Laboratory operations are subject to multiple standards covering testing capability certification, electronic records management, data integrity, and analytical method verification. These standards ensure the reliability of test results, support regulatory audit response, and provide evidence of testing capability to customers.
ISO 17025:2017 -- General Requirements for the Competence of Testing and Calibration Laboratories
Why does this standard matter?
ISO 17025 is the standard for gaining international recognition of a laboratory's technical competence. ISO 17025 certification is a core qualification for accredited testing laboratory recognition (such as KOLAS), ensuring reliability of test certificates for customer deliveries, and responding to overseas trading partner laboratory audits. Without this certification, the legal validity of test certificates may be limited.
How is it applied in VEXPLOR?
| ISO 17025 Clause | What It Means for Your Operations | VEXPLOR Approach |
|---|
| 6.2 Personnel Competence | Qualifications, training, and competency assessments of test personnel must be documented | Training record management (4 training types, certifications, expiry dates) |
| 6.3 Facilities/Environmental Conditions | Laboratory environment (temperature, humidity, etc.) must be monitored and deviations managed | Environmental monitoring (5 types, IoT auto-collection, deviation workflows) |
| 6.4 Equipment | Equipment calibration, maintenance, and usage history must be managed | Equipment calibration (scheduled/unscheduled/initial), calibration certificates, automatic usage logging |
| 6.5 Metrological Traceability | Traceability of reference materials and calibration standards must be maintained | Reference standard (CRM/certified reference material) management, usage and traceability records |
| 7.1 Request Review | The appropriateness of test requests must be reviewed and acceptance determined | Test request receipt/review workflow (request → receipt → in progress → complete) |
| 7.2 Method Selection/Verification | Test methods must be selected and validated before application | Test method management + ICH Q2-based 10-type validation |
| 7.4 Sample Handling | Samples must be tracked from receipt through transfer, storage, to disposal | Chain of Custody (transfer/receipt/purpose/status) + storage location (hierarchical structure) |
| 7.5 Technical Records | Experimental records and raw data must be preserved | Electronic Laboratory Notebook (ELN, PKI electronic signature) + automatic instrument raw data capture |
| 7.6 Measurement Uncertainty | Measurement uncertainty must be evaluated and reported with test results | GUM-based Type A/B/Combined/Expanded, coverage factor (k), confidence level |
| 7.7 Result Validity | Test result validity must be verified through proficiency testing, etc. | z-score, En number, corrective action linkage |
| 7.8 Reporting Results | CoA (Certificate of Analysis) must be issued accurately | Automatic CoA generation + 4 document templates (CoA, Test Report, Calibration Certificate, CoC) |
| 8.5 Corrective Actions | Corrective actions must be taken when nonconformities are found | OOS workflow → automatic QMS CAPA linkage (EMIT_EVENT-based) |
| 8.7 Internal Audits | The appropriateness of laboratory operations must be regularly verified | Audit finding management (5 audit types), corrective action workflows |
FDA 21 CFR Part 11 -- Electronic Records and Electronic Signatures
Why does this standard matter?
This is a mandatory regulation when managing test data electronically for FDA-regulated products (pharmaceuticals, cosmetics, food, medical devices). Failure to comply may result in electronic records being rejected during audits. This is an essential requirement for quality data management of products exported to the United States.
How is it applied in VEXPLOR?
| 21 CFR Part 11 Section | What It Means for Your Operations | VEXPLOR Approach |
|---|
| Section 11.10(a) System Validation | The system must be verified to operate accurately | IQ/OQ/PQ verification status management per instrument interface |
| Section 11.10(b) Accurate Copies | Accurate and complete copies of electronic records must be producible | FILE version control (versioningEnabled), document templates |
| Section 11.10(c) Record Protection | Records must be protected against unauthorized modification | ELN locking (is_locked), post-approval modification prevention |
| Section 11.10(d) Access Restriction | Only authorized personnel may access the system | Multi-tenant (tenant_id) isolation, user account-based access control |
| Section 11.10(e) Audit Trail | Creation, modification, and deletion history of data must be recorded | audit_trail (JSON), automatic author/modifier recording |
| Section 11.50/70 Electronic Signatures | Electronic signatures must identify the signer and be linked to records | ELN electronic signatures (e_signature JSON) + record locking linkage |
| Section 11.100/200 Digital Signatures | The electronic signature system must have legal validity | PKI X.509 certificate-based digital signatures |
EU Annex 11 -- Computerised Systems
Why does this standard matter?
Companies exporting pharmaceuticals or cosmetics to Europe must comply with Annex 11, the EU GMP requirement for computerized systems. While similar in purpose to FDA 21 CFR Part 11, it includes additional requirements tailored to the European regulatory environment.
How is it applied in VEXPLOR?
| EU Annex 11 Clause | What It Means for Your Operations | VEXPLOR Approach |
|---|
| cl.1 Risk Management | Risks of computerized systems must be assessed | Workflow-based risk branching (OOS, environmental deviations) |
| cl.4 Validation | Computer systems must be verified to operate as intended | IQ/OQ/PQ verification status management |
| cl.7 Data Storage | Data integrity must be guaranteed | Audit trails, locking features, electronic signatures |
| cl.9 Audit Trail | Data change history must be recorded | audit_trail JSON, automatic author/modifier recording |
| cl.12 Security | Access control and authorization management must be in place | User accounts, approval workflows, multi-level approval |
| cl.14 Electronic Signatures | Electronic signatures must have legal validity | PKI-based X.509 digital signatures |
ASTM E1578 -- Standard Guide for LIMS
Why does this standard matter?
ASTM E1578 defines the functional requirements that a LIMS system should possess. It serves as a reference standard when evaluating LIMS adoption or assessing existing systems. It is used to verify that laboratory workflows (sample management, test management, instrument integration, reporting, etc.) are systematically implemented.
How is it applied in VEXPLOR?
| ASTM E1578 Area | What It Means for Your Operations | VEXPLOR Approach |
|---|
| Sample Management | Samples must be registered, tracked, and stored systematically | Sample registration + Chain of Custody + storage location (hierarchical structure) |
| Test Management | Test methods, specifications, and results must be connected and managed | Test methods + specifications (USL/LSL/Target) + results + automatic pass/fail determination |
| Instrument Integration | Analytical instrument data must be automatically captured | 8 instrument type interfaces + automatic raw data capture |
| Reporting | CoA and test reports must be systematically issued | 4 document templates, FILE version control |
| Workflows | Business processes must be automated | 9 workflows (101 nodes) |
| Auditing | Audit trails and electronic signatures must be implemented | ELN + PKI + audit_trail |
ICH Q1A/Q1B -- Stability Testing
Why does this standard matter?
Stability testing is essential for establishing shelf life and confirming quality changes under storage conditions for pharmaceuticals and cosmetics. Stability testing data must be submitted with regulatory applications to FDA, MFDS, and other regulatory agencies.
How is it applied in VEXPLOR?
Stability testing is managed with 4 storage conditions (long-term, accelerated, stress, photostability) and 9 test time points. Forced degradation testing (acid degradation, base degradation, oxidative degradation, photolysis, thermal degradation, metal-catalyzed degradation) is also supported, addressing stability testing requirements in the pharmaceutical and cosmetics sectors.
ICH Q2(R1) -- Analytical Method Validation
Why does this standard matter?
Verifying that test methods operate accurately and reproducibly is fundamental to ensuring test result reliability. Regulatory agencies such as FDA and EMA require ICH Q2(R1) validation results for new or modified analytical methods.
How is it applied in VEXPLOR?
Protocols and results are managed for 10 validation types: accuracy, precision, specificity, linearity, range, LOD (limit of detection), LOQ (limit of quantitation), robustness, reproducibility, and repeatability. After validation completion, reports can be attached as FILE for regulatory submissions.