Products

STREAM: GxP-Compliant Data Migration for the Pharmaceutical Industry

STREAM migrates GxP-relevant data verifiably: a SHA-256 hash value is calculated and compared for every file before and after transfer, and every step is recorded in the audit trail. The result is a migration report with which you can evidence a complete and unchanged transfer under EU GMP Annex 11 and 21 CFR Part 11.

In-house development by cube one GmbH

STREAM at a Glance

In a few minutes the teaser shows the course of a data migration with STREAM: analysis of the source system, SHA-256-secured transfer, audit-ready migration report.

Video: STREAM: GxP-compliant data migration

Data Migration in a GxP Environment: The Regulatory Requirement

In a regulated environment a system migration is not purely an IT project. EU GMP Annex 11 requires evidence that the value and meaning of the data were not altered during migration. That applies to measured values as much as to metadata, release records and audit trail entries.

The evidence decides, not the impression. Comparing file counts proves nothing about integrity, because a corrupted file counts the same as an intact one. STREAM therefore relies on a cryptographic comparison per file.

STREAM calculates a SHA-256 hash value before the transfer and again afterwards. If a value differs, the process stops with an error and the record stays on the deviation list. Data integrity under ALCOA+ is therefore evidenced, not asserted.

STREAM: Key Features

SHA-256 Checksums
A hash value per file before and after transfer, with automatic comparison. Deviations stop the process and are logged.
Full Audit Trail
A record of every migration step with timestamp, source, target and executing account, reviewable under Annex 11 and 21 CFR Part 11.
ALCOA+ Compliance
Metadata, timestamps and authorship information travel with the data. Attributability is preserved after migration.
Validation Documentation
Migration report with scope, test result per record and deviation list, usable as an annex to your validation report.

Use Cases for STREAM

System Replacement and System Migration

When a LIMS, ERP or DMS is retired, its historical data remains subject to retention, often for more than ten years. STREAM transfers it with a checksum and produces the evidence that the retirement documentation of the legacy system requires.

Data Centralisation

Consolidating stores from several source systems creates field conflicts and duplicate records. STREAM logs, per record, which source it came from and how it was mapped.

Cloud Migration in a GxP Environment

Moving to the cloud adds questions of storage location, responsibility and access. STREAM supplies the technical integrity evidence for the transfer; the contractual side is covered by supplier qualification.

Scope of Delivery and Operation

STREAM comes as a supported migration package. You receive:

  • Analysis of source and target system with data model and field mapping
  • Migration plan with scope, sequence, rollback and release criteria
  • Test migration on a representative subset of the data
  • Production migration with a hash comparison per file and a deviation list
  • Migration report as an annex to your validation documentation
  • Validation documentation for STREAM itself, including IQ and OQ

The accompanying test strategy follows the same approach as in computerised system validation.

Regulatory Framework

Data migration is governed by the requirements for computerised systems and for data integrity at the same time.

  • EU GMP Annex 11: requires evidence that migration did not alter the value or meaning of the data.
  • 21 CFR Part 11: requires accurate and complete copies of electronic records and their readability throughout the retention period.
  • PIC/S PI 041 and the ALCOA+ principles: provide the criteria by which inspectors assess the completeness and attributability of migrated data.

We describe the underlying subject matter under Data Integrity and Computer System Validation (CSV).

STREAM FAQ

Why is GxP-compliant data migration so important?
Migrated data remains subject to retention and must stay readable and reconstructable throughout the period. Without evidence of an unchanged transfer, the entire data set in the target system is open to challenge, no matter how well the new system is validated.
How does STREAM ensure data integrity?
STREAM calculates a SHA-256 hash value per file before the transfer, repeats the calculation in the target system and compares both values. On a deviation the process stops and the record appears on the deviation list. Every step is in the audit trail.
Must STREAM itself be validated?
Yes. STREAM produces evidence about GxP data and is therefore a computerised system under Annex 11. We supply the validation documentation including IQ and OQ so that you can attach it to your project documentation.
For which system types is STREAM suitable?
STREAM migrates data between LIMS, ERP, DMS and instrument data management systems, and between file-based stores such as network drives and archive systems. Source and target connections are assessed before the project starts.

Next Step: STREAM Demo

Tell us your source system, target system and approximate data volume. We show the hash comparison and the migration report on an example.