News: Avesta Labs has become a Select Services Partner in the Claude Partner Network. Read the announcement

AI co-workers for pharma quality. Every decision still yours.

AI that does the routine quality work. They run your OOS investigations, deviations and CAPA, and GMP self-inspections the way an inspector expects. They write each step, name the rule behind it, and wait for your QA to sign.

Why now

Inspectors check your records, not just your results.

Whether you answer to CDSCO or the TGA, GMP (Good Manufacturing Practice) wants it all on record. Every test result outside its limits is investigated. Every significant deviation is traced to its root cause and fixed with a CAPA (corrective and preventive action). Self-inspections happen regularly. Most plants know how to do this. The hard part is the hours a few experienced people spend writing it all up, every time, without missing a step.

India

Revised Schedule M

The extra time given to MSMEs (smaller manufacturers) ended on 31 December 2025. It now applies to every site it covers, and CDSCO has started inspections.

Australia

PIC/S Guide to GMP

The TGA inspects against the PIC/S Guide. The Manufacturing Principles make it legally binding. The TGA adopted version PE009-17 on 1 September 2025.

Three AI co-workers for your pharma quality system (QMS).

OOS investigations

OOS investigations, done the way the regulator expects

First it checks that the test result really is out of specification (OOS), meaning outside its limits. Then it takes the case through Phase I in the lab and Phase II in manufacturing. Your lab head and production head give it the findings. It writes the 5-Why (asking "why" until the real cause shows), the impact check and the CAPA. It will not declare a result invalid or allow a retest without a recorded scientific reason.

Phase I labPhase II manufacturingBatch decision report
OOS · QOI-16Batch IBU250901
Ibuprofen 400 mg · Assay by HPLC
90.0110.0Specification88.5%
Spec check · calculated, not guessedOOS confirmed

Phase I · Lab

Signed by QC Lab Head

No lab error

Phase II · Manufacturing

Signed by Production Head

Root cause found

QA review & decision

QA Head

Waiting to sign
Proposed: reject batch21 CFR 211.192
Deviation · QDA-16QC Lab

Expired mobile phase used in a finished-product assay

Scope

Isolated

Quality impact

Moderate

GMP

Significant

Class: Major · close in 30 daysICH Q9

Root cause · 5-Why

No use-by control for prepared mobile phases, not simple operator error

CAPA plan

Correction: Batch re-tested · 99.2%, in spec
Corrective: SOP adds a use-by date to the label
Preventive: Expiry check before every HPLC run
Proof it worked · 60 daysQA closes

Deviations and CAPA

Deviations and CAPA written up the moment they happen

Tell it what happened in plain words. It rates the deviation (a step that went off procedure) as minor, major or critical and sends it to the right owner. Together they find the root cause, the real reason it happened. It turns that into a CAPA with named owners and dates. It closes nothing until the fix is shown to work.

Severity ratingRoot causeCAPA and proof it worked

Self-inspection

A self-inspection that finds the gaps before an inspector does

Give it the logs you already keep, like your calibration log, CAPA register and deviation log. It checks every row the way an auditor would. It finds the gaps hidden in scattered records and gives you a score for how ready you are. It never certifies the site. Your QA head does.

CalibrationOverdue CAPAsRepeat deviations
Self-inspectionQSA-9 · Q3 audit
38out of 100Not ready

Records read

Calibration log19 instruments4 overdue
CAPA register15 CAPAs6 overdue
Deviation log15 entries1 recurring

Findings

Critical · CAPA backlogICH Q10
Critical · Granulation deviationsICH Q9
Major · Overdue calibration21 CFR 211.68
Draft for QA reviewQA confirms
Audit boardQSA-9 · Self-inspection
3 findings confirmed by QA HeadSigned
Audit co-worker opens one CAPA ticket per finding
Deviation board · To do+3
QDA-17CAPA backlog, 6 overdueCritical
QDA-18Recurring granulation deviationsCritical
QDA-194 instruments past calibrationMajor
Rule and owner filled inDone on its own

Working as one team

Each finding goes straight to a fix

The co-workers pass work to each other. Say the self-inspection finds a gap and your QA confirms it. A CAPA ticket opens on the deviation task board, with the rule and the owner already filled in. The Deviation & CAPA co-worker takes it from there. Nothing gets lost between two spreadsheets.

Audit to CAPARule carried overOne full history

Built for GMP and for the way inspectors check records.

The same four rules apply to every co-worker, on every case.

Facts are calculated, not guessed

Is the result outside its limits? Is the calibration overdue? How serious is this deviation? Fixed rules built into the software answer these, not the AI. The AI writes and explains. It never makes up a number.

A qualified person signs every key step

The severity rating, root cause, CAPA plan, batch decision and closure all wait for the named owner. The co-worker prepares each decision and records who signed it.

Every finding names its rule

Each step shows the rule it follows, so a reviewer can check it in seconds. Today they work to the FDA's 21 CFR 211 and OOS guidance, ICH Q9 and Q10 (risk and quality systems), Revised Schedule M and WHO GMP. We add the rules your site works to.

Nothing is deleted

Every comment, finding and sign-off stays on the record, and the final report is attached to the ticket. When an inspector asks, the full history is there, kept to ALCOA+ rules for trustworthy records.

What changes for your QA and QC teams.

It is more than faster paperwork. These four things decide how your next inspection goes.

Inspection ready

Ready on any day, not just audit week

Run a self-inspection whenever you like, so gaps show up while there is still time to fix them.

Consistent records

Every investigation written the same way

Same layout, same checks, same rules cited, whoever is on shift. Records no longer depend on who wrote them.

Experts back on the floor

Your best people make decisions, not documents

Your QA, QC and production heads give the findings and sign. The write-up, the hand-offs and the report are done for them.

Nothing slips

Overdue CAPAs show up before they pile up

Every case sits on one shared task board with an owner and a next step. A stuck investigation shows up the day it stops moving.

Keep your quality system and records. Just add AI co-workers.

They work on a shared task board your team already knows. They read the logs, SOPs and records you already keep. No new quality management system (QMS) to set up first. Still running on Excel? That is exactly where our pharma co-workers started.

Excel
SharePoint
Google Drive
Teams
SAP
Gmail
Also your quality, lab or business software (QMS, LIMS or ERP). If your records are in it, a co-worker can read them.

Your first AI co-worker is working within 4 to 8 weeks.

Weeks 1–2

We learn your SOPs, your records and who signs what

Weeks 3–6

Our team builds your first co-worker around your own procedures

Weeks 7–8

It runs alongside your current process while your QA checks it

Ongoing

It gets better, then we add the next one

Questions QA heads ask about AI in pharma quality

Clear answers to the questions that usually decide whether this is safe to try.

Mostly for the work around a quality decision, not the decision itself. AI co-workers take on the routine work. They check whether a result is out of specification, rate deviations, draft root cause findings and CAPA plans, read your calibration, CAPA and deviation records to find audit gaps, and write the final reports. A qualified person in your QA team still reviews and signs every step.

No. The co-worker suggests what to do with the batch and shows its reasoning. But release, rejection, declaring a result invalid and closure are always signed by your qualified person. It stops at each of those points and records who approved what, and when. Your QA, QC and production heads spend their time on decisions, not the write-up.

Yes, with your people. The co-worker rates the deviation as minor, major or critical, using fixed risk rules based on ICH Q9, the international guideline on quality risk. It asks the area owner for the findings and works through a 5-Why with them, asking "why" until the real cause shows. It looks past "operator error" to the gap in the system behind it. Then it drafts the immediate correction, the corrective action and the preventive action, with named owners and dates. It does not close the CAPA until a follow-up check shows the fix worked.

Testing into compliance means retesting an out-of-specification result again and again until a passing number appears, then reporting that one instead. FDA guidance calls it unscientific and objectionable under CGMP. The OOS co-worker will not declare a result invalid unless the Phase I lab investigation has recorded a real lab error. It will not go past the retest limit in your SOP. The original result always stays on the record.

Revised Schedule M is India's updated Good Manufacturing Practice (GMP) rule for medicines. It was notified in December 2023 and is in line with WHO GMP. Larger manufacturers had to comply first. The extra time for MSMEs (micro, small and medium enterprises) ended on 31 December 2025. So it now applies to every manufacturing site it covers, and CDSCO and state inspectors are checking it. It expects a pharmaceutical quality system, quality risk management, regular self-inspections, and traceable records with an audit trail, a log of who did what and when.

Yes. The TGA applies the PIC/S Guide to GMP. It asks for the same core processes the co-workers run: investigating out-of-specification results, taking significant deviations to a root cause and a CAPA, and self-inspections on a planned schedule. Today the co-workers' rule references are FDA, ICH and Revised Schedule M. For an Australian site, we add the PIC/S clauses your SOPs work to as part of the build. Your QA still signs every step.

Part 11 (the US rule on electronic records and signatures) and ALCOA+ (the standard for trustworthy data) are about how records and signatures are kept. Your company stays accountable for them. The co-workers are built to support that. Every comment, finding and sign-off is kept with a time and a name, nothing is deleted, and the final report is attached to the record. Before it is used for real decisions, we plan its validation with your QA, on your own procedures. Validation means formally proving it does what it should.

No. It works alongside your QMS (quality management system), or alongside your spreadsheets if you have no QMS yet. A chatbot or copilot answers one person's question. A co-worker takes charge of a case from start to finish. It moves the ticket between people, runs the checks, drafts each record, and hands work to the next co-worker.

Yes. You do not need a new QMS first. The self-inspection co-worker was built to read the calibration logs, CAPA registers and deviation logs that most sites already keep in Excel. Things get more organised as you go.

Your people review every step before it counts, so a mistake is caught at sign-off, not after. The facts that matter most, like whether a result is out of specification or a calibration is overdue, are worked out by fixed rules, not written by the AI. It cannot see your shop floor or instruments, so it asks your people for evidence instead of guessing.

That is your call. We can run it in your country, inside your own cloud account, or on your own servers, so your batch and quality records never leave your control. Your current rules on who can see what stay as they are. We do not use your data to train our models.

Your first co-worker is usually working within 4 to 8 weeks. Start with one process. Deviations and CAPA is a good first choice, because it touches every department. So is a self-inspection, because it shows exactly where the gaps are. Once the first co-worker is working, the next one joins the same task board.

Have a question we haven't answered?— we'd rather answer it for you than have you guess.

Start with one process. Grow when you are ready.

Let's talk about where an AI co-worker would save your quality team the most time

Contact Us

greenDot

We'll use your details to reply to your enquiry. See our Privacy Policy.

Testimonial

greenDot
double quote

AvestaLabs has been an indispensable partner for OnlyFacts. Their development of AI agents on our proprietary datasets combined deep technical expertise with innovative problem-solving and sound strategic advice. They have become a collaborative and trusted extension of our team. We would recommend Avesta without hesitation to organisations seeking high-quality technology delivered with integrity and care.

double quote
Juliette O'Brien OAM

Juliette O'Brien OAM

CEO and Co-Founder, OnlyFacts.io