The Trigger Register: A Controlled Instrument for Digital-Trial Compliance
Turning the per-stakeholder assessment into a living, inspection-ready artefact in the technical file, the validation plan and the TMF — grounded in the risk-based quality management GCP already expects.
REGULATORY OPERATIONSPut every regulatory-perimeter determination in a Trigger Register: one row per condition, with its status, anchor, evidence and where its consequence lands.
Tacit assessments fail exactly when they are tested — at inspection, at handover and when the configuration changes. Name an owner in the quality system, seed the register from the RIA, define the review events that re-open it, and file it with its version history in the TMF.
Six fields make a determination defensible; without them it is opinion
| Field | What it records | Example entry |
|---|---|---|
| Condition | The discrete regulatory fact being assessed, in plain terms | App computes a clinical risk score (possible MDSW) |
| Status | Whether it is met for the present configuration — and for whom | Met — sponsor & eCOA vendor; under review |
| Anchor | The regulation, guidance or standard the determination rests on | EU MDR Annex VIII Rule 11; MDCG 2019-11 Rev. 1 (June 2025) |
| Downstream artifact | Where the consequence lands: technical file, validation plan, contract | Technical file §3; validation plan VP-04 |
| Evidence pointer | Where the supporting evidence can be found | RIA-2026-014; classification memo |
| Last review | When it was last assessed, and by whom | 1 Jun 2026 — RA lead (illustrative) |
Four positions that separate a controlled register from a spreadsheet
Asking “is this phone, wearable or gateway a device?” conceals the multi-perimeter reality. Asking which discrete conditions are met, and recording each with its basis, makes the position auditable.
The sponsor must identify, evaluate, control, communicate, review and report risks to critical-to-quality factors and document it (Annex 1, s.3.10.1). The register is that record.
Three governance properties set it apart: owned in the quality system, version-controlled so its history can be produced at inspection, and re-run on defined review events.
Device consequences go to the technical file, GxP and data-integrity consequences scope the CSV validation plan, and the register itself is filed with its version history in the TMF.
Four steps, in order, stand the register up as a controlled instrument
- 1Assign a named owner in the quality system; for a manufacturer, the person responsible for regulatory compliance (MDR Art. 15).
- 2Seed it from the RIA (QPP-00): one row per condition, each with status, anchor, evidence pointer and downstream artifact.
- 3Make it event-driven — re-run on amendments, releases, new countries, vendor or role changes and device substitutions.
- 4Route each determination to the technical file, validation plan or contract, and file the register with its history in the TMF.
ICH E6(R3) (Annex 1, s.3.10.1) · EU MDR Art. 15 and Annex VIII Rule 11 · MDCG 2019-11 Rev. 1 (June 2025) · EMA/INS/GCP/112288/2023 · GDPR
© qointa 2026 – Public – Uncontrolled when printed · Not legal advice; this summary does not classify any device.
sales@qointa.com · qointa.com
More from the library
Digital Health Technologies in Clinical Trials — A Regulatory Position-Paper Series
One device, several perimeters: a framework for assessing the regulatory impact of the technologies a trial relies on.
Read more →Who Is the Manufacturer? Economic-Operator Roles in DHT Supply Chains
How provisioning, importing, kitting and modifying a device assign manufacturer, importer and distributor duties — often by operation of law.
Read more →You Can Delegate the Work, Not the Accountability: Vendor Qualification and Oversight under ICH E6(R3)
The sponsor’s duty to qualify and oversee its DHT vendors — distinct from who holds the economic-operator role.
Read more →Talk to a specialist
Bring one device and one protocol — a wearable, a sensor, an app, anything. We will tell you which regulatory perimeters it opens and what it takes to close them.
Book a 15-minute call