Special challenges are faced when
validating cloud computing systems!

GxP Compliance


In the regulated environment of the life sciences industry (pharmaceutical and medical technology), computer systems that have an impact on product quality, patient safety or data integrity must be validated according to legal requirements and kept in a valid state throughout the entire system life cycle. This also applies to cloud-based systems, which are becoming increasingly common in the life science industry.

Cloud computing refers to the provision of IT infrastructure and IT services, such as storage capacity, computing power or application software as a service via the Internet, dynamically adapted to demand.

Chapter 7 of the EU-GMP guidelines also applies to the use of cloud services:

  • Suitability of the provider must be checked by audits
  • Service is to be contractually specified
  • Quality is to be controlled by appropriate measures (monitoring)

A special feature here is that the entire supply chain must be considered, since many providers themselves purchase services as cloud services.

For more than 20 years we have been validating various computer systems for SMEs and international corporations (link to customer list), such as ERP systems (including Microsoft Dynamics), document management systems (DMS), laboratory information systems (LIMS), customer developments and spreadsheets (e.g. MS Excel-based applications).
Based on this experience, we have developed a cost-effective and scalable software validation method over the years. The DHC Best Practice Method is a framework consisting of a process model, work instructions (SOPs), templates, training material and tools. It covers the entire system lifecycle from initial implementation, through the operational phase to decommissioning and data archiving.
We have further adapted this method for cloud-based systems. In doing so, we take into account the special characteristics of these systems, such as the reduced user control over the system, management of the service provider or software supplier, protection of data in the system and software changes by the provider



Compliance Check & Strategy

In a large number of projects we have become acquainted with and optimized various methods for the validation of computer systems. These are basically applicable to cloud based solutions. A critical aspect in the use of cloud based systems is the selection, use and management of service providers and software suppliers. This aspect is especially taken into account here.

Our consultants are happy to support you competently in the following topics:

  • Supplier selection and qualification incl. supplier or service provider audits
  • Review of the Master Service Agreements or the Service Level Agreements
  • Development of validation strategies considering the delivery objects of the Cloud Service Suppliers
  • Fit-Gap Inspection Readiness Analysis of your validation framework and documentation (Friendly Audit / Compliance Check)
  • 21 CFR Part 11 & EU GMP Annex 11 Assessments
  • Data Integrity Assessment
  • Develop remediation plans, such as adapting your risk-based validation strategy to the challenges of cloud-based systems
  • Conception of validation framework work instructions, templates and training documents
  • Software validation / compliance workshops
  • Development of test strategies
  • Development of data migration and verification strategies
  • Coaching of QA / validation managers

Validation Services

The core of our Validation Services is the risk-based and cost-effective validation of your cloud-based systems. We validate either according to your work instructions or, if desired, according to the DHC Best Practice Method. We offer the following implementation services:

  • Qualification or auditing of the cloud service provider
  • Creation of a service level (SLA) or quality agreements with the cloud service provider
  • Validation of the software systems and the business processes mapped to them during implementation
  • Turnkey implementation of Validation-Remediation projects for audit readiness
  • Software validation method: Framework with work instructions is created, implemented and trained.

Our Validation Services include the assumption of all validation activities – from project management to document creation – and include

  • Creation of validation strategy, plan and report
  • Creation / Review of Life Cycle Documents
  • Requirement management and process mapping
  • Project management
  • Training management
  • Test management
  • Data migration and data verification strategies
  • Change management
  • Periodic Review
  • Supplier management
  • Audits of suppliers and service providers

Managed Validation Services

With our “Managed Services for Validation” the effort and costs of IT Compliance can be reduced and made transparent. Depending on the initial situation, we offer service packages in the area of Managed Validation Services that are specially tailored to your customer requirements. These range from targeted support (Validation as a Service = VaaS) to a full service package

Depending on the desired level of support, we provide the necessary compliance concept, methods and resources for achieving and maintaining IT compliance. In doing so, we rely on more than 20 years of experience in this area



Make use of our experience and industry expertise as a validation specialist

Matthias Bothe

Managing Director & Industry Unit Manager
Life Sciences, Chemie and Medical Engineering
phone: +49 681 93 666 0

Matthias Bothe, DHC GmbH
Carsten Buri

Director Sales & Marketing
phone: +41 44 500 888 7

Carsten Buri, DHC AG
Request information!

Learn more about our consulting services for GxP Compliance!



15. Oktober
Webinar (in German)

VxP, the cloud-based Validation Platform for the Life Sciences

With VxP, DHC offers a cloud-based validation platform to accelerate validation processes and digitalise documentation.

22. Oktober
Webinar (in German)

Test equipment management and monitoring

Presentation of the test equipment management integrated in SAP with all functions for the company-wide management of operational test equipment.

04. November
Webinar (in German)

SAP S/4HANA Transformation and Validation in Life Sciences

Learn everything about phases for the system transformation (system conversion) of an SAP ECC to S/4HANA with integrated validation.

26. November
Webinar (in german)

APQP, FMEA and PLP with QM solutions from SAP (SAP QM)

Presentation of the various SAP tools for mapping APQP and presentation of SAP PPM, FMEA, control plan, inspection plan and quality notification

09. November
Life Online Training

SAP: Validation and GMP Compliance (Live Online Training der ECA Academy)

Online training with speakers from DHC GmbH, organised by Concept Heidelberg on behalf of the ECA Academy,


Our webinars are provided as a free service for DHC customers and potential customers.