Tag: 21 CFR 812.28

  • Five Questions Every Medtech Founder Must Ask A CRO Before Signing The MSA






    Five Questions Every MedTech Founder Must Ask a CRO Before Signing the MSA


    Five Questions Every MedTech Founder Must Ask a CRO Before Signing the MSA

    Published by bioaccess®® | May 2026

    The Most Expensive Vendor Decision You Will Make Before Your Series B

    The master services agreement you sign with a CRO at the first-in-human stage is not just a vendor contract. It is a commitment to a timeline, a data architecture, a regulatory strategy, and — in ways most founders do not fully price until they are inside the engagement — a bet on whether that organization has ever actually done this before.

    Most MedTech founders spend more time negotiating SaaS subscription pricing than interrogating the operational fitness of the CRO they are about to trust with their first human study. CROs are practiced at presenting capability decks that are both technically accurate and structurally misleading: yes, they have run first-in-human studies. The questions are how many, how recently, where, and with what kind of dedicated team.

    Getting this wrong is costly in ways that do not appear on the MSA. A generalist CRO that applies Phase 3 operational logic to a 10-patient FIH study produces delays and data packages that do not travel well to FDA. The five questions below are designed for use in an actual vendor conversation, written so that an organization built specifically for first-in-human work answers all five without hesitation and a generalist CRO with Phase 3 heritage struggles on at least three. The contrast is the diagnostic.

    Question 1: “What percentage of your active studies are first-in-human?”

    This question cuts through every capability deck. Most large CROs list “Phase 1-4” as an integrated capability — and that is technically accurate. ICON, Syneos Health, and Parexel all offer first-in-human services. What their materials do not disclose is the proportion of revenue, headcount, and operational attention that FIH commands relative to their Phase 2-4 and post-market portfolio. According to the ICON plc 2024 Annual Report, the company’s growth narrative is anchored in Phase 2-4 and functional service offerings. Syneos Health’s service model is similarly configured around integrated biopharmaceutical solutions at scale — not the 10-patient device feasibility study a seed-stage founder needs to execute.

    The operational implication: when FIH is a small fraction of a CRO’s active portfolio, the project managers on your study are people who primarily run Phase 3 logistics. They understand protocol compliance and site management at the multi-site scale. What they may not have is the judgment that comes from running dozens of first human exposures — the real-time risk calculus of dose escalation, the site selection nuances that matter when you have ten patients rather than three hundred, and the FDA communication posture that FIH-specific experience produces.

    The follow-up question matters equally: “Who on your team has personally run more than ten first-in-human studies from device selection through first patient in?” An organization that cannot surface a dedicated FIH unit with named individuals and verifiable track records has not built FIH as an operational discipline.

    Red flag: Any CRO that cannot give you a clean percentage of active studies that are first-in-human has not built FIH as an operational core. It is a line item in a service menu. A CRO for which FIH is the only practice answers this question with a number above 90 percent — because there is nothing else on the portfolio.

    Question 2: “What is your documented median time from IND/IDE submission to site initiation in your primary jurisdiction?”

    Timeline is not a soft preference. It is a capital efficiency variable. Every month between IND/IDE equivalent submission and first patient in is a month of runway consumed and a month of competitive exposure while your device sits in regulatory review.

    The documented benchmark for ethics committee approval in Latin American FIH programs — for organizations with established site relationships and a mature submission infrastructure — is 4 to 8 weeks. In Colombia, where the regulatory framework has been shaped by over a decade of FIH execution, approval instances as fast as 15 to 18 days have been recorded. This is the result of site-level relationships, submission formatting that ethics committees recognize, and a regulatory team with institutional familiarity with the FIH protocol type.

    The U.S. comparison is not subtle. The average IRB/EC cycle in the United States for a novel device IDE study runs 6 to 12 months from submission to site initiation when you account for FDA review, IRB submission, site contracting, and institutional compliance review. In the EU, a 6-month horizon from IDE equivalent to first patient in remains the conservative planning assumption most regulatory counsel will give you.

    Illustrative Ethics Approval Timeline Comparison
    Jurisdiction Documented Range Basis
    LATAM (Colombia, established sites) 4-8 weeks (fastest: 15-18 days) bioaccess® operational track record, 2010-present
    United States (IDE pathway) 6-12 months (submission to site initiation) FDA CDRH IDE review statistics
    EU (CTR pathway) 3-9 months (submission to site initiation) EMA Clinical Trials Regulation implementation data

    When you ask this question, you are asking for documented median performance, not a best case. An organization that cannot answer with data has not been measuring what matters.

    Question 3: “Have you produced a data package accepted by FDA from a non-U.S. trial in the past 36 months?”

    The most persistent misconception among U.S. device founders about outside the United States clinical data is that FDA will not accept it. This misconception is expensive, because it leads founders to dismiss LATAM and other OUS execution pathways as regulatory dead ends when the regulatory framework explicitly accommodates foreign clinical data.

    21 CFR 312.120 permits FDA acceptance of foreign clinical data when the trial was conducted in accordance with Good Clinical Practice and under a protocol FDA would consider adequate and well-controlled. 21 CFR 812.28 extends parallel provisions to device studies, explicitly addressing acceptance of data from foreign investigations in support of IDE and PMA submissions.

    A first-in-human study conducted in Colombia, Brazil, or Peru under a GCP-compliant protocol, with a data architecture designed to meet FDA standards, can generate the foundational data package that supports a U.S. IDE submission. The LATAM study is not a workaround. It is a legitimate regulatory pathway.

    Executing it correctly requires a CRO that has actually done it. “We could produce FDA-compatible data” is not the same as “we have produced FDA-accepted data from an OUS trial in the past three years.” Ask for the latter. Ask for the regulatory outcomes. Ask whether the data traveled to FDA and what the response was.

    A CRO that has never navigated 21 CFR 312.120 or 812.28 in practice — regardless of what their regulatory affairs team says in a capabilities presentation — is asking you to be their learning case at the stage where you cannot afford that tuition.

    Question 4: “What is your per-patient cost range for a 10-to-15 patient FIH study in your primary jurisdiction?”

    Per-patient cost for a FIH study is the single most compressed way to understand the financial architecture of a CRO engagement before you are inside one. Cost transparency at the proposal stage is not a courtesy — it is a due diligence requirement.

    The documented range for per-patient costs in Latin American clinical trial sites runs from approximately $15,000 to $35,000 per patient for a first-in-human medical device study. The equivalent range in the United States and European Union runs from $40,000 to $75,000 per patient for comparable FIH work. That differential — roughly 59 percent lower cost per patient in LATAM — reflects the structural economics of clinical site operations in markets where investigator compensation, institutional overhead, and support cost structures differ materially from U.S. and EU norms.

    On a 10-patient FIH study, the arithmetic is direct: U.S. execution at $40,000-$75,000 per patient produces a $400,000-$750,000 direct study cost. LATAM execution at $15,000-$35,000 per patient produces a $150,000-$350,000 direct study cost. The difference — $250,000 to $400,000 — is material capital at the seed or pre-Series A stage. It extends runway. It funds the follow-on safety cohort. It covers FDA pre-submission preparation. It is the difference between a founder who enters their Series A with FIH data and remaining runway, and one who spent it all to generate the same data in a U.S. site.

    A CRO that deflects to “it depends on the protocol” without offering a range for a standard FIH configuration has either not run enough FIH studies to have a stable cost model, or does not want you comparing numbers before you have signed.

    Question 5: “Can you execute an EFS submission and manage a concurrent OUS FIH study under a single operational team?”

    The FDA’s Early Feasibility Study program is one of the most underutilized regulatory tools available to U.S. MedTech founders. According to the FDA Early Feasibility Study Program, the EFS pathway is designed for early-stage devices where clinical data is needed to inform device design — precisely the stage at which a FIH study occurs. The MDIC 10-Year EFS Journey analysis documented that approximately 70 percent of EFS submissions receive FDA response within 30 days — a timeline that makes concurrent OUS and U.S. enrollment operationally feasible within the same funding window.

    The strategic logic of concurrent execution is about data architecture, not just speed. A LATAM FIH study generating safety and early efficacy signals in parallel with a U.S. EFS enrollment produces a richer, more FDA-defensible data package than either study would generate independently. The LATAM cohort contributes patient volume and diverse population data; the U.S. cohort generates data with direct site-level FDA familiarity. Together, they build an IDE submission or PMA dataset from a position of evidence rather than assumption.

    Executing this dual-track strategy requires a CRO that can manage both pathways under a coherent operational structure — not two separate vendor relationships requiring a founder as the integration layer. The question diagnoses whether a CRO has built the capacity to hold both regulatory tracks in a single team, or is offering LATAM execution on one hand and a referral to a U.S. partner on the other.

    The U.S. EFS pathway and a concurrent LATAM FIH study are not competing strategies. They are the same strategy, executed in parallel, by an organization that understands both regulatory environments as a single integrated operation.

    How to Use This Checklist

    These five questions are not adversarial. They are clarifying. A CRO that has built its operations around first-in-human work will not find them uncomfortable — they will find them efficient, because the answers surface quickly from an organization that lives in this space every day.

    Use the questions in the initial capabilities conversation, before you have a proposal on the table and a timeline pressure that makes switching feel costly. The moment to evaluate operational fit is before you have signed anything, not after you are inside a study running six months behind the timeline the capabilities deck implied.

    • What percentage of your active studies are first-in-human?
    • What is your documented median time from IND/IDE equivalent submission to site initiation?
    • Have you produced a data package accepted by FDA from a non-U.S. trial in the past 36 months?
    • What is your per-patient cost range for a 10-to-15 patient FIH study?
    • Can you execute an EFS submission and manage a concurrent OUS FIH study under a single operational team?

    If the answers satisfy all five questions, you are talking to a CRO that may be able to run your first human study competently. If they do not, you have learned something before the signature, not after.

    Ready to Run the Evaluation?

    bioaccess® works with MedTech founders at every stage of FIH preparation — from regulatory strategy through first patient in. If you want to talk through your specific program against these five criteria:

    Sources