regenold GmbH

“regenold GmbH is an end-to-end integrated development partner for pharmaceuticals, medical devices, and drug-device combination products. Since 1994, regenold has guided more than 2,000 innovators through over 10,000 successful product submissions across 90+ countries.”

Questions & answers

Do we need documentation if AI is "just drafting"?

“Yes. If an AI tool influences clinical, CMC, or regulatory decisions, you must document how it works, how it was validated, and what controls are in place, regardless of whether the output is "final" or "just a draft." The question that should be asked is not "does it make the decision?" but "does it influence the decision?".”

What should we be ready to show in an inspection?

“Based on the current regulatory frameworks, AI systems used in regulated processes are expected to have documented risk classification, validation evidence, and change control. Responsibility for approving and monitoring the model should be clearly assigned, with defined human oversight.”

How do we qualify a vendor AI tool?

“Start with due diligence on the vendor's training data, model evidence, and update practices. Review documentation and contracts. Classify the tool's risk. Make sure you can demonstrate control over updates, performance monitoring, and bias. The depth of qualification depends on the GxP impact of the tool's output.”

How has ICH E6(R3) changed how you design trials?

“ICH E6(R3) was finalised in January 2025 and became effective in the EU in July 2025. The biggest practical changes are the emphasis on quality by design (identifying “critical to quality” factors upfront), proportionate monitoring (risk-based rather than 100% source data verification), and formal recognition of decentralised trial elements (remote consent, home delivery of IMP, wearable data capture).”

Do I need a DPO for my clinical trial?

“If your organisation processes health data as a core activity (which most pharma and medtech sponsors do) a DPO is required under GDPR. Even where the formal threshold is debatable, most EU data protection authorities and ethics committees expect a named DPO.”

What happens when my EDC or safety database provider has servers outside the EU?

“Using a cloud-based system with infrastructure or support teams in non-EEA countries creates a cross-border data transfer under GDPR. This requires appropriate transfer mechanisms, typically Standard Contractual Clauses plus a Transfer Impact Assessment. Where ethics committees are not satisfied with the provider's setup, we design hosted alternatives where we control the environment and keep data within the EEA.”

Do you work on both buy-side and sell-side mandates?

“Yes. On the buy side, we assess targets and flag risks that affect valuation and integration. On the sell side, we help vendors prepare their regulatory and quality documentation for scrutiny, identify and remediate gaps before the process begins, and compile a vendor DD package that supports a smoother transaction. The disciplines are the same; the framing differs.”

Data formats & record details

Download this profile and inspect its supporting evidence.

Entity ID
urn:readyscan:entity:regenold-gmbh-q140571087
Material fingerprint
fnv1a64:8681812b5ad2ec67
Entity revision
fnv1a64:1b21b4f47346815b
Published
2026-10-26
Modified
2026-10-26
Source summary
regenold GmbH: “regenold GmbH is an end-to-end integrated development partner for pharmaceuticals, medical devices, and drug-device combination products. Since 1994, regenold has guided more than 2,000 innovators through over 10,000 successful product submissions across 90+ countries.”
Evidence record
urn:readyscan:corpus:evidence:regenold-gmbh-q140571087