Blueprint library/Partner Quality

Pharmaceutical Quality Agreements & External Partner Governance Software

Quality agreements. Turn written responsibilities into routed work, evidence, and accountable decisions.

Make sponsor, CDMO, laboratory, supplier, packaging, storage, and distribution responsibilities executable across notifications, investigations, record exchange, release, escalation, performance, and review.

Executable quality-agreement matrix
Written responsibilities resolve against the product, service, site and actual event—with evidence and timing attached.
A pharmaceutical quality agreement responsibility matrix across sponsor, CDMO and contract laboratory
Applicability
Product, market, site, method and subcontractor determine which duty applies.
Authority
Performing work and owning the final decision remain distinct responsibilities.
Evidence
Deliverable, source, deadline and escalation are part of every obligation.
Gap
Uncovered subcontracted work is blocked rather than hidden in a signed PDF.

A quality agreement is not a contract attachment that becomes obsolete after signature. It is the operational boundary between parties: who performs, reviews, approves, notifies, investigates, supplies records, releases, retains, audits, and escalates each regulated activity.

Seal turns those responsibilities into governed obligations connected to actual products, sites, services, batches, samples, changes, deviations, results, records, notifications, performance, and decisions. Both parties can prove that the agreed operating model is the one being used.

FDA's quality agreements guidance for contract drug manufacturing is the primary US reference for defining and documenting the parties' manufacturing activities while preserving each party's CGMP responsibilities.

Define the parties and regulated service boundary

Legal entity, site, role, license or registration, authorized contacts, quality unit, service, product, material, market, lifecycle stage, subcontractors, and effective dates establish scope.

Manufacturing, testing, release, packaging, labeling, serialization, storage, transport, stability, complaint handling, pharmacovigilance, and record retention can be included independently. Commercial terms remain outside the quality workflow unless they create a regulated obligation.

Executable quality-agreement matrix
Written responsibilities resolve against the product, service, site and actual event—with evidence and timing attached.
A pharmaceutical quality agreement responsibility matrix across sponsor, CDMO and contract laboratory
Applicability
Product, market, site, method and subcontractor determine which duty applies.
Authority
Performing work and owning the final decision remain distinct responsibilities.
Evidence
Deliverable, source, deadline and escalation are part of every obligation.
Gap
Uncovered subcontracted work is blocked rather than hidden in a signed PDF.
Fig. 1 / Each quality activity resolves performer, reviewer, approver, notification duty, evidence owner, timing, and escalation across both parties

Responsibilities are structured, not buried in prose

Each activity identifies accountable party, performer, reviewer, approver, consulted parties, notification recipients, evidence provider, timing, service level, governing procedure, applicable product or site, escalation, and required records.

The controlled narrative is generated from those obligations. Ambiguous overlaps and unassigned activities become visible before approval.

Product and service applicability prevent generic agreements

One relationship can cover several products, methods, dosage forms, sites, and markets with different responsibility patterns. Applicability rules show which obligation governs each actual batch or sample.

A corporate template can supply defaults without pretending that an aseptic CDMO, contract microbiology laboratory, packager, and warehouse require the same controls.

Procedures and record ownership remain explicit

The agreement identifies whose procedure governs, where it is available, how differences are reconciled, who authors and approves records, which system is authoritative, required format, access, certified copies, retention, archival, retrieval, and inspection support.

Contract laboratory / one order across two trust boundaries
The client sees a coherent service state. Internal work retains its richer GMP evidence, and neither boundary leaks another tenant's data.
SO-NOVA-01804
08:14
09:02
11:40
15:22
D+2
Client portal
Request
7 tests / 5d
Received
temp query
In testing
4 / 7
Action
OOS ack
Delivered
COA v01
TENANT BOUNDARY
Accession
conditional
Aliquot
ready
HPLC assay
complete
OOS notice
client ack
QA / COA
released
Lab operation
Accession
method · sample · analyst
instrument · source data
conditional
Aliquot
method · sample · analyst
instrument · source data
ready
HPLC assay
method · sample · analyst
instrument · source data
complete
OOS notice
method · sample · analyst
instrument · source data
client ack
QA / COA
method · sample · analyst
instrument · source data
released
Reconcile
Promise
5 business days
Actual
3d 04h · OOS clock met
Invoice basis
7 tests · 1 client retest
Fig. 2 / Client, contract site, source records, shared decisions, and release evidence remain separated by responsibility but connected by one operating timeline

System access does not transfer accountability. Each party retains the signatures and decisions assigned to it.

Change notification becomes an executable obligation

Process, material, supplier, method, specification, equipment, site, utility, software, facility, packaging, test, subcontractor, or regulatory change can trigger pre-approval, prior notification, prompt notification, or periodic reporting.

The system resolves applicable obligations, required information, recipients, due clocks, assessments, questions, approvals, implementation conditions, and effective state.

Deviations and OOS follow agreed decision rights

Notification thresholds, timelines, immediate containment, investigation lead, data access, hypothesis or retest authorization, root-cause review, product impact, CAPA, report approval, and closure rights are explicit.

The live case shows what the agreement requires for this product and service. Teams do not search a PDF while an escalation clock is running.

Batch disposition separates manufacture, certification, and release

Manufacturing review, testing completion, deviation closure, CoA issuance, disposition recommendation, authorized-person certification, sponsor release, market release, and shipment authorization can belong to different parties.

Each decision retains prerequisite evidence, authority, signature, conditions, and handoff. One party cannot approve a step assigned to another simply because it hosts the system.

Data exchange has content and timing requirements

Batch records, raw data, audit trails, certificates, stability data, environmental monitoring, deviations, investigations, methods, validation, changes, annual reviews, complaints, and regulatory information can each have required format, completeness, transfer method, timing, review, and acceptance.

Receipt and acceptance are separate states. Missing metadata or an unreadable native file remains an open obligation.

Subcontractors preserve the full delegation chain

Approved subcontractors retain service, site, qualification, sponsor consent, agreement, information flow, oversight, audit rights, records, changes, and termination. Delegation by one party does not erase the original party's responsibility.

A subcontractor change can identify every product, method, record, and regulatory commitment affected.

Complaints, recalls, and safety signals have clear interfaces

Intake, forwarding, investigation, sample returns, technical assessment, health-hazard input, regulatory reporting, recall decisions, customer communication, effectiveness checks, and final closure resolve to named parties and clocks.

The actual event retains the obligation version effective when it occurred, even if the agreement is later revised.

Audits connect findings to promised controls

Audit schedule, scope, right of access, confidentiality, agenda, observations, responses, CAPA, evidence, due dates, verification, and closure connect to the services and obligations assessed.

Supplier management: qualification to monitoring
The spreadsheet reality
"When was the last audit of Supplier X?"
"Is their quality agreement still valid?"
Hours of searching across disconnected files.
The Seal approach
Complete supplier profile: one click.
Agreements, audits, CAPAs, performance — all linked.
Risk score auto-calculated from quality data.
Qualify
Risk assessment / questionnaire
Audit
On-site or remote / findings tracked
Approve
Add to ASL / quality agreement
Monitor
Incoming QC results / auto-score updates
SCAR
When quality fails / linked to CAPA
Supplier profile / every data point connected
Lot accept rate
Last 12 months
Open SCARs
Pending responses
Audit history
Findings and CAPAs
Documents
Agreements, specs
Risk score
Auto-calculated / triggers alerts
Fig. 3 / Supplier qualification, audits, performance, issues, corrective action, and continued approval remain one oversight lifecycle

Repeated findings can reveal an obligation that is poorly defined or a control that is not working across several products.

Performance measures the relationship operating model

On-time records, right-first-time batches, OOS, deviations, notification timeliness, investigation cycle time, CAPA recurrence, release lead time, data completeness, stability performance, complaints, shortages, and audit findings use governed definitions and denominators.

Metrics remain linked to actual cases. A red score opens the evidence rather than ending the conversation.

Agreement revisions carry operational transition

Proposed changes show obligation-level differences, affected products and services, records, systems, procedures, training, contacts, open events, and implementation tasks. Both parties review and approve the same change set.

Open batches, samples, investigations, and changes are explicitly assigned to old or new terms. Signature alone does not make an agreement operational.

Periodic review reconciles document and reality

The review considers current scope, contacts, licenses, subcontractors, procedures, obligations, deviations, OOS, changes, release performance, data exchange, audits, CAPA, complaints, recalls, metrics, regulatory changes, and open commitments.

Differences between written responsibility and actual practice become actions, agreement changes, training, system changes, or service restrictions.

Termination preserves records and remaining duties

Final batches, samples, stability, complaints, recalls, retains, records, access, archival, transfer, destruction, equipment or materials, regulatory commitments, and continuing confidentiality receive explicit disposition.

Ending the commercial service does not close quality obligations that survive it.

Source systems preserve party authority and tenancy

Each organization can retain its own QMS, LIMS, MES, DMS, and identity system. Seal supports controlled exchange, client-specific visibility, verified copies, source links, and decision handoffs without pretending every partner will consolidate systems.

Where both parties operate in Seal, tenant and permission boundaries preserve segregation while shared objects expose only the agreed evidence and actions.

Where Seal is strongest

Seal is strongest at converting a negotiated responsibility into operational behavior. Because obligations resolve against real products, batches, samples, changes, events, and decisions, the agreement actively routes work and proves compliance.

A contract repository can store signed PDFs. A supplier scorecard can summarize performance. Seal's advantage is showing whether each promised control actually happened, on time, with the right evidence and accountable party.

Prove one outsourced batch end to end

The first implementation should follow one sponsor product through material sourcing, contract manufacture, external testing, deviation, change notification, record transfer, CoA, manufacturing review, sponsor disposition, shipment, performance reporting, and periodic agreement review.

Include a late notification, missing raw-data metadata, disputed investigation conclusion, retest authorization, subcontracted assay, open CAPA, contact change, conditional release handoff, complaint after shipment, and agreement revision. The first usable release must route one outsourced batch through every agreed clock and evidence handoff, surface any uncovered subcontractor before work begins, and leave no decision dependent on interpreting responsibility from memory.

Operating model

The control layer sits above the systems that supply governed records and execution.

Capabilities

Accountable, performing, reviewing, approving, consulted, notified, evidence-owning, timing, and escalation duties become governed obligations.
Products, sites, methods, markets, services, lifecycle stages, and subcontractors resolve the correct obligations for actual work.
Triggers, required content, recipients, deadlines, questions, assessments, approvals, implementation conditions, and acknowledgments remain enforceable.
Deviation, OOS, complaint, recall, CAPA, and audit cases use agreed thresholds, decision rights, evidence access, clocks, and approvals.
Required records, native data, metadata, format, source, timing, transfer, receipt, review, exceptions, and acceptance remain visible.
Manufacturing review, certification, testing, CoA, sponsor disposition, market release, and shipment authority retain separate prerequisites and signatures.
Timeliness, right-first-time, events, investigation quality, data completeness, release, complaints, audits, and CAPA use linked evidence and denominators.
Written obligations reconcile with actual practice, current contacts, subcontractors, systems, performance, events, regulations, and surviving duties.

Entities

Entity hierarchy
What it records
Kind
Quality Relationship
Parties, legal entities, sites, services, products, markets, contacts, and effective scope.
entity
Sponsor–CDMO Relationship
Product and site scope, manufacturing and testing services, contacts, systems, and oversight pattern.
template
Northstar / Houston CDMO
Commercial sterile-product relationship covering manufacture, QC, release support, and stability.
record
Quality Obligation
Activity, accountable party, performer, reviewer, approver, timing, evidence, and escalation.
entity
Significant Change Notification
Change classes, notice timing, information, sponsor assessment, approval, and implementation conditions.
template
OBL-4.7 / Prior Approval
Sponsor approval required before implementing critical material or process changes.
record
Quality Agreement
Governed obligation set, applicability, narrative, signatures, versions, and effective transition.
entity
Commercial Drug Quality Agreement
Responsibilities for materials, manufacture, testing, change, events, release, records, audits, and review.
template
QAG-TX10 v06
Effective agreement governing TX-10 manufacture and testing at Houston.
record
Outsourced Service
Manufacturing, testing, packaging, storage, distribution, safety, or other regulated activity.
entity
Quality Notification
Trigger, obligation, content, recipient, due time, delivery, questions, acceptance, and closure.
entity
Cross-Party Deviation Notice
Threshold, immediate content, recipient, clock, updates, investigation report, and acknowledgment.
template
QN-2026-0229
Late notification of a fill-line intervention deviation for batch TX10-026.
record
Record Exchange
Required records, source, format, metadata, timing, delivery, receipt, completeness, and acceptance.
entity
Batch Release Record Exchange
Required document and data manifest, source metadata, delivery clock, completeness checks, questions, and acceptance.
template
XFER-TX10-026
Release package with one missing environmental-monitoring attachment held open to the accountable party.
record
Shared Quality Event
Deviation, OOS, change, complaint, recall, audit, CAPA, or other cross-party case and rights.
entity
Delegated Decision
Review, approval, certification, disposition, release, implementation, or closure by assigned authority.
entity
Relationship Performance
Governed metrics, populations, targets, cases, trends, review, escalation, and actions.
entity
Agreement Review
Scope, obligations, practice, performance, issues, regulatory change, gaps, actions, and approval.
entity

FAQ

It turns cross-company GMP responsibilities into governed obligations connected to real products, services, records, changes, events, decisions, performance, and periodic review.
Contract tools manage legal and commercial documents. Seal manages operational quality responsibilities, applicability, notification clocks, evidence, decision rights, regulated records, and proof of performance.
Yes. Each activity can identify accountable, performing, reviewing, approving, consulted, notified, evidence-owning, timing, procedure, and escalation responsibilities by product and service.
Yes. Product, site, market, method, service, lifecycle stage, and effective dates resolve which agreement clauses and responsibilities apply to each actual batch, sample, or event.
Change classes trigger the correct obligation, content, recipient, due clock, questions, impact assessment, pre-approval or acknowledgment, implementation conditions, and final effective state.
The agreement defines notification, investigation lead, raw-data access, hypothesis and retest authorization, review rights, product impact, report approval, CAPA, and closure for the applicable service.
Yes. Source systems can remain authoritative while Seal controls obligations, exchange packages, verified copies, acknowledgments, shared actions, decision handoffs, and client-specific visibility.
Subcontractor service, site, qualification, consent, agreement, information flow, oversight, audits, changes, records, and termination remain connected through the delegation chain.
Yes. Manufacturing review, testing, certification, CoA, sponsor disposition, market release, and shipment authorization can each retain assigned authority and prerequisites.
Obligation-level differences identify products, services, systems, procedures, training, contacts, open work, and transition tasks. Both parties approve before effective use.
Scope, contacts, licenses, subcontractors, obligations, actual practice, notifications, events, release, data exchange, audits, CAPA, complaints, recalls, metrics, regulations, and open commitments.
Trace one outsourced batch through manufacture, external testing, deviation, change notification, record exchange, delegated release, shipment, complaint, performance review, and agreement revision.

Related blueprints

Cold Chain

Pharmaceutical Cold Chain & Temperature Excursion Management Software

Qualify routes and shipping systems, assemble logger evidence, calculate exact exposure, identify the affected physical population, and make stability-backed disposition decisions without reconstructing a journey from emails.

PV

Pharmaceutical Process Validation & PPQ Software

Plan and execute process performance qualification, govern readiness and acceptance criteria, connect manufacturing and laboratory evidence, resolve deviations, calculate capability, approve validation conclusions, and hand the proven process into continued verification.

CSV / CSA

GxP Computer System Validation (CSV) & Computer Software Assurance (CSA) Software

Control regulated-system inventory, intended use, function risk, supplier evidence, right-sized testing, releases, changes, and periodic review without turning validation into a document factory.

Single-Use

Single-Use Systems & Assembly Lifecycle Management Software

Control single-use assembly designs, supplier components, sterilization, extractables and leachables, build and installation, connections, integrity tests, use windows, product contact, and disposition.

Supplier Change

Pharmaceutical Supplier Change Notification Management Software

Receive supplier change notifications, establish affected supplied items and lots, calculate where-used impact, plan evidence, respond to the supplier, govern inventory transition, and authorize implementation by product and market.

CAPA

GxP CAPA Management Software

Effectiveness verification as a gate, not a checkbox. AI-drafted CAPA plans from similar historical events. Unified with QMS and MES.

Go live in 48 hours.