The Inspection Lens
A companion reading on what an inspection of a digital trial actually examines — and where the evidence has to be built long before it
REGULATORY OPERATIONSAn inspection of a digital trial follows the record, not the device — and the sponsor still has to evidence the journey from capture to repository.
For FDA the source data sit in the first durable repository, and FDA does not intend to inspect individual DHTs where data and metadata arrive under the prespecified plan; the EMA guideline still expects device-side controls evidenced, BYOD included. Build the inspection story around the data flow months ahead — none of it can be reconstructed on the day.
Inspection tests four perimeters at once, each with a named artifact
| Perimeter | What it covers | Evidence to hold (qointa's view) |
|---|---|---|
| Inspection | What FDA (BIMO), EU competent authorities and the MHRA examine | The data flow and its controls: transfer plan, metadata, validation |
| Data integrity | Device-side audit trail, time and attribution | Audit trail incl. own devices; external, non-modifiable time source |
| Change control | Whether updates were controlled and documented | A trail for each app / OS change and its impact on the validated state |
| The record | Whether the assessment is explicit, versioned and available | A versioned assessment producible from the Trigger Register on request |
Four things an inspection of a digital trial actually tests
FDA does not intend to inspect individual DHTs for source-data verification. The EMA guideline nonetheless expects device-side controls — security, time source, audit trail — evidenced.
Participants' own devices fall within the EMA computerized-systems guideline, so audit trail, attribution and time source must hold there as on provisioned handsets, wearables and gateways.
A GCP inspector does not classify a device: in the EU the competent authority and, under MDR Art. 4, the Commission after consulting the MDCG; in the US FDA CDRH, with the IRB making the initial SR determination.
Audit trail, time source and change history were fixed months before the inspection was announced; evidence that cannot be produced on request will be treated as absent.
Five preparations make the record producible before anyone asks
- 1Bring BYOD inside scope — participants' own devices must carry the same audit trail, attribution and time controls as provisioned ones.
- 2Make the record producible in advance — audit trail, time source, transfer plan and validation evidence available on request.
- 3Document every change — a controlled, assessed trail for each app / OS update and its impact on the validated state.
- 4Keep the assessment record current — explicit, versioned and producible from the Trigger Register.
- 5Be able to explain your controls — a documented account of each control, its basis and its owner, read from the record, not improvised.
FDA Electronic Systems Q&A (Oct 2024), Q23 · FDA DHT guidance (Dec 2023), s.IV.G, s.IV.H.4 · EMA/INS/GCP/112288/2023, Annexes 4, 5, s.5.5 · ICH E6(R3) Annexes 1, 2 · Regulation (EU) 2017/745 (MDR) Art. 4 · 21 CFR 812.66
© qointa 2026 – Public – Uncontrolled when printed · Not legal advice; this summary does not classify any device.
sales@qointa.com · qointa.com
More from the library
Digital Health Technologies in Clinical Trials — A Regulatory Position-Paper Series
One device, several perimeters: a framework for assessing the regulatory impact of the technologies a trial relies on.
Read more →Who Is the Manufacturer? Economic-Operator Roles in DHT Supply Chains
How provisioning, importing, kitting and modifying a device assign manufacturer, importer and distributor duties — often by operation of law.
Read more →You Can Delegate the Work, Not the Accountability: Vendor Qualification and Oversight under ICH E6(R3)
The sponsor’s duty to qualify and oversee its DHT vendors — distinct from who holds the economic-operator role.
Read more →Talk to a specialist
Bring one device and one protocol — a wearable, a sensor, an app, anything. We will tell you which regulatory perimeters it opens and what it takes to close them.
Book a 15-minute call