Back to Resources

Blog

PSMF Lifecycle Management: What Happens Between “The System Changed” and “The File Is Approved”?

Inspection ReadinessSeptember 2026

Follow eight stages of PSMF lifecycle management, from source change and impact assessment through review, approval, versioning, and final generation.

PSMF Lifecycle Management: What Happens Between “The System Changed” and “The File Is Approved”?

The Change Has Happened. The PSMF Has Not Changed Yet.

A PV vendor takes on a new responsibility.

The agreement is updated. The operational team knows. The new process starts.

But when does that change actually become part of the approved PSMF?

This is where PSMF lifecycle management matters.

The lifecycle does not begin when someone opens the PSMF to edit a Section or Annex. It begins when the pharmacovigilance system changes and continues until that change has been assessed, reviewed, approved, recorded, and preserved in the controlled file.

Key Takeaway: A PSMF change is more than an edit. The real control lies in making sure every relevant system change can travel from source to approved PSMF without losing its owner, rationale, review, or evidence along the way.

EU requirements state that the PSMF must be kept up to date and that its information should accurately reflect the pharmacovigilance system in place. The PSMF and its Annex are also subject to version control, as set out in Commission Implementing Regulation (EU) No 520/2012.

That creates an important period between:

“The system changed”

and

“The approved PSMF reflects the change.”

The eight stages below are a practical lifecycle model for controlling that period. They are not an eight-stage sequence prescribed by EMA or any other regulator.

The PSMF lifecycle starts with the change


One Change. Eight Handoffs.

Imagine the same vendor change moving through the system.

1. The Source Change Is Identified

The vendor agreement changes.

The first control is simple: does the PSMF process warrant an update?

Source changes may come from SOPs, vendors, organizational changes, products, safety systems, affiliates, audits, or other PV activities.

If this handoff fails, the operational system moves forward while the PSMF remains unchanged.

PSMF Manager's External Data Sources capability can help bring relevant source updates into a managed PSMF workflow.

2. Someone Decides What the Change Means

Now comes the PSMF impact assessment.

Does the change affect:

  • Any Section?
  • An Annex?
  • Both?
  • Global and local PSMFs differently?
  • No PSMF content at all?

That last outcome matters.

“No PSMF update required” is still a decision that needs to be documented.

The important control is that the change has been assessed and the resulting action is clear.

3. A Controlled Revision Is Opened

Only after the impact is understood should editing begin.

A revision should have an owner, a defined status, and a clear reason for being opened.

This is where PSMF change control separates a governed workflow from ad hoc editing of a shared document.

4. The Draft Is Updated Against the Source

The relevant Section or Annex is revised using the approved source information.

This stage answers:

Does the PSMF still tell the same story as the system it describes?

A vendor responsibility should not say one thing in the agreement and something different in the PSMF.

5. The Draft Has to Survive Review

Review should go beyond checking wording.

Reviewers need to look at:

  • The supporting source
  • The scope of the change
  • Related Sections and Annexes
  • Global or local impact
  • Whether anything has been missed

Tracked Changes can make the revision visible, but the judgment remains with the reviewer.

One change. One traceable story.

6. Approval Turns a Proposal Into a Controlled Decision

Before approval, the update is proposed PSMF content.

After it passes the organization's defined approval workflow, it becomes part of the controlled record.

The evidence should clearly show who approved what and when, with appropriate QPPV visibility and oversight.

Approval should not have to be reconstructed later.

7. Can You Still Explain the Change Six Months Later?

This is where Annex I, audit trail, and version history work together.

EvidenceQuestion It Answers
Annex IWhat changed?
Audit trailWho performed the action and when?
Version historyWhich approved PSMF state existed?

EMA requires relevant alterations to be recorded in the PSMF logbook, including the date, responsible person and, where appropriate, the reason for the change.

For a deeper distinction, see PSMF Version History vs Audit Trail.

8. The File Is Generated, Retained, and Becomes the New Baseline

The approved content can now be compiled into the controlled PSMF.

The final version should be retrievable, previous approved versions should remain preserved, and the approved state should be protected from uncontrolled editing.

PSMF Generation and Version History support this final part of the lifecycle.

But Stage 8 is not really the end.

The approved PSMF now becomes the baseline against which the next system change will be assessed.


Where Does PSMF Lifecycle Control Usually Break?

Look for the handoffs:

The source changed, but nobody assessed the PSMF impact.

The content was revised, but the source was not checked.

The update was approved, but Annex I was completed later.

A new version exists, but the previous approved state cannot be retrieved.

If any of these happen, the issue is not simply document maintenance.

It is a break in the PSMF lifecycle.

A well-managed lifecycle keeps the real PV system and the approved PSMF connected through every change, rather than trying to reconcile the two later.


See How One Change Moves Through the Full PSMF Lifecycle

PSMF Manager connects source changes, impact review, tracked revisions, approval workflows, version history, Annex I support, and final PSMF generation within one controlled environment.

Request a Demo to see how a change can move from source to approved PSMF without losing the evidence between the two.


FAQs

Frequently Asked Questions

What is PSMF lifecycle management?+
PSMF lifecycle management is the controlled process used to move relevant PV system changes through impact assessment, revision, review, approval, versioning, and final PSMF documentation.
When does the PSMF lifecycle begin?+
It begins when a relevant change occurs in the pharmacovigilance system, not just when someone starts editing the PSMF.
Does every source change require a PSMF update?+
No. A relevant source change should be assessed for PSMF impact. The result may be an update, further review, or a documented decision that no PSMF change is required.
Why is Annex I important in the PSMF lifecycle?+
Annex I supports the history of relevant PSMF alterations and helps show what changed over time, including a clear depiction of what change was made and by whom.
How do audit trails and version history support PSMF lifecycle management?+
Audit trails show the actions that occurred during the lifecycle. Version history preserves the approved PSMF states created as a result of those actions.