Reconcile trial supplies while preserving blinding and accountability

Shipment matching is only one part of accountability

A depot confirms that 40 kits were delivered and the site confirms receipt of 40. The shipment is reconciled, but later records do not explain what happened to every kit. A logistics match has been mistaken for complete trial supply accountability.

Clinical trial supply reconciliation should connect the relevant movements and states across the depot, site and authorised study systems. It needs to explain what was received, held, assigned or used as recorded, returned and disposed of through approved processes. The precise record model depends on the study and product.

ICH E6(R3) addresses investigational-product accountability and blinding within its trial guidance. The approved protocol and applicable requirements determine the actual responsibilities and procedures. ICH E6(R3), investigational product management.

Establish what each identifier means

List the identifiers used by the depot, site, trial supply system and operational reports. Distinguish shipment, container, kit, batch and study identifiers. A carton containing several kits should not be counted as one kit simply because both systems use a field labelled “quantity”.

Define the mapping without revealing restricted treatment information to users who do not need it. A blinded kit identifier can support custody reconciliation while the treatment relationship remains available only through the authorised arrangements.

Record the unit associated with each quantity. If a transaction uses packs and another uses individual units, the approved conversion needs to be explicit and relevant to that presentation. Do not apply a convenient conversion across all studies or products.

Agree the event and status model

Identify the events that change location, custody, availability or accountability. Some events change more than one dimension, but those meanings should remain distinguishable. A kit physically at a site may be unavailable pending assessment, and a return authorised in the system may not yet have left the site.

Keep event time and entry time where they differ. Late entry may explain a temporary discrepancy, but it should not be hidden by replacing the original record time with the time the reconciliation report ran.

Worked example: five kits remain unexplained

Consider an illustrative site with 40 kits received. At the agreed cut-off, 25 have recorded accounted uses and ten have documented returns. Assuming no opening balance or other movements, the remaining balance to explain is five kits: 40 minus 25 minus ten.

That calculation does not prove that five kits are lost. They may be physically on hand, awaiting a recorded return, associated with an unposted event or subject to another documented state. The reconciliation owner should inspect the source evidence and physical-accountability process through the approved study roles.

If all five are confirmed on hand, the balance can reconcile once the appropriate evidence and records are complete. If only four can be explained, one kit remains unresolved and follows the approved escalation process. A spreadsheet adjustment to zero would conceal the problem.

The investigation should use permitted kit identifiers and views. It should not expose treatment assignments merely because matching becomes easier with unblinded data. Any need for restricted information follows the study's authorised process.

This example illustrates quantity reconciliation. It does not decide participant dosing, treatment assignment or the acceptability of an unresolved accountability difference.

Reconcile at a common cut-off

Agree the time basis for each comparison, including time zones and expected interface delays. A depot report generated at 09:00 and a site report generated at 17:00 may include different events. Comparing them without a cut-off can create false exceptions.

Show transactions in transit or awaiting acknowledgement separately from unexplained differences. A kit should not disappear from both sides during a handover, nor should it be counted as available at both locations. Define the custody transition and evidence needed to confirm receipt.

Use repeated reconciliation to identify persistent gaps, but avoid closing an issue solely because the aggregate count later matches. Two opposing errors can cancel numerically while leaving individual kit histories wrong.

Connect condition assessment to availability

Transport or storage concerns may affect whether a kit can be used under the approved process. Link the relevant evidence and authorised assessment to the inventory state. A physically received kit should not automatically become available if a required condition review remains open.

The cold-chain lane qualification guide discusses transport design and evidence. For trial supplies, the product-specific and study-specific arrangements govern the relevant conditions and response; this article does not prescribe a universal temperature range.

Keep the technical alarm, quality assessment and inventory consequence connected but distinct. Resolving a logger download problem does not itself establish product acceptability. The responsible authorised role makes the applicable decision with the necessary evidence.

Protect blinding in reports and exceptions

Review the entire information path, including dashboard filters, exports, attachments, notifications and support access. A role-restricted screen is insufficient if an error message includes a treatment description or an exported file contains hidden restricted columns.

The clinical data privacy guide helps define the minimum necessary fields. Apply similar discipline to study blinding: describe which role needs each relationship and how access is tested.

Use synthetic blinded and restricted records in verification. Confirm that reconciliation can be completed through the intended roles and that a user cannot infer prohibited information from another view. Escalate unresolved design concerns to the study owners before introducing the integration.

Close returns and disposition with evidence

Return authorisation, dispatch, receipt and final disposition are separate events. Connect them so the site, depot and sponsor can understand what remains outstanding. A courier collection reference does not establish that every expected kit was received and reconciled.

For a discrepancy, preserve both the expected and observed quantities, the source records, investigation and authorised resolution. Where a correction is necessary, retain its attribution and reason. Do not overwrite the original receipt merely to make the current stock report balance.

Link open supply issues to the appropriate operational view without allowing a general milestone to close them automatically. The CTMS evaluation guide explains how connected systems should preserve their decision boundaries.

Pilot with realistic exceptions

Choose one study flow from depot dispatch through site receipt, accountability and return. Test a partial receipt, delayed entry, duplicate message, condition concern and returned kit that arrives under an unexpected identifier. Inspect both individual histories and aggregate balances.

Measure unexplained quantities, time to identify the source of a discrepancy and issues reopened after apparent closure. Track interface delays separately from physical-accountability gaps so the correct owner can act.

Agree the response when systems are unavailable. The approved continuity process should preserve the information needed for later reconciliation and protect restricted data. Recovery needs a controlled merge of events, not an unrestricted bulk overwrite.

Summary and next actions

Trial supply reconciliation combines identity, custody, quantity, condition and authorised access. A balanced shipment is useful evidence, but it does not explain the full kit lifecycle.

• Map kit identifiers, units and event ownership across depot, site and study systems.
• Define reconciliation cut-offs and distinguish in-transit events from unexplained differences.
• Test a five-kit discrepancy and restricted-data scenario through the approved study roles.
• Confirm return, correction and continuity evidence before expanding the workflow to more studies.