Talk to us about your clinical trial software project.
Tell us your trial phase, the data you need to capture, and the regulatory submission you are working toward. We'll tell you what we'd build and how.
Trial data sitting in paper CRFs across multiple sites that require manual transcription before you can even begin data cleaning?
Your current system can't produce a 21 CFR Part 11 compliant audit trail, and your regulatory submission timeline keeps slipping because of it?
Clinical trial data spread across paper case report forms, Excel files, and email threads across twelve sites is not a workflow problem. It is a regulatory risk. When data readiness is the reason an IND or NDA submission slips by months, the cost is measured in development timelines, not spreadsheet hours.
We build custom eClinical software -- EDC systems, eCRF builders, site management tools, adverse event logging, and CDISC export -- for pharma companies and CROs that need audit-ready data from the first patient visit, not after data cleaning has run for four months.
EDC system designed around your protocol with validation rules enforced at the point of data entry
eCRF builder with skip logic, cross-field validation, and multi-site access controls
Adverse event logging with automated regulatory reporting triggers and causality assessment
Full 21 CFR Part 11 audit trail with e-signatures and CDISC SDTM export for regulatory submission
Clinical trial management software captures trial data electronically through an EDC system and eCRFs, enforces protocol validation rules across sites, tracks adverse events with automated regulatory reporting triggers, and produces CDISC SDTM-format exports for regulatory submission. RaftLabs builds custom eClinical platforms for mid-size pharma companies, CROs, and biotech companies preparing for IND or NDA submission -- replacing paper CRFs and fragmented spreadsheet workflows with audit-ready, 21 CFR Part 11 compliant systems.
Paper case report forms work until they don't -- and they stop working at exactly the moment you need them to. When a study spans six or twelve sites, investigators complete paper CRFs that are couriered to a central data management team, re-keyed by data entry staff, and then cleaned through a source data verification process that consumes weeks. Transcription errors introduced in that re-keying step are the single most common cause of data quality queries. Each query extends the data cleaning timeline. Each extension delays the submission-ready database lock.
Custom eClinical software eliminates the transcription step by capturing data at the source. Investigators enter directly into structured eCRF screens with protocol-level validation rules applied in real time -- mandatory fields enforced, out-of-range values flagged, and cross-field logic checked before the record is saved. There is no courier lag, no re-keying, and no separate source data verification for transcription errors. The data that enters the system is the data that goes into the submission package.
This matters most for mid-size pharma companies running multi-site Phase II or Phase III trials, CROs managing multiple active studies that need a platform flexible enough to configure per protocol, and biotech companies approaching IND or NDA submission that need their trial data in audit-ready CDISC format rather than a cleaned-up Excel file.
The EDC system is designed around your specific protocol, not a generic study template. Data entry screens reflect the visit schedule, assessments, and data collection points defined in the protocol so investigators work through a familiar structure without having to interpret a general-purpose form. Validation rules are configured per field -- range checks, mandatory field enforcement, and data type constraints -- so out-of-protocol values are flagged at the point of entry rather than discovered during data review weeks later. Multi-site architecture gives each site its own access-controlled workspace while presenting a consolidated data view to the sponsor and data management team. Query management workflows route data queries directly to the site that entered the record, with query resolution tracked against the specific field and visit in question.
Electronic case report forms are built in a visual configuration tool that allows the data management team to assemble forms from field types -- text, numeric, date, dropdown, checkbox -- without writing code. Skip logic controls which fields and sections are visible based on prior answers so investigators are only shown fields that are applicable to the subject's status. Cross-field validation rules catch logical inconsistencies between fields before the record is saved -- a date of adverse event that falls before the subject's enrolment date, for example, is flagged immediately. Form versions are managed with change control so protocol amendments can be applied to the form without disrupting data already collected under the prior version. Completed forms are locked after site sign-off to prevent retroactive changes without an audit trail entry.
Site activation workflows track each site from contract execution through investigator credentialing, IRB approval, and the first subject enrolled. Investigator records store delegation logs, training completion status, and signature specimens so the trial master file stays current without a manual document collection exercise before each inspection. Patient enrolment by site is tracked against the site's enrolment target, with the sponsor dashboard showing actual versus planned enrolment across all sites in real time. Screen failure tracking records subjects who were screened but not enrolled, with the primary screen failure reason captured for protocol feasibility analysis. Site visit documentation -- monitoring visit reports, protocol deviation records, and corrective action tracking -- is stored against the site record and accessible to the monitor and the sponsor throughout the study.
Adverse events are captured as structured records with the event description, onset date, severity grading, and relationship to study treatment recorded against the subject. Seriousness criteria are evaluated at the time of entry -- if the event meets serious adverse event criteria based on the entered data, a regulatory reporting workflow is triggered automatically rather than relying on the investigator to recognise the reporting obligation. Causality assessment by the investigator is recorded and, where required, by the medical monitor. For expedited reports -- IND safety reports to FDA under 21 CFR 312.32, or SUSARs under EU CTR -- the system generates a structured output with the data fields required for the submission, reducing the time from event to report. Aggregate safety data is available to the safety team at any point in the study without waiting for a data cut.
Every change to every record in the system is logged with the user identity, the previous value, the new value, the date and time, and the reason for the change where the data type requires one. The audit trail is read-only and cannot be modified or deleted, satisfying the 21 CFR Part 11 requirement that records be accurate, complete, consistent, and indelible. Electronic signatures are bound to the user's authenticated identity and the specific record being signed, with a confirmation step that presents the meaning of the signature to the signer before it is applied. Signature events are logged in the audit trail like any other record change. The audit trail and signature records are exportable in a structured format for inspection review or litigation hold without requiring access to the production system.
Data collected in the EDC is mapped to CDISC Study Data Tabulation Model (SDTM) domains at the configuration stage, so the domain structure and variable names reflect the submission requirements from the first data entry rather than being retrofit at the end of the study. Pre-export data quality checks run against the CDISC conformance rules and against the study-specific Define.xml to identify non-conformance issues before the dataset package is generated. The export produces the SDTM datasets, the Define.xml, and the annotated CRF in the format required for an FDA or EMA electronic submission. If the study also requires analysis datasets in ADaM format, the derivation rules are configured against the SDTM source datasets so the statistical programming team receives a clean foundation rather than raw extracted data.
Frequently asked questions
Enterprise eClinical platforms like Medidata Rave and Veeva Vault CTMS are priced for large pharma running dozens of concurrent studies. Per-study licensing, validation package costs, and configuration fees make them difficult to justify for a mid-size company running one to three trials at a time, or for a biotech that needs a single EDC system for an IND-enabling study. Custom eClinical software makes economic sense when the recurring license cost of an enterprise platform exceeds the build cost over two to three years, when the enterprise platform's configuration model doesn't support the specific protocol requirements of your study, or when your data management team needs to own the system and the data without vendor-controlled export restrictions. We scope the build-versus-license question during discovery to make sure custom development is actually the right answer for your situation.
21 CFR Part 11 compliance is not a feature added at the end -- it is a set of architectural requirements that affect how the system stores, modifies, and signs records. The audit trail is built as an append-only log stored separately from the editable record, so it cannot be altered even by a database administrator. Electronic signatures use a two-step authentication process -- credential entry plus a confirmation of the signature's meaning -- and are cryptographically bound to the record at the time of signing. Access control enforces role-based permissions so data entry, review, approval, and export functions are segregated by user role. System account management includes audit records of account creation, modification, and deactivation. We document these controls in a system description document that supports your validation team's IQ/OQ/PQ protocol -- though formal validation sign-off is performed by your qualified validation team, not by us.
Yes. Integration is handled on a case-by-case basis depending on what your existing systems expose. If you have an EDC system in use for other studies, we can build a data bridge that imports reference data -- subject lists, site records, investigator credentials -- so the new platform starts with data already in use rather than requiring a full re-entry. For ERP integration -- SAP, Oracle, or similar -- the typical integration points are drug supply management (investigational product shipment records against enrolment and dispensing data) and investigator payment reconciliation against site activity records. Most enterprise systems offer an API or a structured file exchange option. We assess the integration architecture during discovery and scope it as a defined component of the project.
A focused EDC and eCRF build for a single protocol -- covering data capture, audit trail, site access controls, and basic reporting -- typically runs $50,000 to $90,000 and delivers in 14 to 20 weeks. A full eClinical platform that adds CTMS features (site management, enrolment tracking, investigator management), integrated adverse event logging with regulatory reporting workflows, and CDISC SDTM export is more complex and typically runs $90,000 to $180,000 depending on protocol complexity and the number of integrations required. Cost is fixed before development starts. We scope each project individually because the protocol, the number of sites, the data complexity, and the regulatory submission target all affect what needs to be built.
What clients say
Three-year average engagement. Founders and operators describing the work in their own words. No marketing varnish.

All of the sprints were completed on schedule and on budget. We highly recommend RaftLabs!
01 / 02
Tell us your trial phase, the data you need to capture, and the regulatory submission you are working toward. We'll tell you what we'd build and how.