The Update You Ship Is a Trial Event
A companion reading from the OS / firmware vendor seat — why your release is the sponsor’s change event, and what only you can tell them about it
REGULATORY OPERATIONSNo GCP rule binds an OS or firmware vendor: every duty your release creates belongs to the sponsor — and the sponsor cannot discharge it without facts that exist only on your side.
A single release can move sampling, sensor behavior, permissions or APIs, rolls out unevenly, and is announced as a build number — so the sponsor learns of it after the data has moved. Publish a release calendar, state the behavioral delta, declare end-of-support against study timelines, and offer a defer-or-pin path.
Every duty in the table is the sponsor's, and every input is yours
| Sponsor's duty | What your release does to it | Your disclosure |
|---|---|---|
| Change control (QPP-07) | Updates can break the validated state mid-study. | Publish a release calendar and change notices the sponsor can plan around. |
| Endpoint validation (QPP-01) | A sampling change can alter a sensor-derived measure. | Flag changes to sampling, sensors or signal processing in the release notes. |
| Security (QPP-05) | Patch cadence and end-of-support drive security exposure. | Declare patch cadence and end-of-support dates against study timelines. |
| PCCP (QPP-16) | A PCCP is held by the manufacturer of an AI-enabled device software function — not by you. | Say what you ship and when; do not expect a change plan to pre-authorize it. |
Four facts about your releases that a sponsor has to work around
A routine OS push can alter a measure or a permission: a silent sensor or sampling change can shift a mobility or signal measure; a permission-model change alters what the app may access.
The sponsor relies on a party it never contracted with and cannot control your cadence; it can only plan around what it can see.
In qointa's experience, sampling, sensor and permission changes reach release notes as version strings, if at all — which is why the sponsor learns of them after the data has moved.
Update and accept behavioral drift, or stay on an unsupported version and carry the security exposure — and a support window can close inside a study that is still recruiting.
Five moves turn an uncontracted dependency into a predictable one
- 1Publish a release calendar — give the study a forward view of your cadence and forced-update deadlines.
- 2Flag behavioral deltas, not just build numbers — call out changes to sampling, sensors, permissions or timing.
- 3Declare end-of-support dates early so support windows can be reconciled with study timelines.
- 4Offer a defer-or-pin path where your platform allows one — a way to delay an update or hold a version for the duration of a study.
- 5Say what a change plan will not cover — a PCCP sits with the manufacturer of an AI-enabled device software function, not with you.
FDA DHT guidance (final, Dec 2023) s.III, s.IV.H.4 · EMA/INS/GCP/112288/2023 Annexes 2, 4 · ICH E6(R3) s.3.6, Annex 2 (Step 4, 3 June 2026) · FDA PCCP guidance for AI-enabled device software functions (Dec 2024)
© qointa 2026 – Public – Uncontrolled when printed · Not legal advice; this summary does not classify any device.
sales@qointa.com · qointa.com
More from the library
Digital Health Technologies in Clinical Trials — A Regulatory Position-Paper Series
One device, several perimeters: a framework for assessing the regulatory impact of the technologies a trial relies on.
Read more →Who Is the Manufacturer? Economic-Operator Roles in DHT Supply Chains
How provisioning, importing, kitting and modifying a device assign manufacturer, importer and distributor duties — often by operation of law.
Read more →You Can Delegate the Work, Not the Accountability: Vendor Qualification and Oversight under ICH E6(R3)
The sponsor’s duty to qualify and oversee its DHT vendors — distinct from who holds the economic-operator role.
Read more →Talk to a specialist
Bring one device and one protocol — a wearable, a sensor, an app, anything. We will tell you which regulatory perimeters it opens and what it takes to close them.
Book a 15-minute call