Comprehensive Audit & Compliance Services
From GMP manufacturing oversight to M&A regulatory due diligence — our service portfolio spans the full life sciences compliance landscape. Browse by discipline or use the navigation below to jump to the area most relevant to your needs.
GMP Oversight & Material Qualification
Comprehensive audit and qualification services across the pharmaceutical manufacturing supply chain, aligned with ICH Q7, ICH Q9, EU GMP, and FDA CGMP requirements.
API & Intermediate Manufacturer Audits
Compliance verification aligned with ICH Q7 and ICH Q9 risk management. Scope covers process controls, impurity profiles, change control procedures, batch record review, and quality unit oversight at active pharmaceutical ingredient manufacturing sites.
Excipient Supplier Audits
Material purity and traceability evaluations based on IPEC-PQG GMP standards. Assessing excipient manufacturers' quality systems, analytical testing methodologies, supplier qualification frameworks, and supply chain transparency documentation.
Packaging Material Supplier Audits
Structural and security printing reviews utilising PS9001 criteria. Covering primary and secondary packaging material specifications, tamper-evidence feature integrity, print quality control systems, and component traceability requirements.
CDMO / Contract Manufacturer Qualification
Technical capability and quality framework verification before onboarding. Assessing manufacturing capacity, quality management systems, regulatory inspection history, batch release processes, and sub-contractor oversight mechanisms.
Advanced Therapy Medicinal Products (ATMP) Audits
Specialised containment, sterility, and cryogenic-chain auditing for cell and gene therapy manufacturing lines. Covering aseptic processing controls, environmental monitoring programmes, cold chain management, and chain-of-custody for starting materials.
Sterile & Aseptic Processing Appraisals
Evaluation of media fill protocols, environmental monitoring (EM) trend analysis, and particulate control systems. Aligned with EU GMP Annex 1 (revised 2022) and FDA aseptic processing guidance, covering cleanroom qualification and contamination control strategies.
Core Internal GMP Audits
Multi-departmental audits across Production, Warehouse, Quality Control, Engineering, and Quality Assurance functions. Structured to align with current CGMP requirements and provide a systematic assessment of internal quality management system compliance.
Pre-Approval Inspection (PAI) Readiness
Focused deep-dive assessments to clear the regulatory runway before commercial drug launches. Includes data integrity forensic reviews, batch record completeness checks, process validation gap assessments, and benchmarking against current agency inspection trends.
GCP Trial & Clinical Quality Valuations
End-to-end clinical quality assurance services covering investigator sites, sponsors, CROs, and emerging decentralised trial models — aligned with ICH E6 (R3) and regional GCP requirements.
Clinical Trial Site Audits
Monitoring investigator sites for protocol adherence, patient consent documentation accuracy, source data verification, adverse event reporting completeness, and investigational product accountability. Covers regulatory and GCP compliance at the point of patient care.
Sponsor & CRO Process Audits
High-level corporate process evaluations of Contract Research Organisations and sponsor quality systems — assessing SOPs, training records, delegation of authority, monitoring programme oversight, and quality management infrastructure.
CRO Capabilities Qualification Audits
Strategic capabilities, data-handling, and network management vetting prior to contract signings. Assessing CRO operational infrastructure, system validation status, therapeutic area expertise, capacity planning, and financial stability indicators.
Trial Master File (TMF) Completeness Audits
Systematic document review using the DIA TMF Reference Model to identify completeness gaps, filing inconsistencies, and version control failures that could delay regulatory submissions or trigger inspection findings during marketing authorisation review.
Investigator Qualification Appraisals
Competency and facility verification for clinical trial nodes — reviewing principal investigator training records, delegation logs, sub-investigator qualifications, site facility readiness, and equipment calibration status against protocol requirements.
Decentralised Clinical Trial (DCT) Tech Appraisals
Auditing digital remote-patient platforms, wearable sensor endpoints, electronic patient-reported outcome (ePRO) tools, and telehealth pipelines for GCP compliance, data integrity, patient privacy safeguards, and regulatory validation status.
GLP & Analytical Laboratory Appraisals
Comprehensive laboratory compliance assessments across non-clinical safety, analytical testing, and bioanalytical environments — aligned with OECD GLP Principles, 21 CFR Part 58, and ISO 17025.
GLP Facility Audits
Infrastructure and process evaluations meeting OECD GLP Principles and 21 CFR Part 58 requirements. Covering facility design and maintenance, study director oversight, raw data management, archiving procedures, and quality assurance unit function.
ISO 17025 Laboratory Competence Audits
Quantitative verification of testing and calibration laboratory management systems. Assessing method validation documentation, equipment calibration schedules, reference material traceability, proficiency testing participation, and uncertainty of measurement reporting.
Bioanalysis & Pharmacokinetic (PK) Lab Appraisals
High-complexity data-integrity checks targeting genomic and biological laboratory assay pipelines. Covering method validation against EMA and FDA bioanalytical guidance, sample management procedures, instrument qualification, and data handling controls.
Outsourced Bioanalytical Vendor Audits
Verifying regulatory compliance at third-party contract research laboratories processing clinical trial samples. Assessing chain-of-custody controls, sample storage conditions, assay performance metrics, and data transfer integrity between vendor and sponsor systems.
Analytical Method & Raw Data Spot-Checks
Forensic, unannounced data deep-dives conducted during physical audits to identify software manual overwrites, audit trail deletions, user bias in result selection, and transcription vulnerabilities from instruments to laboratory information management systems (LIMS).
GVP & Post-Market Safety Systems
Specialist pharmacovigilance audits covering the full safety system from contractual agreements and outsourced vendor oversight through to PSMF integrity and signal detection process assurance.
SDEA & PVA Contractual Compliance Audits
Auditing Safety Data Exchange Agreements (SDEAs) and Pharmacovigilance Agreements (PVAs) between licensing partners, co-marketing companies, and local affiliates. Verifying contractual timelines, reporting obligations, and escalation mechanisms are operational.
Outsourced Safety Vendor & CRO Qualification
Vetting third-party case-processing hubs, safety data managers, literature monitoring services, and medical information call centres. Assessing quality systems, staff training, case-processing timelines, and IT system validation against EMA GVP Module I requirements.
QPPV & Local Affiliate Network Appraisals
Verifying that the Qualified Person for Pharmacovigilance (QPPV) maintains full structural control over the safety system, including oversight of local affiliate networks, escalation pathway testing, and access to the Pharmacovigilance System Master File.
PSMF Integrity Audits
Structural evaluation of the Pharmacovigilance System Master File to ensure all logbooks, vendor annexes, key personnel records, and system descriptions are current, complete, and accurately reflect the operational pharmacovigilance system.
Signal Detection & Literature Review Appraisals
Checking process integrity in systematic scanning of medical journals, WHO VigiBase, and EudraVigilance for unexpected safety signals. Assessing documentation of signal triage decisions, follow-up actions, and integration into benefit-risk assessment processes.
GDP & Supply Chain Logistics
Distribution chain audits and cold chain qualification services ensuring product integrity from manufacturer to end user — aligned with EU GDP Guidelines 2013/C 343/01 and global distribution mandates.
Wholesale Distributor & Broker Audits
Verifying source traceability, wholesale dealer licencing, storage condition compliance, and diversion prevention controls under global pharmaceutical distribution mandates. Assessing procurement procedures, returns handling, and complaint management systems.
Cold Chain & Temperature Storage Mapping Audits
Reviewing continuous temperature tracking systems, excursion management procedures, and storage mapping validation for heat-sensitive biologics, vaccines, and biosimilar products. Covering qualification of cold rooms, refrigerators, and temperature-controlled vehicles.
Controlled Substance Logistics Appraisals
Evaluating high-security vault storage specifications, narcotics tracking records, chain-of-custody documentation, and destruction procedure controls for Schedule I–V controlled substances across national and international regulatory requirements.
3PL Vendor Qualification Audits
Auditing third-party logistics warehouses, ambient and refrigerated freight networks, and cross-docking operations. Assessing handling procedures, GDP training records, system interfaces with sponsor quality systems, and business continuity arrangements.
Medical Device Diagnostics & Global Frameworks
Device quality system assessments covering ISO 13485, MDSAP multi-country compliance, EU MDR/IVDR transition, and PRRC framework verification across the full device development and commercial lifecycle.
ISO 13485 QMS Assessments
Design, manufacturing, and operational alignment assessments against ISO 13485:2016. Covering quality management system documentation, design and development controls, production and process controls, post-market surveillance, and corrective action effectiveness.
MDSAP Audits
Compliance preparation and readiness assessments for the US, Canada, Brazil, Japan, and Australia via the single Medical Device Single Audit Programme (MDSAP) framework. Covering all five regulatory authority requirements in one structured audit sequence.
EU MDR / IVDR Transition Audits
Conformity assessment gap analyses for CE-marking under EU MDR 2017/745 and EU IVDR 2017/746. Assessing technical documentation completeness, clinical evaluation adequacy, UDI implementation, post-market clinical follow-up plans, and Notified Body readiness.
PRRC Auditing
Verifying execution frameworks of the designated Person Responsible for Regulatory Compliance (PRRC) under EU MDR Article 15. Assessing PRRC qualification documentation, responsibility scope, oversight mechanisms, and reporting lines within the quality system.
Enterprise Quality Management Architecture
ISO framework audits for quality, information security, environmental, and occupational health management systems — supporting integrated management system (IMS) development and certification readiness.
ISO 9001 Quality Management System Reviews
Foundational quality management system assessments covering context of the organisation, risk-based thinking, process approach implementation, customer focus, leadership engagement, and continual improvement mechanisms against ISO 9001:2015 requirements.
ISO 27001 Information Security Audits
Information Security Management System assessments critical for demonstrating data protection posture to clients, regulators, and licensing partners. Covering risk assessment methodology, Annex A control implementation, and statement of applicability completeness.
ISO 14001 Environmental Management Audits
Environmental Management System assessments evaluating environmental aspects and impacts, legal compliance registers, operational controls, emergency preparedness, and environmental performance monitoring against ISO 14001:2015 requirements.
ISO 45001 Occupational Health & Safety Audits
Occupational health and safety management system assessments covering hazard identification, risk and opportunity evaluation, worker participation, operational planning, incident investigation, and performance evaluation under ISO 45001:2018.
Nutraceutical & Food Supply Systems
Food safety and nutraceutical quality assurance assessments supporting HACCP implementation, GFSI scheme certification readiness, and regulatory compliance for food supplement and functional food manufacturers.
HACCP & GFSI Benchmarking Evaluations
Evaluating Hazard Analysis Critical Control Point (HACCP) programme design and implementation, and benchmarking food safety management systems against GFSI-recognised schemes including BRCGS, SQF, IFS, FSSC 22000, and Global G.A.P. for certification readiness.
Computer System Validation & Data Integrity Frameworks
Digital assurance services spanning IT vendor qualification, software lifecycle assessment, CSV documentation gap analysis, and ALCOA+ data lifecycle appraisals across computerised systems in regulated environments.
IT Vendor & SaaS Supplier Qualification
Verification of digital vendor technology stacks against FDA 21 CFR Part 11 and EudraLex Annex 11. Assessing cloud infrastructure security, audit trail functionality, user access controls, backup and recovery procedures, and electronic signature compliance.
SDLC & Software Testing Methodology Assessments
Evaluating vendor code repositories, change control tracking systems, bug remediation processes, regression testing coverage, and release management controls to assess the rigour and traceability of the software development lifecycle within regulated environments.
CSV Documentation Gap Audits
Retrospective auditing of existing Installation Qualification (IQ), Operational Qualification (OQ), and Performance Qualification (PQ) scripts for missing evidence, inadequate test coverage, incomplete execution signatures, or weak performance parameters.
Data Lifecycle Appraisals (ALCOA+)
End-to-end mapping of data generation, processing, review, and archiving to ensure records remain Attributable, Legible, Contemporaneous, Original, Accurate, Complete, Consistent, Enduring, and Available throughout their regulatory retention period.
Hybrid & Paper-to-Electronic Forensic Reviews
Detailed auditing of transition points where operators transcribe physical instrument logs into digital systems. Identifies transcription vulnerabilities, manual entry opportunities, timestamp inconsistencies, and human bias in result transfer that compromise data integrity.
M&A Due Diligence & Technical Risk Screening
Pre-acquisition regulatory intelligence services providing rapid, independent assessment of compliance liabilities before deal closure — protecting buyers from undisclosed regulatory risk.
Regulatory Liability Screening
Rapid compliance liability assessments of a target company's manufacturing facilities, product portfolios, historical warning letters, consent decree history, and open regulatory commitments. Provides decision-support intelligence before acquisition closings to quantify regulatory risk exposure.
Supply Chain Serialization & Track & Trace
Compliance verification for pharmaceutical serialization and traceability requirements under the US Drug Supply Chain Security Act (DSCSA) and EU Falsified Medicines Directive (FMD).
Barcoding & Aggregation Audits
Verifying manufacturing site compliance with DSCSA product identifier requirements and EU FMD unique identifier specifications. Assessing barcoding equipment qualification, serialization system validation, aggregation process controls, and exception management procedures.
Interoperable Data Exchange Verification
Auditing the secure electronic transfer of transaction information, transaction histories, and transaction statements between manufacturers, wholesale distributors, repackagers, and dispensers within the pharmaceutical supply chain information network.
Centralised Programme Management & Managed Calendars
End-to-end management of client audit programmes, replacing fragmented spreadsheet tracking with coordinated, professionally managed compliance calendars across global supplier and facility networks.
Managed Annual Audit Programme Services
Managing a client's entire annual audit pipeline across dozens of global facilities, contract suppliers, and internal departments. Includes audit scheduling, auditor resource allocation, pre-audit document requests, report issuance tracking, and CAPA follow-up monitoring on a single coordinated timeline.
Eco-Conscious Remote & Hybrid Appraisals
Technology-enabled audit delivery reducing travel costs, carbon footprint, and scheduling friction — without compromising the depth and independence of the audit.
Remote & Hybrid Audit Delivery
High-definition live video facility walkthroughs, smart-glass-assisted equipment inspections, and secure cloud document parsing to execute rigorous audits without heavy travel. Particularly effective for document-intensive audits (TMF, PSMF, CSV), rapid supplier qualification checks, and cost-conscious SME clients. Each remote audit is scoped to match on-site rigour with appropriate technology controls.
Need a Bespoke Audit Scope?
Many engagements require a tailored combination of disciplines. Contact our team to discuss your specific compliance requirements and we will design an audit programme that fits.
Get in Touch