Allogeneic cell therapy manufacturing. One donor lineage, many controlled doses.

Allogeneic cell therapy turns one qualified donor or cell source into banks, production campaigns, drug-product lots and doses for many recipients. That leverage is the point of the model and also its risk: one upstream finding can reach a wide downstream population, while every dose still needs its own identity, custody, storage history and release.

Seal records the genealogy as the work creates it. Donor eligibility, banking, engineering, expansion, fill, testing, cryostorage and allocation are controlled transformations on one connected record. The question “which doses, and which recipients, came from this donor?” becomes a query of that record rather than a reconstruction from separate systems.

Why teams choose Seal for allogeneic manufacturing

A donor or bank finding has to be traced to every dose and recipient that came from that source. When donor, manufacturing and distribution records live in different systems, joined by lot numbers copied between them, that trace means reconciling all three. Seal makes the joins part of the record: each bank vial, batch, pool, lot and dose points to its source and its descendants, and each carries the state of the decisions it depends on. A source concern reaches exactly the doses and recipients derived from it, and a revised process applies to later lots while earlier lots keep the process they were made under.

1Separate donor identity from donor data.

Manufacturing needs a stable donor identity, not the donor’s personal details. Seal uses a coded donor identity for genealogy, labels and searches. Eligibility and screening can remain in an authoritative clinical or donor system, while Seal retains the approved manufacturing status, the source event, any consent restrictions and the identifiers needed for traceability. Access to direct identifiers is restricted and audited.

Eligibility is a time-bound decision drawing on screening, testing, history, collection suitability, deferrals and responsible-person approval.¹ Its state stays explicit. Starting material can be quarantined and processed under approved conditions while final eligibility is pending, but every object made from it inherits the unresolved gate until it is decided.

Collection and receipt preserve custody and condition: collection centre, kit lots, timestamps, container identifiers, cell count, temperature, courier and receipt inspection. A label discrepancy, temperature excursion, short quantity or missing donor evidence opens a controlled assessment before the material can be used.

2Treat banks and engineering as lineage, not inventory.

Master, working and production banks retain their source, derivation, passages, population doublings, construct or edit, characterisation, release, storage positions and remaining vials. EU GMP for advanced therapies sets out expectations for cell bank systems;² in Seal, each bank template defines the descendants and uses it permits. A vial withdrawal is an accountable physical event that starts a traceable production branch.

Engineering and editing steps connect the vector or reagent lots, cell state, equipment, parameters, timing, samples, efficiency and residual or off-target testing. The engineered population becomes a new material state with its source lineage and hold. Repeat manipulation or reprocessing runs only on an approved branch.

Expansion records media, feeds, density, viability, phenotype, passages and harvest decisions. A configured check enforces the approved maximum passage or expansion age, and split and pool events keep source and destination quantities. Campaigns record the suite, closed-system configuration, equipment, single-use assemblies, cleaning and line clearance, so concurrent lineages stay separated physically and in the record.

3Keep the dose arithmetic with the dose.

Harvest, wash, concentration, pooling, formulation and fill are controlled transformations. Total viable cells, viable cell concentration, recovery, fill volume, overage, container count, retained samples and rejected units reconcile from pool to fill. A dose claim keeps the actual count and formulation evidence behind it, calculated from versioned rules.

Tests attach to the stage they describe. Identity, viability, purity, potency, sterility, mycoplasma, endotoxin, vector copy number and genomic measures each link to the physical sample, method, instrument and specification used. A bank-characterisation result and a final-dose result remain related but not interchangeable.

Potency deserves particular care because the assay is itself a biological system. Target cells, critical reagents, plate maps, controls, reference standards, calculations and method version stay with each result, so method drift or a reagent change can be assessed against the affected batches without losing their manufacturing context.

4Give each dose two identities: its source and its recipient.

Autologous manufacturing binds one patient to one batch. Allogeneic manufacturing binds a donor-derived lineage to many doses, then allocates individual containers to recipients. Seal keeps donor lineage, product and lot identity, and recipient allocation as separate identities, verified at allocation, pick, shipment, receipt and administration.

Release happens at more than one level. Bank disposition, production-batch progression, lot release and individual-container eligibility are distinct decisions with their own requirements. Long-duration tests and conditional states stay explicit, and each decision freezes the evidence available when it was made.

Cryostorage is part of the manufacturing state. Every bank vial, intermediate, dose and sample has a tank, rack and position, with temperature, alarm, access and movement history. An excursion identifies the exact population in the affected zone and interval, including doses already shipped or administered. Allocation draws on released inventory, location, expiry, shipping qualification and site readiness, and the pick-and-pack record verifies the container, shipper, logger and documents before departure.

5Trace a source finding forward to recipients.

A concern about a donor, bank, vector, reagent, assay, freezer or supplier traverses the campaigns, pools, lots, doses, shipments, sites and recipients actually derived from it, not every product of the same name.³ Quality, clinical, safety and regulatory roles govern notification and any field action. The coded identity is enough to scope the impact; authorised roles resolve it to people where that is required.

Change creates populations. A new bank generation, edit, vector, medium, site, method, container or cryopreservation process defines a cohort, and comparability evidence connects that change to samples, results, release, stability and clinical lots. Historical genealogy is not rewritten.

6Prove one donor-to-recipient branch.

Start with one coded donor: eligibility, receipt, engineering, master and working bank, a production vial withdrawal, expansion, harvest, fill, testing, lot and dose release, cryostorage, allocation, shipment and administration. Include the failure cases that test the model: pending donor evidence, an editing-efficiency failure, a passage-limit branch, a pool quantity discrepancy, an invalid potency run, a freezer-zone excursion and a post-administration source alert.

The model is ready when one source can be traced to every recipient and any dose can reconstruct its complete source. Then extend it to further products, banks and sites on the same foundation.