Blueprint library/etmf

Electronic Trial Master File (eTMF) Software

Expected evidence to filed artifact. Completeness, timeliness, quality, provenance, inspection, and archive in one trial record.

Plan and manage trial-master-file content using governed reference models and study-specific expectations; ingest, classify, QC, approve and file artifacts; track completeness, timeliness and quality by study, country and site; manage correspondence, access, inspection packages, transfer, reconciliation, and long-term archive.

Electronic Trial Master File (eTMF) Software

An electronic trial master file is not a document repository with numbered folders. It is the controlled evidence that a clinical trial was planned, conducted, monitored, analyzed, reported, and closed appropriately across sponsor, country, site, vendor, and time.

Seal models expected evidence before it arrives and preserves every artifact’s provenance, classification, quality review, approval, filing, relationship, replacement, timeliness, access, and archive state.

01

The reference model is governed

Model name, version, zones, sections, artifact types, definitions, required metadata, milestones, responsible parties, retention, supersession, and change notes define the reusable structure.

TMF reference model / three zones, one truth
Zone 1
Central trial documents
Protocol
Investigator's Brochure
Regulatory submissions
Safety reports
Zone 2
Global oversight
DMC charters
SAE reconciliation
Coding dictionaries
Lab certifications
Zone 3
Site-level documents
Informed consents
Delegation logs
Monitoring reports
IP accountability
Real-time completeness
Zone 1
92%
Zone 2
88%
Zone 3
95%
Know what's missing before the inspector asks
Fig. 1 / Trial master file reference model separating central, country, and site evidence while retaining one study view

A model upgrade is assessed and adopted; it does not silently reclassify historical evidence.

02

The study TMF plan applies the model

Protocol, phase, design, countries, sites, committees, vendors, systems, products, procedures, milestones, responsibilities, filing conventions, QC strategy, timeliness targets, inspection approach, archive plan, and approved exceptions define the study-specific file.

03

Expected artifacts are generated from events

Study start, country activation, site selection, approval, initiation, amendment, enrollment, monitoring, safety event, vendor deliverable, database lock, closeout, submission, and archive can create evidence expectations.

Expected, not applicable, substituted, waived, overdue, filed, superseded, and missing remain distinct states with rationale.

04

Central, country, site, vendor, and subject scopes stay separate

An artifact’s study, country, site, investigator, committee, vendor, product, system, subject scope where permitted, milestone, and effective dates determine where it belongs and what it covers.

One global document can satisfy several expectations without being duplicated into unrelated files.

05

Ingestion preserves provenance

Source system, sender, channel, transfer, file name, format, checksum, received time, created time, document date, author, organization, signature state, source identifier, duplicate candidate, and original package remain captured.

Email, portal, e-signature, CTMS, EDC, safety, laboratory, vendor, scan, and bulk migration sources remain distinguishable.

06

Classification is proposed and reviewed

Artifact type, zone, section, study, country, site, milestone, document date, version, language, author, organization, subject, confidentiality, expected-artifact match, confidence, and reviewer define filing.

Automatic suggestions accelerate work but cannot conceal uncertainty or overwrite an approved classification.

07

Quality control evaluates the artifact itself

Correct document, complete content, readable pages, signatures, dates, version, metadata, filing location, scope, duplicates, redactions, language, certification, replacement relationship, and inspection usability form the QC decision.

Artifact provenance carried through classification, QC, filing, audit trail, and complete document journey
Fig. 2 / Artifact provenance carried through classification, QC, filing, audit trail, and complete document journey

Failed QC retains findings, return path, corrected artifact, resubmission, reviewer, and final outcome.

08

Approval and signature remain distinct from QC

Authoring, review, approval, execution, electronic signature, wet-signature certification, filing QC, and finalization are separate states with assigned roles and evidence.

A document can be correctly filed but not yet approved—or approved but filed in the wrong scope.

09

Version and replacement relationships prevent ambiguity

Draft, final, executed, corrected, translated, certified copy, redacted copy, superseded version, amendment, addendum, duplicate, and replacement remain related to one artifact family.

The effective document for a country or site resolves by scope and date without deleting the earlier state.

10

Completeness is expectation based

Required artifacts, applicability, milestone due dates, received content, QC, approvals, supersession, substitutions, waivers, and approved exceptions calculate completeness by study, zone, country, site, vendor, milestone, and owner.

eTMF completeness / missing captured, aged, actionable
Present
94%
1,847 of 1,961
Missing
52
14 older than 30 days
QC overdue
62
avg age 9 days
Protocol v4.2 / all sites
48 of 48
Site qualification / Site 107
received
Monitoring report / Mar visit
23 days overdue / Site 107
Consent forms / 147 subjects
145 of 147
Delegation log / Site 042
QC pending 11 days
IRB correspondence
all filed
Missing for 23 days / surfaced / chased / closed — before the inspector asks.
Fig. 3 / Expected and present artifacts compared continuously so missing evidence is resolved during trial conduct
11

Timeliness measures the right interval

Event or document date, availability date, receipt, submission, QC start, QC completion, filing, rejection, resubmission, finalization, target, pause reason, and exception define timeliness.

The metric distinguishes late creation, late transmission, late QC, and late filing.

QC findings, rejections, metadata errors, duplicates, missing signatures, wrong versions, unreadable scans, late documents, filing corrections, owners, vendors, sites, artifact types, root causes, actions, and recurrence support quality oversight.

13

Correspondence becomes evidence when it matters

Message, sender, recipients, date, subject, thread, attachment, decision, commitment, follow-up, confidentiality, filing rationale, artifact type, scope, QC, and relationship to formal documents define relevant correspondence.

The system does not file every email; it preserves the reason a communication is essential.

14

Vendor and partner filing is accountable

Expected deliverables, transfer schedules, format, metadata, responsible party, access, submissions, rejects, resubmissions, completeness, quality, timeliness, reconciliations, final transfer, acceptance, and archive define external contribution.

15

Access is scoped and reviewable

Sponsor, CRO, site, vendor, auditor, inspector, study, country, site, zone, artifact type, confidentiality, action, start, expiry, approval, periodic review, access history, revocation, and export remain controlled.

16

Inspection readiness is a live state

Scope, expected artifacts, completeness, overdue content, QC failures, unapproved items, access, redactions, translations, audit trails, retrieval tests, open actions, owners, and readiness decisions remain visible before an inspector asks.

Inspection workspaces expose approved evidence and record exactly what was viewed or exported.

17

Reconciliation prevents parallel truth

CTMS milestones, sites and monitoring; EDC subjects and lock; safety cases; vendor inventories; quality events; document systems; and archive manifests are compared against expected TMF evidence.

Matched, missing, extra, discrepant, pending, accepted, and resolved states retain the reconciliation rule and reviewer.

18

Study closeout and archive are controlled transitions

Final expectations, reconciliation, outstanding actions, certified-copy checks, access removal, inventory, manifest, checksums, retention basis, archive transfer, receipt, readability, restore test, ownership, and approval define closure.

19

Where Seal is strongest

Seal is strongest where trial operations, countries, sites, vendors, clinical data, quality, documents, access, inspections, and archive intersect. It owns the expected-evidence and artifact-state model while composing CTMS, EDC, clinical operations, DMS, training, and quality.

20

Prove one country and site lifecycle end to end

The first implementation should follow one protocol through study setup, country approval, site selection and activation, staff qualification, initiation, amendment, monitoring, safety correspondence, vendor evidence, database lock, closeout, inspection request, final reconciliation, and archive.

Include a wrong-country filing, missing signature, translated replacement, late vendor transfer, duplicate artifact, approved substitution, revoked inspector access, and an archive restore test. The system must show what was expected, what satisfied it, and why.

Operating model

Native control model
States and decisions owned by this blueprint
06 native controls
TMF Reference Model & Study Plan
Model and version, zones, sections, artifact definitions, metadata, milestones, countries, sites, committees, vendors, responsibilities, filing conventions, QC, timeliness, inspection, retention, exceptions, and archive remain governed.
Event-Driven Expected Artifacts
Study, country, site, vendor and lifecycle events create scoped evidence expectations with artifact type, applicability, owner, due date, status, substitution, waiver, rationale, escalation, and satisfaction visible.
Classification, QC & Filing
Original package, provenance, checksum, classification, reference-model location, study-country-site scope, dates, authors, versions, signatures, languages, confidence, content and metadata QC, findings, correction, approval, and filing state stay traceable.
Completeness, Timeliness & Quality
Expectations, applicability, milestones, receipts, QC, approvals, supersession, substitutions, waivers, filing intervals, findings, trends, owners, vendors, sites, root causes, actions, and exceptions roll up without hiding the underlying records.
Inspection Workspace & Retrieval
Authority, scope, readiness, approved artifacts, redactions, translations, requests, retrieval tests, inspector roles, access dates, views, downloads, exports, questions, responses, expiry, revocation, and closure remain controlled.
Reconciliation, Closeout & Archive
CTMS, EDC, safety, vendor and document inventories reconcile to expected evidence; final actions, certified copies, access removal, manifest, checksums, retention, transfer, receipt, readability, restore, ownership, and acceptance close the file.
Electronic Trial Master File (eTMF) Software owns the operating state above; connected foundations remain authoritative for their specialized records.

Capabilities

01native controlTMF Reference Model & Study Plan
Model and version, zones, sections, artifact definitions, metadata, milestones, countries, sites, committees, vendors, responsibilities, filing conventions, QC, timeliness, inspection, retention, exceptions, and archive remain governed.
Study, country, site, vendor and lifecycle events create scoped evidence expectations with artifact type, applicability, owner, due date, status, substitution, waiver, rationale, escalation, and satisfaction visible.
03native controlClassification, QC & Filing
Original package, provenance, checksum, classification, reference-model location, study-country-site scope, dates, authors, versions, signatures, languages, confidence, content and metadata QC, findings, correction, approval, and filing state stay traceable.
04native controlCompleteness, Timeliness & Quality
Expectations, applicability, milestones, receipts, QC, approvals, supersession, substitutions, waivers, filing intervals, findings, trends, owners, vendors, sites, root causes, actions, and exceptions roll up without hiding the underlying records.
05native controlInspection Workspace & Retrieval
Authority, scope, readiness, approved artifacts, redactions, translations, requests, retrieval tests, inspector roles, access dates, views, downloads, exports, questions, responses, expiry, revocation, and closure remain controlled.
CTMS, EDC, safety, vendor and document inventories reconcile to expected evidence; final actions, certified copies, access removal, manifest, checksums, retention, transfer, receipt, readability, restore, ownership, and acceptance close the file.
Protocols, amendments, countries, sites, investigators, staff, qualifications, approvals, activation, enrollment, monitoring, deviations, safety, vendors, data lock, closeout and responsible owners drive evidence scope and expectations.
Missing or late content, repeated QC failures, access concerns, process deviations, CAPAs, audit findings, procedure versions, role curricula, training completion, effectiveness, and change implementation connect to TMF health.

Entities

Entity
Description
Kind
DT
TMF Reference Model
Version, zones, sections, artifact types, definitions, metadata, milestones, retention, and adoption.
type
P
Study TMF Plan
Study scope, model, countries, sites, vendors, responsibilities, QC, timeliness, inspection, and archive.
type
P
Interventional Study TMF Plan
Reference-model adoption, central-country-site scope, vendors, responsibilities, metrics, and archive.
template
P
TMF-PLAN-STUDY014-v06
Current plan after addition of two countries and a central imaging vendor.
instance
C
Expected TMF Artifact
Artifact type, scope, event, milestone, owner, due date, applicability, satisfaction, and state.
type
C
Site Activation Evidence Set
Approval, contract, qualifications, training, delegation, supplies, initiation, and readiness artifacts.
template
C
EXP-SITE014-ACTIVATE
Satisfied activation set with one approved certified-copy substitution.
instance
D
TMF Artifact
Original content, checksum, provenance, author, date, version, signature, language, scope, and state.
type
D
Executed Essential Document
Signed or certified content with provenance, dates, scope, version, QC, filing, and replacement state.
template
D
ART-SITE014-ICF-v03
Executed translated consent form replacing an incorrectly filed country version.
instance
T
TMF Filing Classification
Artifact, model location, study, country, site, milestone, metadata, confidence, reviewer, and state.
type
EO
TMF Quality Review
Artifact, content and metadata checks, findings, rejection, correction, reviewer, signature, and outcome.
type
EO
Risk-Based TMF QC
Content, signature, date, version, metadata, scope, duplication, readability, and usability checks.
template
EO
QC-ART-014-1842
Passed review after correction of the document date and site metadata.
instance
L
TMF Artifact Family
Draft, final, executed, translated, redacted, certified, corrected, superseded, and replacement relationships.
type
TL
TMF Health Metric
Scope, expectations, completeness, timeliness, quality, exclusions, target, trend, and state.
type
E
Essential Correspondence
Thread, participants, date, decision, commitment, attachments, filing rationale, scope, and QC.
type
E
TMF Content Transfer
Sender, recipient, inventory, files, metadata, checksums, validation, exceptions, acceptance, and state.
type
K
TMF Access Grant
Principal, role, study scope, content scope, actions, approval, start, expiry, review, and revocation.
type
S
TMF Inspection Workspace
Authority, scope, approved artifacts, redactions, access, requests, views, exports, and closure.
type

FAQ

An eTMF is the governed evidence that a clinical trial was planned, conducted, monitored, analyzed, reported and closed appropriately. It manages expected artifacts, content, metadata, QC, filing, completeness, timeliness, access, inspection and archive.
Yes. Models and versions define zones, sections, artifact types, metadata and milestones. Each study adopts and tailors a version with documented applicability, additions, exceptions and later upgrade decisions.
Protocol, country, site, vendor and lifecycle events create expected artifacts. Completeness compares those applicable expectations with filed, QC-passed and approved evidence, including substitutions, waivers and supersession.
Seal can propose artifact type, location, scope and metadata using content and context. Confidence and evidence remain visible, and a reviewer approves uncertain or high-risk classifications before filing.
Correct content, completeness, readability, signatures, dates, version, metadata, scope, filing location, duplicates, redactions, language, certification, replacement relationship and inspection usability, with findings and correction history.
Completeness uses applicable expected artifacts and their satisfaction state. Timeliness uses the governing event or document date, availability, receipt, QC and final filing against approved targets and pauses.
Yes. Roles and access can be scoped by study, country, site, zone, artifact type, confidentiality, action and time. Expected deliverables, transfers, rejects, resubmissions and acceptance remain attributable by party.
Approved evidence is selected for the inspection scope, redacted where authorized, and exposed through time-bound roles. Requests, searches, views, downloads, exports, questions, responses and access removal are audited.
CTMS supplies study, country, site, milestone and monitoring events; EDC supplies build, data-cleaning and lock evidence. Reconciliation compares those operational records with required TMF artifacts and records discrepancies.
Prove one country and site from activation expectations through artifact ingestion, classification, QC, correction, filing, amendment, monitoring, vendor transfer, inspection retrieval, closeout reconciliation and archive restore.

Go live in 48 hours.