Safety data exchange agreement tracking for PV teams

The SDEA is signed once and governs daily reporting duties for years. Very little of it is tracked anywhere a pharmacovigilance team can see.

What is a safety data exchange agreement?

A safety data exchange agreement, commonly called an SDEA or a pharmacovigilance agreement, is a contract between partners that defines how safety information is exchanged for a shared product. It allocates responsibility for case intake, sets the clock for transferring individual case safety reports between parties, assigns literature screening and signal detection duties, and specifies reconciliation, audit and inspection support obligations. It is typically an annex to a licensing, distribution or co-promotion agreement.

Last updated: September 18, 2026 · Reviewed by the Aavenir Life Sciences & Pharma practice

Key takeaways

  • ✓SDEA duties are operational and recurring, which makes them obligation management work rather than contract storage work.
  • ✓Transfer clocks are the highest-risk provision, because a missed partner-to-partner timeline can cascade into a missed regulatory submission.
  • ✓Reconciliation frequency and the named contacts on both sides drift constantly and need an owner, a cadence and a change process.
  • ✓Inspectors ask for the current signed SDEA and evidence that its terms were followed, so version control and performance records are tested together.

A safety data exchange agreement is negotiated once, signed as an annex to a licensing or distribution contract, and then governs daily operational duties for as long as the partnership lasts. The document itself is usually filed carefully. What happens next is less reliable. The transfer windows, reconciliation cadences, literature screening scope and named contacts inside it rarely appear anywhere a pharmacovigilance operations team can see, which means they are managed from institutional memory and a shared calendar.

That gap is uncomfortable for a specific reason. Most SDEA obligations are not annual commitments that can be reviewed at renewal. They are commitments measured in days and hours, and the partner-to-partner clock sits inside a regulatory clock that does not move. A delayed case transfer between two companies is a contract issue on paper and a potential late regulatory submission in practice.

This guide sets out which SDEA provisions need active tracking, how to convert them into obligations with owners and cadences, and what inspectors ask for when they test whether the agreement was followed rather than merely signed. It is written for pharmacovigilance operations, alliance management and the contract teams who support them.

The provisions that need active tracking

Not every clause in an SDEA requires monitoring. The ones below do, because each creates a recurring duty with a deadline, a cadence or an evidence requirement rather than a one-time statement of intent.

  • Case transfer windows, the time each party has to forward a valid individual case safety report to the other after becoming aware of it, usually expressed in calendar days from the date of first receipt.
  • Reconciliation cadence, the frequency at which both parties compare case counts and identifiers, who initiates the exercise, and how discrepancies are investigated and formally closed.
  • Literature screening scope, which party screens which databases, at what frequency, for which territories and products, and how findings are exchanged.
  • Periodic report contributions, the data each party supplies for aggregate reports, the lead time before the submission date and the format the receiving party requires.
  • Audit and inspection support, notice periods for partner audits, the obligation to notify the other party of a regulatory inspection, and the timeline for sharing findings that concern the shared product.

Read as a list, these look like standard contract terms. Read as operations, they are a schedule. Several recur monthly or quarterly, several have escalation consequences if missed, and all of them need a named owner on both sides who is still in the role. That combination is what makes SDEA management an obligation problem rather than a document problem, and it is why storing the agreement in a well-indexed repository does not by itself reduce risk.

Where the two clocks meet

Model the partner transfer window and the regulatory submission deadline together rather than separately. If a partner has a short window to forward a valid case and the marketing authorization holder then needs time for assessment and submission, the practical buffer may be very small. Setting escalation to fire partway through the partner window, rather than at its expiry, is the difference between a managed delay and a reportable one.

Turning clauses into tracked obligations

The conversion work is mechanical once the pattern is clear. Each tracked provision needs five attributes before it can be monitored, and an obligation record that is missing any of them will quietly stop being useful within a quarter.

  • A named owner, by role. Assign to a role in the pharmacovigilance or alliance function rather than to an individual, and keep the role-to-person mapping in the identity system so departures do not orphan the obligation.
  • A cadence or a trigger. Recurring duties such as reconciliation get a schedule. Event-driven duties such as case transfer get a trigger and a countdown, which behaves very differently and needs different alerting.
  • An evidence requirement. State what proof closes the obligation, whether that is a reconciliation report, a transfer log extract or a signed training record. Obligations without a defined artifact are closed on assertion, which does not survive inspection.
  • An escalation threshold. Define the point before the deadline at which the obligation escalates, and to whom. For transfer windows this should fire well inside the window, as covered in obligation management.
  • A partner-side counterpart. Record the equivalent contact and duty on the other side, because most SDEA failures are joint failures and the first diagnostic question is which party held the ball.

A five-step implementation

Step 1, Inventory agreements by product and partner

Build a list of every product and partnership pair, then confirm an executed SDEA exists for each. Gaps are more common than teams expect, particularly where a distribution arrangement expanded into a new territory without the annex being revisited, or where a contract manufacturer began receiving complaints without a safety annex in place.

Step 2, Extract the trackable provisions

For each agreement, pull the transfer windows, reconciliation cadence, screening scope, report contributions and audit support terms into a structured register. AI clause extraction handles the retrieval well, but the values need pharmacovigilance review because SDEA drafting varies widely and a window expressed from awareness behaves differently from one expressed from receipt.

Step 3, Assign owners and cadences

Convert each register entry into an obligation with a role owner, a schedule or trigger, an evidence requirement and an escalation threshold. Resist the temptation to assign everything to the qualified person or the safety lead, because concentration in one role is what causes obligations to be missed during absence.

Step 4, Wire alerting to the tighter clock

Configure alerts against the partner transfer window rather than the regulatory deadline, with escalation partway through. For recurring duties, alert on the preparation lead time rather than the due date, since a reconciliation due at month end needs data pulled well before it.

Step 5, Close the change loop

Establish who updates the register when an agreement is amended, a partner changes contacts, a territory is added or a product is divested. Without a defined change process the register is accurate on the day it is built and progressively wrong afterwards, which is worse than having no register at all.

See SDEA clauses become tracked duties

A working session on one of your own safety annexes and the obligations inside it.

Book a demo

What inspection readiness actually requires

Inspectors testing a partnership generally work through three layers. They ask for the executed agreement covering the product and territory in scope, they ask for the version in force at the time of the cases they are examining, and then they ask for evidence that the agreed duties were performed during that period. The first two layers are document control and most organizations handle them. The third is where reconstruction begins, because demonstrating that transfers met the agreed window requires transfer times compared against the contractual figure, and demonstrating reconciliation requires completed reports with their discrepancy investigations closed out. Teams that keep this as a tracked obligation register produce the evidence as a report. The same principle applies across GxP contract obligations more broadly, as set out in the 21 CFR Part 11 and GxP audit checklist.

A tracking model by obligation type

SDEA duties fall into a small number of shapes, and each shape needs different monitoring. The table below shows the pattern most pharmacovigilance operations teams settle on, with the alerting approach that suits each.

Obligation typeTriggerTypical ownerMonitoring approach
Case transfer to partnerAwareness of a valid casePV operationsCountdown with mid-window escalation
Case reconciliationRecurring, monthly or quarterlyPV operationsScheduled with preparation lead time
Literature screeningRecurring, weekly or monthlySafety surveillanceScheduled with scope confirmation
Aggregate report contributionFixed lead time before submissionPV scientistMilestone with upstream data request
Inspection notificationRegulatory inspection notice receivedAlliance managementEvent-driven with same-day escalation

The safety data exchange agreement is one of the clearest cases where contract value is realized entirely after signature. Nothing in the negotiated text reduces risk on its own. What reduces risk is a register where each recurring duty has an owner still in post, a cadence reflecting the tighter of the two clocks, an evidence artifact that closes it, and an escalation path that fires before a deadline rather than after.

For related guidance, see Co-promotion agreement obligations alliance teams miss, Expanded access program agreements, a control guide and DSCSA trading partner agreement control datasheet.

FAQ

SDEA questions PV and contract teams ask

What is the difference between an SDEA and a pharmacovigilance agreement? +
In practice the terms are used interchangeably, and the choice is largely regional and organizational habit. Safety data exchange agreement emphasizes the mechanics of transferring case information between parties. Pharmacovigilance agreement is the broader label and is sometimes used for documents that also cover risk management plan contributions, periodic report authorship and signal management governance. What matters operationally is not the title but whether the document allocates every safety responsibility for the product unambiguously to one named party.
Who needs an SDEA in place? +
Any arrangement where two or more organizations share responsibility for a product that has safety reporting obligations. Common triggers include in-licensing and out-licensing, distribution and marketing authorization transfers, co-promotion and co-marketing, contract manufacturing where the manufacturer may receive complaints, and clinical supply arrangements. Regulators expect the agreement to exist before the partnership becomes operational, and the absence of one when a partnership is already shipping product is a recurring inspection finding.
Why are transfer timelines the highest-risk part of an SDEA? +
Because the partner-to-partner clock sits inside the regulatory clock, and any slippage consumes time the receiving party needs to meet its own submission deadline. If a partner has a short window to forward a valid case and misses it, the marketing authorization holder may have very little time left to complete assessment and submit. The consequence is not a contract dispute in the first instance, it is a late regulatory submission. That is why transfer windows deserve monitoring with escalation well before the deadline rather than after it.
What does reconciliation mean in an SDEA context? +
Reconciliation is the periodic comparison of case counts and identifiers between parties to confirm that everything one side sent was received and processed by the other. It catches cases lost in transmission, duplicated cases and cases misclassified as non-valid. The agreement normally sets a frequency such as monthly or quarterly, defines who initiates it, and states how discrepancies are investigated and closed. Reconciliation is an obligation with a cadence and an evidence requirement, which makes it well suited to scheduled tracking rather than to a recurring calendar reminder.
How do SDEA obligations change when a product is divested or a partner changes? +
A transfer of marketing authorization or a change of partner requires the agreement to be revisited rather than inherited. Responsibilities that were allocated to the outgoing party need to be reassigned explicitly, historical case data has to be transferred with a documented handover, and the literature screening scope may change if territories change. Treating the SDEA as an annex that travels unchanged with the parent agreement is a common error, because the operational contacts, system interfaces and reporting territories almost always need updating.
What SDEA evidence do inspectors ask for? +
Inspectors generally ask for the current executed agreement covering the product and partnership under review, the version history showing what was in force at the time of the cases they are examining, and records demonstrating that the agreed duties were performed. The performance evidence is the part teams struggle with most, because it means showing transfer times against the agreed window, completed reconciliations with their discrepancy resolutions, and the training or qualification records the agreement requires. A tracked obligation register produces that evidence continuously rather than as a retrospective reconstruction.

Track safety agreement duties, not just the document

See how Aavenir turns SDEA clauses into owned obligations with cadences, escalation thresholds and inspection-ready evidence trails.

  • ✓Clause-to-obligation extraction with owners and due dates
  • ✓Version-controlled agreements with performance evidence per partner
  • ✓Standalone or native on ServiceNow