Pharma and life sciences · Playbook 51

Clinical trial site feasibility and documents

Sites chosen on evidence: feasibility answers read and compared in days, past performance alongside, and the trial master file checked every day, not just before an inspection. The sponsor decides, and no patient-identifiable data leaves controlled environments.

  • Document AI
  • Retrieval (RAG)
  • Human in the loop
  • UK clinical trials regulations (2026)
  • ICH E6(R3) GCP
  • MHRA
  • HRA
  • UK GDPR

At a glance

The problem
Feasibility answers arrive in every format, sites are picked from memory, and the trial master file is checked by hand before inspections
Typical volume
Around 12 active trials, 300 feasibility questionnaires a year, and a trial master file of tens of thousands of documents per trial
Who's involved
Clinical operations, feasibility, study managers, TMF and document management, QA, data protection, the sites
Pilot
8–10 weeks on one study, after a 3–4 week discovery
Platforms
AWS, Azure, or a sovereign or on-prem stack

An illustrative scenario. The numbers are typical examples, not a client case study. The cloud services and UK rules were checked on 9 November 2026.

The business problem

Choosing sites starts with a feasibility questionnaire sent to dozens of NHS and private sites. The answers come back as PDFs, spreadsheets, portal exports and emails. Someone reads each one, compares it with the protocol's eligibility criteria and required procedures, looks up how the site did on earlier studies, and builds a shortlist. Under time pressure, relationships and memory count for more than evidence. Sites that over-promise get picked, and a share of opened sites recruit few patients or none.

Set-up time is now under national scrutiny. The government reported in April 2026 that average set-up for commercial interventional trials had fallen from 169 to 122 days against a 150-day commitment, and combined MHRA and ethics review averages around 41 days. With approvals faster, feasibility and site paperwork are more often what holds a study back.

Then come the documents. Every site needs its essential records in the trial master file (TMF): CVs, GCP training, delegation logs, approvals, agreements, and the right version of every protocol and participant document after each modification. Under the amended regulations, in force since 28 April 2026, the TMF for a new trial has to be readily available for inspection and kept for at least 25 years. In many teams completeness is still checked by hand, often in the weeks before an inspection.

What AI changes

  • Feasibility answers are read and turned into a structured comparison, whatever format they arrive in, with every answer linked to the page it came from.
  • Each site's answers sit beside its own past performance on the sponsor's earlier studies: recruitment against its estimate, set-up time, data query rates and protocol deviations.
  • Estimates far above a site's own track record are flagged, so over-promising is discussed before selection, not discovered at month six.
  • Eligibility fit uses aggregate counts of potentially eligible patients, produced by the site or an NHS secure data environment. Patient records never leave those environments.
  • The TMF is checked every day against the expected document list for each site and country. Missing, expired or wrong-version documents go to their owner straight away.
  • When a protocol modification is approved, every site document that needs updating is listed and tracked. The study team selects sites and the sponsor stays responsible; the AI never selects a site or contacts one.

How success is measured

Agree these, and measure the baseline, before anything is built. Example targets are typical, not promises.

Time to a site shortlist

From the last feasibility response to a shortlist the study team can discuss.

ExampleFrom 6 weeks to 2

Recruitment against estimate

How closely selected sites recruit against what they said they would.

ExampleThe gap narrowing study on study

Non-recruiting sites

Share of opened sites that recruit nobody.

ExampleDown, measured against past studies

TMF completeness and timeliness

Share of expected documents present, current and filed within the agreed time.

ExampleAbove 95%, checked continuously

Filing correction rate

How often TMF staff change the AI's suggested filing. Very high means it isn't helping; near zero can mean nobody is checking.

ExampleStable, and sampled weekly

TMF findings in internal audits

Findings about missing, late or misfiled essential records.

ExampleFalling, audit on audit

UK regulation and controls

Cross-sector rules are on the UK regulation map.

  • MHRA and HRAMedicines for Human Use (Clinical Trials) (Amendment) Regulations 2025, in force 28 April 2026

    Combined MHRA and ethics review, a notifiable route for lower-risk trials, Route B for eligible substantial modifications, and for the first time legal duties to register trials and publish a results summary within 12 months of the end of the trial. The sponsor classifies each modification. The AI can list what a modification touches, but a person decides its category and route.

  • MHRAICH E6(R3) Good Clinical Practice, implemented in the UK on 28 April 2026

    The sponsor stays responsible for work it transfers to service providers, and must select investigators and sites that are qualified and adequately resourced. Quality management is risk-proportionate. Computerised systems must be fit for purpose, validated in proportion to risk, and keep audit trails. Feasibility scoring and TMF checks are such systems.

  • MHRAArchiving and retention of clinical trial records (updated 28 April 2026)

    For trials applied for from 28 April 2026, the TMF is kept for at least 25 years after the trial ends and must be readily available for inspection. A person confirms every filing the AI suggests, originals or certified copies stay the record, and any migration is validated and documented.

  • HRAConfidentiality Advisory Group (section 251) and the national data opt-out

    Feasibility uses aggregate counts, produced inside the site or an NHS secure data environment. If anyone outside the care team needs identifiable records without consent, that needs section 251 support through the Confidentiality Advisory Group, and in England the national data opt-out then applies. Properly anonymised and aggregate counts are outside the opt-out.

  • ICOUK GDPR and the Data Protection Act 2018

    Site documents carry personal data about investigators and staff: CVs, training records and signatures. That means a DPIA before the pilot, processing in UK regions, retention set by the TMF rules, and a contract that stops providers training their models on your data. If performance is scored per investigator, tell them, and let them comment on their record.

  • HRAPlan for safe AI in health and social care research (2026–28)

    The HRA is clarifying expectations for AI used in writing protocols, participant materials and lay summaries. Any AI-drafted participant-facing text is reviewed by the study team and goes through the usual approval route.

The solution

Showing AWSAzuresovereign / on-prem services. Switch with the toggle; every diagram and table on this page follows it.

Clinical trial site feasibility and documents: reference architecture
  1. 01Channels

    • Feasibility questionnaires from sites
    • Site documents (CVs, training, delegation logs)
    • Aggregate eligibility counts
  2. 02Intake

    • Amazon TextractContent Understanding (Document Intelligence)Docling plus an open-weight vision modelRead documents
    • API GatewayAPI ManagementKong, or your existing API gatewayInbound documents API
    • Amazon S3Blob StorageCeph, or IONOS S3 Object StorageDocument store
  3. 03Intelligence

    • Bedrock Knowledge BasesFoundry IQ (Azure AI Search)OpenSearch, or PostgreSQL with pgvectorProtocol and study index
    • Agent
      Bedrock AgentCoreFoundry Agent ServiceLangGraph on Kubernetes, with open-weight models via vLLMFeasibility analyst
    • Agent
      Bedrock AgentCoreFoundry Agent ServiceLangGraph on KubernetesTMF completeness checker
  4. 04Orchestration

    • Step FunctionsLogic Apps / Durable FunctionsTemporalStudy workflow
    • EventBridge + SQSEvent Grid + Service BusApache Kafka or RabbitMQEvents and queues
  5. 05Systems of record

    • Clinical trial management system (CTMS)
    • Electronic trial master file (eTMF)
    • Site performance history
  6. 06People

    • Person
      Feasibility lead: reviews
    • Person
      Study team: selects sites
    • Person
      TMF owner and QA
  • Cloud or platform service (AWSAzuresovereign / on-prem)
  • AI agent
  • A person decides
  • Your existing systems
  • Outside your organisation

Components, side by side

Clinical trial site feasibility and documents: components on AWS, Azure and a sovereign or on-prem stack
LayerAWSAzureSovereign / on-prem
Intake: documents and responsesFeasibility responses and site documents land in one place, whichever route they came by.API Gateway, S3API Management, Blob StorageKong or your existing API gateway; Ceph or IONOS S3 Object Storage
Reading and classifying documentsBedrock Data Automation processes London requests in London (checked 9 November 2026; re-check at build time). Textract plus an in-region model is the alternative. Test on signed, scanned delegation logs and handwritten CVs, not just clean PDFs.Amazon Textract, or Bedrock Data AutomationAzure Content Understanding (includes Document Intelligence)Open-source parsing (e.g. Docling) plus an open-weight vision model
Reasoning and summariesBoth clouds offer a choice of models, including Claude. Check which run in-region in London or UK South.Amazon BedrockMicrosoft FoundryOpen-weight models served with vLLM on your own GPUs, or IONOS AI Model Hub
Protocol and study knowledge (retrieval)The current approved protocol, its modifications, the expected document list and your SOPs, each with version and status.Bedrock Knowledge BasesFoundry IQ, built on Azure AI SearchOpenSearch, or PostgreSQL with pgvector
Site performance dataPlain queries over your own history, not a model. Scores are explained by the numbers behind them.Amazon Redshift, fed from CTMS extractsMicrosoft Fabric, fed from CTMS extractsPostgreSQL, fed from CTMS extracts
Eligibility countsOnly aggregate counts come back, with small numbers suppressed under the data provider's rules. The AI never sees a patient record.Run by the site or an NHS secure data environmentRun by the site or an NHS secure data environmentRun by the site or an NHS secure data environment
Agent runtimeThe original Bedrock Agents closed to new customers on 30 July 2026; new builds use AgentCore.Amazon Bedrock AgentCoreFoundry Agent ServiceAn open-source agent framework (e.g. LangGraph) on Kubernetes
WorkflowAWS Step FunctionsLogic Apps or Durable FunctionsTemporal, or n8n
Middleware and eventsAmazon EventBridge, SQSEvent Grid, Service BusApache Kafka or RabbitMQ
Link to CTMS and eTMFAgree in discovery what each supplier allows: reading metadata, suggesting filing, raising tasks.Through the suppliers' published APIs, plus your existing integration platform if you have oneThrough the suppliers' published APIs, plus your existing integration platform if you have oneThrough the suppliers' published APIs, plus your existing integration platform if you have one
Human reviewFeasibility leads and TMF staff work where they already do, not in a new screen.In your existing CTMS and eTMF review queuesIn your existing CTMS and eTMF review queuesIn your existing CTMS and eTMF review queues
GuardrailsBlocks patient identifiers from entering prompts or the index.Bedrock GuardrailsFoundry guardrails (Azure AI Content Safety)Open-source guardrails (e.g. NeMo Guardrails, Llama Guard)
Identity, keys, data protectionStudy-level access: a CRO team sees only the sponsor studies it is contracted for.IAM Identity Center, KMS, MacieEntra ID, Key Vault, PurviewKeycloak or your existing Active Directory; OpenBao or HashiCorp Vault; an HSM
Monitoring and auditLog every extraction, comparison, filing suggestion and human decision, with the reason.CloudWatch, CloudTrailAzure Monitor, Log AnalyticsPrometheus, Grafana, OpenTelemetry
UK data residencyIONOS AI Model Hub runs in German data centres: EU, not UK, residency. Sites and NHS data providers may require UK-only processing.eu-west-2 (London)UK South / UK WestYour own UK data centre, or a UK or EU provider

On a phone, the table shows the platform you pick. Sovereign / on-prem means open, portable components you can run in your own data centre or with a UK or European provider; IONOS is shown as one example, and others exist. What sovereign cloud means →

Hybrid and on-prem

Many organisations keep core systems and sensitive data on their own servers. This is how the same design works across both.

Stays on-prem

The CTMS, the eTMF and any patient data stay where they are. Eligibility counts are produced inside the site or an NHS secure data environment, and only the totals leave.

Uses cloud AI

Reading feasibility responses and site documents, the protocol index, the feasibility comparison and TMF checks run in a UK cloud region, or on your own GPUs with open-weight models for the sovereign option.

How they connect

A private link (AWS Direct Connect or Azure ExpressRoute) and the API layer to the CTMS and eTMF. Sites and data providers send responses and counts through the inbound API or your existing portal.

If the link drops

Feasibility and filing carry on by hand, exactly as before. Documents queue safely and are classified and checked when the link returns; nothing is filed twice.

The agents

What each agent may do through its tools, what it may not, and where a person signs off. The limits are enforced by the platform, not the prompt.

Feasibility analyst

May do

  • Read feasibility responses and extract each answer with a link to its page
  • Compare answers with the protocol's eligibility criteria and required procedures
  • Pull each site's past performance on the sponsor's earlier studies
  • Flag recruitment estimates far above a site's own track record
  • Draft a comparison for the feasibility lead, with the reasons behind each flag

May not do

  • Select, reject or finally rank a site
  • Contact a site, investigator or data provider
  • See or request patient-level data
  • Score investigators on anything beyond the agreed performance measures

Where a person signs offThe feasibility lead reviews the comparison and the study team selects sites, recording why. The sponsor stays responsible for site selection under GCP. The agent's permissions are enforced by the platform's identity and policy controls, not by instructions in a prompt.

TMF completeness checker

May do

  • Classify incoming documents and suggest TMF filing and metadata
  • Check each site and country against the expected document list
  • Flag missing, expired or wrong-version documents to their owner
  • List documents affected by an approved protocol modification and track each site's update

May not do

  • File a document as final
  • Delete, replace or certify a document
  • Decide a modification's category or route
  • Close a quality finding

Where a person signs offTMF staff confirm every filing. The TMF owner decides on gaps, and QA owns inspection readiness.

Middleware and integration

The CTMS and eTMF stay the systems of record. The AI reaches them only through the suppliers' published APIs and an API layer. It reads metadata and documents, suggests filing and raises tasks; a person confirms each one in the eTMF's own workflow, so the audit trail stays where inspectors expect it.

Events keep everything current. A new feasibility response, a site document or an approved modification becomes a message on a queue. Each message carries an ID, so a retry never files or flags anything twice, and a slow eTMF never loses a document.

Patient data stays inside controlled environments. Eligibility counts are produced by the site or an NHS secure data environment and arrive as totals. If the AI is switched off, feasibility and filing carry on by hand exactly as before.

Process and people

  • Agreed feasibility measures, shared with sites, so they know how their past performance is used and can comment on it.
  • An exception queue for documents the AI can't classify confidently, owned by the TMF team.
  • A weekly sample check of AI-suggested filing, and a monthly review of the feasibility comparisons against actual recruitment.
  • A named owner for the expected document list, prompts and models, with change control like any other validated system.
  • Study managers and TMF staff trained before go-live, including what the AI can't see: a site's staffing changes and local knowledge.
  • Service provider oversight written into contracts, so a CRO's use of AI is visible to the sponsor that stays responsible.

Delivery plan

  1. 3–4 weeks

    Discovery

    Map today's feasibility and TMF process, measure the baseline, confirm CTMS and eTMF API access, agree the feasibility measures, and confirm with data providers how aggregate counts are produced.

  2. Gate · must be true to passBaseline agreed, supplier access confirmed, DPIA and risk assessment started, QA involved.

  3. 8–10 weeks

    Pilot

    One study in shadow mode: the AI compares sites and checks the TMF, the team works as normal, and the two are compared.

  4. Gate · must be true to passExtraction and filing accuracy within agreed limits, no patient-identifiable data in the platform, QA sign-off.

  5. 4–6 weeks

    Production

    Feasibility comparisons and TMF checks go live for new studies, with monitoring, support and a rollback plan.

  6. Gate · must be true to passValidation evidence, monitoring, support model and team training in place.

  7. Ongoing

    Scale

    Add studies and therapy areas, then the document tracking for protocol modifications and results deadlines.

  8. Gate · must be true to passEach new study passes the same pilot gate.

Roles and RACI

Who is responsible, accountable, consulted and informed, by activity
ActivityHead of clinical operationsProduct ownerSolutions architectI can fill thisTechnical PMI can fill thisEngineersI can fill thisQADPOSecurityI can fill this
Business case and benefitsAccountableResponsibleConsultedConsultedInformedConsultedInformedInformed
Feasibility measures and data sourcesAccountableResponsibleConsultedInformedConsultedConsultedConsultedInformed
Target architecture and supplier integrationInformedConsultedAccountable and ResponsibleConsultedConsultedConsultedConsultedConsulted
DPIA and data-flow sign-offConsultedConsultedConsultedInformedInformedConsultedAccountable and ResponsibleConsulted
Build and integrationInformedConsultedAccountableResponsibleResponsibleConsultedInformedConsulted
Validation and accuracy testingInformedAccountableResponsibleConsultedResponsibleResponsibleInformedInformed
Go-live decisionAccountableResponsibleConsultedResponsibleInformedResponsibleConsultedConsulted
Run, monitor and improveInformedAccountableConsultedConsultedResponsibleConsultedConsultedConsulted

Business case and benefits

Head of clinical operations
A · Accountable
Product owner
R · Responsible
Solutions architect
C · Consulted
Technical PM
C · Consulted
Engineers
I · Informed
QA
C · Consulted
DPO
I · Informed
Security
I · Informed

Feasibility measures and data sources

Head of clinical operations
A · Accountable
Product owner
R · Responsible
Solutions architect
C · Consulted
Technical PM
I · Informed
Engineers
C · Consulted
QA
C · Consulted
DPO
C · Consulted
Security
I · Informed

Target architecture and supplier integration

Head of clinical operations
I · Informed
Product owner
C · Consulted
Solutions architect
A/R · Accountable and Responsible
Technical PM
C · Consulted
Engineers
C · Consulted
QA
C · Consulted
DPO
C · Consulted
Security
C · Consulted

DPIA and data-flow sign-off

Head of clinical operations
C · Consulted
Product owner
C · Consulted
Solutions architect
C · Consulted
Technical PM
I · Informed
Engineers
I · Informed
QA
C · Consulted
DPO
A/R · Accountable and Responsible
Security
C · Consulted

Build and integration

Head of clinical operations
I · Informed
Product owner
C · Consulted
Solutions architect
A · Accountable
Technical PM
R · Responsible
Engineers
R · Responsible
QA
C · Consulted
DPO
I · Informed
Security
C · Consulted

Validation and accuracy testing

Head of clinical operations
I · Informed
Product owner
A · Accountable
Solutions architect
R · Responsible
Technical PM
C · Consulted
Engineers
R · Responsible
QA
R · Responsible
DPO
I · Informed
Security
I · Informed

Go-live decision

Head of clinical operations
A · Accountable
Product owner
R · Responsible
Solutions architect
C · Consulted
Technical PM
R · Responsible
Engineers
I · Informed
QA
R · Responsible
DPO
C · Consulted
Security
C · Consulted

Run, monitor and improve

Head of clinical operations
I · Informed
Product owner
A · Accountable
Solutions architect
C · Consulted
Technical PM
C · Consulted
Engineers
R · Responsible
QA
C · Consulted
DPO
C · Consulted
Security
C · Consulted

R ResponsibleA AccountableC ConsultedI Informed· not involved

Where I'd fit

Option A

Lead the architecture

If there's no architect on the programme, I'd own the design end to end: the document reading, the feasibility data, the integration with your CTMS and eTMF, the data flows that keep patient data where it belongs, and the gates. I'd report to your programme board and your head of clinical operations.

Option B

Support your architect

If your partner or your own team already has an architect, I'd take on the document AI, the agents and the CTMS and eTMF integration under their lead, and give them a second senior opinion on security, data protection and validation.

Where this goes wrong

  1. Goes wrong

    The demo used tidy questionnaires. Real ones are scanned, half-completed and in a dozen formats.

    How the design avoids it

    Pilot on last year's real responses for one study, every format.

  2. Goes wrong

    Past performance punishes sites that had a hard study, or new sites with no history.

    How the design avoids it

    Show the numbers and their context, let sites comment, and keep a route in for new sites.

  3. Goes wrong

    Feasibility quietly starts using patient-level data.

    How the design avoids it

    Aggregate counts only, produced inside the site or a secure environment, and guardrails that block identifiers.

  4. Goes wrong

    TMF staff accept every filing suggestion, so errors are filed faster.

    How the design avoids it

    A filing correction measure, a weekly sample check, and an exception queue for low-confidence documents.

  5. Goes wrong

    A CRO uses AI on the sponsor's study and the sponsor doesn't know.

    How the design avoids it

    Service provider oversight in the contract, and the same logs available to the sponsor.

On the horizon

Changes already announced or under way that affect this design. More in the UK horizon scan.

  1. From about April 2027
    For trials in scope of the new transparency rules, results summaries are due within 12 months of the end of the trial, so the first deadlines fall about a year after 28 April 2026.

    Track end-of-trial dates and results deadlines per trial alongside the TMF checks.

  2. 15 January 2027 (EU)
    ICH E6(R3) Annex 2, on decentralised elements, pragmatic trials and real-world data, was adopted by ICH on 3 June 2026 and takes effect in the EU on 15 January 2027. No MHRA date found yet.

    If feasibility uses real-world data, design for Annex 2's expectations now.

  3. No date yet
    The MHRA's Strategy 2030 (14 October 2026) plans an AI-enabled Clinical Trial Protocol Checker for sponsors, and initial review of first-in-human trials within 14 days.

    Keep protocols and modification history structured and versioned, so they can be checked quickly by your tools and the MHRA's.

  4. 2026–2028
    The HRA's AI plan: clarifying when AI work counts as research, when health data can be accessed with AI to find and contact people about research, and expectations for AI in protocols and participant materials.

    Keep feasibility on aggregate counts and record AI use in study documents, so the design fits the guidance as it lands.

  5. From end of 2026 (phased)
    The Health Data Research Service: first services due by the end of 2026, giving approved researchers access to NHS data through secure environments.

    Design the eligibility count as a query run inside a secure environment, so a national service can replace site-by-site requests.

Questions to ask your partner or vendor

Good answers are specific. Vague answers to any of these are worth following up.

Copy them into your next supplier meeting

  1. Where are eligibility counts produced, and can any patient-level data reach the platform?
  2. How is a site's past performance shown, and can sites see and comment on it?
  3. What can the AI write into our eTMF, and who confirms each filing?
  4. How do we oversee a CRO's use of AI on our studies?
  5. What is validated, and what happens when the model changes?
  6. What does it cost to run per study, at our volume?

Planning something like this?

Whether you need someone to lead the design or to support the architect you already have, let's talk it through.

Sam Naseem
Sam NaseemBirmingham, UK · UK & Europe
Available now