When compliance is fine and the numbers still slip
Plenty of sites are compliant and still slow. Batches sit waiting for release, the product quality review lands three months late, the internal audit schedule quietly stops being a schedule. None of that is a finding yet. All of it costs money now, and each one is the early signal of the finding that arrives later.
Each item below is a metric your site probably already reports. If any one of them is trending the wrong way, that is the conversation to start with.
We work on the process that produces the number, not on the report that presents it
Quality metrics are usually treated as reporting. They are better used as instruments: each one tells you where the process is binding, and most of them can be improved without adding headcount.
Batch release is slow
Disposition waiting on documentation review, open deviations, unreconciled data or a single QP as the bottleneck. We map the release path end to end, find where batches actually wait, and rebuild review so that low-risk batches move without weakening the decision on the ones that matter.
Discuss this metricProduct quality reviews are late, or arrive too late to be useful
A PQR compiled six months after period close is a filing exercise. We restructure data collection so the review assembles continuously, arrives on schedule, and produces actions the site is willing to fund, which is the outcome Chapter 1 actually asks for.
Discuss this metricThe audit programme has stopped running to schedule
Internal audits deferred, supplier audits rolled forward another year, a self-inspection plan that exists on paper. We rebuild the programme on risk-based frequency, resource it realistically, and where capacity is the true constraint, run the audits with you.
Discuss this metricDeviations and CAPAs take too long to close
Cycle time is the metric inspectors read as a proxy for whether your quality system is under control. We triage the backlog by exposure, shorten the investigation path, and set closure criteria that can actually be met.
Discuss this metricNew product introductions stall at the quality gate
Documentation, validation strategy, specification setting and release path prepared in parallel with development instead of after it. The aim is a first commercial batch that does not spend its first month in quarantine.
Discuss this metricSite or CMO transfers run over time
Transfer protocols, comparability strategy, validation bridging and the quality agreement that governs it. Most transfer delays are quality-document delays, and those are the ones that can be prepared in advance.
Discuss this metricSupplier qualification is behind, or exists only on paper
Qualification status that has drifted, questionnaires nobody assessed, quality agreements out of date or missing, and re-qualification dates that have quietly passed. We rebuild the programme on risk-based tiering, so the suppliers who can actually hurt you get the scrutiny and the rest stop consuming days they do not deserve.
Discuss this metricChange control is either a bottleneck or a formality
It fails in two directions. Either everything queues behind one committee and the business learns to route around it, or changes pass on a signature with no real impact assessment. We rebuild it as a risk-tiered process: minor changes move quickly, significant ones get proper assessment covering validation, regulatory and dossier impact.
Discuss this metricManagement review produces minutes, not decisions
We prepare and chair the review as a decision meeting: a single evidence pack of the metrics on this page, a short list of choices that need funding or headcount, and tracked actions that are reported back at the next one. Chapter 1 and ICH Q10 both expect the outcome, not the meeting.
Discuss this metricThe capability of a quality department, at the fraction of it you actually need
Most small and mid-size sites face the same gap: the work needs a validation specialist, a data integrity reviewer, an auditor and a QP-level reviewer, but not one of them for a full week. Hiring is too much, and a series of one-off projects leaves nobody holding continuity.
Compliance as a Service is a retained arrangement: an agreed number of days per month, drawn from a group of consultants rather than a single person, with one named lead who knows your site and stays constant. You get the specialist the month needs, and the same person in the room every month.
Retained
A fixed monthly allocation of days, agreed in advance and used flexibly.
Multi-skill
Validation, data integrity, auditing, QMS and sterile expertise from one arrangement.
One lead
A named consultant who carries the site knowledge across every engagement.
Exitable
Notice-period exit. No multi-year lock-in and no minimum term beyond the first quarter.
Standing support for the quality system as it runs: reviewing and approving change controls and investigations, chairing management review, keeping the audit programme on schedule, preparing the PQR, maintaining inspection readiness between inspections, and being reachable when something breaks on a Thursday afternoon. Where a Qualified Person release decision is required, that decision stays with your QP.
Bring us one metric, not a strategy
Tell us your current release cycle time, or how late the last PQR was, or how many audits on this year's plan have actually happened. One number is enough to have a useful first conversation.
Send us the number that is worst
No preparation, no strategy document. The single metric that is trending the wrong way is enough to scope a first conversation.
Start with one metricOr the whole systemScore all seven domains first
Twenty questions across the quality system, weighted, with the two weakest areas named. Runs in your browser and submits nothing.
Score the whole systemAsk what a retained month looks like
An agreed number of days, one named lead, and the specialist the month actually needs. Compare it against what carrying the same capability in-house costs you.