Blueprint library/Partner Quality

Pharmaceutical Quality Agreements & External Partner Governance Software

Quality agreements. Turn written responsibilities into routed work, evidence, and accountable decisions.

Make sponsor, CDMO, laboratory, supplier, packaging, storage, and distribution responsibilities executable across notifications, investigations, record exchange, release, escalation, performance, and review.

Executable quality-agreement matrix
Written responsibilities resolve against the product, service, site and actual event—with evidence and timing attached.
A pharmaceutical quality agreement responsibility matrix across sponsor, CDMO and contract laboratory
Applicability
Product, market, site, method and subcontractor determine which duty applies.
Authority
Performing work and owning the final decision remain distinct responsibilities.
Evidence
Deliverable, source, deadline and escalation are part of every obligation.
Gap
Uncovered subcontracted work is blocked rather than hidden in a signed PDF.

A quality agreement is not a contract attachment that becomes obsolete after signature. It is the operational boundary between parties: who performs, reviews, approves, notifies, investigates, supplies records, releases, retains, audits, and escalates each regulated activity.

Seal turns those responsibilities into governed obligations connected to actual products, sites, services, batches, samples, changes, deviations, results, records, notifications, performance, and decisions. Both parties can prove that the agreed operating model is the one being used.

FDA's quality agreements guidance for contract drug manufacturing is the primary US reference for defining and documenting the parties' manufacturing activities while preserving each party's CGMP responsibilities.

01

Define the parties and regulated service boundary

Legal entity, site, role, license or registration, authorized contacts, quality unit, service, product, material, market, lifecycle stage, subcontractors, and effective dates establish scope.

Manufacturing, testing, release, packaging, labeling, serialization, storage, transport, stability, complaint handling, pharmacovigilance, and record retention can be included independently. Commercial terms remain outside the quality workflow unless they create a regulated obligation.

Executable quality-agreement matrix
Written responsibilities resolve against the product, service, site and actual event—with evidence and timing attached.
A pharmaceutical quality agreement responsibility matrix across sponsor, CDMO and contract laboratory
Applicability
Product, market, site, method and subcontractor determine which duty applies.
Authority
Performing work and owning the final decision remain distinct responsibilities.
Evidence
Deliverable, source, deadline and escalation are part of every obligation.
Gap
Uncovered subcontracted work is blocked rather than hidden in a signed PDF.
Fig. 1 / Each quality activity resolves performer, reviewer, approver, notification duty, evidence owner, timing, and escalation across both parties
02

Responsibilities are structured, not buried in prose

Each activity identifies accountable party, performer, reviewer, approver, consulted parties, notification recipients, evidence provider, timing, service level, governing procedure, applicable product or site, escalation, and required records.

The controlled narrative is generated from those obligations. Ambiguous overlaps and unassigned activities become visible before approval.

03

Product and service applicability prevent generic agreements

One relationship can cover several products, methods, dosage forms, sites, and markets with different responsibility patterns. Applicability rules show which obligation governs each actual batch or sample.

A corporate template can supply defaults without pretending that an aseptic CDMO, contract microbiology laboratory, packager, and warehouse require the same controls.

04

Procedures and record ownership remain explicit

The agreement identifies whose procedure governs, where it is available, how differences are reconciled, who authors and approves records, which system is authoritative, required format, access, certified copies, retention, archival, retrieval, and inspection support.

Contract laboratory / one order across two trust boundaries
The client sees a coherent service state. Internal work retains its richer GMP evidence, and neither boundary leaks another tenant's data.
SO-NOVA-01804
08:14
09:02
11:40
15:22
D+2
Client portal
Request
7 tests / 5d
Received
temp query
In testing
4 / 7
Action
OOS ack
Delivered
COA v01
TENANT BOUNDARY
Accession
conditional
Aliquot
ready
HPLC assay
complete
OOS notice
client ack
QA / COA
released
Lab operation
Accession
method · sample · analyst
instrument · source data
conditional
Aliquot
method · sample · analyst
instrument · source data
ready
HPLC assay
method · sample · analyst
instrument · source data
complete
OOS notice
method · sample · analyst
instrument · source data
client ack
QA / COA
method · sample · analyst
instrument · source data
released
Reconcile
Promise
5 business days
Actual
3d 04h · OOS clock met
Invoice basis
7 tests · 1 client retest
Fig. 2 / Client, contract site, source records, shared decisions, and release evidence remain separated by responsibility but connected by one operating timeline

System access does not transfer accountability. Each party retains the signatures and decisions assigned to it.

05

Change notification becomes an executable obligation

Process, material, supplier, method, specification, equipment, site, utility, software, facility, packaging, test, subcontractor, or regulatory change can trigger pre-approval, prior notification, prompt notification, or periodic reporting.

The system resolves applicable obligations, required information, recipients, due clocks, assessments, questions, approvals, implementation conditions, and effective state.

06

Deviations and OOS follow agreed decision rights

Notification thresholds, timelines, immediate containment, investigation lead, data access, hypothesis or retest authorization, root-cause review, product impact, CAPA, report approval, and closure rights are explicit.

The live case shows what the agreement requires for this product and service. Teams do not search a PDF while an escalation clock is running.

07

Batch disposition separates manufacture, certification, and release

Manufacturing review, testing completion, deviation closure, CoA issuance, disposition recommendation, authorized-person certification, sponsor release, market release, and shipment authorization can belong to different parties.

Each decision retains prerequisite evidence, authority, signature, conditions, and handoff. One party cannot approve a step assigned to another simply because it hosts the system.

08

Data exchange has content and timing requirements

Batch records, raw data, audit trails, certificates, stability data, environmental monitoring, deviations, investigations, methods, validation, changes, annual reviews, complaints, and regulatory information can each have required format, completeness, transfer method, timing, review, and acceptance.

Receipt and acceptance are separate states. Missing metadata or an unreadable native file remains an open obligation.

09

Subcontractors preserve the full delegation chain

Approved subcontractors retain service, site, qualification, sponsor consent, agreement, information flow, oversight, audit rights, records, changes, and termination. Delegation by one party does not erase the original party's responsibility.

A subcontractor change can identify every product, method, record, and regulatory commitment affected.

10

Complaints, recalls, and safety signals have clear interfaces

Intake, forwarding, investigation, sample returns, technical assessment, health-hazard input, regulatory reporting, recall decisions, customer communication, effectiveness checks, and final closure resolve to named parties and clocks.

The actual event retains the obligation version effective when it occurred, even if the agreement is later revised.

11

Audits connect findings to promised controls

Audit schedule, scope, right of access, confidentiality, agenda, observations, responses, CAPA, evidence, due dates, verification, and closure connect to the services and obligations assessed.

Supplier management: qualification to monitoring
The spreadsheet reality
"When was the last audit of Supplier X?"
"Is their quality agreement still valid?"
Hours of searching across disconnected files.
The Seal approach
Complete supplier profile: one click.
Agreements, audits, CAPAs, performance — all linked.
Risk score auto-calculated from quality data.
Qualify
Risk assessment / questionnaire
Audit
On-site or remote / findings tracked
Approve
Add to ASL / quality agreement
Monitor
Incoming QC results / auto-score updates
SCAR
When quality fails / linked to CAPA
Supplier profile / every data point connected
Lot accept rate
Last 12 months
Open SCARs
Pending responses
Audit history
Findings and CAPAs
Documents
Agreements, specs
Risk score
Auto-calculated / triggers alerts
Fig. 3 / Supplier qualification, audits, performance, issues, corrective action, and continued approval remain one oversight lifecycle

Repeated findings can reveal an obligation that is poorly defined or a control that is not working across several products.

12

Performance measures the relationship operating model

On-time records, right-first-time batches, OOS, deviations, notification timeliness, investigation cycle time, CAPA recurrence, release lead time, data completeness, stability performance, complaints, shortages, and audit findings use governed definitions and denominators.

Metrics remain linked to actual cases. A red score opens the evidence rather than ending the conversation.

13

Agreement revisions carry operational transition

Proposed changes show obligation-level differences, affected products and services, records, systems, procedures, training, contacts, open events, and implementation tasks. Both parties review and approve the same change set.

Open batches, samples, investigations, and changes are explicitly assigned to old or new terms. Signature alone does not make an agreement operational.

14

Periodic review reconciles document and reality

The review considers current scope, contacts, licenses, subcontractors, procedures, obligations, deviations, OOS, changes, release performance, data exchange, audits, CAPA, complaints, recalls, metrics, regulatory changes, and open commitments.

Differences between written responsibility and actual practice become actions, agreement changes, training, system changes, or service restrictions.

15

Termination preserves records and remaining duties

Final batches, samples, stability, complaints, recalls, retains, records, access, archival, transfer, destruction, equipment or materials, regulatory commitments, and continuing confidentiality receive explicit disposition.

Ending the commercial service does not close quality obligations that survive it.

16

Source systems preserve party authority and tenancy

Each organization can retain its own QMS, LIMS, MES, DMS, and identity system. Seal supports controlled exchange, client-specific visibility, verified copies, source links, and decision handoffs without pretending every partner will consolidate systems.

Where both parties operate in Seal, tenant and permission boundaries preserve segregation while shared objects expose only the agreed evidence and actions.

17

Where Seal is strongest

Seal is strongest at converting a negotiated responsibility into operational behavior. Because obligations resolve against real products, batches, samples, changes, events, and decisions, the agreement actively routes work and proves compliance.

A contract repository can store signed PDFs. A supplier scorecard can summarize performance. Seal's advantage is showing whether each promised control actually happened, on time, with the right evidence and accountable party.

18

Prove one outsourced batch end to end

The first implementation should follow one sponsor product through material sourcing, contract manufacture, external testing, deviation, change notification, record transfer, CoA, manufacturing review, sponsor disposition, shipment, performance reporting, and periodic agreement review.

Include a late notification, missing raw-data metadata, disputed investigation conclusion, retest authorization, subcontracted assay, open CAPA, contact change, conditional release handoff, complaint after shipment, and agreement revision. The first usable release must route one outsourced batch through every agreed clock and evidence handoff, surface any uncovered subcontractor before work begins, and leave no decision dependent on interpreting responsibility from memory.

Operating model

Native control model
States and decisions owned by this blueprint
05 native controls
Structured Responsibility Matrix
Accountable, performing, reviewing, approving, consulted, notified, evidence-owning, timing, and escalation duties become governed obligations.
Product & Service Applicability
Products, sites, methods, markets, services, lifecycle stages, and subcontractors resolve the correct obligations for actual work.
Change Notification Control
Triggers, required content, recipients, deadlines, questions, assessments, approvals, implementation conditions, and acknowledgments remain enforceable.
Record Exchange Completeness
Required records, native data, metadata, format, source, timing, transfer, receipt, review, exceptions, and acceptance remain visible.
Living Agreement Review
Written obligations reconcile with actual practice, current contacts, subcontractors, systems, performance, events, regulations, and surviving duties.
Connected foundations
Existing blueprints supplying governed records and execution
08 foundations
cdmoCDMO Manufacturing & Quality Management Software
Per-client data isolation without vendor consultants. AI-configured Blueprints per client. Unified with MES, LIMS, and QMS.
SupplierPharmaceutical Supplier Quality Management Software
Manage supplier, manufacturer and site identities; risk and material or service scope; qualification plans, questionnaires and audits; quality agreements; approved-supplier states; incoming lot and CoA performance; deviations, complaints and SCARs; supplier changes; scorecards, monitoring, requalification, restrictions, and disqualification.
ChangeGxP Change Control Software
CC-2024-047 was approved in January. Six months later, the procedure still showed the old process. Implementation tracking that ensures changes actually happen.
DeviationGxP Deviation & Investigation Management Software
Capture manufacturing, laboratory, facility, equipment and data deviations with live context; control containment and notifications; classify and scope impact; plan and execute evidence-based investigations; test hypotheses and recurrence; approve root cause and product decisions; connect CAPAs and changes; verify effectiveness; trend systemic signals; and close with complete rationale.
dmsGxP Document Management System (DMS) & Document Control Software
Controlled authoring, review, approval, effective dates, distribution, training impact, periodic review, forms, external documents, archival, and point-of-use access for GxP records.
BRPharmaceutical Batch Review & Release Software
Plan batch-release evidence from the approved product state, review execution and testing concurrently, resolve exceptions, control market eligibility, generate CoAs, and sign an accountable disposition.
APRGxP Automated Reporting & Quality Intelligence Software
Controlled report definitions, governed metrics, frozen data cuts, traceable tables and narratives, review, approval, scheduling, distribution, and live quality intelligence across GxP operations.
AuditGxP Audit & Inspection Management Software
Plan risk-based internal, supplier and regulatory audit programs; qualify auditors; prepare scope and evidence; execute agendas, interviews and sampling; govern observations and findings; coordinate responses, CAPAs and commitments; verify effectiveness; trend themes; manage inspection rooms; and close with a complete record.
Pharmaceutical Quality Agreements & External Partner Governance Software owns the operating state above; connected foundations remain authoritative for their specialized records.

Capabilities

Accountable, performing, reviewing, approving, consulted, notified, evidence-owning, timing, and escalation duties become governed obligations.
Products, sites, methods, markets, services, lifecycle stages, and subcontractors resolve the correct obligations for actual work.
Triggers, required content, recipients, deadlines, questions, assessments, approvals, implementation conditions, and acknowledgments remain enforceable.
04Deviationconnected foundationShared Event Governance
Deviation, OOS, complaint, recall, CAPA, and audit cases use agreed thresholds, decision rights, evidence access, clocks, and approvals.
Required records, native data, metadata, format, source, timing, transfer, receipt, review, exceptions, and acceptance remain visible.
06BRconnected foundationDelegated Release Decisions
Manufacturing review, certification, testing, CoA, sponsor disposition, market release, and shipment authority retain separate prerequisites and signatures.
07APRconnected foundationRelationship Performance
Timeliness, right-first-time, events, investigation quality, data completeness, release, complaints, audits, and CAPA use linked evidence and denominators.
Written obligations reconcile with actual practice, current contacts, subcontractors, systems, performance, events, regulations, and surviving duties.

Entities

Entity
Description
Kind
P
Quality Relationship
Parties, legal entities, sites, services, products, markets, contacts, and effective scope.
type
P
Sponsor–CDMO Relationship
Product and site scope, manufacturing and testing services, contacts, systems, and oversight pattern.
template
P
Northstar / Houston CDMO
Commercial sterile-product relationship covering manufacture, QC, release support, and stability.
instance
E
Quality Obligation
Activity, accountable party, performer, reviewer, approver, timing, evidence, and escalation.
type
E
Significant Change Notification
Change classes, notice timing, information, sponsor assessment, approval, and implementation conditions.
template
E
OBL-4.7 / Prior Approval
Sponsor approval required before implementing critical material or process changes.
instance
D
Quality Agreement
Governed obligation set, applicability, narrative, signatures, versions, and effective transition.
type
D
Commercial Drug Quality Agreement
Responsibilities for materials, manufacture, testing, change, events, release, records, audits, and review.
template
D
QAG-TX10 v06
Effective agreement governing TX-10 manufacture and testing at Houston.
instance
F
Outsourced Service
Manufacturing, testing, packaging, storage, distribution, safety, or other regulated activity.
type
N
Quality Notification
Trigger, obligation, content, recipient, due time, delivery, questions, acceptance, and closure.
type
N
Cross-Party Deviation Notice
Threshold, immediate content, recipient, clock, updates, investigation report, and acknowledgment.
template
N
QN-2026-0229
Late notification of a fill-line intervention deviation for batch TX10-026.
instance
E
Record Exchange
Required records, source, format, metadata, timing, delivery, receipt, completeness, and acceptance.
type
E
Batch Release Record Exchange
Required document and data manifest, source metadata, delivery clock, completeness checks, questions, and acceptance.
template
E
XFER-TX10-026
Release package with one missing environmental-monitoring attachment held open to the accountable party.
instance
WS
Shared Quality Event
Deviation, OOS, change, complaint, recall, audit, CAPA, or other cross-party case and rights.
type
C
Delegated Decision
Review, approval, certification, disposition, release, implementation, or closure by assigned authority.
type
TL
Relationship Performance
Governed metrics, populations, targets, cases, trends, review, escalation, and actions.
type
H
Agreement Review
Scope, obligations, practice, performance, issues, regulatory change, gaps, actions, and approval.
type

FAQ

It turns cross-company GMP responsibilities into governed obligations connected to real products, services, records, changes, events, decisions, performance, and periodic review.
Contract tools manage legal and commercial documents. Seal manages operational quality responsibilities, applicability, notification clocks, evidence, decision rights, regulated records, and proof of performance.
Yes. Each activity can identify accountable, performing, reviewing, approving, consulted, notified, evidence-owning, timing, procedure, and escalation responsibilities by product and service.
Yes. Product, site, market, method, service, lifecycle stage, and effective dates resolve which agreement clauses and responsibilities apply to each actual batch, sample, or event.
Change classes trigger the correct obligation, content, recipient, due clock, questions, impact assessment, pre-approval or acknowledgment, implementation conditions, and final effective state.
The agreement defines notification, investigation lead, raw-data access, hypothesis and retest authorization, review rights, product impact, report approval, CAPA, and closure for the applicable service.
Yes. Source systems can remain authoritative while Seal controls obligations, exchange packages, verified copies, acknowledgments, shared actions, decision handoffs, and client-specific visibility.
Subcontractor service, site, qualification, consent, agreement, information flow, oversight, audits, changes, records, and termination remain connected through the delegation chain.
Yes. Manufacturing review, testing, certification, CoA, sponsor disposition, market release, and shipment authorization can each retain assigned authority and prerequisites.
Obligation-level differences identify products, services, systems, procedures, training, contacts, open work, and transition tasks. Both parties approve before effective use.
Scope, contacts, licenses, subcontractors, obligations, actual practice, notifications, events, release, data exchange, audits, CAPA, complaints, recalls, metrics, regulations, and open commitments.
Trace one outsourced batch through manufacture, external testing, deviation, change notification, record exchange, delegated release, shipment, complaint, performance review, and agreement revision.

Related blueprints

Cold ChainPharmaceutical Cold Chain & Temperature Excursion Management Software

Cold chain. Every handoff, temperature, exposed unit, and disposition in one record.

Qualify routes and shipping systems, assemble logger evidence, calculate exact exposure, identify the affected physical population, and make stability-backed disposition decisions without reconstructing a journey from emails.

PVPharmaceutical Process Validation & PPQ Software

Approved process to executable protocol. PPQ evidence to continued verification. Every claim traceable to source.

Plan and execute process performance qualification, govern readiness and acceptance criteria, connect manufacturing and laboratory evidence, resolve deviations, calculate capability, approve validation conclusions, and hand the proven process into continued verification.

CSV / CSAGxP Computer System Validation (CSV) & Computer Software Assurance (CSA) Software

Intended use. Critical functions. Enough evidence for every release.

Control regulated-system inventory, intended use, function risk, supplier evidence, right-sized testing, releases, changes, and periodic review without turning validation into a document factory.

Single-UseSingle-Use Systems & Assembly Lifecycle Management Software

Design to connection. Every component lot and product-contact path proven.

Control single-use assembly designs, supplier components, sterilization, extractables and leachables, build and installation, connections, integrity tests, use windows, product contact, and disposition.

Supplier ChangePharmaceutical Supplier Change Notification Management Software

One external change. Every material, process, batch, study, filing, and market consequence resolved before use.

Receive supplier change notifications, establish affected supplied items and lots, calculate where-used impact, plan evidence, respond to the supplier, govern inventory transition, and authorize implementation by product and market.

CAPAGxP CAPA Management Software

The CAPA that never actually worked.

Effectiveness verification as a gate, not a checkbox. AI-drafted CAPA plans from similar historical events. Unified with QMS and MES.

Go live in 48 hours.