Clinical supply. Blinded, available, accountable.

1Supply must be blinded and accountable at once.

Clinical trial supply has to satisfy two conditions that pull in opposite directions. Treatment identity must stay controlled and blinded where required, while every physical unit stays traceable, available, correctly labelled, within condition and accountable from packaging to destruction.

Seal connects the protocol and approved product state to kit design, packaging, labels, coded identifiers, depots, sites, shipments, excursions, returns and reconciliation. Supply teams act on the physical chain, and treatment meaning is visible only to the roles that need it.

1.1Why teams choose Seal for clinical supply

When forecasting, packaging, labels, depot stock and the IRT live in separate tools, the connections between them are kept in spreadsheets, and a label change or excursion becomes a hunt for the affected units. Seal keeps those steps on one record of each kit, from protocol version to destruction, and each kit carries the kit-pattern and label versions it was packed with. The affected units are found from the record, wherever they are.

The Clinical Operations blueprint exchanges site activation, enrolment and visit signals with it without collapsing responsibilities: activation can gate shipment, forecasts can update demand, and stockout risk can inform trial operations, without giving every user access to treatment detail.

2The protocol and product state define what to make.

Enrolment assumptions alone do not tell the supply team what to make. Demand also depends on arms, visit schedule, titration, cohorts, countries, site activation, lead times, shelf life and resupply strategy. Seal holds protocol versions and supply assumptions as controlled inputs, and keeps scenario outputs distinct from approved production and distribution instructions. An amendment identifies the visits, kits, labels, forecasts and active inventory it may affect.

The product changes too. An investigational medicinal product can change formulation, strength, manufacturer, packaging, label or shelf life while the study continues, and a comparator or placebo has its own lineage. Seal maintains product and packaging versions with effective scope by study, arm, country and time, and physical inventory keeps the exact version and source lot used. A new approval does not by itself make existing packs equivalent.

The EMA quality-documentation guideline for investigational medicinal products describes the manufacturing, control, packaging and stability information that supports clinical use. Operationally, those approved states have to resolve into the correct physical kit and label without informal interpretation.

3Kit design and packaging account for every component.

Blinded supply may require matching presentation, over-encapsulation, visit or titration kits, comparators and ancillaries. The visible kit identifier supports assignment and accountability without exposing treatment identity. Seal defines the kit pattern (components, quantities, label positions, allowable product versions, country scope and storage) separately from the kits produced from it, and each kit records the actual component lots and pack identifiers used.

Clinical packaging is manufacturing work. Seal creates an executable packaging batch from the approved kit and label definitions, with controlled issue, line clearance, scanning of source lot, version, status and expiry, and reconciliation of printed and coded items through issued, used, rejected, destroyed and returned states. Packaging operators verify the correct coded component without receiving unnecessary treatment meaning.

Every finished kit retains its product or comparator lot, packaging batch, component genealogy, visible identifier, hidden treatment code where applicable, expiry basis and release state.

4Labels resolve from the kit’s context.

Clinical labels vary by protocol, product, visit, country, language, storage, regulatory text and expiry.¹ Copying a master document for each combination turns consistency into a manual review problem. Seal stores approved label content as governed data and resolves the applicable text from the kit context; variable data such as kit number, batch and expiry renders from the source record, and template and printer versions stay controlled.

A reprint requires a reason and preserves the prior output. A label amendment identifies stock not yet packaged, packaged but unreleased stock, depot and site stock, shipments in transit and dispensed or returned units that need assessment.

5The randomisation boundary stays controlled.

An IRT may remain authoritative for subject assignment and treatment allocation, while clinical supply still needs kit numbers, availability, site, shipment, quarantine and dispensing acknowledgement. Seal defines that boundary explicitly. It can create or receive coded kit identifiers and send eligible inventory state without importing unblinded treatment meaning. Requests and acknowledgements are idempotent, so a retry does not allocate or ship the same kit twice, and failed or delayed messages remain visible for reconciliation.

Unblinding is a controlled exception. Emergency or planned unblinding should reveal only what the situation requires, to the authorised person, with a reason and a complete audit history.² The event records the subject or kit, requester, authorisation, time, information revealed and any safety workflow triggered, while supply users who do not need treatment identity continue to see coded inventory. A compromised blind can open a deviation with the affected users, kits and subjects already linked.

6Depots and sites see one physical chain.

Released kits move through depots, couriers, customs, sites, pharmacies and sometimes direct-to-patient channels. Each shipment records its pack-out, units, logger, route, carrier, dispatch, receipt and discrepancies. Site inventory derives from received and acknowledged units, not from a shipment marked delivered in a courier portal. Resupply uses enrolment and consumption signals within lead time, shelf life, country approval and buffer policy, so planners can see why a site is projected to stock out and which action is feasible.

A temperature excursion creates an assessment with the lots, kits, stability basis, exposure and locations attached. Quarantine propagates to the exact units wherever they are, and the decision to release, restrict, relabel, return or destroy updates their usable state. Sites see which kits are blocked and which remain eligible, without seeing allocation.

An expiry extension is an inventory transformation, not a global edit. The approved extension has scope: product and lot, packaging configuration, storage history, markets and protocol. Seal identifies the eligible units and creates controlled relabelling work, and old and new label states remain traceable. The Stability Management blueprint supports the shelf-life decision; clinical supply executes it against real inventory.

7Returns and destruction close accountability.

At the site, kits can be dispensed, partially used, unused, damaged, lost, quarantined, returned or destroyed, and accountability has to distinguish those states without revealing treatment beyond authorised roles. Returned units keep their storage and custody history, and destruction records its method, population, approval, vendor and certificate.

Study reconciliation compares what was packaged, released, shipped, received, dispensed, returned, lost and destroyed. Each difference remains an actionable record rather than an unexplained adjustment made to close a spreadsheet.

8Prove one kit through final reconciliation.

Trace one representative kit from protocol and product version through pack design, packaging batch, label, release, coded identifier, depot shipment, site receipt, assignment acknowledgement, return and destruction.

Exercise a protocol amendment, a label correction, an IRT retry, a damaged shipment, a temperature excursion, a lost kit, an expiry extension, an emergency unblinding and a reconciliation difference. The system is ready when blinded users can control the physical chain and authorised users can reconstruct the kit’s complete identity and history.