Cloud-Based Software

FDA responses to questions regarding the use of cloud-based software in clinical trials. 

From Florence’s Complete Library of FDA eRegulatory and eSource Guidance

What are the requirements/guidance on cloud-based servers?

There are none. As of right now, the FDA has not addressed cloud-based servers. Both the software vendors and end-users should take the recommended steps to validate the software’s use in the end user’s computing environment (from 2016). Documentation in the Florence Library of FDA eRegulatory and eSource Guidance

Are cloud storage systems secure enough for storing clinical trial data?

The sponsor/CRO (if sponsor transfers obligations to the CRO) should determine if the cloud storage system is secure enough since the FDA has not published any guidance on cloud storage yet (from 2016)Documentation in the Florence Library of FDA eRegulatory and eSource Guidance

Does the FDA consider it acceptable for data to be distributed across a cloud computing service’s hardware at several different geographic locations at the same time without being able to identify the exact location of the data at any given time?

Yes as long as appropriate controls are in place (from 2017)Documentation in the Florence Library of FDA eRegulatory and eSource Guidance

 

From Florence’s Complete Library of FDA eRegulatory and eSource Guidance

The summaries presented in our library are for informational purposes only, they are not for implementation in operations. Please consult official FDA guidance documents for operational use.

About Us

Florence is a team of clinicians, research professionals and technologists working to improve clinical trial efficiency from startup to closeout.

Our solution eliminates workflow bottlenecks at the site, tracks study and site progress, and provides remote monitoring capabilities to sponsors — thus reducing uncertainty between visits, delivering cost savings, increasing compliance, and improving site-sponsor relationships.