [12] [13].
Canada’s C.05.011 sets the regulatory label requirements, including English and French information. GUI-0100 explains the requirements and expiry interpretation, with possible approaches where stability studies continue. GUI-0036, updated February 4, 2026, addresses GMP handling, label operations and expiry-change labels. Its relabeling guidance specifies trained staff, a second-person check, documentation, segregation/line clearance and reconciliation. A claimed electronic alternative needs its actual justification and conditions; “Canada permits RTSM instead of labels” is an inadequate rule [14] [6] [15].
These differences should appear in a country/product assessment. Record which information remains physically present, where other permitted information resides, the quality/release basis, the relevant approval and any operating conditions. A common system can store different assessed rules while retaining the source version and responsible reviewer. The common data model should make local differences visible rather than erase them.
Connect shelf life, physical inventory and intended use
Expiry information: the rule before the RTSM setting
A system date represents the assessed decision; local labeling conditions remain.
Scroll sideways for the full figure.
| Jurisdiction | Expiry information condition | Operational question |
|---|---|---|
| United States | 211.137(g) conditional exemption; reconstituted-product expiry information remains | Is ongoing stability support and the applicable approved process documented? |
| EU | Annex VI and conditional immediate-pack provisions | Which particulars remain on each packaging level and by permitted other means? |
| UK | Primary expiry expected; justified omission assessed by licensing authority; dated secondary kept with primary | IRT-only expiry insufficient; retest date not substitute in MHRA guidance |
| Canada | C.05.011 and GUI 0100/0036 conditions | What justified dating and physical label operation applies? |
| China | 2022 GMP 33 new expiry label covers old; batch/code preserved | Has assessed site operation and applicant quality review occurred? |
Summaries omit product-specific conditions; they are not blanket permission to use database-only expiry.
Comparator repackaging and blind-compatible dates
China’s 2022 GMP annex Article 25 specifically addresses repackaging a comparator in different materials for a blinded trial: its new period of use cannot exceed the original product’s expiry. Where test and comparator periods differ in the blinded trial, the labeled period follows the nearer expiry. Article 34 separately requires checks and records of appearance and other relevant similarities. These are distinct conditions to carry into the actual packaging plan [3].
Canada’s GUI-0036 discussion of modifying comparator products explains that the original-pack expiry may no longer apply after repackaging. Establish a suitable retest date considering the product, new container and storage, no later than the original expiry, and compatible with trial duration; retain a sample after repackaging or over-encapsulation. Its blinding discussion assigns the shortest-dated product’s expiry to blinded products while preserving underlying batch identification and rapid identification when needed. These statements should be applied with their Canadian context [6].
Comparator dates and blind-compatible labeling
The source date, modified presentation date and blinded label date answer different questions.
Scroll sideways for the full figure.
| Source / situation | Dating condition | Evidence to preserve |
|---|---|---|
| China GMP 25: different-material repack for blind | Repacked comparator period no later than original expiry | Original batch date; assessed new presentation |
| China GMP 25: unequal periods in blind | Label follows nearer period | Both supported periods and assigned blinded label |
| Canada GUI 0036: modified comparator | Suitable retest date justified by product/container/storage; no later than original expiry | Trial-duration compatibility; retained sample after repacking/overencapsulation |
| Canada GUI 0036: blinding | Shortest-dated product expiry assigned to blinded products | Underlying batch identity and rapid emergency identification |
| Proposed RTSM record | Keep true quality date and actual physical-label decision separately | Role permissions; applicable horizon; operation evidence |
These are jurisdiction-specific conditions; no additional EU comparator rule is inferred.
A proposed product record should therefore distinguish the commercial source date, the supported date for the modified presentation, and the date actually printed for the blinded supply. The reason for a shorter date belongs with the assessment. Updating the supported date for one lot leaves the physical label, the other treatment’s evidence and the blinding plan to be assessed separately. A user with a blinded role should receive the information required for safe conduct without access to an unnecessary treatment-revealing comparison.
For an illustrative pair of blinded supplies, suppose the quality decisions support use of one presentation through June and the other through September. Where the applicable blind-compatible labeling rule selects June, an electronic September date for the second lot is insufficient by itself to make a June-labeled pack available for later use. The responsible team needs the required quality, labeling and blinding assessments. This example illustrates dependency management; its dates are hypothetical and prescribe no universal shelf life.
ICH Q1A(R2) and Q1E provide stability and evaluation principles within their stated registration scope. They are useful technical references for a stability specialist; they do not by themselves authorise a clinical-trial expiry extension, override a comparator ceiling or approve a changed pack. Identify the relevant development-stage, dossier and quality requirements for the actual product [16] [17].
Assess the whole dispensing horizon
A dispensing decision concerns the anticipated period of use as well as the day the pack leaves the pharmacy. The approved protocol, dosing schedule, presentation, stability decision and participant instructions determine that horizon. As an implementation recommendation, compare the actual applicable use limit with the last intended use under the proposed quantity. Record which date and rule drove the decision, including any shorter in-use period after opening or reconstitution. The US provision explicitly retains expiry information for a product reconstituted at dispensing [9].
A quantity that exceeds the supported horizon can prompt a documented supply or clinical decision. Possible responses include supplying a smaller permitted quantity, arranging another shipment or obtaining an appropriate new quality and labeling decision. Their feasibility depends on the protocol, local process and participant situation. A system should show the unresolved dependency to the responsible staff. It should also preserve the distinction between a logistical constraint and the clinician’s treatment decision.
Partial dispensing deserves a pack-level check. A carton’s information may have been relied on for an allowed immediate-pack omission. Removing a vial or blister from that carton can change the physical information available at storage or use. Inspect the actual relevant Annex VI arrangement, the intended handling and the participant instructions before approving the workflow. Packaging-level conditions should be represented in the supply plan and tested with the actual objects, rather than inferred from the product name [1] [4].
A corrected expiry decision also needs a defined affected set. One source lot may have been repackaged in several presentations or distributed under several country label versions. Some units may already have been dispensed. A proposed impact assessment should identify the inventory, evidence and recipients affected by the specific decision. Keep actual operation dates separate from the time a later message reaches the RTSM. This allows staff to understand which actions occurred before a new record became available.
Record excursions and quality decisions without losing uncertainty
An excursion begins with the measured event, affected shipment or storage location, and the evidence available for assessment. Preserve the temperature record, duration, packaging and affected kit set where relevant. The responsible quality function assesses suitability using the product’s stability and handling evidence. A generic temperature range or a successful barcode scan supplies an inadequate basis for that decision. FDA’s decentralized-elements guidance makes product suitability and transport/handling relevant to delivery outside the traditional site [10].
The proposed workflow can hold affected inventory while evidence is incomplete and preserve the applicable physical handling instructions. Identify who may authorise a release or rejection and what record supports it. A missing logger file, an out-of-range reading and an accepted exposure assessment describe different information states. Staff need to know which uncertainty remains and how replacement supply or medical escalation will be managed.
Test a later correction to the affected set. Several kits may have moved before an event was recognised, or an amended sensor interpretation may change the assessment. The record should retain the original information, the change, the responsible decision and its basis. An interface retry should preserve the authorised disposition without silently deleting its earlier hold history. These are proposed acceptance questions for the implementation; the actual required controls follow the intended use and governing quality process [18] [19].
Reconcile quantities without converting assumptions into doses
Dispensing, administration, return and destruction records measure different events. A proposed reconciliation should define the physical unit and period before comparing them. A bottle, kit, tablet, vial and dose are not interchangeable units. Protocol titration, split containers, site transfers, losses and unused returns can each affect the calculation. Establish which record supports each quantity and how uncertain participant-reported use is documented [2] [20].
For a simple tablet example, sixty tablets dispensed, fifty-two reported taken and eight returned reconcile arithmetically. A different recorded dose total prompts investigation, not an automatic conclusion that the participant took an unaccounted medicine. Check the kit association, unit conversion, dates, returned count, reported adherence and any documented loss. Preserve the source and uncertainty of each fact. Correct a mistaken entry through its controlled process rather than force the equation to balance by changing an unsupported dose.
A system can generate a discrepancy and show the relevant records while authorised documentation continues. Assign an owner, investigation, outcome and history. Distinguish unresolved physical quantities from unrelated EDC queries: an accurate reconciliation must retain uncertainty rather than invent an administered quantity merely to balance a screen.
EU detailed GMP Section 11.3 requires the sponsor’s prior written authorisation for destruction. Reconciliation must be accepted after discrepancies are investigated and satisfactorily explained before destruction. Retain a dated, traceable destruction certificate or receipt. As proposed implementation controls, define reconciliation by trial, site and period and obtain documented sponsor sign-off; those particular granularity and acceptance-actor choices are additional to the wording of Section 11.3. China’s Article 49 assigns destruction responsibility to the applicant, requires written authorisation of an institution/third party and confirmation of issued, used and recovered quantity balance before destruction. Its records include reason, time, batch/drug code, actual quantity, destroyer and supervisor and are retained by the applicant [5] [3].
Destruction: reconciliation and authority before disposal
Physical accountability and clinical query closure are distinct processes.
Scroll sideways for the full figure.
| Framework | Before destruction | Retained evidence |
|---|---|---|
| EU detailed GMP 11.3 | Sponsor prior written authorisation; accepted reconciliation after discrepancy investigation and satisfactory explanation | Dated traceable certificate or receipt |
| China GMP 49 | Applicant responsibility; written authorisation for institution/third party; issued/used/recovered balance confirmed | Reason/time/batch or drug code/actual quantity/destroyer/supervisor; applicant retains |
| US 312.59/312.62(a) | Applicable return/disposition and adequate investigator drug-disposition records | Actual quantities, dates and authorised disposition |
| Proposed discrepancy workflow | Define physical unit, inventory set and responsible investigator; preserve uncertainty | Sources, investigation, corrections and decision history |
| Proposed EU implementation detail | Define trial/site/period granularity and sponsor reconciliation sign-off | Editorial control choices, not expressly specified acceptance actor/granularity in Section 11.3 |
Never manufacture a dosing quantity to force balance; unrelated EDC queries do not replace the actual prerequisites.
A destruction authorisation should identify exactly which stock and period it covers. A broader trial may still have open clinical questions or other stock under investigation. The team should apply its actual reconciliation and authorisation prerequisites to the defined inventory, with any additional sponsor controls identified as such. A certificate should trace to the disposition and records for that stock; a zero in a general query dashboard is insufficient evidence by itself.
Preserve blinding and medically necessary code access
Inventory information can reveal treatment indirectly through dates, packaging, quantities or visible identifiers. Assess those risks for the actual design and roles. A proposed permission model separates the information necessary for blinded conduct from the unblinded supply and quality functions, while preserving authorized emergency code access. The applicable ICH and EMA provisions support controlled access and trial integrity; they do not prescribe a universal three-vault cryptographic topology [20] [19].
Where active and comparator stock have different expiry dates, the team should assess the risk of inference and the permitted handling. Any conservative displayed horizon must remain consistent with actual suitability, labeling and traceability. A masking strategy should neither conceal information needed for safe use nor overwrite the true lot expiry in the authoritative quality record. Test both ordinary blinded use and the authorized path for medically necessary unblinding.
Choose architecture by record authority and tested behavior
An integrated suite, connected specialized systems and a controlled hybrid can each support a reviewable process. Compare them by where the authoritative facts reside, who can change them, how changes propagate, how the site retains its records and what happens when systems disagree. Shared login, common branding or an API description alone leaves those questions unanswered [18] [19].
In an integrated design, verify whether the product, lot and participant records share the intended identifiers and permissions. Demonstrate the actual behavior for a country-specific release, a pending relabeling operation and a corrected transaction. In a connected design, identify the owner of each fact and the handling of missing, duplicate, delayed or out-of-order messages. In a hybrid, identify which signed or local pharmacy record is authoritative and how its verification reaches the system making an allocation decision. The validation should cover the intended use and the interfaces, not just a successful demonstration with complete data.
EClinCloud publicly offers RTSM and EDC among its clinical modules. Those descriptions support a scoped evaluation of the platform; the specific expiry, excursion, relabeling and reconciliation behaviors described here require their own demonstrated configuration and validation. A scoped demonstration should identify the configured functions, tested roles and evidence retained for the actual deployment [21] [22].
For direct-to-participant supply, confirm product suitability, legal distribution arrangements, participant instructions, storage/receipt handling and the response when a delivery is delayed or uncertain. Determine which staff and service providers need identifying information, under what authority and with which protections. A site-restricted address vault and a particular courier API are possible designs, rather than universal rules that no sponsor role may ever access an address. Document the actual access assessment and the responsibilities retained by the investigator and sponsor [10] [19].
Define the transaction that changes availability
For implementation, specify the smallest inventory set to which each decision applies. A lot-level stability assessment can support several kit presentations, while a physical label operation occurs on identified stock at a particular location. A country-specific regulatory decision can apply to only one presentation. The proposed availability transaction should identify those scopes and require their applicable evidence. This is a data-design recommendation for preserving the assessed process, with the source framework described above.
Consider an illustrative sequence: a quality decision is approved on Monday, a depot completes its label operation on Tuesday, and a site receives the affected kits on Thursday. Record the actual event and location for each step. A message arriving on Friday should preserve Thursday’s receipt time and Friday’s transmission time. If the application must determine availability before that message arrives, its approved contingency should identify the trusted evidence staff can use and how the later reconciliation is performed. The test can then distinguish a late interface message from a late physical operation.
A subsequent correction should identify what changed. A mistaken receipt count belongs in the receipt record’s correction process; a new stability decision belongs in the quality history. Preserve the previous value, corrected value, reason and responsible person as appropriate to the actual record. Review whether the correction changes an affected kit’s decision or only improves its documentation. This distinction helps the site and sponsor understand a discrepancy without rewriting the chronology.
The acceptance test should also cover the direction of the interface. A pharmacy may report a completed physical operation to the RTSM, while the RTSM sends an allocation to the pharmacy. Assign an owner for each fact and define how a rejected or duplicate message is handled. Inspect a representative transaction through its source, message, receiving record and user-visible result. Role permissions should follow the actual responsibilities for making and recording the decision. FDA and EMA’s electronic-system guidance support assessment of intended use, data integrity and relevant interfaces; the particular transaction structure here is proposed for the trial’s evaluation [18] [19].
Verification scenarios and release evidence
Use the following hypothetical scenarios as prompts for the trial's risk-based acceptance tests. They are proposed implementation examples and are not reports of client deployments or guaranteed vendor functionality. A useful test has a defined starting record, triggering event, responsible decision, expected system/physical behavior and evidence to inspect. The team should set its own acceptance basis under the applicable process.
A label update reaches one site late. Start with one approved lot assessment and different inventory locations. Confirm the actual country and pack-level relabeling requirements. Complete the required operation at one location and leave another pending. Verify that the records remain location-specific, that allocation uses the applicable decision and that an authorized reviewer can find the evidence. A global date edit should not silently stand in for the missing operation.
An excursion affects only part of a shipment. Record the measured event, affected packaging and the basis for selecting kits. Confirm that the hold and physical handling cover the intended set. Test an uncertain boundary and a later corrected assessment. The final release/rejection should identify the responsible quality decision and retain earlier information. The test should show how staff respond while uncertainty remains, including replacement-supply and medical escalation arrangements where needed.
The supply and dosing records disagree. Create a discrepancy in units or kit association, then inspect the source records. Verify that a reviewer can distinguish dispensing from reported administration and returns, document an investigation and correct the relevant fact with its history preserved. The workflow should allow accurate safety and historical documentation throughout. An enforced arithmetic balance without source support would fail this test even if the final displayed difference were zero.
A blinded user can infer an arm from a record. Exercise the actual permissions across screens, exports, notifications and audit views. Check which dates and identifiers each role sees and whether that information is required for safe conduct. Confirm the authorized emergency path, its records and its effect on other participants' blind. A protected database table is insufficient evidence if an export or notification reveals the same information.
An interface or local network fails at dispensing. Determine which facts remain available and trustworthy, what approved contingency process applies and who can make the clinical/supply decision. Test reconciliation after recovery, including duplicate messages and distinct actual-event versus transmission times. Preserve the evidence rather than backdate a transaction to make the sequence appear complete. A technical override supplies no independent permission to dispense unsuitable, unreleased or otherwise unauthorized product [18] [19].
The release package should then connect requirements to actual tests: the product/country assessment, label versions, stability and quality decisions, role permissions, interface mapping, representative records, exception handling and retained evidence. Assign ownership for changes after release as well. A new label, product presentation, supplier or country can change assumptions that were valid in the original test. Review the affected controls rather than claim that one completed platform validation permanently covers every study configuration.
Source versions and scope
The crosswalk uses the cited current legal texts and identified guidance. The source list distinguishes legislation, technical recommendations and corporate product descriptions. The five tables compare specific decisions; they contain no prevalence or software-performance estimates. Implementation examples are editorial proposals to be assessed for the actual trial and site.
Preserve the version of the product/country assessment used for a release. If an authority approves a changed label or a quality function issues a new shelf-life decision, identify which prior assumptions changed and which stock the change covers. A current public guideline is useful context; the actual approved dossier, product evidence and applicable operating conditions determine the decision. Review those dependencies when presentations, sites, suppliers or countries change.
Make each inventory decision traceable
The useful output is a kit decision whose basis can be retrieved: which product and country rules apply, which quality and regulatory decisions are effective, what physical operation occurred and who authorized use. Keep the legal classification, label evidence and system state connected while preserving their distinct meanings.
That record gives the pharmacy, supply, clinical and quality teams a common basis for handling a changed expiry, uncertain excursion or discrepancy. The architecture should be judged by whether the tested workflow preserves those decisions and supports correct action when information is incomplete.
Sources
1. European Parliament and Council. Regulation (EU) 536/2014, consolidated December 5, 2022: Articles 2, 59, 61–69 and Annex VI. Read with the authentic original and amending acts.
2. National Archives and Records Administration (NARA / eCFR), Electronic Code of Federal Regulations: Title 21 Part 312 Investigational New Drug Application - 21 CFR § 312.6 (Labeling), § 312.57 (Recordkeeping), § 312.59 (Disposition of Unused Supply), § 312.60 (General Investigator Responsibilities), and § 312.62(a) (Investigator Drug Disposition Records) (2026). https://www.ecfr.gov/current/title-21/chapter-I/subchapter-D/part-312
3. NMPA. GMP Annex, Clinical Trial Drugs (Trial), Announcement 2022 No.43, effective July 1, 2022. Official reproduction and full attachment; Articles 31–34.
4. European Commission. Delegated Regulation (EU) 2022/2239, September 6, 2022, published November 15, 2022. Immediate-packaging period-of-use amendments; effective December 5, 2022.
5. European Commission. Detailed Commission guidelines on GMP for IMPs for human use, Section 6.6, Labelling.
6. Health Canada. GUI-0036, Annex 13 to the GMP guide for drugs used in clinical trials: guidance, February 4, 2026. Labelling, comparator modification and release.
7. European Commission. Delegated Regulation (EU) 2017/1569: principles and guidelines of GMP for IMPs.
8. CTAG. Auxiliary Medicinal Products in Clinical Trials, October 2025. Endorsed October 15; published October 30; applicable December 1, 2025 to new applications, not retrospective. Section 3.2 and Annex 2.
9. National Archives and Records Administration (NARA / eCFR), Electronic Code of Federal Regulations: Title 21 Part 211 Current Good Manufacturing Practice for Finished Pharmaceuticals - Subpart G Packaging and Labeling Control (§§ 211.122–211.137, Including § 211.137(g) Exemption from Expiration Dating for Investigational Drugs) (2026). https://www.ecfr.gov/current/title-21/chapter-I/subchapter-C/part-211/subpart-G
10. U.S. Food and Drug Administration (FDA), Conducting Clinical Trials With Decentralized Elements: Guidance for Industry, Investigators, and Other Stakeholders (Packaging, Direct-to-Participant Shipping, Chain of Custody, and Drug Accountability) (Final Guidance, September 2024). https://www.fda.gov/regulatory-information/search-fda-guidance-documents/conducting-clinical-trials-decentralized-elements
11. NMPA and issuing agencies. Good Clinical Practice for Drugs, Announcement 2026 No.50, effective September 1, 2026: complete official attachment. Articles 28, 29, 46, 48, 51, 53.
12. MHRA. Clinical trials for medicines: labelling, effective guidance updated April 28, 2026. Read with current regulation 46 and applicable transition arrangements.
13. United Kingdom. Medicines for Human Use (Clinical Trials) Regulations 2004, regulation 46, as amended and in force in 2026.
14. Health Canada. GUI-0100, Part C, Division 5: Labelling and records, 2026. C.05.011 and expiry-date interpretation.
15. Health Canada. Food and Drug Regulations, C.05.011: labelling.
16. ICH. Q1A(R2), Stability Testing of New Drug Substances and Products. Quality guideline; scope and development stage matter.
17. ICH. Q1E, Evaluation for Stability Data.
18. U.S. FDA. Electronic Systems, Electronic Records, and Electronic Signatures in Clinical Investigations: Questions and Answers, final guidance, October 2024.
19. EMA. Guideline on computerised systems and electronic data in clinical trials, EMA/INS/GCP/112288/2023. Annex 5, A5.2 addresses IRT; Annex 3 user management; Annex 4 security.
20. International Council for Harmonisation (ICH), ICH Harmonised Guideline: Good Clinical Practice E6(R3) Step 4 Final Guideline (Section 2.10 Investigational Product Management, Section 3.15 Supply, Labeling, and Randomization, and Section 4 Computerised Systems) (January 6, 2025; adopted by FDA September 8, 2025). https://database.ich.org/sites/default/files/ICH_E6%28R3%29_Step4_FinalGuideline_2025_0106.pdf
21. EClinCloud. Public clinical platform and product information. Corporate capability claims require their own scope-specific evidence.
22. EClinCloud. Randomization and Trial Supply Management. Public product information, distinct from a validation or performance study.