Monitoring is where a clinical investigation either stays inspection-ready or quietly drifts. Under ISO 14155, good clinical monitoring is not a calendar of routine site visits, it is the system that keeps data integrity, subject safety and protocol compliance provable throughout the study, so the data still holds when a Notified Body or an inspector examines it.
This page explains how monitoring works under ISO 14155:2026, what good practice actually checks, why a risk-based approach has replaced blanket verification, and how monitoring ultimately determines whether your clinical data supports the CER.
ISO 14155:2026 builds risk management throughout the investigation, and monitoring is how that intent plays out on the ground. A monitoring plan, derived from the trial's specific risks (and aligned with ISO 14971 via Annex H), defines what is checked, how often, and to what depth.
This is a deliberate shift from the older model of verifying everything everywhere. Effort is concentrated where the risk to data integrity and subject safety is highest - a gcp monitoring eu mdr approach that is both more rigorous where it matters and more efficient overall.
Monitoring under ISO 14155 is often misunderstood as an administrative formality, when it is in fact one of the main mechanisms that determines whether a study's data can be trusted. The standard frames monitoring as the planned, systematic oversight that protects subject safety and confirms that the conduct and the data match the protocol, and a study that treats it as a box to tick rather than a control to operate is exposed at exactly the point a reviewer or inspector looks hardest.
Won by the Milo Health platform in the xShare Open Call for Clinical Research, the top Platinum tier: independent recognition, externally judged, scoped to what was awarded.
Good monitoring is not box-ticking visits; it is the active protection of subject safety and data integrity throughout the trial. A capable monitor verifies that informed consent was properly obtained, that the protocol is being followed, that adverse events are captured and reported, and that the data in the system reflects what actually happened at the site, with every discrepancy traced to resolution.
What separates good monitoring from nominal monitoring is whether the issues it finds are actually closed. A monitoring visit that identifies a problem and leaves it open has done half the job; a monitoring system that identifies, escalates, resolves and documents the resolution is what an inspector reads as control. The trail of findings and closures is itself evidence that the trial was properly overseen.
Monitoring also has to be proportionate to risk. Verifying every data point equally is expensive and, paradoxically, less effective than concentrating scrutiny where it matters most to safety and to the integrity of the primary endpoint, which is the principle behind the risk-based approach the standard supports.
The detail that separates real monitoring from nominal monitoring is follow-through. Identifying an issue is only the first half; the value is created when the issue is escalated, resolved and documented, leaving a clear trail from finding to closure. A monitoring file full of observations with no resolutions tells an inspector that problems were seen and not fixed, which is worse than not having looked, whereas a clean closure trail is direct evidence that the trial was genuinely controlled.
Tell us about your study. We will build a risk-based monitoring plan and run it with CRAs close to your sites, so the data holds at review.
A risk-based monitoring plan starts from the study's critical data and critical processes - the endpoints, the safety signals, the steps where an error would most damage the evidence - and allocates verification accordingly. Centralised and remote monitoring increasingly complement on-site visits, surfacing trends and outliers between visits.
The point is not to monitor less, but to monitor where it counts - and to be able to show, at any moment, that the critical data is clean and the subjects are protected.
Risk-based monitoring is not a way to do less; it is a way to concentrate effort where it matters. Rather than verifying every data point with equal intensity, a risk-based approach focuses scrutiny on the data and processes most critical to subject safety and to the integrity of the primary endpoint, which both protects the study better and uses monitoring resource sensibly. Done well, it produces stronger data than blanket verification, because attention is spent where error would actually do harm.
A trial can run for years and still fail at review if monitoring let integrity drift unnoticed. Good monitoring keeps the study continuously inspection-ready, so the clinical data supports the CER rather than raising questions about it. A dataset a Notified Body cannot trust is a clinical evaluation it will not accept.
In other words, monitoring is not an operational nicety - it is part of the evidence. The quality of the oversight is, in the end, inseparable from the credibility of the data.
Ultimately, monitoring is where the credibility of the eventual clinical evaluation is quietly decided. The cleanest analysis cannot rescue data whose provenance is in doubt, and a Notified Body that distrusts how a study was overseen will distrust its conclusions. Investing in proper monitoring during the trial is therefore not a cost centre but an insurance policy on the evidence, protecting the value of everything the study is meant to demonstrate.
See how our quality system keeps every programme inspection-ready, from the first protocol version, not at submission.
Eclevar provides risk-based, ISO 14155-aligned monitoring with in-house CRAs across 8 countries and data management run in-house, keeping your study inspection-ready from first patient to database lock, with former Notified Body reviewers attuned to what a reviewer checks. See our medical device CRO services.
It is my pleasure to recommend Eclevar MedTech as a scientific and clinical operations partner to any medical device company seeking evidence-led support under the EU MDR framework. Over the course of our engagement, Eclevar has consistently demonstrated the rare combination of regulatory rigour, clinical literacy and commercial pragmatism that our organisation requires.
EU Notified Bodies do not automatically trust Japanese data. Eclevar translated our PMDA dossier into the language the NB needed to hear. One Q&A round. No major NCRs. We were genuinely surprised at how clean the review was.
Eclevar MedTech helped us with the CER and PMCF plan and defined the strategy to tackle the Notified Body questions and non-conformities.
Clinicians and a former Notified Body reviewer, named, not handed to a junior account team. Meet the full leadership team →
A risk-based monitoring plan derived from the trial risks, with source data verification, consent and protocol-compliance checks, safety reporting and a traceable audit trail, all built into the investigation from the start.
No. ISO 14155:2026 supports a risk-based approach, focusing verification depth where the risk to data integrity and subject safety is highest, rather than verifying everything uniformly.
An approach that targets monitoring effort at the critical data and processes most likely to affect the evidence or subject safety, often combining on-site, remote and centralised methods.
Monitoring keeps data integrity provable. A dataset a Notified Body can trust supports the CER; one with monitoring gaps invites questions about the whole clinical evaluation.
Want monitoring that keeps your study inspection-ready, not just visited? We will build a risk-based plan and run it with CRAs close to your sites, so the data holds at review.
Talk to Eclevar