Frequently Asked Questions
Common questions about contract research organizations, outsourcing, certifications, and costs.
What is a CRO (contract research organization)?
A CRO is a company that provides outsourced research, development, and testing services to the pharmaceutical, biotechnology, and medical device industries. CROs handle drug discovery, preclinical safety studies, clinical trials, regulatory submissions, and post-market surveillance, allowing sponsors to access specialized expertise without building every capability in-house.
How do I choose the right CRO for my study?
Start by defining the exact services, therapeutic area, and timeline your study requires. Then shortlist CROs that hold the relevant certifications (GLP, GMP, CAP) and have a track record in your indication. Request proposals, compare timelines and pricing, check references from past sponsors, and conduct a qualification audit before signing.
What is the difference between a CRO and a CDMO?
A CRO focuses on research and testing — preclinical studies, bioanalysis, clinical trials, and regulatory support. A CDMO (contract development and manufacturing organization) develops formulations and manufactures drug products at scale. Some companies combine both functions, but the core distinction is research services versus production and supply-chain capabilities.
What services do CROs typically offer?
Common CRO services include target identification, lead optimization, in vitro and in vivo pharmacology, ADME/PK studies, toxicology, bioanalytical testing, Phase I–IV clinical trial management, medical writing, regulatory affairs, and pharmacovigilance. Full-service CROs cover the entire drug-development pipeline, while niche CROs specialize in one or two disciplines.
How much does it cost to outsource a clinical trial to a CRO?
Costs vary enormously by phase, indication, and geography. A simple Phase I pharmacokinetic study may cost $1–3 million, while a global Phase III oncology trial can exceed $100 million. Key cost drivers include patient enrollment targets, number of clinical sites, regulatory complexity, endpoint assessments, and the length of the treatment period.
What is GLP certification and why does it matter?
Good Laboratory Practice (GLP) is a quality system governing nonclinical safety studies submitted to regulatory agencies. GLP ensures that study protocols, raw data, and final reports are reliable and reproducible. Regulatory bodies like the FDA and EMA require GLP-compliant data for IND and MAA submissions, making it essential for any preclinical CRO engagement.
What is GMP compliance for CROs?
Good Manufacturing Practice (GMP) sets quality standards for producing investigational drugs and commercial pharmaceuticals. CROs involved in formulation development, fill-finish, or analytical release testing must operate under GMP to satisfy FDA 21 CFR Parts 210/211 and EU Annex 13. GMP compliance ensures product identity, strength, purity, and quality throughout manufacturing.
What is the difference between a full-service and niche CRO?
A full-service CRO offers end-to-end capabilities from discovery through post-marketing, providing a single point of accountability. A niche CRO specializes in a narrow discipline — such as bioanalytical testing, medical writing, or ophthalmology trials — delivering deeper domain expertise. Sponsors often blend both models depending on program complexity and internal capabilities.
How long does a typical CRO engagement last?
Duration depends on the service scope. A standalone bioanalytical assay validation may take 3–6 months, while a full preclinical-to-Phase-III partnership can span 7–10 years. Most project-level engagements run 12–24 months. Master service agreements are typically signed for 3–5 years, with individual work orders issued as studies arise.
What should be in a CRO master service agreement?
A well-drafted MSA covers scope of services, pricing model, intellectual property ownership, data rights, confidentiality, liability caps, indemnification, regulatory inspection support, quality oversight, change-order procedures, termination rights, and dispute resolution. It should also specify key performance indicators, timeline milestones, and governance committee structures.
What is a functional service provider (FSP) model?
Under an FSP model, a CRO supplies dedicated staff who embed within the sponsor's organization and follow the sponsor's SOPs, systems, and governance. Unlike full outsourcing, the sponsor retains operational control. FSP is popular for clinical monitoring, data management, and pharmacovigilance when sponsors want to scale capacity without relinquishing oversight.
How do I audit a CRO?
Begin with a desktop review of the CRO's quality manual, SOPs, regulatory inspection history, and corrective action logs. Then conduct an on-site audit covering facilities, equipment calibration, staff training records, data integrity practices, and document control. Use a risk-based approach, focusing on areas critical to your study's endpoints and regulatory submission strategy.
What are the top CROs by revenue?
The largest CROs by annual revenue include IQVIA, Labcorp Drug Development (formerly Covance), Charles River Laboratories, PPD (part of Thermo Fisher), ICON, Syneos Health, Parexel, and Medpace. These companies each generate billions in revenue and operate globally, but many mid-size and specialty CROs deliver excellent results in specific therapeutic or scientific niches.
Can startups afford to work with CROs?
Yes. Many CROs offer flexible engagement models sized for early-stage companies — milestone-based pricing, shared-risk partnerships, or à la carte service menus. Niche CROs often provide competitive rates for focused studies. Startups should clearly define scope, negotiate payment schedules tied to deliverables, and consider smaller CROs that prioritize emerging biotech clients.
What is bioanalytical testing?
Bioanalytical testing measures drug concentrations, metabolites, and biomarkers in biological samples like blood, plasma, urine, and tissue. Techniques include LC-MS/MS, ligand-binding assays, immunoassays, and flow cytometry. Regulated bioanalysis follows FDA and EMA guidelines, and the data supports pharmacokinetic, pharmacodynamic, and immunogenicity assessments across all development phases.
What is preclinical vs clinical CRO work?
Preclinical CRO work covers everything before a drug enters human trials: target discovery, in vitro screening, animal pharmacology, toxicology, and ADME studies. Clinical CRO work manages human studies — from Phase I first-in-human safety trials through Phase IV post-marketing surveillance. The regulatory, scientific, and operational skill sets differ significantly between the two stages.
How do I transfer a study between CROs?
Study transfer requires a detailed transition plan covering data migration, regulatory document handover, site re-qualification, investigator notifications, IRB/ethics amendments, supply chain continuity, and patient safety oversight. Assign a transition project manager, define parallel-run timelines, and ensure no gap in safety reporting. Transfers typically take 3–6 months depending on study complexity.
What certifications should I look for in a CRO?
Essential certifications depend on the work scope. GLP is required for nonclinical safety studies. GMP covers manufacturing and analytical release. ISO 17025 certifies analytical laboratory competence. CLIA and CAP apply to clinical diagnostic labs. AAALAC accreditation ensures humane animal care. GCP compliance is mandatory for any CRO conducting human clinical trials.
What is CAP accreditation for laboratories?
CAP (College of American Pathologists) accreditation is a rigorous laboratory quality program recognized by CMS as equivalent to CLIA certification. CAP-accredited labs undergo biennial on-site inspections and participate in proficiency testing. For CROs offering clinical diagnostic or companion-diagnostic testing, CAP accreditation signals reliable, high-quality analytical results to sponsors and regulators.
How do CROs handle data integrity?
CROs protect data integrity through validated electronic systems with audit trails, role-based access controls, standardized data entry conventions, and regular backup procedures. They follow ALCOA+ principles — data must be Attributable, Legible, Contemporaneous, Original, and Accurate. Quality assurance teams conduct routine audits, and any deviations trigger formal CAPA investigations.