Services · Data Integrity

Data Integrity: DI GAP Assessment from a Single Source

We work through our DI GAP Assessment questionnaire together with manufacturers and customers – refined over ten years and proven in audits. Remote or on-site, nationally and internationally. Experienced IT experts assess systems, processes and use in regulated environments against ALCOA+, Annex 11 and 21 CFR Part 11.

Our Data Integrity Service Portfolio

Many consultants deliver slides. We deliver a robust GAP assessment: from the public quick check through the full questionnaire to technical implementation and lifecycle support – for pharma operators and instrument manufacturers alike.

Entry point

Data Integrity Check

8 questions

The public quick check identifies initial action areas in eight questions covering audit trails, access rights, raw data and laboratory instruments – no registration required, as orientation before the deeper assessment.

Outcome: maturity assessment and prioritised first actions

  • ALCOA+-oriented questions on system and process
  • Instant evaluation in the browser
  • Direct path to the full GAP assessment
Start the Data Integrity Check ›

Core service

DI GAP Assessment with 10-Year Questionnaire

GAP assessment

Together with your team – and for manufacturers with product management and support – we work through the full questionnaire we have refined over ten years in projects, audits and supplier evaluations. Remote via workshop or on-site in the laboratory, in production or at the manufacturer.

Outcome: risk-based GAP assessment with location, ALCOA+ reference and priority per finding

  • System inventory with criticality assessment
  • Interviews, configuration review and process observation
  • Gap list per ALCOA+/ALCOA++ principle with evidence
Book a GAP assessment ›

Analysis

Gap Analysis & Risk Assessment

Part 11 · Annex 11

We assess electronic and paper-based processes against 21 CFR Part 11, EU GMP Annex 11 and PIC/S PI 041. Data integrity is rarely software alone – we review configuration, privileges, SOPs and the way people actually work.

Outcome: prioritised action plan with effort, owner and target date

  • Technical, procedural and organisational gaps separated
  • Risk assessment per system and process step
  • Alignment with QA and subject matter experts

Implementation

Remediation & Technical Solutions

IT administration

Our experienced IT specialists implement what has a measurable effect: audit trail configuration, role and privilege concepts, blocks against local intermediate storage, hardened system settings and controlled data handovers – in a validated environment.

Outcome: implemented measures with configuration evidence and test protocol

  • Part 11/Annex 11-compliant system hardening
  • Secure interfaces and archiving
  • Linked to CSV and qualification
View IT administration ›

Documentation

SOPs & Validation Documents

Audit-ready

We produce SOPs, validation documents and test cases that anchor requirements for the long term – worded verifiably so that statement and practice match in an audit.

Outcome: release-ready SOP drafts and test evidence

  • Role-based work instructions
  • Audit trail review procedures
  • Change control documentation

People

Training & Awareness

Enablement

Laboratory, production, IT and QA receive role-based training: ALCOA+ principles, typical everyday mistakes and escalation routes for anomalies – remote or on-site.

Outcome: training material with participant evidence

  • Practical examples from your system context
  • Manufacturer training for DI-ready product concepts
  • Refresher sessions before inspections

Operations

Lifecycle & Inspection Readiness

Ongoing

After the assessment, work continues: change control, periodic review, recurring audit trail reviews and preparation for FDA/EMA inspections – so the DI status does not erode.

Outcome: sustainable DI status with documented reviews

  • Periodic review and re-assessment
  • Mock audit and finding preparation
  • Optional: external Validation Manager

What sets us apart: The questionnaire is not a download product but a living tool – sharpened in every project. You work with IT experts who assess regulated systems and also configure and validate them.

Plan your GAP assessment – remote or on-site?

Request initial consultation

DI guide

Who needs Data Integrity support?

Choose your role or starting point. You receive the right entry route – including references and contact path.

GxP operator: assess systems and processes

GAP assessment for LIMS, CDS, MES, laboratory IT and paper-near processes – with an action plan that holds up in an audit.

Data integrity from a single source means one questionnaire, one team, one action plan – from the first gap to inspection readiness. No consultant handover between analysis, IT implementation and validation.

Reference: DI gap assessment on a validated GxP software landscape. Read the case story

Remote, on-site, international

You decide how we collaborate – the questionnaire and methodology remain equally robust.

Remote

Workshop & screen share

Questionnaire walkthrough, configuration review and interviews via video conference – efficient for distributed teams and initial gap reviews.

On-site

In the lab & at manufacturers

On-site visits in production, QC or at the instrument manufacturer: process observation, system demos and alignment with QA on location.

International

Across borders

Projects in DACH and internationally – in English and German, with experienced IT consultants who know regulated environments.

Our DI GAP Assessment questionnaire: refined over ten years in audits, supplier evaluations and CSV projects. We work through it with you line by line – with location, risk and a concrete measure. This is our core product, not an appendix to a consulting contract.

Six service areas – one DI programme

Data integrity touches QA, IT, validation and supplier management. That is why we involve all six cube one GmbH areas – without media breaks.

Area 1

Data Integrity consulting

DI GAP assessment, questionnaire, remediation – the core of this page.

View services above ›
Area 3

Software validation (CSV)

System validation after GAP assessment and action plan.

View CSV ›
GxP

Data Integrity Check & GAP Assessment

Start with our public Data Integrity Check: eight questions identify initial action areas. For a robust evaluation, we work through the full questionnaire developed over ten years with you – remote or on-site.

Start the Data Integrity Check

What Is Data Integrity and Why Is It Critical?

Data integrity is an inspection topic in its own right. The FDA and EU authorities examine whether data is attributable, recorded contemporaneously, traceable when changed and available over the retention period. Findings regularly lead to warning letters and measures up to the suspension of releases.

The scope runs from electronic and paper-based capture through processing to archiving. We map cyber and IT security requirements in the Regulatory Expertise Center.

Data integrity is rarely a software problem alone. Gaps sit between system configuration, privileges, SOP and the way people actually work. Our questionnaire covers all four levels – which is why it works for operators and manufacturers alike.

ALCOA, ALCOA+ and ALCOA++ in Detail

The FDA guidance describes ALCOA; MHRA, WHO and PIC/S use ALCOA+. We explain all ten attributes under ALCOA, ALCOA+ and ALCOA++.

Attributable
Who created or modified the data?
Legible
Data must remain permanently readable and understandable.
Contemporaneous
Data is recorded at the time the activity is performed.
Original
First capture or a certified true copy.
Accurate
Data must be error-free and complete.
Complete, Consistent, Enduring, Available
Complete, consistent, durable and accessible at all times.
Traceable
History, changes and location can be reconstructed.

For Laboratory Instrument Manufacturers

We support manufacturers and suppliers with DI-ready system design, audit trail and user concepts, technical documentation and secure interfaces – for supplier audits and GxP qualification at the customer. We work through the same questionnaire together: your product becomes auditable, your customers qualify faster.

After the assessment: stay compliant

A GAP assessment is the start – not the goal. Two pillars keep data integrity alive in operations.

Lifecycle management

  • Change control for system and process changes
  • Periodic review and re-assessment
  • Recurring audit trail reviews

Inspection readiness

  • Mock audit and finding preparation
  • Evidence chain for FDA and EU inspectors
  • Remediation after Form 483 or warning letter
Regulatory framework: Part 11, Annex 11, PIC/S and GAMP 5

Data integrity programmes rely on the rules that define requirements for records, systems and processes:

FAQ on Data Integrity

What is the DI GAP assessment and the 10-year questionnaire?
Our structured questionnaire maps ALCOA+, Annex 11, Part 11 and PIC/S PI 041 into auditable questions. Refined over ten years in projects, we work through it with operators or manufacturers – remote or on-site. The outcome is a risk-based GAP assessment with prioritised actions.
Do you work internationally?
Yes. We support customers in Germany, DACH and internationally – remote via workshop or with on-site visits at sites and manufacturers. Our consultants work in English and German.
Who conducts the assessments?
Experienced IT specialists with a background in regulated environments: they review configuration and processes, understand audit trail logic, role models and practical use in laboratory and production – not just theory.
What does data integrity mean in GxP environments?
Completeness, consistency and accuracy of data across the entire lifecycle – from capture to archiving. In GxP it is a regulatory requirement and an inspection topic in its own right.
Which regulations are relevant?
The governing documents are FDA 21 CFR Part 11, EU GMP Annex 11, PIC/S PI 041 and GAMP 5. More detail under ALCOA+ and CSA.
What is an audit trail and why is it important?
A chronological, non-overwritable record of all GxP-relevant actions. Annex 11 requires it for critical systems and a regular review of entries.
Does data integrity also apply to paper?
Yes. ALCOA+ applies to electronic and paper-based data alike. Illegible or retrospective entries are findings just like missing audit trails.

Data integrity reference projects

Gap assessments, archiving and validated records in practice.

Start your DI GAP assessment

Remote or on-site, for operators and manufacturers: talk to us about your questionnaire walkthrough and next steps.

Request GAP assessment