300+ monitored units, one validated record,
zero units lost to unexplained excursions.
How a clinical-stage pharmaceutical company brought its drug substance freezers, LN2 storage, 2–8 °C refrigerators, and stability chambers under one validated, 21 CFR Part 11–ready monitoring architecture.
A lower-cost logger is only lower cost until the record has to hold up.
Before Qualified Controls, BridgeBio monitored its research labs and GMP storage on an Elemental Machines deployment supplemented by equipment-native recorders. The system had been selected on price and speed of setup, and for general-purpose lab visibility that trade-off is a reasonable one. BridgeBio's storage profile is not general purpose. Drug substance and product at −80 °C, cell material in vapor-phase liquid nitrogen, formulated product at 2–8 °C, and clinical samples held on stability programs — regulated material that cannot be reworked if it leaves specification, only discarded.
Over time the QA and facilities teams found the gap was structural rather than a matter of tuning. The loggers in service were not specified for ultra-low and cryogenic duty, the audit trail had breaks in it, no validation package was available to place the system under GMP change control, and the sensors carried no serial identity — so calibration history and instrument traceability had to be maintained by hand for every external audit. Each of those is manageable in isolation. Together they meant that a questioned unit took a day of cross-referencing to resolve, and that the resulting narrative rested on whoever assembled it.
The point was made concrete on a weekend when a staff member left an ultra-low freezer door ajar. The condition ran unescalated, and reconstructing what had happened — and defending it afterward — consumed far more staff time than the excursion itself. Cumulatively, rework hours and supplementary equipment purchases had already exceeded what the savings on the original system were worth.
In a clinical program, the loss is rarely the equipment. It is the interval nobody was watching.
Every lot BridgeBio holds has a storage window written into a specification, and each one fails in its own way. These are four failure modes that drive disposition decisions in clinical-stage pharma —
none of them announce themselves at the moment they begin.
Drug substance and clinical material cannot be remanufactured on demand. The recovery window between compressor failure and product loss is a matter of hours, and it opens when the building is empty. An audible alarm in an unoccupied corridor is not a control.
A 2–8 °C refrigerator with a door out of seal keeps compressing and keeps reporting a temperature in range, until it does not. The excursion is visible in the trend long before it is visible on the display. Temperature alone cannot distinguish a busy access window from a fault.
Stability chambers run for months at a defined temperature and humidity. A slow drift that no one is watching does not spoil one sample — it puts the entire time-point in question, and the study cannot be repeated on the original timeline.
Liquid nitrogen consumption changes with lid cycling, ambient load, and tank age, so a fixed fill schedule is an assumption rather than a control. The same event that puts cell material at risk displaces oxygen in the room, which makes it a staff safety matter as well as a product one.
For each of these, how quickly could you establish when the excursion began — and prove who was notified?
Every failure mode above is answered by a measurement, not a procedure.
Monitoring only prevents loss when the parameter that actually fails is the one being recorded. Qualified Controls specified the sensing layer around those four failure modes — not around a list of equipment.
A procedure depends on a person noticing. A measurement records whether they did — and either outcome is defensible only if the record already existed when the question was asked.
A network or power interruption does not silence the system: readings buffer on the sensor and reconcile on reconnection, while independent uplinks carry the alarm out of the building. Off-hours escalation routes to on-call staff by role, with acknowledgement captured under electronic signature.
A door open past its threshold escalates on its own path, separate from a temperature excursion, so a busy access window never reads the same as a failed seal. Escalation is shift-aware and reaches the person on the floor rather than a distribution list.
Both parameters are evaluated on the same record with tiered thresholds, so a slow drift raises a tiered alarm and writes a timestamped interval to the audit trail long before a time-point is compromised.
Fill scheduling moves from a calendar assumption to an observed consumption rate, and the oxygen reading in the same repository gives facilities and safety one shared source. One record answers the product question and the personnel question at once.
One sensing layer. One record. Every equipment class.
Qualified Controls surveyed every zone across BridgeBio's sites, mapped each critical parameter to its governing specification, and designed a single Nano SPY sensing layer reporting into one validated MySirius account. Wireless range meant no new cabling in occupied laboratory and GMP storage space, and the legacy loggers were retired only after the parallel run closed.
Every unit records on a 15-minute interval with alarm evaluation every 5 minutes — humidity at 30, the most critical assets every minute.
Every monitored zone has redundant gateway coverage on independent uplinks; on-sensor buffering retains data through a network or power interruption.
Role-based routing with duration thresholds and shift-aware on-call chains — replacing the per-device audible alarms on every equipment class.
An ALCOA+ aligned audit trail, with electronic signatures on every acknowledgement and corrective action.
Qualified on paper before it was relied on in practice.
Qualified Controls authored and executed the full validation package. Every sensor was calibrated against NIST-traceable standards, mapped to its asset, and signed off before the legacy loggers were removed.
Units taken out of service remain in documented maintenance mode.
Every change of state is captured in the audit trail with an attributed electronic signature.
“We replaced our previous 'top-tier monitoring system with Qualified Controls as the previous system failed us, costing us countless hours of rework. We've been very impressed with the REM solution and I've recommended it to others.”
What is in service across the network.
Single-channel temperature recorder. Deployed across freezers, refrigerators, walk-ins, and cold rooms network-wide.
Combined temperature and humidity recorder. Covers ambient rooms, incubators, and fume hoods where humidity is a controlled parameter.
External-probe recorder for 4–20 mA, 0–1 V, and dry-contact inputs — LN2 level, O₂ monitors, CO₂, and door opening.
Digital recorder paired with Evolution low-temperature probes — every ultra-low freezer and LN2 tank in the estate.
Are all of your critical parameters being captured continuously?
The REM Risk Assessment is a six-minute online self-assessment that identifies gaps between what your specifications require and what your current system records.