Medical Device Trial Master File (TMF) and ISF Guide: ISO 14155, FDA, and EU MDR
Complete guide to medical device TMF and ISF: ISO 14155:2026 Annex E essential documents, 21 CFR 812.140, EU MDR archiving, and device-unique artifacts.
In clinical trial operations, the Trial Master File (TMF) and its site-level counterpart, the Investigator Site File (ISF), serve as the definitive historical record of a clinical investigation. Together, they tell the complete story of how a study was designed, authorized, conducted, monitored, and analyzed. If a critical procedure, consent form, calibration log, or safety notification is not documented in the TMF or ISF, regulatory authorities operate under a foundational inspection premise: if it is not documented, it did not happen.
For medical device manufacturers, managing essential clinical investigation documents presents unique operational and regulatory challenges. Most clinical operations software, commercial electronic TMF (eTMF) templates, and Contract Research Organization (CRO) standard operating procedures were originally designed around pharmaceutical drug trials governed by ICH E6 Good Clinical Practice.
When medical device clinical teams attempt to shoehorn a device investigation into a standard pharmaceutical TMF structure, severe compliance gaps routinely emerge:
- Where do capital equipment calibration certificates, electrical safety test reports (IEC 60601), and software firmware version logs belong?
- How must investigator surgical training, wet-lab simulation credentials, and proctored surgical cases be indexed?
- How should device accountability logs account for serial numbers, batch lot codes, shelf-life expiration, sterilization verification, and explanted hardware analysis?
- Why does the U.S. FDA record retention requirement under 21 CFR 812.140(d) (2 years post-completion or post-approval) conflict so starkly with the European Union Medical Device Regulation (Regulation (EU) 2017/745 - EU MDR) Annex XV requirement (10 years, extending to 15 years for implantable devices)?
This guide provides an end-to-end blueprint for establishing, maintaining, reconciling, and archiving a compliant medical device Trial Master File and Investigator Site File. It integrates the normative requirements of ISO 14155:2026 Annex E, U.S. FDA 21 CFR 812.140, EU MDR Article 72 and Annex XV Chapter III Section 3, and FDA Bioresearch Monitoring (BIMO) inspection standards.
Disambiguation Note: This guide covers essential document management, TMF/ISF structure, device-specific trial artifacts, electronic TMF (eTMF) validation, and statutory record retention periods for medical device clinical investigations. For related clinical trial workflows, consult our dedicated guides on ISO 14155 GCP Harmonization, Medical Device Safety Reporting, Informed Consent Requirements, Protocol Deviations Management, Risk-Based Monitoring, EDC Validation & Part 11 Compliance, ClinicalTrials.gov Registration & Disclosure, IVDR Performance Study Requirements, and EU MDR Clinical Investigation Sponsor Obligations.
Direct Answer to Core Scenario: If your organization is establishing or auditing a medical device clinical trial repository:
- Tripartite Lifecycle Structure: Essential documents must be organized across three distinct chronological stages under ISO 14155:2026 Annex E: (1) Before study start-up (planning, approvals, agreements, baselines); (2) During study conduct (monitoring, amendments, deviations, safety, device tracking); and (3) After study completion/close-out (reconciliation, final reporting, database lock, archiving).
- The TMF vs. ISF Firewall: Maintain an airtight privacy and regulatory boundary between the Sponsor TMF and the site-held Investigator Site File (ISF). Original signed Informed Consent Forms (ICFs) and the Subject Identification Code List must remain exclusively within the ISF at the investigational site. Filing signed consent forms or identified subject medical records in the Sponsor TMF is a direct violation of HIPAA, GDPR, and ISO 14155 Clause 7.3 confidentiality mandates.
- Device-Specific Technical Artifacts: Medical device TMFs require documentation absent in drug trials: (1) surgical/procedural training logs and proctoring sign-offs; (2) capital equipment installation, electrical safety (IEC 60601), and calibration logs; (3) physical device accountability tracking individual serial numbers, lot codes, temperature logs, and transit manifests; (4) explant retrieval and engineering failure analysis dossiers; and (5) dual-categorized device deficiency records.
- Transatlantic Retention Clocks: U.S. FDA 21 CFR 812.140(d) requires record retention for 2 years after the latter of: investigation completion/termination, or when records are no longer needed to support a PMA, 510(k), or De Novo. In contrast, EU MDR Annex XV Chapter III Section 3 mandates archiving for at least 10 years after study end (or 10 years after the last device was placed on the market), extending to at least 15 years for implantable devices. Global device manufacturers must archive all global trial records to the stricter EU MDR 10/15-year standard.
- Electronic TMF (eTMF) Validation: Systems must comply with 21 CFR Part 11 and EU Annex 11, maintain immutable automated audit trails, and grant regulatory inspectors (FDA BIMO, EU competent authorities) direct, independent, read-only access during formal inspections.
What Is a Medical Device Trial Master File (TMF) and Investigator Site File (ISF)?
In clinical research governance, the terms Trial Master File (TMF) and Investigator Site File (ISF) describe the total collection of essential records that enable both the conduct of a clinical investigation and the quality of the resulting data to be evaluated.
+----------------------------------------------------------------------------------------------------+
| CLINICAL INVESTIGATION ESSENTIAL DOCUMENT REPOSITORY |
+----------------------------------------------------------------------------------------------------+
| |
| +--------------------------------------------+ +--------------------------------------------+ |
| | SPONSOR TMF | | INVESTIGATOR SITE FILE (ISF) | |
| | (Maintained by Sponsor / CRO) | | (Maintained at Investigational Site) | |
| +--------------------------------------------+ +--------------------------------------------+ |
| | * Global Trial Design & CIP Protocol | | * Site-Specific Approved CIP & Amendments | |
| | * Investigator\x27s Brochure (IB) Preclinical | | * Current Investigator\x27s Brochure (IB) | |
| | * Regulatory Authorizations (FDA IDE/EU CA)| | * Institutional IRB / EC Approvals | |
| | * Master IRB/EC Approvals & Templates | | * Site Signed 812.43 Agreement & 1572 | |
| | * Signed Investigator Agreements & 1572s | | * Financial Disclosures (21 CFR Part 54) | |
| | * Monitoring Plan & IMV/SIV/COV Reports | | * Delegation of Authority (DOA) Log | |
| | * Central Safety Reports & DMC/CEC Charters| | * Site Staff CVs, Licenses & GCP Training | |
| | * Global Device Shipment & Release Manifest| | * Site Surgical Training & Proctoring Logs | |
| | * Final Clinical Investigation Report (CIR)| | * Site Device Accountability & Storage Log | |
| | * Blank Approved Consent Templates | | * ORIGINAL SIGNED INFORMED CONSENT FORMS | |
| | * De-identified Subject Screening Logs | | * SUBJECT IDENTIFICATION CODE LIST | |
| +--------------------------------------------+ +--------------------------------------------+ |
| | | |
| +-----------------------+------------------------+ |
| | |
| v |
| +------------------------------------+ |
| | REGULATORY INSPECTION AUDIT | |
| | (FDA BIMO / EU Member State CA) | |
| | Reconstructs Full Study Conduct | |
| +------------------------------------+ |
+----------------------------------------------------------------------------------------------------+
The Regulatory Definition
Under ISO 14155:2026 Clause 3 and Annex E, essential clinical investigation documents are defined as:
"Those documents which individually and collectively permit evaluation of the conduct of a clinical investigation and the quality of the data produced."
Essential documents serve two vital functions:
- Contemporaneous Operational Control: During trial conduct, they assist the sponsor, clinical project managers (CPMs), and clinical research associates (CRAs / monitors) in managing the investigation and verifying compliance with the Clinical Investigation Plan (CIP), Good Clinical Practice (GCP), and applicable statutory regulations.
- Post-Hoc Audit Reconstruction: Following trial completion, they allow independent auditors, quality assurance teams, FDA Bioresearch Monitoring (BIMO) investigators, and European Notified Bodies / Competent Authorities to reconstruct the complete operational history of the trial and verify data integrity.
The Scale of Device Trial Documentation
The volume of clinical documentation requiring active management and long-term archiving across the medical technology sector is immense. Based on live data from the ClinicalTrials.gov API v2 (as of August 2026):
+----------------------------------------------------------------------------------------------------+
| CLINICALTRIALS.GOV MEDICAL DEVICE CLINICAL STUDY LANDSCAPE |
+----------------------------------------------------------------------------------------------------+
| Metric / Category | Count | % of Device Universe |
+------------------------------------------------------+------------------+--------------------------+
| Total Registered Medical Device Studies | 75,537 | 100.0% |
| Interventional Device Clinical Investigations | 63,556 | 84.1% |
| Observational Device Studies | 11,900 | 15.9% |
| FDA-Regulated Device Studies | 17,813 | 23.6% |
| Unapproved Investigational Device Studies (IDE) | 4,613 | 6.1% |
| Completed Studies Subject to Long-Term Archiving | 38,311 | 50.7% |
+----------------------------------------------------------------------------------------------------+
*Data source: ClinicalTrials.gov API v2 live registry aggregate query, August 2026.*
With 63,556 interventional device studies (84.1% of all device studies) requiring rigorous physical device accountability, surgical training tracking, and safety monitoring, and over 38,311 completed studies currently subject to statutory archiving mandates, establishing a robust TMF architecture is an indispensable core competency.
TMF vs. ISF: The Sponsor-Site Boundary and Privacy Firewalls
A common inspection non-conformity in medical device trials is the blurring of the boundary between the Sponsor Trial Master File and the Investigator Site File (ISF).
While the Sponsor TMF and Investigator Site Files collectively form the total trial archive, they are maintained by distinct legal entities with strictly separated responsibilities and privacy boundaries.
+----------------------------------------------------------------------------------------------------+
| THE SPONSOR-SITE PRIVACY FIREWALL & BOUNDARY |
+----------------------------------------------------------------------------------------------------+
| |
| SPONSOR TMF (Sponsor / CRO) INVESTIGATOR SITE FILE (Clinical Site) |
| |
| [x] Blank Approved Informed Consent Forms [x] Original Signed Informed Consent Forms |
| [x] IRB/EC Approved Consent Versions [x] Site-Specific Approved Consent Versions |
| [x] Site ICF Version Tracking Log [x] Subject Identification Code List (ID<->Name)
| [x] De-identified Subject Screening/Enrollment Log [x] Complete Subject Screening/Enrollment Log|
| [x] Pseudonymized Electronic Case Report Forms [x] Patient Medical Records & Source Notes |
| [x] Safety Reports with Subject Codes Only [x] Unblinded Randomization Codes (if site) |
| |
| ---------------------------------------------------------------------------------------------- |
| || STRICT REGULATORY PRIVACY FIREWALL || |
| || NEVER file original signed consent forms or identified patient data in the Sponsor TMF! || |
| ---------------------------------------------------------------------------------------------- |
+----------------------------------------------------------------------------------------------------+
The Privacy Firewall: What Must Never Enter the Sponsor TMF
Under ISO 14155:2026 Clause 7.3, 21 CFR 812.140(a)(3)(i), HIPAA Privacy Rule (45 CFR Part 160/164), and the EU General Data Protection Regulation (GDPR Regulation (EU) 2016/679), medical device sponsors are legally prohibited from holding direct personal identifying information (PII) of trial participants.
The following records must remain exclusively within the ISF at the clinical site and must never be uploaded to the Sponsor TMF or shared with unauthorized sponsor personnel:
- Original Signed Informed Consent Forms (ICFs): The physical or e-signed consent forms bearing the participant’s legal signature, printed name, and date of signature must stay in the ISF. The sponsor TMF holds only blank IRB-approved templates and version approval records.
- Subject Identification Code List (Master ID Log): The confidential linking log that maps confidential subject identification codes (e.g.,
SUBJ-101-004) to the patient's full legal name, date of birth, and hospital medical record number (MRN). - Primary Source Medical Records: Hospital progress notes, electronic health record (EHR) extracts, operative surgical logs with patient identifiers, and diagnostic imaging DICOM files containing burned-in patient names.
Warning Letter Hazard: In multiple FDA BIMO inspections, field investigators have cited device sponsors for maintaining copies of signed patient informed consent forms in their central files. When a Clinical Research Associate (CRA) collects signed consent forms during a monitoring visit and uploads them to the central electronic TMF, it represents a severe breach of subject confidentiality protocols and GCP monitoring procedures.
Regulatory Foundations: 21 CFR 812.140, ISO 14155:2026 Annex E, and EU MDR Annex XV
Medical device recordkeeping is governed by three primary regulatory and consensus standards across global jurisdictions. Understanding how their specific requirements align is essential for building a unified trial repository.
+----------------------------------------------------------------------------------------------------+
| GLOBAL REGULATORY RECORDKEEPING FRAMEWORKS |
+----------------------------------------------------------------------------------------------------+
| Regulatory Standard | Jurisdictional Scope | Core Document Matrix & Authority |
+---------------------------------+-------------------------+----------------------------------------+
| FDA 21 CFR 812.140 | United States (IDE) | Statutory rule for Investigator (a) & |
| | | Sponsor (b) records; 2-year clock (d) |
| | | |
| ISO 14155:2026 Annex E | International Consensus | Recognized standard (FDA #41711, MDR |
| | (US, EU, Japan, UK) | Annex XV); Tripartite Stage Structure |
| | | |
| EU MDR 2017/745 Annex XV | European Union | Chapter III Section 3 documentation; |
| & Article 72 | | Mandatory 10-year / 15-year archiving |
+----------------------------------------------------------------------------------------------------+
1. United States: FDA 21 CFR 812.140
Under the U.S. Investigational Device Exemptions (IDE) regulation (21 CFR Part 812), recordkeeping responsibilities are divided into investigator obligations and sponsor obligations:
21 CFR 812.140(a) — Investigator Records
A participating clinical investigator must maintain accurate, complete, and current records relating to the investigator's participation in an investigation, including:
- Correspondence: All correspondence with another investigator, an IRB, the sponsor, a monitor, or FDA, including required reports.
- Device Accountability: Records of receipt, use, or other disposition of a device, including:
- Type and quantity of the device, dates of receipt, and batch number or code mark.
- Names of all persons who received, used, or disposed of each device.
- Why and how many units of the device have been returned to the sponsor, repaired, or otherwise disposed of.
- Case Histories: Case histories for each individual subject exposed to the device or used as a control, including:
- Case report forms (CRFs) and supporting data.
- Signed and dated consent forms and medical history notes.
- Brief description of the condition of each subject upon entering the study.
- Relevant medical history and records of each subject's exposure to the investigational device (including date and time of each exposure).
- Adverse device effects and documentation of all relevant medical findings.
- Protocol & Deviations: The protocol, with documents showing the dates and reasons for each deviation from the protocol.
21 CFR 812.140(b) — Sponsor Records
A medical device sponsor must maintain accurate, complete, and current records relating to the investigation, including:
- Correspondence: All correspondence with another sponsor, a monitor, an investigator, an IRB, or FDA, including required reports.
- Shipment & Disposition: Records of shipment and disposition of devices, including name and address of consignee, type and quantity of device, date of shipment, batch number or code mark, and method and reason for disposition.
- Agreements & Financial Disclosure: Signed investigator agreements under 21 CFR 812.43, including the investigator's curriculum vitae and financial disclosure information under 21 CFR Part 54.
- NSR Determinations: For non-significant risk (NSR) investigations, records of the sponsor's initial determination of NSR and the documentation supporting that determination under 21 CFR 812.2(b)(1).
- Adverse Device Effects & Complaints: Records of all adverse device effects (ADEs) and complaints.
2. International Consensus: ISO 14155:2026 Annex E
The fourth edition of ISO 14155:2026 (Clinical investigation of medical devices for human subjects — Good clinical practice) defines the international standard for essential documents in Annex E.
ISO 14155 Annex E structures essential documents chronologically:
- Table E.1: Essential documents before the clinical investigation starts.
- Table E.2: Essential documents during the conduct of the clinical investigation.
- Table E.3: Essential documents after completion or termination of the clinical investigation.
Annex E explicitly designates whether each individual artifact belongs in the Sponsor TMF, the Investigator Site File (ISF), or Both, establishing the global standard for multi-regional clinical trial filing.
3. European Union: EU MDR 2017/745 Article 72 and Annex XV
In the European Union, Regulation (EU) 2017/745 (MDR) establishes documentation requirements in Article 72 and Annex XV Chapter III Section 3:
"The sponsor shall keep available for the competent authorities all documentation
necessary to provide evidence for the documentation referred to in Chapter II of
this Annex. The documentation shall be kept for at least 10 years after the
clinical investigation with the device in question has ended, or, in the event
that the device is subsequently placed on the market, at least 10 years after the
last device has been placed on the market. In the case of implantable devices, the
period shall be at least 15 years.
Each Member State shall require that this documentation is kept at the disposal of
the competent authorities for the period referred to in the first paragraph in case
the sponsor, or its contact person or legal representative as referred to in
Article 62(2) established within its territory, goes bankrupt or ceases its
activity prior to the end of that period."
— EU MDR Annex XV Chapter III Section 3
Why Pharma TMF Models Fail for Medical Devices: The Critical Differences
Many medical device companies make the mistake of adopting the standard pharmaceutical CDISC TMF Reference Model without customization. While the CDISC model provides a solid zone-and-section hierarchy for drug trials, out-of-the-box pharmaceutical models lack the metadata and folder structures necessary to capture physical device realities.
+----------------------------------------------------------------------------------------------------+
| PHARMA TMF (ICH E6) VS. MEDICAL DEVICE TMF (ISO 14155) |
+----------------------------------------------------------------------------------------------------+
| Operational Domain | Pharmaceutical Drug Trials | Medical Device Investigations |
+----------------------------+------------------------------------+----------------------------------+
| Investigational Product | Chemical / biological batch lot; | Physical hardware, software, |
| Accountability | tablet/vial counts; dosing volume | serial numbers, batch lot codes, |
| | | component revision levels |
| | | |
| Investigator & Operator | General protocol & GCP training; | Surgical technique, bench labs, |
| Credentialing | standard medical licensing | proctoring logs, simulator runs, |
| | | operator learning curves |
| | | |
| Capital Equipment & | Standard laboratory equipment; | Dedicated consoles, energy |
| Instrumentation | analytical calibration records | generators, delivery systems, |
| | | IEC 60601 electrical safety |
| | | |
| Safety & Malfunction | Adverse Drug Reactions (ADRs); | Adverse Device Effects (ADEs), |
| Categorization | systemic toxicities; lab shifts | Device Deficiencies (DDs), and |
| | | dual-categorized malfunctions |
| | | |
| Explant & Biological | Pharmacokinetic / PK sampling; | Explanted hardware retrieval, |
| Evaluation | bio-analytical assay validation | biohazard decontamination, and |
| | | metallurgical/wear analysis |
| | | |
| Statutory Retention | FDA 2 years (21 CFR 312.62); | FDA 2 years (21 CFR 812.140); |
| Mandates | EMA 25 years (CTR 536/2014) | EU MDR 10 years (15y implantable)|
+----------------------------------------------------------------------------------------------------+
The 5 Unique Medical Device Artifact Categories
To prevent severe audit deficiencies, every medical device TMF must accommodate five device-specific document categories:
1. Hardware, Software, and Physical Device Traceability
Unlike pills or vials, medical devices undergo hardware modifications, firmware patches, and shelf-life restabilizations. The TMF must capture:
- Device Certificates of Analysis (CoA) and Certificates of Conformity (CoC).
- Sterilization validation certificates (e.g., Ethylene Oxide ISO 11135, Gamma Irradiation ISO 11137).
- Software version release notes and firmware validation dossiers (IEC 62304).
- Hardware change notifications and engineering risk assessments during the trial.
2. Surgical, Procedural, and Proctoring Training Records
In interventional device trials, clinical outcomes depend directly on the physician's surgical technique and procedural proficiency. Device TMFs and ISFs must contain:
- Surgical technique guides and Instructions for Use (IFU) training sign-offs.
- Dry-lab, wet-lab (cadaveric/tissue), and virtual reality simulator training certificates.
- Proctoring case logs: Documentation showing that the first $N$ clinical implantations by an investigator were proctored by an experienced physician proctor.
3. Capital Equipment Calibration and Electrical Safety
If the investigational system utilizes reusable consoles, RF generators, laser emitters, or specialized delivery handles:
- Site-level equipment installation qualification records.
- Electrical safety test reports complying with IEC 60601-1.
- Routine maintenance, battery replacement, and annual calibration certificates.
4. Dual-Categorized Device Deficiency Records
Under ISO 14155:2026 and EU MDR Article 80, any device deficiency (inadequacy in identity, quality, durability, reliability, safety, or performance) must be classified under dual categorization:
- Did the deficiency lead to a Serious Adverse Device Effect (SADE)?
- Could the deficiency have led to an SADE if suitable action had not been taken, if intervention had not been made, or if circumstances had been less fortunate? The TMF must index deficiency intake logs, technical investigation root-cause analyses from the engineering team, and regulatory authority notification receipts.
5. Explant Retrieval and Failure Analysis Dossiers
When an implanted investigational device is prematurely removed (e.g., due to infection, mechanical failure, structural degradation, or patient death):
- Explant retrieval chain-of-custody logs and biohazard shipping documentation.
- Decontamination and disinfection verification records.
- Formal metallurgical, mechanical, or histopathological engineering analysis reports evaluating why the device failed.
Essential Documents Stage 1: Before Clinical Investigation Start-Up
Stage 1 essential documents establish that the clinical investigation is scientifically sound, ethically approved, compliant with regulatory mandates, and operationalized across qualified sites before the first subject is enrolled.
+----------------------------------------------------------------------------------------------------+
| STAGE 1: ESSENTIAL DOCUMENTS BEFORE STUDY START-UP |
+----------------------------------------------------------------------------------------------------+
| Essential Document Title | Regulatory Reference | Filing Location | Key Checkpoint |
+--------------------------------------+------------------------+-----------------+------------------+
| Clinical Investigation Plan (CIP) | ISO 14155 Annex A; | Sponsor TMF | Final signed CIP |
| & CIP Amendments | 21 CFR 812.25; MDR XV | & ISF | with version/date|
| | | | |
| Investigator's Brochure (IB) | ISO 14155 Annex B; | Sponsor TMF | Preclinical, |
| with Preclinical Data Dossier | 21 CFR 812.27; MDR XV | & ISF | biocompatibility,|
| | | | bench & risk data|
| | | | |
| Informed Consent Forms (ICFs) | ISO 14155 Clause 7.3; | Sponsor TMF (B) | Blank approved in|
| and Subject Information Sheets | 21 CFR Part 50; MDR 63 | & ISF (Blank+S) | TMF; Signed ONLY |
| | | | in site ISF |
| | | | |
| Regulatory Authority Authorizations | 21 CFR 812.30 (IDE); | Sponsor TMF | Formal approval |
| (FDA IDE Letter / EU CA Decision) | MDR Article 70 / 71 | & ISF (Letter) | letters & import |
| | | | licenses |
| | | | |
| Institutional Review Board (IRB) / | 21 CFR Part 56; | Sponsor TMF | Unconditional |
| Ethics Committee (EC) Approvals | MDR Article 62(4) | & ISF | approval letters |
| | | | & roster/charter |
| | | | |
| Signed Investigator Agreement | 21 CFR 812.43(c); | Sponsor TMF | Signed agreement |
| (or Form FDA 1572 equivalent) | ISO 14155 Clause 9.2 | & ISF | with current CVs |
| | | | |
| Financial Disclosure Documents | 21 CFR Part 54; | Sponsor TMF | Completed before |
| (Form FDA 3454 / 3455) | FDA BIMO CPGM 7348.810 | & ISF | site initiation |
| | | | |
| Site Qualification (SQV) & | ISO 14155 Clause 9.1; | Sponsor TMF | CRA report & |
| Site Initiation (SIV) Reports | FDA CPGM 7348.810 | & ISF (Letter) | confirmation ltr |
| | | | |
| Delegation of Authority (DOA) Log | ISO 14155 Clause 9.2; | Sponsor TMF (C) | PI signed log of |
| & Site Staff Training Matrix | 21 CFR 812.43 | & ISF (Orig) | delegated duties |
| | | | |
| Initial Investigational Device | 21 CFR 812.140(b)(2); | Sponsor TMF | Release criteria |
| Release & Shipment Manifest | ISO 14155 Annex E | & ISF | CoA, lot, qty |
+----------------------------------------------------------------------------------------------------+
*(B) = Blank approved template; (S) = Original signed forms; (C) = Monitored copy; (Orig) = Original master.*
Key Stage 1 Verification Checkpoints:
- Investigator Agreements (21 CFR 812.43): Sponsors must verify that every clinical investigator has signed a formal agreement committing to supervise the trial personally, follow the approved protocol, ensure informed consent under 21 CFR Part 50, and disclose financial interests under 21 CFR Part 54 prior to shipping investigational devices.
- Investigational Device Release Authorization: Investigational devices cannot be shipped to a site until three gates are passed: (1) regulatory authorization obtained (FDA IDE approval or EU CA decision); (2) IRB/EC unconditional approval in place; and (3) signed investigator agreement and financial disclosures collected.
Essential Documents Stage 2: During Clinical Investigation Conduct
Stage 2 essential documents demonstrate that the investigation is conducted in continuous compliance with the approved protocol, that subject safety is protected, that data is contemporaneously verified, and that device accountability is maintained across every participant exposure.
+----------------------------------------------------------------------------------------------------+
| STAGE 2: ESSENTIAL DOCUMENTS DURING STUDY CONDUCT |
+----------------------------------------------------------------------------------------------------+
| Essential Document Title | Regulatory Reference | Filing Location | Key Checkpoint |
+--------------------------------------+------------------------+-----------------+------------------+
| Protocol Amendments, Revised ICFs, | 21 CFR 812.35; | Sponsor TMF | Approvals dated |
| and Updated IRB/EC Approvals | MDR Article 75; ISO E | & ISF | before clinical |
| | | | implementation |
| | | | |
| Subject Screening, Enrollment, | ISO 14155 Clause 9.3; | Sponsor TMF (D) | Full master in |
| and Identification Code Logs | 21 CFR 812.140(a)(3) | & ISF (Full) | ISF; De-ident |
| | | | tracking in TMF |
| | | | |
| Interim Monitoring Visit (IMV) | ISO 14155 Clause 9.4; | Sponsor TMF | CRA report with |
| Reports, Letters & Action Trackers | 21 CFR 812.46; CPGM | & ISF (Letter) | open findings & |
| | | | close-out dates |
| | | | |
| Device Accountability Logs | 21 CFR 812.140(a)(2); | Sponsor TMF | Serial/lot, temp |
| (Receipt, Dispense, Implant, Return)| ISO 14155 Annex E | & ISF | logs, patient ID |
| | | | |
| Adverse Event (AE/ADE/SADE/USADE) | 21 CFR 812.150; | Sponsor TMF | Expedited clocks |
| Logs and Expedited Safety Filings | MDR Art 80; MDCG 2024-4| & ISF | verified (e.g., |
| | | | 10-day USADE) |
| | | | |
| Device Deficiency (DD) & | ISO 14155 Clause 9.7; | Sponsor TMF | Dual-category |
| Malfunction Investigation Dossiers | MDR Article 80(2) | & ISF | analysis & root |
| | | | cause evaluation |
| | | | |
| Protocol Deviation Logs and | 21 CFR 812.150(a)(4); | Sponsor TMF | Emergency vs non-|
| IRB / Sponsor Notifications | ISO 14155 Clause 9.6 | & ISF | emergency flags; |
| | | | 5-day IRB clocks |
| | | | |
| Data Safety Monitoring Board (DSMB) | ISO 14155 Clause 6.4; | Sponsor TMF | Signed charters, |
| & CEC Charters and Minutes | FDA DMC Guidance | & ISF (Summary) | meeting minutes, |
| | | | recommendations |
+----------------------------------------------------------------------------------------------------+
*(D) = De-identified tracking log only.*
Essential Documents Stage 3: Close-Out, Reporting, and Archiving
Stage 3 essential documents confirm that all trial procedures have been finalized, all investigational devices have been reconciled or destroyed, data has been locked and verified, and statutory reporting obligations have been satisfied.
+----------------------------------------------------------------------------------------------------+
| STAGE 3: ESSENTIAL DOCUMENTS AT CLOSE-OUT & ARCHIVING |
+----------------------------------------------------------------------------------------------------+
| Essential Document Title | Regulatory Reference | Filing Location | Key Checkpoint |
+--------------------------------------+------------------------+-----------------+------------------+
| Close-Out Visit (COV) Reports and | ISO 14155 Clause 9.9; | Sponsor TMF | All open queries |
| Final Monitoring Letters | FDA BIMO CPGM 7348.810 | & ISF (Letter) | & action items |
| | | | resolved |
| | | | |
| Final Device Reconciliation & | 21 CFR 812.140(a)(2); | Sponsor TMF | Zero unexplained |
| Destruction / Return Certificates | ISO 14155 Annex E | & ISF | unit balance |
| | | | |
| Final Clinical Investigation Report | ISO 14155 Annex D; | Sponsor TMF | Signed by sponsor|
| (CIR) Signed Dossier | MDR Art 77; 812.150 | & ISF | and Coordinating |
| | | | Investigator |
| | | | |
| Regulatory & Ethics Close-Out | 21 CFR 812.150(b)(7); | Sponsor TMF | Final report to |
| Notification Letters | MDR Article 77 | & ISF | FDA/IRB within |
| | | | statutory clocks |
| | | | |
| ClinicalTrials.gov & EUDAMED | 42 CFR Part 11; | Sponsor TMF | PRS confirmation |
| Results Disclosure Receipts | MDR Article 77 | & ISF | & 1-year posting |
| | | | |
| Database Lock Certification & | 21 CFR Part 11; | Sponsor TMF | Data management |
| EDC Extract Final Archive | ISO 14155 Clause 10 | only | lock sign-off |
| | | | |
| TMF Completeness Audit Sign-Off | ISO 14155 Clause 7.4; | Sponsor TMF | Final audit & QC |
| and Long-Term Archiving Certificate | MDR Annex XV Chap III | & ISF (Local) | certificate with |
| | | | retention dates |
+----------------------------------------------------------------------------------------------------+
Device-Specific Artifacts: Accountability, Surgical Training, and Explant Handling
Regulatory auditors focus heavily on device-specific artifacts because they reflect the physical reality of investigational hardware. Clinical operations teams must implement robust tracking mechanisms for each.
+----------------------------------------------------------------------------------------------------+
| DEVICE RECONCILIATION & ACCOUNTABILITY MATHEMATICS |
+----------------------------------------------------------------------------------------------------+
| |
| TOTAL UNITS RECEIVED FROM SPONSOR (N_total) |
| =========================================== |
| = Units Implanted / Used in Subjects (N_implant) |
| + Units Damaged / Defective / Expired (N_defect) |
| + Units Returned to Sponsor Warehouse (N_return) |
| + Units Formally Destroyed On-Site with Certificate (N_destroyed) |
| + Unused Units Maintained in Secure Quarantine (N_quarantine) |
| |
| DISCREPANCY FORMULA: Delta = N_total - (N_implant + N_defect + N_return + N_destroyed + N_quar) |
| MANDATORY AUDIT CRITERION: Delta MUST EQUAL EXACTLY 0 |
+----------------------------------------------------------------------------------------------------+
1. Investigational Device Accountability Log
The investigational device accountability log is the most scrutinized document during an FDA BIMO or EU competent authority site inspection. Under 21 CFR 812.140(a)(2) and ISO 14155:2026 Annex E, the log must capture:
- Device Identification: Model name, part number, unique lot/batch number, and serial number (or UDI-DI / UDI-PI).
- Receipt Details: Date received, quantity received, shipping manifest number, condition upon receipt, and initial storage verification.
- Storage Monitoring: Continuous temperature and humidity monitoring logs (documenting that the device was stored within validated environmental specifications).
- Dispensation & Clinical Exposure: Date of dispensation, subject identification code, name of the operating physician, and exact anatomical placement.
- Disposition: Date of return to sponsor, date of authorized on-site destruction, or date of quarantine.
2. Surgical and Procedural Training Credentials
When a trial involves complex surgical implantation (e.g., transcatheter heart valves, orthopedic joint replacements, neurostimulators, or robotic consoles), patient safety is intertwined with operator skill. The TMF and ISF must maintain:
+----------------------------------------------------------------------------------------------------+
| SURGICAL OPERATOR CREDENTIALING FILE STRUCTURE |
+----------------------------------------------------------------------------------------------------+
| 1. Baseline Medical License & Surgical Board Certifications |
| 2. Protocol & Instructions for Use (IFU) Specific Training Certificate |
| 3. Bench Simulation / Wet-Lab / Cadaveric Model Training Sign-Off |
| 4. Supervised Proctoring Case Logs (Documenting First N Supervised Clinical Cases) |
| 5. Formal Independent Operator Authorization Sign-Off by Sponsor Chief Medical Officer (CMO) |
+----------------------------------------------------------------------------------------------------+
3. Explant Handling and Malfunction Investigation Dossiers
When an investigational implant is retrieved from a participant:
- Chain of Custody: The ISF must record the date of explantation, reason for removal, surgeon, and decontamination protocol.
- Engineering Dossier: The Sponsor TMF must hold the biohazard transit manifest, engineering intake inspection, optical/SEM microscopy analysis, metallurgical evaluation, and final technical report concluding whether a device defect contributed to the explantation.
Record Retention Clocks Compared: FDA 2-Year Rule vs. EU MDR 10/15-Year Mandate
One of the greatest operational traps for global medical device sponsors is the severe discrepancy between United States and European Union statutory record retention periods.
+----------------------------------------------------------------------------------------------------+
| RECORD RETENTION TIMELINES: FDA VS. EU MDR |
+----------------------------------------------------------------------------------------------------+
| Regulatory Regime | General Medical Devices | Implantable Medical Devices |
+-----------------------------+-----------------------------------+----------------------------------+
| U.S. FDA 21 CFR 812.140(d) | 2 Years after study completion OR | 2 Years after study completion OR|
| | 2 Years after PMA/510(k) approval | 2 Years after PMA/510(k) approval|
| | (whichever is later) | (whichever is later) |
| | | |
| EU MDR 2017/745 Annex XV | AT LEAST 10 YEARS after study end | AT LEAST 15 YEARS after study end|
| Chapter III Section 3 | or 10 years after last device | or 15 years after last device |
| | placed on the market | placed on the market |
| | | |
| ISO 14155:2026 Clause 7.4 | Governed by national regulatory | Governed by national regulatory |
| | requirements | requirements |
+----------------------------------------------------------------------------------------------------+
The FDA 2-Year Retention Clock (21 CFR 812.140(d))
Under U.S. law, an investigator and sponsor must maintain required records during the investigation and for a period of 2 years after the latter of the following two dates:
- The date on which the investigation is terminated or completed.
- The date that the records are no longer required for purposes of supporting a premarket approval application (PMA), a product development protocol (PDP), a humanitarian device exemption (HDE), a premarket notification (510(k)), or a De Novo classification request.
The EU MDR 10-Year / 15-Year Mandate (Annex XV Chapter III Section 3)
In stark contrast, EU MDR establishes a significantly longer retention clock:
- General Devices: All clinical investigation documentation must be archived for at least 10 years after the clinical investigation has ended, or in the event that the device is subsequently placed on the market, at least 10 years after the last device has been placed on the market.
- Implantable Devices: The mandatory retention period is extended to at least 15 years after the last device is placed on the market.
Operational Impact for Global Trials: If an implantable medical device remains in commercial production in the European Union for 20 years following clinical trial completion, the sponsor must maintain the original clinical investigation Trial Master File for a total of 35 years (20 years of commercial market presence + 15 years post-market retention).
If a sponsor follows the U.S. FDA 2-year rule and purges their clinical trial archive after obtaining FDA 510(k) clearance, they will permanently destroy records required to maintain their European CE Mark, triggering catastrophic notified body audit non-conformities and product suspension.
Custody Transfer and Insolvency Protection
- Transfer of Custody (21 CFR 812.140(e)): An investigator or sponsor may transfer custody of trial records to another person who will accept responsibility for maintaining them. Notice of transfer must be submitted to the FDA within 10 working days after the transfer occurs.
- Insolvency Protection (EU MDR Annex XV): Member States are legally required to establish mechanisms ensuring that clinical investigation archives remain accessible to competent authorities even if the medical device startup, sponsor, or legal representative goes bankrupt or ceases activity before the retention period expires.
Electronic TMF (eTMF) Compliance: 21 CFR Part 11, EU Annex 11, and Audit Trails
Modern clinical trials rely almost universally on Electronic Trial Master File (eTMF) cloud platforms. Moving from paper regulatory binders to an electronic environment introduces strict computer systems validation (CSV) and data integrity requirements.
+----------------------------------------------------------------------------------------------------+
| eTMF DATA INTEGRITY & SYSTEM REQUIREMENTS |
+----------------------------------------------------------------------------------------------------+
| |
| +---------------------------+ +---------------------------+ +---------------------------+ |
| | 21 CFR PART 11 | | IMMUTABLE AUDIT TRAIL | | DIRECT INSPECTOR ACCESS | |
| +---------------------------+ +---------------------------+ +---------------------------+ |
| | * Closed system validation| | * Automated time-stamped | | * Independent read-only | |
| | * Role-based access logic | | records of create, edit,| | auditor accounts | |
| | * Dual-factor e-signatures| | view, supersede, delete | | * Exportable search index | |
| | * Authority-to-sign checks| | * System operator cannot | | * Zero-friction document | |
| | * GAMP 5 CSV protocols | | modify or disable logs | | retrieval & viewing | |
| +---------------------------+ +---------------------------+ +---------------------------+ |
| |
+----------------------------------------------------------------------------------------------------+
Core Requirements for eTMF Systems:
- System Validation (GAMP 5): eTMF software must undergo formal Installation Qualification (IQ), Operational Qualification (OQ), and Performance Qualification (PQ) to demonstrate that document upload, indexing, versioning, and archiving function reliably.
- Immutable Audit Trails: The system must generate continuous, computer-generated, time-stamped audit trails complying with 21 CFR Part 11.10(e). The audit trail must independently record:
- Who uploaded each artifact (user identity).
- Exact UTC date and timestamp of upload.
- Any modifications to metadata (e.g., document type, site association, date tags).
- Any version superseding or document replacement.
- Any attempt to delete records.
- Certified Copies: If paper source documents (e.g., physical equipment calibration certificates or paper DOA logs) are scanned into the eTMF, the organization must follow a formal SOP for creating Certified Copies. A certified copy requires verified visual and technical attribute equivalence, confirmed by an electronic signature and date.
- Direct Read-Only Inspector Access: During an FDA BIMO inspection or European Competent Authority audit, the sponsor must provide inspectors with direct, independent, read-only access to the eTMF. Expecting an inspector to sit with a company escort to view files is unacceptable; systems must allow inspectors to search, filter, and review documents independently.
CRO Oversight and TMF Ownership: Avoiding Data Liens and Inspection Traps
Many medical device companies outsource trial operations to a Contract Research Organization (CRO). However, under 21 CFR 812.43(b) and ISO 14155 Clause 9.1, the sponsor retains ultimate legal and regulatory accountability for the quality and integrity of trial data.
+----------------------------------------------------------------------------------------------------+
| CRO TMF DELEGATION & OVERSIGHT GOVERNANCE |
+----------------------------------------------------------------------------------------------------+
| |
| SPONSOR (Ultimate Regulatory Accountability) |
| | |
| +---> Formal Transfer of Regulatory Obligations (TORO / 21 CFR 812.43) |
| +---> Real-Time Sponsor Oversight SOP & Monthly TMF Completeness Audits |
| +---> Continuous Cloud-Level Sponsor Access (Preventing "Data Liens") |
| | |
| v |
| CONTRACT RESEARCH ORGANIZATION (CRO / Operational Execution) |
| | |
| +---> Contemporaneous Artifact Upload (Within 10-15 Days of Occurrence) |
| +---> Quality Control (QC) Indexing & Metadata Verification |
| +---> Periodic TMF Completeness Milestones (SIV, First Patient, Mid-Study, Close-Out) |
| |
+----------------------------------------------------------------------------------------------------+
The "Data Lien" Hazard in CRO Disputes
A recurring crisis in medical device startups occurs when commercial disputes arise between the sponsor and the CRO. If the CRO hosts the eTMF within their private proprietary instance, they may lock out the sponsor or refuse to transfer the TMF until invoices are paid.
To eliminate this vulnerability:
- Contractual Ownership Clause: Master Services Agreements (MSAs) must explicitly state that all clinical trial records, metadata, audit trails, and TMF artifacts remain the exclusive intellectual property of the sponsor at all times.
- Direct Cloud Hosting: Sponsors should contract directly with the eTMF vendor (e.g., Veeva Vault, Phlexglobal, Montrium, Florence) and grant the CRO operational administrative access. If a dispute occurs, the sponsor retains continuous custody of the underlying data.
- Contemporaneous Filing KPIs: The MSA must mandate that the CRO upload essential documents contemporaneously (e.g., within 10 to 15 business days of occurrence). Allowing a CRO to engage in "box dumping" (uploading thousands of backlogged documents months after trial completion) destroys audit trail contemporaneity and guarantees severe inspection findings.
Inspection Readiness: FDA BIMO Inspections and EU Member State Audits
When regulatory investigators arrive for an on-site inspection, the Trial Master File and Investigator Site Files are their primary targets.
+----------------------------------------------------------------------------------------------------+
| FDA BIMO INSPECTIONAL ARCHITECTURE FOR MEDICAL DEVICES |
+----------------------------------------------------------------------------------------------------+
| Inspection Program | Scope & Key Statutory Focus Areas |
+------------------------------------+---------------------------------------------------------------+
| FDA CPGM 7348.810 | Evaluates Sponsor & CRO Oversight: |
| (Sponsors, CROs, and Monitors) | * 21 CFR 812.43 Investigator agreements & qualifications |
| | * 21 CFR 812.46 Monitoring plan execution & CRA trip reports |
| | * 21 CFR 812.140(b) Sponsor shipment & disposition logs |
| | * 21 CFR Part 54 Financial disclosure collection |
| | |
| FDA CPGM 7348.811 | Evaluates Clinical Investigator Sites: |
| (Clinical Investigators) | * 21 CFR 812.140(a) Site device accountability reconciliation |
| | * 21 CFR Part 50 Informed consent documentation |
| | * Protocol deviation reporting & IRB notifications |
| | * Case history accuracy & source data verification |
+----------------------------------------------------------------------------------------------------+
What FDA BIMO Investigators Review Under CPGM 7348.810 & 7348.811:
- Device Receipt vs. Usage Math: Investigators calculate exact device reconciliation balances across every site. Any discrepancy between shipped devices, implanted devices, and returned devices results in an immediate Form FDA 483 citation.
- Timing of Investigator Agreements: Did the investigator sign the 812.43 agreement and financial disclosure before the first shipment of investigational devices was released?
- Trip Report Follow-Through: Did CRA monitoring trip reports identify site-level non-conformities (e.g., missing consent dates or uncalibrated surgical tools), and did the sponsor take active, documented corrective action?
- Audit Trail Review: In eTMF systems, investigators review audit trail metadata to determine if records were created contemporaneously or backdated immediately prior to the announced inspection.
Common TMF/ISF Deficiencies in FDA Warning Letters and Form 483s
Reviewing public FDA Warning Letters issued to medical device sponsors and clinical investigators highlights recurring failure modes in essential document governance.
+----------------------------------------------------------------------------------------------------+
| TOP 6 CLINICAL RECORDKEEPING DEFICIENCIES |
+----------------------------------------------------------------------------------------------------+
| Inspection Deficiency | Regulatory Violation | Real-World Warning Letter Scenario |
+------------------------------------+------------------------+--------------------------------------+
| 1. Incomplete Device | 21 CFR 812.140(a)(2) | Sponsor unable to account for 14 |
| Accountability Logs | & 812.140(b)(2) | investigational implants; missing |
| | | serial numbers and return manifests |
| | | |
| 2. Unqualified Operators & | 21 CFR 812.43(c) | Surgical procedures performed by sub-|
| Missing Training Records | & ISO 14155 Cl 9.2 | investigators lacking required bench |
| | | training or proctoring sign-offs |
| | | |
| 3. Signed Informed Consent | ISO 14155 Clause 7.3; | CRA uploaded original signed patient |
| Forms Stored in Sponsor TMF | HIPAA / GDPR privacy | ICFs into sponsor eTMF, breaching |
| | | subject confidentiality protocols |
| | | |
| 4. Failure to Document | 21 CFR 812.150(a)(4) | Investigator modified inclusion |
| Protocol Deviations | & 812.140(a)(4) | criteria without prior sponsor/IRB |
| | | approval; no deviation logs filed |
| | | |
| 5. Untimely / Incomplete | 21 CFR 812.46 | Monitoring reports filed 6 months |
| Monitoring Trip Reports | & FDA CPGM 7348.810 | post-visit; identified action items |
| | | left open without resolution |
| | | |
| 6. Premature Document | 21 CFR 812.140(d) | European CE-marked device trial |
| Destruction / Retention Lapse | & EU MDR Annex XV | records purged 3 years post-study, |
| | | violating 15-year implant mandate |
+----------------------------------------------------------------------------------------------------+
Frequently Asked Questions (FAQ)
What is the difference between a Trial Master File (TMF) and an Investigator Site File (ISF)?
The Trial Master File (TMF) is the comprehensive, master repository held by the trial sponsor (or CRO) capturing global trial management, design, regulatory authorizations, monitoring, data management, and governance. The Investigator Site File (ISF), also known as the Site Regulatory Binder, is the site-specific repository maintained locally by the Principal Investigator at an individual trial site. While there is substantial overlap in core documents (such as the protocol, Investigator's Brochure, and IRB approvals), the ISF uniquely holds patient-identifying source materials (original signed consent forms, subject identification logs), while the Sponsor TMF holds trial-wide oversight documentation (global monitoring plans, DSMB charters, central data extracts).
Can the sponsor hold copies of signed informed consent forms in the Sponsor TMF?
No. Under ISO 14155:2026 Clause 7.3, HIPAA privacy regulations, GDPR, and GCP standards, original signed Informed Consent Forms (ICFs) containing participant names and signatures must remain exclusively in the Investigator Site File (ISF) at the clinical site. The Sponsor TMF should contain only blank, IRB/EC-approved consent form templates, version approval letters, and de-identified consent tracking logs. Uploading signed consent forms to the Sponsor TMF represents a severe regulatory privacy violation.
How long must medical device trial records be kept under FDA regulations versus EU MDR?
Under U.S. FDA 21 CFR 812.140(d), records must be maintained for 2 years after the latter of: (1) trial completion or termination, or (2) when records are no longer needed to support a PMA, 510(k), or De Novo submission. Under EU MDR 2017/745 Annex XV Chapter III Section 3, records must be archived for at least 10 years after the investigation ends (or 10 years after the last device was placed on the market), extending to at least 15 years for implantable devices. Global device manufacturers must adhere to the stricter EU MDR standard.
Does ISO 14155:2026 Annex E require a specific file structure or eTMF vendor?
No. ISO 14155:2026 Annex E establishes the normative list of essential documents and their required availability (Sponsor, Site, or Both) across the three trial stages (Before, During, and After), but does not mandate a specific software vendor or folder taxonomy. Sponsors may organize their TMF using the CDISC TMF Reference Model (with medical device extensions) or a proprietary structural index, provided that all essential artifacts are readily retrievable and audit-ready.
What device-specific documents must be in the TMF that are not in drug trial TMFs?
Medical device TMFs require unique technical artifacts, including:
- Physical device accountability logs tracking individual serial numbers, lot codes, software firmware versions, and storage temperature logs.
- Operator surgical technique, bench-lab/cadaveric training certificates, and proctoring case logs.
- Capital equipment installation, calibration, and electrical safety certificates (IEC 60601-1).
- Explanted device retrieval, decontamination, and engineering failure analysis dossiers.
- Dual-categorized device deficiency and malfunction investigation records.
What happens to the TMF if a medical device startup goes bankrupt before the retention period expires?
Under EU MDR Annex XV Chapter III Section 3, Member States are legally required to establish national provisions ensuring that clinical investigation documentation remains available to competent authorities even if the sponsor goes bankrupt or ceases activity. In the United States, 21 CFR 812.140(e) allows custody transfer to another responsible entity with formal notification to the FDA within 10 working days. Startups should establish escrow or archiving trust agreements to guarantee repository survival.
What are the most common BIMO inspection findings related to 21 CFR 812.140 records?
The most frequent FDA BIMO inspection citations include: (1) incomplete device accountability logs with unreconciled serial or lot numbers; (2) failure to collect signed investigator agreements (812.43) or financial disclosures (Part 54) before device shipment; (3) failure to maintain contemporaneous monitoring trip reports; (4) undocumented or untimely protocol deviations; and (5) backdated or missing certified copies of essential documents.
How should device-related surgical and user training records be documented in the ISF and TMF?
Every participating surgeon or device operator must have an individualized training file in both the ISF and Sponsor TMF containing: (1) verification of current surgical credentials and medical licensing; (2) signed documentation of completing protocol and IFU training; (3) simulation, dry-lab, or wet-lab certificates (where applicable); (4) proctoring case logs signed by an authorized proctor for initial human implantations; and (5) formal delegation on the site's Delegation of Authority (DOA) log signed by the Principal Investigator.
Conclusion and Actionable Implementation Checklist
A compliant, audit-ready medical device Trial Master File is not built during a frantic pre-inspection panic—it is established through disciplined, contemporaneous operational control from the earliest planning stages of a clinical investigation.
+----------------------------------------------------------------------------------------------------+
| MEDICAL DEVICE TMF/ISF IMPLEMENTATION CHECKLIST |
+----------------------------------------------------------------------------------------------------+
| |
| [ ] 1. TMF / ISF Index Customization: Tailor repository structure to ISO 14155:2026 Annex E, |
| incorporating device-specific metadata (serial numbers, surgical training, calibrations). |
| |
| [ ] 2. Establish Privacy Firewalls: Ensure original signed ICFs and Subject Identification |
| Code Lists remain exclusively in site ISFs; verify zero PII in Sponsor TMF. |
| |
| [ ] 3. Gate Initial Device Shipments: Strictly enforce that no investigational devices are |
| shipped until 812.43 agreements, financial disclosures, and IRB approvals are filed. |
| |
| [ ] 4. Contemporaneous Accountability: Reconcile device receipts, implants, returns, and on-site |
| destructions mathematically; enforce exact zero-variance balance across all sites. |
| |
| [ ] 5. Operator Credentialing Dossiers: Complete and file all surgical technique, simulator, |
| and proctoring sign-offs prior to each surgeon's first patient enrollment. |
| |
| [ ] 6. eTMF 21 CFR Part 11 Validation: Validate system CSV, verify automated audit trail |
| capture, and establish direct read-only inspector access accounts. |
| |
| [ ] 7. Global Archiving Alignment: Apply the EU MDR 10-year / 15-year implantable retention |
| rule across all global trial archives to prevent premature document destruction. |
| |
+----------------------------------------------------------------------------------------------------+
By embedding these regulatory controls into your clinical operations infrastructure, your organization ensures regulatory inspection readiness, protects participant data integrity, and establishes the defensible clinical evidence required to achieve and maintain global market authorizations.