Blueprint library/Complaint

Product Complaint Handling & Safety Intake Software

One intake. Every issue, clock, investigation, and patient-safety handoff accounted for.

Capture product complaints across channels, preserve awareness, separate quality and safety assessments, investigate with lot and return evidence, report under governed rules, trend signals, and close the customer loop.

The clock can start before quality sees the complaint.

A field representative receives a message that a device stopped during use. Customer service later forwards it to quality. The delay is not just queue time: depending on the product, reporter, jurisdiction, and facts, the organization may already possess information that starts a regulatory reporting assessment.

The first job of complaint software is therefore not to open a ticket. It is to preserve what was received, when it was received, by whom, and when it reached a person or function whose awareness matters under the applicable rule.

Complaint handling: from intake to resolution
Intake
Any channel / capture verbatim
Triage
Safety signal? / 5-day reportable? / AI-assisted coding
Investigate
Link to batch data / root cause
Regulatory
MDR / MedWatch / auto-form generation
Respond
Customer letter / Trend → CAPA
Every complaint is connected to manufacturing data
Batch record
Process parameters
one click
QC results
Release testing
one click
Deviations
During manufacturing?
one click
Similar complaints
Same lot? Product?
pattern detection
Stability
Trending data
one click
Miss a deadline = regulatory action
Medical device death/injury: 5 days to report
Drug serious adverse event: 15 days to report
Seal tracks deadlines and escalates automatically.
From complaints to prevention
One complaint = noise. Ten similar = signal.
AI detects patterns across products, lots, and time.
Automatic CAPA trigger when thresholds exceeded.
Fig. 1 / Complaint Lifecycle

One intake can contain several regulated issues

A single call can describe damaged packaging, a device malfunction, a dosing error, a lack of effect, and a patient injury. Those are not interchangeable labels on one ticket.

Seal creates one source intake and separates its issues into linked quality, medical, vigilance, counterfeit, distribution, and service work. Shared facts stay shared. Each issue keeps its own classification, owner, rule, clock, decision, and closure criteria.

Capture the source without rewriting it

Channel, reporter, contact permissions, receipt timestamp, original language, verbatim narrative, attachments, product identifiers, lot or serial number, use context, patient impact, event location, and distributor path are preserved.

Subsequent summaries do not overwrite the original report. Translation, normalization, coding, and follow-up are versioned transformations with authors and dates.

Determine organizational awareness explicitly

The system records receipt and awareness events rather than inferring one date from case creation. Role, organizational unit, source channel, forwarding history, business calendar, and applicable rule remain available to the assessment.

If an awareness date changes after review, the previous value, rationale, approver, affected deadline, and recovery action remain in the audit trail.

Triage for urgency without making the final decision

Structured questions surface death, serious injury, hospitalization, intervention, malfunction during use, contamination, sterility concern, wrong product, mix-up, counterfeit suspicion, pediatric exposure, pregnancy, remedial action, and recurrence risk.

Complaint triage / 5-day clock starts now
Complaint
"Device shut off during procedure"
Severity
?
Critical / serious
Death, serious injury, malfunction
MDR: 5-day deadline
Major
Non-serious injury, could have caused harm
Minor
Dissatisfaction, cosmetic, use questions
The missed deadline
Complaint sits in intake queue for 3 days
Severity not assessed until day 4
MDR deadline missed. FDA enforcement action.
With Seal
Severity classified at intake. Decision tree guides assessment.
Critical complaints escalate immediately.
Deadline countdown visible. Never miss a reporting window.
Fig. 2 / Complaint Triage

High-risk answers route immediately to qualified reviewers. Triage establishes urgency and workstreams; it does not silently decide causality or reportability from a few keywords.

Separate complaint evaluation from pharmacovigilance

The complaint record owns product-quality intake, technical investigation, returned product, batch and distribution evidence, customer communication, and complaint closure. A linked safety case owns patient/event assessment, medical coding, expectedness, seriousness, causality where required, ICSR processing, and safety reporting.

The records exchange controlled facts and outcomes. Neither team has to re-key the story, and neither discipline is flattened into the other.

Apply the correct reporting rule

Reportability depends on product type, legal manufacturer or authorization-holder role, jurisdiction, event and outcome, device or medicinal-product facts, remedial action, authority instruction, awareness, and current rule version.

For example, US device manufacturers generally submit qualifying death, serious-injury, and malfunction MDRs within the applicable 30-calendar-day framework; five-work-day MDRs apply in specified circumstances such as certain remedial actions or an FDA request. The system stores the governed rule and calculation rather than turning an example into a universal clock.

Preserve the reportability decision

Facts considered, missing information, criterion-by-criterion evaluation, rule version, medical and technical input, precedents, final decision, signer, and signature date form the decision record.

A non-reportable conclusion needs as much traceability as a reportable one. New facts can reopen the decision without erasing what was known at the earlier point in time.

Plan investigation around testable questions

The investigator defines the allegation, hypotheses, evidence needed, product-return plan, manufacturing-record review, distribution review, comparable events, methods, assignments, and due dates.

The investigation distinguishes observed fact, reporter statement, test result, inference, and conclusion. “No defect found” is not a complete investigation unless the tested conditions and limitations are visible.

Connect the complaint to product genealogy

Product, UDI or catalog identifier, lot, serial number, batch, component lots, manufacturing site, line, equipment, supplier, release record, shipment, consignee, and destination link through governed identifiers.

If the lot is unknown, the record says so and follow-up attempts remain visible. A guessed lot never becomes master data merely because it was needed for a dashboard.

Control returned product as evidence

Return request, authorization, shipping kit, chain of custody, receipt, condition, decontamination, storage, photographs, destructive-test approval, examination, retention, and disposition form the returned-sample lifecycle.

When no product is returned, the reason, attempts, substitute evidence, and investigation limitation are explicit. The workflow adapts without pretending the missing evidence exists.

Keep laboratory and engineering results contextual

Method, instrument, software, analyst, raw-data location, sample condition, acceptance criteria, controls, deviations, observations, and approved result remain connected to the question each test addresses.

The complaint may consume a result, but it does not replace LIMS, SDMS, calibration, or engineering evidence systems. References remain durable and reviewable.

Manage regulatory reports as lifecycle records

Report type, jurisdiction, version, due-date basis, required fields, source facts, narrative, review, electronic validation, dispatch, gateway acknowledgement, authority identifier, follow-up need, amendment, and closure are linked to the assessment.

Submission status reflects technical and authority acknowledgements. “Sent” is not automatically “accepted.” Follow-up information can update a report while preserving prior versions.

Trend denominators as carefully as numerators

Counts alone can mislead when sales, procedures, units in use, reporting channels, or coding practices change. Trend definitions retain the complaint population, exposure denominator, product hierarchy, code set, time window, exclusions, baseline, alert method, and version.

A statistical alert is a review candidate, not proof of a defect. Review outcomes may create a focused investigation, CAPA, risk-management update, signal assessment, supplier action, or documented no-action decision.

Detect recurrence across wording and coding changes

Controlled issue codes support stable reporting, while the original narrative remains searchable. Synonyms, previous code versions, product generations, failure modes, harms, lots, suppliers, and regions can be examined together.

Machine assistance may suggest codes or similar records. Reviewers see why a match was suggested and confirm or reject it; the model does not manufacture a trend by silently recoding history.

A complaint may initiate nonconformance review, supplier corrective action, CAPA, field action, recall assessment, design change, labeling change, training, or risk-management review. The source complaint and evidence remain linked.

Effectiveness checks use defined outcomes and time windows. Closing the CAPA does not auto-close complaints, and closing individual complaints does not prove a systemic issue is controlled.

Communicate with the reporter without exposing protected data

Acknowledgement, questions, return instructions, status updates, final response, replacement, credit, and follow-up preferences are controlled communications. Templates help consistency but require case-specific review.

Role-based access, redaction, consent, minimum-necessary views, retention, and jurisdictional privacy controls protect patient and reporter data while technical teams receive the information they need.

Closure is a reconciliation, not a status click

Closure verifies classification, required workstreams, follow-up attempts, investigation, product evaluation, reportability decisions, regulatory reports and acknowledgements, customer response, linked quality actions, coding, trend inclusion, and record completeness.

Open follow-up or external action may be dispositioned under a controlled policy rather than hidden. Reopening preserves the previous closure decision and explains the new evidence.

Oversight focuses on risk and control health

Leaders can see untriaged intakes, awareness reviews, approaching statutory deadlines, overdue follow-up, returned products awaiting evaluation, investigations by risk and age, unresolved report acknowledgements, recurring issue families, affected lots, CAPA links, and response performance.

Every metric drills to source records and denominator logic. The dashboard supports action; it is not a parallel complaint database.

The final record can be reconstructed

For any complaint, Seal can show the original report, receipt and awareness chronology, triage, issue split, follow-up, product genealogy, return custody, tests, investigation reasoning, safety handoff, reportability decisions, filed reports, acknowledgements, communications, trends, quality actions, signatures, and closure.

That record explains both what the company did and what it knew when each decision was made.

Operating model

The control layer sits above the systems that supply governed records and execution.
Control · 08

Owned here

  • Source-Preserving Intake
  • Awareness & Triage
  • Complaint Investigation
  • Returned Product Control
  • Governed Reportability
  • Quality–Safety Handoff
  • Exposure-Aware Trending
  • Closure Reconciliation
Foundation · 05

Connected systems

Capabilities

01Source-Preserving Intake
Capture calls, email, portals, field reports, distributors, and partners with original narrative, receipt chronology, attachments, and contact permissions intact.
02Awareness & Triage
Record organizational awareness explicitly and route urgent quality or safety concerns to qualified reviewers without treating triage as the final decision.
03Complaint Investigation
Plan evidence around testable questions, connect lot and batch history, document limitations, and preserve the reasoning behind approved conclusions.
04Returned Product Control
Manage return authorization, shipment, custody, condition, decontamination, examination, destructive testing, retention, and disposition.
05Governed Reportability
Apply versioned jurisdiction- and role-specific rules, preserve criterion-level decisions, and calculate deadlines from reviewed awareness events.
06Quality–Safety Handoff
Share controlled facts with pharmacovigilance while keeping product investigation and medical case responsibilities distinct and traceable.
07Exposure-Aware Trending
Analyze stable issue families against governed exposure denominators and turn alerts into accountable reviews rather than automatic conclusions.
08Closure Reconciliation
Verify investigations, reports, acknowledgements, communications, safety handoffs, quality actions, coding, and trend inclusion before closure.

Entities

Entity hierarchy
What it records
Kind
Complaint Intake
Source-preserving receipt with channel, reporter, timestamp, original narrative, attachments, products, event location, and contact permissions.
entity
Awareness Event
Dated organizational receipt or awareness event with role, unit, source, applicable rule, rationale, and audit history.
entity
Complaint Issue
Distinct product quality, safety, vigilance, distribution, service, or counterfeit concern within one intake.
entity
Device Malfunction Complaint
Device performance concern with use context, patient involvement, recurrence evaluation, technical investigation, and MDR assessment.
template
CMP-02418
Device stopped during use; original report, awareness chronology, patient outcome, lot trace, return request, and MDR assessment remain linked.
record
Medicinal Product Quality Complaint
Identity, strength, purity, packaging, labeling, contamination, appearance, delivery, or performance allegation.
template
Triage Assessment
Structured urgency screen that routes qualified work without substituting for investigation or reportability decisions.
entity
Complaint Investigation
Question-led plan, evidence, tests, batch review, comparable events, limitations, findings, conclusion, and approval.
entity
Product Trace
Product, UDI, lot, serial, batch, components, site, supplier, release, shipment, and destination genealogy.
entity
Returned Product
Return authorization, custody, condition, decontamination, storage, examination, retention, and disposition.
entity
Returned Device Evaluation
Controlled receipt, condition, custody, decontamination, examination, testing, destructive work, retention, and disposition.
template
RMA-08831
Returned unit received sealed; chain of custody, photographs, functional test, teardown approval, findings, and retention recorded.
record
Reportability Assessment
Jurisdiction, role, product, criteria, facts, missing information, rule version, decision, approver, and revision history.
entity
US Device MDR Assessment
Manufacturer-role assessment of death, serious injury, qualifying malfunction, remedial-action, and FDA-request conditions under the effective rule.
template
MDR-ASMT-02418
Criterion-by-criterion US manufacturer assessment using the effective rule, reasonably known information, reviewer, and signature.
record
Regulatory Report
Versioned report with deadline basis, validation, dispatch, acknowledgement, identifier, follow-up, amendment, and status.
entity
Safety Case Handoff
Controlled link to the PV case and shared facts without collapsing product complaint and medical-safety accountability.
entity
Reporter Communication
Acknowledgement, follow-up, return instruction, update, response, redaction, delivery, and contact preference.
entity
Complaint Final Response
Approved, privacy-checked reporter response aligned with investigation conclusions and permissible disclosures.
template
Complaint Trend
Versioned population, exposure denominator, code set, time window, baseline, alert method, review, and action.
entity

FAQ

There is no safe universal answer. The system records receipt and organizational awareness events, then applies the effective rule for the product, reporter role, jurisdiction, and report type. Reviewers approve the applicable date and any later correction remains auditable.
No. US manufacturers generally use the applicable 30-calendar-day framework for qualifying deaths, serious injuries, and malfunctions. Five-work-day reporting applies in specified circumstances, including certain remedial actions to prevent an unreasonable risk of substantial harm or an FDA request. The configured rule and qualified assessment govern the case.
Complaint handling owns the source intake, product-quality investigation, returned item, genealogy, technical evidence, customer response, and quality actions. Pharmacovigilance owns the linked medical safety case and its assessment and reporting. Shared facts synchronize without merging accountability.
The source intake remains one record, while each quality, safety, packaging, service, counterfeit, or distribution issue gets its own classification, owner, rule, workstream, and closure criteria.
The workflow records the reason, contact attempts, expected value of the missing evidence, and substitute evidence such as batch records, photographs, retain samples, telemetry, or similar-event review. The conclusion must state the resulting limitation.
No. It can flag language, suggest codes, retrieve similar records, and draft from cited facts. A qualified reviewer applies the governing criteria, considers missing information, and signs the reportability decision.
Each analysis versions its population, product hierarchy, code set, time window, exclusions, exposure denominator, baseline, and alert method. A threshold crossing creates a review candidate; it does not prove a causal defect.
Yes. Product, UDI or catalog code, lot, serial, batch, component lots, site, line, equipment, supplier, release, shipment, and destination can be connected through governed identifiers. Unknown values remain explicitly unknown.
No. Filing is one lifecycle. The complaint may still require acknowledgement validation, follow-up reports, investigation, returned-product work, customer response, linked safety or quality actions, trend inclusion, and an approved closure reconciliation.
Access can be restricted by role, purpose, region, and data attribute. Redacted and minimum-necessary views let technical teams investigate product performance without exposing medical or reporter data they do not need.

Related blueprints

Risk

Life Sciences Quality Risk Management & ISO 14971 Software

Medical-device ISO 14971 risk files and pharmaceutical quality risk management with plans, hazard analyses, FMEAs, risk criteria, control options, verification, residual and overall risk, benefit-risk, production and post-production evidence, review, and change impact.

Supplier

Pharmaceutical Supplier Quality Management Software

Manage supplier, manufacturer and site identities; risk and material or service scope; qualification plans, questionnaires and audits; quality agreements; approved-supplier states; incoming lot and CoA performance; deviations, complaints and SCARs; supplier changes; scorecards, monitoring, requalification, restrictions, and disqualification.

TT

Pharmaceutical Technology Transfer Management Software

Seal transfers the process as data. AI-configured workflows evolve with your process. Unified with MES, QMS, and ELN.

APR

GxP Automated Reporting & Quality Intelligence Software

Controlled report definitions, governed metrics, frozen data cuts, traceable tables and narratives, review, approval, scheduling, distribution, and live quality intelligence across GxP operations.

AR

GxP Inspection Readiness & Regulatory Request Management Software

Inspection preparation, readiness assessments, front- and back-room request control, scoped evidence packages, point-in-time verification, secure review, response approval, commitments, observations, metrics, and continuous remediation across GxP systems.

Deviation

GxP Deviation & Investigation Management Software

Capture manufacturing, laboratory, facility, equipment and data deviations with live context; control containment and notifications; classify and scope impact; plan and execute evidence-based investigations; test hypotheses and recurrence; approve root cause and product decisions; connect CAPAs and changes; verify effectiveness; trend systemic signals; and close with complete rationale.

Go live in 48 hours.