Clinical data management · ISO 14155 · EU MDR · medical devices only

Clinical data management for medical device clinical investigations

Reliable clinical data is what a submission actually rests on. Eclevar MedTech runs data management for medical device investigations only: data management plan, eCRF design, database build and validation, cleaning, coding and database lock, under ISO 14155, EU MDR, FDA guidance and ALCOA+ data integrity principles.

Data management planeCRF & database buildCleaning & query managementMedical codingDatabase lockEDC-agnostic
Clinical data management for medical device clinical investigations under ISO 14155
Study start-up to database lock, one connected chain
1
Data management plan
2
eCRF design
3
EDC selection
4
Database build & validation
5
Cleaning, queries & coding
6
Database lock
One data team from protocol review to the locked database, so the numbers in the report are the numbers the sites entered.
Trusted by medical device teams running clinical investigations in Europe
TerumoMeril Life SciencesNihon KohdenVygonColoplastRegenLabAsahi InteccMolnlyckeTerumoMeril Life SciencesNihon KohdenVygonColoplastRegenLabAsahi InteccMolnlycke
Who manages your clinical data

Data management led by the people who own the numbers

EUCROF Platinum Award 2026
EUCROF Platinum Award 2026xShare Open Call for Clinical Research, co-funded by the European Union
Sebastien Meier Piantanida

Sébastien Meier Piantanida

Chief Data Officer
Biometrics & Data Systems

30yrs

in clinical data systems, biometrics and statistical reporting

  • Owns data management, biostatistics and EDC architecture across Eclevar studies
  • Vendor-independent on EDC platforms: see data management and eCRF platforms
  • Takes studies from database build to lock and analysis with biostatistics
LinkedIn
Jimmy Andrew Hayek

Jimmy Andrew Hayek

Head of Quality & Compliance
ISO 14155 & data integrity

10+yrs

in quality systems and inspection readiness for device studies

  • Holds the ALCOA+ line: attributable, contemporaneous, traceable data
  • Runs quality control on database validation and lock documentation
  • Prepares studies for audit and inspection under ISO 14155
LinkedIn
Dr Mark Da Costa

Dr Mark Da Costa

Chief Operating Officer · former TÜV SÜD Senior Reviewer

Former reviewer atTUV SUD
25+yrs

in device evaluation and Notified Body review

  • Assessed 400+ medical devices in Europe
  • Brings the reviewer perspective to every dataset we release
  • Oversees delivery across the full evidence program
LinkedIn
Why this matters

Poor data quality never stays a data problem

Manufacturers rarely lack data. They lack data that holds up when someone reads it critically. Weak data management surfaces later as protocol deviations, a database lock that slips, monitoring costs nobody budgeted, and regulatory questions that delay market access.

The database is being built from the protocol backwards

Forms are configured before anyone has written down how the data will be reviewed, queried, coded and locked.

Queries are drowning the sites

Investigators receive hundreds of low-value queries and start answering them mechanically. Data quality goes down, not up.

Nobody owns the external data

Central lab, imaging, ePRO and device telemetry arrive on different schedules and are reconciled at the end, if at all.

Database lock keeps moving

Cleaning started after the last visit. Open queries, incomplete coding and unreconciled vendor data now sit on the critical path.

The study is device-specific and the CRO is not

Serial numbers, lot numbers, software versions, deficiencies, explantations: a general CRO treats these as free text.

No internal data manager

Clinical operations is running the database between other responsibilities, and the documentation trail is thin.

Whether the study is a first-in-human investigation, a pivotal trial or a post-market clinical follow-up, a dedicated data management team keeps the data complete, accurate and traceable across the whole study lifecycle.

Study start-up

Building the foundation before the first patient is enrolled

Everything that goes wrong at database lock was decided at study start-up. This is where the data management strategy earns its keep.

Data management plan

The controlled document defining data flow, review procedures, roles and responsibilities, query strategy, coding conventions and the lock process. How to develop an effective data management plan.

eCRF design

Forms built from the protocol, not from a template library: fewer entry errors, less monitoring effort, complete protocol-required data. Best practices for eCRF design.

EDC selection

Study complexity, budget, integrations and regulatory requirements, assessed without a software partnership behind the recommendation. How to choose an EDC system.

Database build and validation

Visit schedules, forms, edit checks, dynamic logic, user roles, and validation testing documented before deployment. See our EDC and data management capability.

Risk assessment

Critical data and critical processes identified with clinical operations, biostatistics and regulatory before the database is configured. What is risk-based data management.

Alignment with the wider start-up

The database is one workstream inside study start-up, next to feasibility, contracting and site activation.

European delivery

One database, and the national rules that shape it

A multinational device investigation does not have one data regime. Consent wording, hosting requirements, registry access and transfer rules differ by country, and they constrain the database before it is built.

CLINICAL DATA MANAGEMENT NETWORK - EUROPE CLINICAL DATA MANAGEMENT NETWORK · EUROPE NOUKDEFRITES Study dataOne database, one data management plan,country-specific consent wordingWatch: local ePRO language versionsFranceCNIL reference methodology, MR-001 / MR-003Watch: data hosting and HDS certificationNordics & UKNational registry linkage, strong sourcedata availabilityWatch: UK data transfer post-BrexitGermany & AustriaBfArM and BASG expectations, DSGVOWatch: site-level data protection officersSwitzerland, Italy & SpainSwissmedic ClinO-MD, national ethicsreview of the data flowWatch: cross-border transfer outside the EEA

Data protection rules, hosting requirements and registry access vary by country and are settled before the database is built, not after the first patient is enrolled.

During the study

Data management is a continuous activity, not a closeout task

From the first enrolled participant, the data is reviewed, questioned, coded and reconciled continuously. That is what makes the last month of the study uneventful.

Data entryAutomated validationManual reviewQueries to sitesCoding & reconciliationReady to lock

Continuous data cleaning

  • Missing values, inconsistencies, outliers and logical discrepancies
  • Protocol deviations surfaced while they can still be corrected
  • Recurring site errors caught early and fed back into training
  • Full method on the clinical data cleaning page

Query management, coding and review

  • Queries generated, tracked, reviewed and closed with a complete audit trail
  • Medical coding of adverse events, medical history and medications with MedDRA and WHO Drug
  • Ongoing review of enrollment, safety, endpoint completeness and critical variables
  • Coordinated with clinical monitoring so site visits and central review look at the same signals

The point of the queries. A query is not a quality metric. Ten well-aimed questions about eligibility, safety and the primary endpoint do more for the database than four hundred about formatting, and the sites keep answering them carefully.

The numbers in the report are the numbers the sites entered
The numbers in the report are the numbers the sites enteredTraceable from source to database to listing to conclusion, with an audit trail that survives an inspection years after the study closed.
Risk-based data management

Review data by importance, not equally

Reviewing every variable with the same intensity was never a quality strategy. It produced query volume, site fatigue and long closeouts without improving the data that decides the study.

Where the review effort goes

  • Serious adverse events, adverse device effects, deaths and hospitalizations
  • Primary and secondary endpoints, the variables the conclusion rests on
  • Eligibility criteria and informed consent
  • Device accountability: serial and lot numbers, implantation, explantation, deficiencies
  • Regulatory variables: study dates, disposition, protocol deviations

What that changes

  • Better data where an error would actually matter
  • Fewer, more meaningful queries and a lighter load on investigators
  • Faster database lock because the critical data was clean throughout
  • Lower operational cost for the same regulatory confidence
  • A documented rationale a Notified Body can follow

Risk-based data management is the counterpart of risk-based monitoring: one governs how the data is reviewed, the other how the sites are. The full method is on the risk-based data management page.

Database lock

The milestone that is decided at study start-up

Locking a database is the result of months of continuous review. When it slips, the cause is almost never the lock itself.

Complete data entry

Scheduled and unscheduled visits, adverse events, device deficiencies, laboratory and imaging data, device accountability, end-of-study forms.

Queries resolved

Answered, reviewed, corrections verified, unnecessary queries closed, remaining issues escalated and documented.

Coding complete

Adverse events, medical history and concomitant medications coded against the approved dictionary versions, with consistency verified.

External data reconciled

Central laboratory, imaging, ECG, ePRO, wearables and randomization systems, each reconciled against the clinical database.

Quality control performed

Independent review of query metrics, validation records, coding and documentation before lock is recommended.

Sponsor approval documented

Data management, clinical operations, medical monitoring and biostatistics confirm before the database is closed. Full sequence on the database lock page.

Device-specific data

The data a general CRO treats as free text

Device identifiers, serial and lot numbers, software versions, configuration, malfunctions, deficiencies, corrective actions, implantation and explantation records. These fields carry the traceability the MDR asks for, and they are the ones most often collected as unstructured text and cleaned up at the end.

Clinical data review for medical device investigations under EU MDR
Engagement models

Three ways to work with the data team

Full-service data management

Every data management activity from protocol review to database lock, with one accountable team and one set of documentation.

Functional service provider

A named Eclevar data manager integrated into your team, for organizations that want the expertise while keeping project oversight in house.

Project-based support

A defined activity: database build, database validation, data cleaning, medical coding, an interim analysis, or the database lock alone.

We work alongside sponsors, other CROs, biostatistics groups and clinical operations teams rather than requiring the whole program. Costs follow scope, study complexity and platform, quoted on the same basis as our European clinical trial cost benchmarking.

Why a device-only CRO

Device investigations are not small pharmaceutical trials

The data model is different, the traceability requirements are different, and the regulatory expectations sit under a different framework.

Device types we run data for

  • Cardiovascular and structural heart devices
  • Orthopedic implants and spine
  • Diagnostics and in vitro diagnostics
  • Digital health and Software as a Medical Device
  • Wearables and connected devices
  • Combination products

What our processes align with

  • ISO 14155, clinical investigation of medical devices
  • EU MDR 2017/745, including Annex XV documentation
  • ICH Good Clinical Practice E6
  • FDA guidance and 21 CFR Part 11 where applicable
  • ALCOA+ data integrity principles
  • Risk-based quality management

The data feeds the rest of the evidence chain: the clinical evaluation report, device registries under the MDR and real-world evidence programs. Teams that need the framework itself can start with our ISO 14155 training.

Vendor-independent on EDC
Vendor-independent on EDCWe are not a reseller for any platform. The recommendation follows the study, and we work in the system you already own if you own one.
Coming soon
FAQ

Questions sponsors ask first

What is clinical data management?

The process of collecting, validating, cleaning, coding, reviewing and preparing clinical study data for statistical analysis and regulatory submission, with a documented trail showing how every value in the final dataset got there.

When should clinical data management begin?

During protocol development, before enrollment. Early involvement means the database design serves the analysis, the edit checks target the data that matters, and the review workflow exists before there is data to review.

Can Eclevar work with our existing CRO?

Yes. We regularly work alongside sponsors, other CROs, biostatistics teams and clinical operations groups, either on the full data management scope or on a defined activity.

Which EDC systems do you support?

We are technology-independent and experienced with a range of commercial and open-source platforms. We recommend the system that fits the study rather than one we have a partnership with, and we work in your platform if you already have one.

Do you support ISO 14155 clinical investigations?

Yes. Our data management processes are built for medical device investigations under ISO 14155, including the device accountability and deficiency data that pharmaceutical processes do not cover.

Do you support international multicenter studies?

Yes. Single-country and multinational investigations, with the national data protection, hosting and consent requirements settled before the database is built.

Can you take over a database that is already running?

Yes. It starts with an assessment of the current state: open queries, missing data, coding status, external data reconciliation and validation documentation. Then either remediation or a documented migration, depending on what the assessment finds.

What do you need from us to scope the work?

The protocol or the current draft, the study size and country list, the platform if one is already chosen, and the target lock date. That is enough to map the data management scope and the risks.

Start the conversation

Is your database ready for the analysis it has to support?

Send us the protocol, the country list and the platform if one is already chosen. We map the data management scope, flag the risks that usually surface at database lock, and come back with a scoped plan and a named data manager.

Your documents are reviewed confidentially. An NDA can be put in place before we receive any technical or clinical information. You can also reach the team through the contact page.

Reforming Clinical Evaluation of Medical Devices in Europe