Published on 22/12/2025
Implementing Electronic Signatures for Sample Handover in Clinical Trials
Introduction: The Digital Transformation of Chain of Custody
With the growing reliance on decentralized and remote clinical trials, paper-based chain of custody (CoC) logs are increasingly being replaced by electronic systems. One of the most critical aspects of this digital transformation is ensuring that electronic signatures used in clinical sample handovers meet regulatory expectations.
Proper use of electronic signatures (e-signatures) in sample transfers ensures traceability, identity verification, and accountability between sending and receiving parties—including sites, couriers, and laboratories. However, without appropriate validation and controls, e-signatures can become a liability during inspections.
Regulatory Framework: What Do FDA and EMA Expect?
Both the FDA and EMA have issued detailed requirements for electronic records and signatures, primarily under:
- FDA 21 CFR Part 11: Requires e-signatures to be unique, secure, traceable, and equivalent to handwritten signatures.
- EU Annex 11: Outlines requirements for computerized systems used in
These regulations are binding for all sponsors and service providers operating in GCP environments. E-signatures applied during sample custody transfers must demonstrate:
- Uniqueness of user ID and authentication method
- Non-repudiation (signer cannot deny authorship)
- Audit trail of signature application and reason
- Linkage of signature to specific data or event
Electronic Signature Workflow in Sample Handover
A standard electronic custody handover might involve the following steps:
- Sample packaged and documented by site personnel
- Courier collects sample and signs custody transfer form on a tablet or secure device
- Courier delivers sample to central lab
- Lab personnel perform intake checks and electronically sign to acknowledge receipt
- E-signature logs are archived in the central system with timestamps and access logs
Case Study 1: Invalid E-Signatures Triggered Inspection Findings
In a multi-site trial sponsored by a U.S. biotech company, electronic custody logs were implemented using a courier’s proprietary mobile app. However, during a routine FDA inspection, it was revealed that:
- Multiple users shared the same login credentials
- The signature field was optional and frequently left blank
- No audit trail existed for modifications
Result: The FDA issued a Form 483 noting non-compliance with 21 CFR Part 11 and data integrity principles.
CAPA Actions:
- Implementation of unique user IDs and role-based access
- Mandatory two-factor authentication for courier handovers
- Validated system upgrade with signature timestamping and event tracking
- Site and courier staff retraining on proper e-signature use
Technical Validation Requirements for E-Signature Systems
To be inspection-ready, systems used for e-signature capture in custody workflows must undergo documented validation. Key validation areas include:
- Installation Qualification (IQ): System installed correctly with secured infrastructure
- Operational Qualification (OQ): System performs signature capture, storage, and retrieval as expected
- Performance Qualification (PQ): Signature logs persist over time and under normal operating conditions
- Audit Trail Validation: Signature metadata cannot be altered or deleted without traceability
Sample Signature Log Format
| Date/Time | Event | Signed By | User ID | Authentication Method | Comments |
|---|---|---|---|---|---|
| 2025-08-24 10:34 | Courier collected samples | John Doe | JD2025 | 2FA + PIN | Samples intact, temperature: -20°C |
| 2025-08-24 15:12 | Lab intake | Priya Shah | PS111 | Password + Biometrics | No discrepancy, accepted |
Training and Oversight Considerations
- Train all users (sites, couriers, lab staff) on system use and regulatory requirements
- Include e-signature application checks in monitoring visit agendas
- Audit user access logs monthly to detect shared logins or anomalies
- Simulate inspection scenarios to test e-signature record retrieval
External Resource
For official FDA guidance on electronic signatures and compliance with 21 CFR Part 11, refer to the FDA Guidance on Electronic Records and Signatures.
Conclusion
The shift toward electronic documentation in clinical trials must include robust and compliant electronic signature systems. For sample custody, this is especially critical given the inspection sensitivity around traceability and data integrity. Sponsors and CROs must treat e-signatures as part of their core quality system—ensuring validation, training, auditability, and role-based security controls are in place. With increasing FDA and EMA scrutiny, getting electronic signatures right can determine the success of a trial during regulatory review.