Vendor Selection and Approval Process in Pharmacovigilance - Regulatory Expectations

The short version

What teams need to understand

Pharmacovigilance vendors must be selected through a structured and documented evaluation process.
Selection criteria must include capability, compliance, experience, systems, and regulatory alignment.
Vendor selection must be supported by due diligence and risk assessment outputs.
Final approval must be formally documented and authorised by PV, QA, and QPPV or delegated roles.
Vendor selection decisions must be justified and traceable to evaluation criteria.
Inspection-ready evidence must demonstrate that vendor selection is controlled, risk-based, and approved before engagement.

Regulatory expectation

What regulators expect

Each expectation should be supported by controlled documentation, traceable records, clear ownership, and evidence that the process works in practice.

Vendor selection must be based on defined and documented criteria.
Selection decisions must be supported by due diligence and risk assessment.
Vendor capability and compliance must be verified before approval.
Approval must be formally authorised by appropriate roles.
Vendor selection must be justified and traceable.

Why it matters

What this means in practice

Inspectors assess whether pharmacovigilance vendors are selected and approved through a structured, risk-based process. They typically review selection criteria, evaluation outputs, approval decisions, and evidence that the chosen vendor was justified and formally authorised before engagement.

Questions this page answers

How are pharmacovigilance vendors selected?

What is the vendor approval process in pharmacovigilance?

What do inspectors check for vendor selection?

How do you approve a PV vendor?

What criteria are used to select pharmacovigilance vendors?

Who approves vendors in pharmacovigilance?

How do regulators assess vendor approval decisions?

What documentation is required for vendor selection?

How do you justify vendor selection in inspections?

What is the vendor onboarding process in pharmacovigilance?

Inspection evidence

Evidence teams should be able to show

Vendor Selection Criteria

Defined criteria for evaluating vendor capability
Assessment of PV process experience and expertise
Evaluation of regulatory compliance and inspection history
Assessment of IT systems, validation, and data security
Geographic and regulatory coverage requirements

Vendor Shortlisting and Evaluation Records

List of potential vendors considered
Comparison of vendor capabilities and services
Evaluation notes and scoring against criteria
Justification for selecting preferred vendor

Due Diligence and Risk Assessment Outputs

Completed vendor questionnaires
Risk classification and rationale
Audit outcomes or audit decision records
Identification of strengths, weaknesses, and gaps

Vendor Approval Documentation

Formal approval record for selected vendor
QA and PV review of selection decision
QPPV or delegated sign-off
Documented justification for approval

Vendor Onboarding and Readiness Evidence

Initial onboarding meeting records
System access setup and validation checks
Confirmation of process alignment with SOPs
Defined communication and escalation pathways

Regulatory Basis (Primary Sources)

GVP Module I - MAH responsibility for selection and oversight of third parties
GVP Module VI - requirement for compliant handling of safety data through capable systems
ICH E2D - need for reliable processes supporting safety data management
MHRA GPvP guidance - expectations for vendor selection and qualification
FDA pharmacovigilance guidance - responsibility for vendor selection and compliance remains with the MAH

Typical Inspection Questions (What Inspectors Ask)

How did you select this vendor?
What criteria were used to evaluate vendors?
Why was this vendor chosen over others?
Who approved the vendor and on what basis?
Show me the documentation supporting this decision.

Common failure patterns

Vendor selection is based on cost or convenience rather than capability.

No documented evaluation or comparison of vendors.

Selection criteria are undefined or inconsistently applied.

Vendor approval is not formally documented or authorised.

The selected vendor does not meet regulatory or operational requirements.

What good looks like

A structured and documented vendor selection process.
Clear evaluation criteria applied consistently across candidates.
Evidence-based comparison and justification of vendor choice.
Formal approval process involving PV, QA, and QPPV roles.
Alignment between selected vendor capability and service requirements.

How teams operationalise it

Define vendor selection criteria aligned with PV requirements.
Create a shortlist of potential vendors based on service needs.
Evaluate vendors using questionnaires, documentation review, and risk assessment.
Document comparison and selection rationale.
Obtain formal approval from PV, QA, and QPPV or delegated authority.
Complete onboarding and confirm vendor readiness before starting activities.

From expectation to working control

Find the documentation that supports this work

Review the related toolkit to understand its purpose, included files, and how it supports this regulatory expectation.

PV Vendor Qualification and Management Toolkit

Browse pharmacovigilance toolkits View related toolkit

Frequently asked questions

How do you choose a pharmacovigilance vendor?

A pharmacovigilance vendor is chosen through a structured process that includes defining selection criteria, shortlisting candidates, performing due diligence and risk assessment, comparing vendor capabilities, and obtaining formal approval based on documented evaluation.

How are pharmacovigilance vendors selected?

Vendors are selected through a structured evaluation process that assesses capability, compliance, experience, systems, and regulatory alignment against defined criteria.

Who approves a pharmacovigilance vendor?

Vendor approval is typically performed by PV Operations, Quality Assurance, and the QPPV or delegated authority based on documented evaluation and risk assessment.

What criteria are used to select a PV vendor?

Criteria typically include PV expertise, regulatory compliance history, system validation, data security, geographic coverage, and operational capability.

Do inspectors review vendor selection decisions?

Yes. Inspectors review how vendors were selected, what criteria were applied, and whether the decision was justified and formally approved.

What happens if vendor selection is not properly documented?

Lack of documentation can result in inspection findings, as regulators expect clear justification for vendor selection decisions.