https://simplecast.com Operations Utopia: Striving for Practical Excellence in Life Sciences Operations In what may be one of the most niche topics for a podcast, Operations Utopia is a podcast about the desperate need to streamline Life Sciences Operations to get treatments to patients faster and explores how life sciences organizations should operate—by examining why they usually don’t. Disclaimer: The podcast content represents the opinion of the speakers, guests & host and does not reflect those of their organizations, system vendors, or service providers. 2026 Operations Utopia en Fri, 14 Aug 2026 15:00:00 +0000 Fri, 14 Aug 2026 15:00:17 +0000 https://operations-utopia.simplecast.com Operations Utopia: Striving for Practical Excellence in Life Sciences Operations https://image.simplecastcdn.com/images/df950f79-0fa8-4033-ad58-536486f0ec84/b26b99de-b0dc-4c95-b860-ed0ef11d180c/3000x3000/image_7.jpg?aid=rss_feed https://operations-utopia.simplecast.com episodic In what may be one of the most niche topics for a podcast, Operations Utopia is a podcast about the desperate need to streamline Life Sciences Operations to get treatments to patients faster and explores how life sciences organizations should operate—by examining why they usually don’t. Disclaimer: The podcast content represents the opinion of the speakers, guests & host and does not reflect those of their organizations, system vendors, or service providers. Matt Neal false https://feeds.simplecast.com/_vjeZR1p life sciences, operations, regulatory information management, regulatory operations, submissions Matt Neal mattnealcomedy@gmail.com 2ad0d60e-af57-4cc9-bc31-6d3dd23cb296 08 | Beyond the Paperwork — Operational Integrity, CSA, and the Illusion of Validation with Jeff Sovis Jeff Sovis is founder and principal consultant of Mindful FDA Compliance LLC, which he started in 2015. He began his career in the lab at Genzyme Biosurgery manufacturing cell-therapy products for burn victims, then moved into life sciences quality and validation consulting — roughly 12 years of it, specializing in MasterControl, Veeva Vault, and ETQ eQMS implementations, CSV, SOP harmonization, and audit remediation.

Key Topics

The illusion of validation

Six or seven years ago Jeff was validation lead on a single-instance MasterControl harmonization at one of the largest companies in the world. He had visibility into both the validation work and the executive-level operations meetings — and the real issues almost never surfaced in the validation document. They showed up in operational communication, in decisions made by stakeholders operating in silos, in documents that got split or lost. That gap between the paperwork and the operation is what he calls operational drift.

The checkbox trap in Category 3

For GAMP 5 Category 3 systems — where most SaaS lives — Jeff argues validation has drifted into a pass-through exercise instead of a tool for actually finding the seams in an implementation. His framing: risk correlates directly to the business process, so validation should be used to work out ways into and out of every foreseeable situation. Post-go-live matters just as much as day one because features keep landing.

On-prem to SaaS to AI

Matt traces how the industry dragged on-premise validation habits into SaaS and made a mess, then dragged that mess into AI. Jeff recalls the 2017 V-model era — test scripts due before anyone had access to the system, no sandbox — as an exercise that turned validation into paperwork theater. Today's ability to spin up sandbox environments changes the ceiling if the operating model catches up.

Automation vs AI — a line worth drawing

Jeff's line: automation you can prove works correctly. AI is different — it introduces a third unknown entity making final decisions. His starting pattern for organizations is AI as an outside system, not connected to production, used for education and trust-building. The human moving data across the boundary eliminates most of the risk. Matt pushes on what happens when we let agents operate where humans did — the scale of a mistake changes fast when the click-throughs disappear.

Continuous validation and always-on monitoring

Both agree the "validate on install and walk away" model is dead for modern systems. Matt frames it as always-on monitoring; Jeff notes he's hearing "continuous validation" more and more. This aligns with the direction of the FDA's Computer Software Assurance guidance, finalized in September 2025.

Chain of custody across a decade-long product

Matt goes off on the lifecycle math: a biotech product spans years — sometimes a decade — from lab to marketed product. Assuming a single human holds the information across that arc is fragile. Jeff picks up the thread with the "last mile" problem: workarounds harden into someone's job. He reframes it as misallocation rather than overallocation — that resource could be improving the system instead of patching around it.

Roles-and-responsibilities disconnect

Biotech organizations weren't built for this. Ten to fifteen years ago the enterprise ran on file cabinets. The transition to modern software requires people who understand a little of everything — quality, IT, business, GxP — rather than departments operating in silos. Jeff has seen audit findings tied to putting non-GxP experienced people into GxP roles as a fix.

The operational integrity assessment

Jeff's concrete offering: a two-to-three-week engagement, a roughly 20-page report focused on systems, testing, and procedures, with actionable feedback. Positioned as a low-investment way to align philosophies before something breaks in an audit.

Notable Quotes

Jeff: "It was almost never in the validation document."

Jeff: "Validation has kind of become like a checkbox exercise."

Jeff: "With AI there's a third unknown entity making final decisions."

Jeff: "I still think we're basically at square one."

Jeff: "It's not overallocation… it's misallocation."

Matt: "The longer you're not operating at an optimal level, the longer you're creating risk."

Matt: "We have to hold it to a higher standard."

Who Should Listen

Quality and validation leaders, regulatory operations professionals, life sciences IT, GxP software vendors and implementers, and anyone stewarding an eQMS through go-live and beyond. Especially useful if your organization is caught between traditional CSV instincts and the reality of SaaS plus AI.

References

Guest

Guidance and Standards

Concepts Referenced

  • GAMP Category 3 (non-configured products)
  • Computer System Validation (CSV) vs Computer Software Assurance (CSA)
  • V-model validation
  • Human-in-the-loop AI
  • Continuous validation

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> Fri, 14 Aug 2026 15:00:00 +0000 mattnealcomedy@gmail.com (Matt Neal) https://operations-utopia.simplecast.com/episodes/08-jeffsovis-6F1GpNvK Jeff Sovis is founder and principal consultant of Mindful FDA Compliance LLC, which he started in 2015. He began his career in the lab at Genzyme Biosurgery manufacturing cell-therapy products for burn victims, then moved into life sciences quality and validation consulting — roughly 12 years of it, specializing in MasterControl, Veeva Vault, and ETQ eQMS implementations, CSV, SOP harmonization, and audit remediation.

Key Topics

The illusion of validation

Six or seven years ago Jeff was validation lead on a single-instance MasterControl harmonization at one of the largest companies in the world. He had visibility into both the validation work and the executive-level operations meetings — and the real issues almost never surfaced in the validation document. They showed up in operational communication, in decisions made by stakeholders operating in silos, in documents that got split or lost. That gap between the paperwork and the operation is what he calls operational drift.

The checkbox trap in Category 3

For GAMP 5 Category 3 systems — where most SaaS lives — Jeff argues validation has drifted into a pass-through exercise instead of a tool for actually finding the seams in an implementation. His framing: risk correlates directly to the business process, so validation should be used to work out ways into and out of every foreseeable situation. Post-go-live matters just as much as day one because features keep landing.

On-prem to SaaS to AI

Matt traces how the industry dragged on-premise validation habits into SaaS and made a mess, then dragged that mess into AI. Jeff recalls the 2017 V-model era — test scripts due before anyone had access to the system, no sandbox — as an exercise that turned validation into paperwork theater. Today's ability to spin up sandbox environments changes the ceiling if the operating model catches up.

Automation vs AI — a line worth drawing

Jeff's line: automation you can prove works correctly. AI is different — it introduces a third unknown entity making final decisions. His starting pattern for organizations is AI as an outside system, not connected to production, used for education and trust-building. The human moving data across the boundary eliminates most of the risk. Matt pushes on what happens when we let agents operate where humans did — the scale of a mistake changes fast when the click-throughs disappear.

Continuous validation and always-on monitoring

Both agree the "validate on install and walk away" model is dead for modern systems. Matt frames it as always-on monitoring; Jeff notes he's hearing "continuous validation" more and more. This aligns with the direction of the FDA's Computer Software Assurance guidance, finalized in September 2025.

Chain of custody across a decade-long product

Matt goes off on the lifecycle math: a biotech product spans years — sometimes a decade — from lab to marketed product. Assuming a single human holds the information across that arc is fragile. Jeff picks up the thread with the "last mile" problem: workarounds harden into someone's job. He reframes it as misallocation rather than overallocation — that resource could be improving the system instead of patching around it.

Roles-and-responsibilities disconnect

Biotech organizations weren't built for this. Ten to fifteen years ago the enterprise ran on file cabinets. The transition to modern software requires people who understand a little of everything — quality, IT, business, GxP — rather than departments operating in silos. Jeff has seen audit findings tied to putting non-GxP experienced people into GxP roles as a fix.

The operational integrity assessment

Jeff's concrete offering: a two-to-three-week engagement, a roughly 20-page report focused on systems, testing, and procedures, with actionable feedback. Positioned as a low-investment way to align philosophies before something breaks in an audit.

Notable Quotes

Jeff: "It was almost never in the validation document."

Jeff: "Validation has kind of become like a checkbox exercise."

Jeff: "With AI there's a third unknown entity making final decisions."

Jeff: "I still think we're basically at square one."

Jeff: "It's not overallocation… it's misallocation."

Matt: "The longer you're not operating at an optimal level, the longer you're creating risk."

Matt: "We have to hold it to a higher standard."

Who Should Listen

Quality and validation leaders, regulatory operations professionals, life sciences IT, GxP software vendors and implementers, and anyone stewarding an eQMS through go-live and beyond. Especially useful if your organization is caught between traditional CSV instincts and the reality of SaaS plus AI.

References

Guest

Guidance and Standards

Concepts Referenced

  • GAMP Category 3 (non-configured products)
  • Computer System Validation (CSV) vs Computer Software Assurance (CSA)
  • V-model validation
  • Human-in-the-loop AI
  • Continuous validation

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> 08 | Beyond the Paperwork — Operational Integrity, CSA, and the Illusion of Validation with Jeff Sovis Matt Neal 00:37:12 Jeff Sovis and Matt push on a tension anyone who has ever run a validation project has felt: the documents say the system is fit for use, but the actual issues never showed up in the documents. This episode is about that gap. Jeff frames it as operational drift — the slow separation between what the paperwork claims and what the organization is actually doing. The conversation moves through GAMP Category 3 SaaS validation and the checkbox trap, into the on-prem → SaaS → AI paradigm collision, and lands on what "human in the loop" actually has to mean when a third, unknown entity is making decisions inside the process. Practical throughout — not a theory episode. Jeff Sovis and Matt push on a tension anyone who has ever run a validation project has felt: the documents say the system is fit for use, but the actual issues never showed up in the documents. This episode is about that gap. Jeff frames it as operational drift — the slow separation between what the paperwork claims and what the organization is actually doing. The conversation moves through GAMP Category 3 SaaS validation and the checkbox trap, into the on-prem → SaaS → AI paradigm collision, and lands on what "human in the loop" actually has to mean when a third, unknown entity is making decisions inside the process. Practical throughout — not a theory episode. false full 8 3080e43d-ffb4-4011-93a4-0d951168e78d 07 | Data Is Not an Afterthought: The RIM Reference Model — with Bala Balasubramanian Host: Matt Neal Guest: V. "Bala" Balasubramanian, PhD, MBA — DIA RIM Reference Model subteam lead

About the Guest

V. "Bala" Balasubramanian, PhD, MBA, is a strategic advisor in healthcare and life sciences and the subteam lead for the DIA RIM Reference Model. He has been associated with DIA for more than 14 years and also leads the DIA AI Consortium Regulatory Frameworks and Terminology workstream.

Bala spent his earlier career inside big pharma, then led the Healthcare and Life Sciences Industry Solutions Group at Orion Innovation as Senior Vice President before moving into independent advisory work. Across that arc — sponsor, vendor, standards leader — he has been consistently focused on the same problem: shifting regulatory affairs from a document-centric practice to a data-driven one. He's a co-author on the DIA RIM white paper (V2.0) and the RIM Reference Model V2.0 conceptual data model that came out of it.

Key Topics

The seven pieces of information. Bala opens with the story that has stayed with him for twenty years: circa 2004–2005, working for a global sponsor that couldn't reliably answer seven basic questions about its own products across markets. Each affiliate tracked things its own way. Free-text fields everywhere. "This is humanly impossible" — his message to leadership at the time. The problem was never system availability. It was data discipline.

How the RIM Reference Model actually got built. The origin story: a DIA working group formed around 2015, but it stalled on the definitional question — what is RIM? — before it could even talk about data elements. Bala joined the effort in 2018 as a second workstream launched alongside the white paper. Version 1.0 (released 2022–23) was a single, comprehensive Excel workbook that became unusable through filter-fatigue. The team pivoted to a proper conceptual data model — an entity-relationship diagram, objects and attributes catalogued on individual tabs, definitions and controlled vocabularies aligned where possible with IDMP and FHIR. That's Version 2.0.

Not a standard — a common terminology. Bala is careful to define what the reference model is and isn't. It's not a mandated standard. It's a platform-agnostic common terminology and taxonomy that industry can pick up as a starter kit for a new RIM implementation, as a backbone for a system migration, or as a comparison layer in M&A. Two vendors have told the team their own offerings are subsets of it. Sponsors have used it to build their own regulatory product hubs.

Data citizenship — treat it like money. Bala's most repeated line in the episode: in 40 years of banking in America, he's never received a wrong bank statement. Financial institutions reconcile trades every night because the discipline is embedded. Clinical does the same because trial data has to be pristine. Regulatory has been the outlier — filing today, entering the record next week — because the field has "gotten away with" treating data as secondary. That has to end.

Why performance objectives matter. Bala's structural fix: put data quality in the performance objectives of regulatory professionals. Not aspirational, not project-scoped — actually tied to review and incentive. It's uncomfortable, but he's clear that without accountability at the individual level, discipline never sticks.

Matt's baton metaphor — and the 10-to-12-year horizon. Matt's contribution to the discipline problem: a product lives 10 to 12 years minimum. Ownership passes person to person across that arc. Institutional memory has to survive the handoffs, and that requires each individual steward to keep the record current in real time — not just for themselves, but for whoever holds the baton next.

Configuring systems to fit the lifecycle. A recurring failure mode Bala flags: old RIM systems required 33 attributes on a single screen before you could save the record, without regard for what was actually knowable at that point in the product lifecycle. Progressive disclosure — capture what's available now, add fields as the record matures — plus cascading controlled lists, are table-stakes today. Matt notes a very recent feature enhancement in one major RIM platform that finally lets records start in a draft state even when downstream fields are required. In 2026.

The transformation-program cycle. Bala names a pattern anyone who has lived through a data-remediation program will recognize: three-year initiatives, big teams, big budgets, evangelists appointed. The program ends, reorgs hit, champions move on, resources shrink, data drifts, and the next remediation project starts. Fix: embed evangelism in the operational team — not the program team — so change management becomes implicit and continuous, not episodic.

When health authorities set the new bar. Matt's observation: inspectors have caught up. They now walk in expecting real-time answers from the RIM system and the TMF system, and they'll give an hour instead of days. That external pressure is doing what internal accountability couldn't.

The circle of affinity. Bala's frame for regulatory's place in the org: safety, PV, manufacturing, and labeling all depend on regulatory data being right. Regulatory sits at the center of that circle whether it wants to or not. Owning that role — and being visible in it — is the way ops earns its seat at the strategic table.

Prediction: data-driven submissions arrive, split focus is the risk. The rise of data-centric submissions is real. IDMP, structured labeling, structured CMC, structured clinical reports — all pushing industry toward MDM in R&D for the first time. But the volume of change is huge, resources are constrained, and outsourcing to captive centers can go transactional and lose data quality. His call: keep the discipline attached wherever the work goes.

Notable Quotes

"In the 40 years I've lived in America, I've never gotten a bank statement that's been wrong."

"As long as data is not treated equal to money, we'll have this situation in regulatory."

"It's not a systems issue. It's a discipline issue."

"For some reason, regulatory always has this afterthought mentality."

"You need to have data as one of your performance objectives — and either get incentivized or penalized based on that."

"In some ways, we've come full circle: we went document-centric, and now we're going back to data."

Who This Episode Is For

Regulatory operations, regulatory affairs, and data-governance leaders responsible for RIM strategy or implementation; system owners planning a RIM migration or M&A integration; RIM vendors benchmarking product coverage; and anyone still trying to make the case that regulatory data discipline is worth investing in.

References, People & Resources

Guest & Related Work

  • V. "Bala" Balasubramanian — Healthcare & Life Sciences Strategic Advisor; DIA RIM Reference Model subteam lead
  • Prior role: Senior Vice President, Life Sciences, Orion Innovation

DIA RIM Reference Model — Downloads

Standards & Regulatory Frameworks Referenced

  • IDMP (Identification of Medicinal Products)
  • eCTD and eCTD 4.0
  • FHIR (HL7)
  • ICH

Concepts Referenced

  • Data citizenship; the "circle of affinity"; progressive disclosure and cascading controlled lists; master data management (MDM) in R&D; regulatory product master; the transformation-program lifecycle

Transcript provided by Otter.ai.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> Fri, 17 Jul 2026 15:00:00 +0000 mattnealcomedy@gmail.com (Bala Balasubramanian) https://operations-utopia.simplecast.com/episodes/07-bala-balasubramanian-k4VSbok3 Host: Matt Neal Guest: V. "Bala" Balasubramanian, PhD, MBA — DIA RIM Reference Model subteam lead

About the Guest

V. "Bala" Balasubramanian, PhD, MBA, is a strategic advisor in healthcare and life sciences and the subteam lead for the DIA RIM Reference Model. He has been associated with DIA for more than 14 years and also leads the DIA AI Consortium Regulatory Frameworks and Terminology workstream.

Bala spent his earlier career inside big pharma, then led the Healthcare and Life Sciences Industry Solutions Group at Orion Innovation as Senior Vice President before moving into independent advisory work. Across that arc — sponsor, vendor, standards leader — he has been consistently focused on the same problem: shifting regulatory affairs from a document-centric practice to a data-driven one. He's a co-author on the DIA RIM white paper (V2.0) and the RIM Reference Model V2.0 conceptual data model that came out of it.

Key Topics

The seven pieces of information. Bala opens with the story that has stayed with him for twenty years: circa 2004–2005, working for a global sponsor that couldn't reliably answer seven basic questions about its own products across markets. Each affiliate tracked things its own way. Free-text fields everywhere. "This is humanly impossible" — his message to leadership at the time. The problem was never system availability. It was data discipline.

How the RIM Reference Model actually got built. The origin story: a DIA working group formed around 2015, but it stalled on the definitional question — what is RIM? — before it could even talk about data elements. Bala joined the effort in 2018 as a second workstream launched alongside the white paper. Version 1.0 (released 2022–23) was a single, comprehensive Excel workbook that became unusable through filter-fatigue. The team pivoted to a proper conceptual data model — an entity-relationship diagram, objects and attributes catalogued on individual tabs, definitions and controlled vocabularies aligned where possible with IDMP and FHIR. That's Version 2.0.

Not a standard — a common terminology. Bala is careful to define what the reference model is and isn't. It's not a mandated standard. It's a platform-agnostic common terminology and taxonomy that industry can pick up as a starter kit for a new RIM implementation, as a backbone for a system migration, or as a comparison layer in M&A. Two vendors have told the team their own offerings are subsets of it. Sponsors have used it to build their own regulatory product hubs.

Data citizenship — treat it like money. Bala's most repeated line in the episode: in 40 years of banking in America, he's never received a wrong bank statement. Financial institutions reconcile trades every night because the discipline is embedded. Clinical does the same because trial data has to be pristine. Regulatory has been the outlier — filing today, entering the record next week — because the field has "gotten away with" treating data as secondary. That has to end.

Why performance objectives matter. Bala's structural fix: put data quality in the performance objectives of regulatory professionals. Not aspirational, not project-scoped — actually tied to review and incentive. It's uncomfortable, but he's clear that without accountability at the individual level, discipline never sticks.

Matt's baton metaphor — and the 10-to-12-year horizon. Matt's contribution to the discipline problem: a product lives 10 to 12 years minimum. Ownership passes person to person across that arc. Institutional memory has to survive the handoffs, and that requires each individual steward to keep the record current in real time — not just for themselves, but for whoever holds the baton next.

Configuring systems to fit the lifecycle. A recurring failure mode Bala flags: old RIM systems required 33 attributes on a single screen before you could save the record, without regard for what was actually knowable at that point in the product lifecycle. Progressive disclosure — capture what's available now, add fields as the record matures — plus cascading controlled lists, are table-stakes today. Matt notes a very recent feature enhancement in one major RIM platform that finally lets records start in a draft state even when downstream fields are required. In 2026.

The transformation-program cycle. Bala names a pattern anyone who has lived through a data-remediation program will recognize: three-year initiatives, big teams, big budgets, evangelists appointed. The program ends, reorgs hit, champions move on, resources shrink, data drifts, and the next remediation project starts. Fix: embed evangelism in the operational team — not the program team — so change management becomes implicit and continuous, not episodic.

When health authorities set the new bar. Matt's observation: inspectors have caught up. They now walk in expecting real-time answers from the RIM system and the TMF system, and they'll give an hour instead of days. That external pressure is doing what internal accountability couldn't.

The circle of affinity. Bala's frame for regulatory's place in the org: safety, PV, manufacturing, and labeling all depend on regulatory data being right. Regulatory sits at the center of that circle whether it wants to or not. Owning that role — and being visible in it — is the way ops earns its seat at the strategic table.

Prediction: data-driven submissions arrive, split focus is the risk. The rise of data-centric submissions is real. IDMP, structured labeling, structured CMC, structured clinical reports — all pushing industry toward MDM in R&D for the first time. But the volume of change is huge, resources are constrained, and outsourcing to captive centers can go transactional and lose data quality. His call: keep the discipline attached wherever the work goes.

Notable Quotes

"In the 40 years I've lived in America, I've never gotten a bank statement that's been wrong."

"As long as data is not treated equal to money, we'll have this situation in regulatory."

"It's not a systems issue. It's a discipline issue."

"For some reason, regulatory always has this afterthought mentality."

"You need to have data as one of your performance objectives — and either get incentivized or penalized based on that."

"In some ways, we've come full circle: we went document-centric, and now we're going back to data."

Who This Episode Is For

Regulatory operations, regulatory affairs, and data-governance leaders responsible for RIM strategy or implementation; system owners planning a RIM migration or M&A integration; RIM vendors benchmarking product coverage; and anyone still trying to make the case that regulatory data discipline is worth investing in.

References, People & Resources

Guest & Related Work

  • V. "Bala" Balasubramanian — Healthcare & Life Sciences Strategic Advisor; DIA RIM Reference Model subteam lead
  • Prior role: Senior Vice President, Life Sciences, Orion Innovation

DIA RIM Reference Model — Downloads

Standards & Regulatory Frameworks Referenced

  • IDMP (Identification of Medicinal Products)
  • eCTD and eCTD 4.0
  • FHIR (HL7)
  • ICH

Concepts Referenced

  • Data citizenship; the "circle of affinity"; progressive disclosure and cascading controlled lists; master data management (MDM) in R&D; regulatory product master; the transformation-program lifecycle

Transcript provided by Otter.ai.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> 07 | Data Is Not an Afterthought: The RIM Reference Model — with Bala Balasubramanian Bala Balasubramanian 00:48:31 Twenty years ago, Bala Balasubramanian was flying around the world for a big-pharma sponsor trying to gather seven basic pieces of information about the company's own products. Generic name. Trade name. Dosage form. Strength. Country. Status. Approval date. It couldn't be done at scale. He told leadership so at the time — and since then, he's spent nearly two decades trying to build the thing that would make it possible. Bala is the subteam lead for the DIA RIM Reference Model — now in Version 2.0 — and one of the industry's clearest voices on why regulatory operations still treats data as an afterthought, and what it will finally take to change that. Matt Neal sits down with him to trace the arc from a single unusable Excel workbook to a real conceptual data model, why the discipline problem has never been a systems problem, and what changes when data starts being treated the way finance and clinical already treat it: as core to the job, not adjacent to it. Twenty years ago, Bala Balasubramanian was flying around the world for a big-pharma sponsor trying to gather seven basic pieces of information about the company's own products. Generic name. Trade name. Dosage form. Strength. Country. Status. Approval date. It couldn't be done at scale. He told leadership so at the time — and since then, he's spent nearly two decades trying to build the thing that would make it possible. Bala is the subteam lead for the DIA RIM Reference Model — now in Version 2.0 — and one of the industry's clearest voices on why regulatory operations still treats data as an afterthought, and what it will finally take to change that. Matt Neal sits down with him to trace the arc from a single unusable Excel workbook to a real conceptual data model, why the discipline problem has never been a systems problem, and what changes when data starts being treated the way finance and clinical already treat it: as core to the job, not adjacent to it. dia rim reference model false full 7 fa4135f2-eed9-4ed3-a947-c3f7da1f8aae 06 | Vibe Coding the Perfect Workflow: Building Systems That Fit Like a Glove — with Paul Slater About the Guest

Paul Slater helps professionals, leaders, and organizations navigate the human side of AI transformation. He is the author of The AI-Ready Human: Your 90-Day Program to Stay Relevant as Technology Transforms Work, host of the Humanity Working podcast, and founder of Paul Slater Advisory.

Paul spent nearly two decades at Microsoft, leading global digital transformation initiatives — including defining strategy for the company's Life Sciences business — and authored more than 20 books and courses for senior technologists. He has contributed to AI think tanks at Harvard, Duke, and Arizona State University, and briefed Fortune 500 executives and national governments worldwide. He is currently an analyst-relations thought leader at Adobe, where the frame problem behind this episode — "how do I stay on top of what 70+ industry analysts are saying?" — is the one he ended up vibe coding a solution for.

Key Topics

The 12-hour build. Paul's opening story: needing a hybrid of a CRM, a CMS, and a news feed for his Adobe work — a "CIA-profile-every-analyst" system Salesforce doesn't cover — and building it end-to-end in Claude Code in about twelve hours. His advice: if you're not technical, get a bit technical. If you're technical, get more technical. Then build the thing that fits your work like a glove.

The barrier to coding has collapsed — knowing what to build has not. Paul's clearest reframe: the how-to-code is gone. What remains is the ability to think holistically enough to imagine the system that would solve the problems you have. If you can do that, everything else isn't that hard. This is the muscle worth building.

The standardization paradox in regulated industries. Matt's frame: life sciences needs standardized foundational systems it doesn't quite have — and yet if those foundations were solid, everyone could accelerate the individualized layer on top. So can AI let us leapfrog around the missing standardization? Sometimes yes; sometimes the messy reality is the whole reason your custom tool is valuable.

Products are an artifact of cost, not need. Paul's epiphany: the explosion of products since 1990 isn't a reflection of need — it's a reflection of how cheap it became to bring a solution to market and wrap it in sales and marketing. Every product then accumulates functionality to justify its existence, until — Matt's line — the product becomes the problem.

What actually needs to be centralized. A relatively small amount of data must live in highly regulated, locked-down systems. Everything else — the messy, unstructured, contextual layer that supports the art of the work rather than the science of it — has been artificially wedged into expensive applications where it never belonged. Paul's clinical-trial example: a huge amount of real-world Phase IV signal is already out in the world; you don't need to lock it down at the point of first inspection, only when you build a hypothesis on it.

Why software companies have to reinvent themselves. With AI writing an increasing share of software (Paul references Anthropic's public numbers on internal AI-written code), the moat under any SaaS resting purely on software gets very thin, very fast. Paul's bet: winners like Veeva don't get displaced — they reinvent themselves from "product for these roles" into a role-enablement layer that uses their unmatched understanding of how the work is done to build self-forming, naturalistic support for each user.

The Star Trek IV point. In the film, Scotty tries to talk to a 1980s Mac and Bones hands him the mouse like it's a microphone. The joke: the future is one where you talk to the computer and it responds. That future has arrived — and it means the same tool should present four different faces to four different people doing the same job, adjusting to how each of them actually thinks and works.

The ugly middle ground on pricing. We're paying legacy subscriptions plus token consumption plus occasional old licenses — the worst of every pricing model at once. Paul's read: pick a lane. His preference is everything is a token — like electricity. Leave the lights on all night, pay more. Cleaner accountability, cleaner incentives.

Local models vs. the data center. The recent Dell / Microsoft / NVIDIA announcements around local AI processing hint at a different future — where most inference runs on the user's expensive workstation and only escapes to the cloud for the heavy lift. That may be the shape of the cost curve that finally makes token economics work.

Nothing about work is fit for purpose. Paul's summary line: technology infrastructure, organizational infrastructure, information infrastructure — none of it is where the puck is. On alternate mornings that terrifies him ("we're all going to be out of a job") and thrills him ("that is a lot of work for a lot of people"). Either way, it's the biggest reset since the PC.

The AI-Ready Human and the third framing. Paul's book is designed to meet people wherever they're at — from wall push-ups to elite AI users — and centered on the evergreen part: the human. In work with creatives at Adobe he's landed on a third way to think about AI, beyond productivity-enhancer and quality-improver: AI as medium. Things that couldn't have been created any other way — the Beatles' Now and Then, the short-form work of surrealist artists — are the flipside of AI slop. Same technology, different intent.

Notable Quotes

"I built something way more useful than any commercial software at all for my job in twelve hours."

"You can literally vibe code the perfect workflow support system for whatever job you have."

"The product becomes the problem."

"You wind up being held back by the very solutions that you're paying for."

"Almost every aspect of how work is structured and how work is done is not fit for purpose."

"AI can do a poor job of mimicking things humans would do, but it might do a really good job of creating things humans cannot."

Who This Episode Is For

Life sciences, Reg Ops, and Quality leaders trying to see around the corner of the SaaS-and-AI shift; enterprise architects and IT strategists rethinking buy-versus-build; software vendors serving regulated industries; and anyone wondering what "AI-ready" means for their own job in the next twelve months, not the next five years.

References, People & Resources

Guest & Work

Tools & Platforms Discussed

Concepts & Cultural References

  • Vibe coding
  • AI as productivity enhancer / quality improver / medium
  • The Beatles' Now and Then — AI-enabled restoration of John Lennon's vocal
  • Star Trek IV's "hello, computer" moment
  • Buy-vs-build, product-as-artifact, and role-enablement as a software-company model

Transcript provided by Otter.ai.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> Fri, 3 Jul 2026 15:00:00 +0000 mattnealcomedy@gmail.com (Matt Neal) https://operations-utopia.simplecast.com/episodes/06-paulslater-iaZW1DDV About the Guest

Paul Slater helps professionals, leaders, and organizations navigate the human side of AI transformation. He is the author of The AI-Ready Human: Your 90-Day Program to Stay Relevant as Technology Transforms Work, host of the Humanity Working podcast, and founder of Paul Slater Advisory.

Paul spent nearly two decades at Microsoft, leading global digital transformation initiatives — including defining strategy for the company's Life Sciences business — and authored more than 20 books and courses for senior technologists. He has contributed to AI think tanks at Harvard, Duke, and Arizona State University, and briefed Fortune 500 executives and national governments worldwide. He is currently an analyst-relations thought leader at Adobe, where the frame problem behind this episode — "how do I stay on top of what 70+ industry analysts are saying?" — is the one he ended up vibe coding a solution for.

Key Topics

The 12-hour build. Paul's opening story: needing a hybrid of a CRM, a CMS, and a news feed for his Adobe work — a "CIA-profile-every-analyst" system Salesforce doesn't cover — and building it end-to-end in Claude Code in about twelve hours. His advice: if you're not technical, get a bit technical. If you're technical, get more technical. Then build the thing that fits your work like a glove.

The barrier to coding has collapsed — knowing what to build has not. Paul's clearest reframe: the how-to-code is gone. What remains is the ability to think holistically enough to imagine the system that would solve the problems you have. If you can do that, everything else isn't that hard. This is the muscle worth building.

The standardization paradox in regulated industries. Matt's frame: life sciences needs standardized foundational systems it doesn't quite have — and yet if those foundations were solid, everyone could accelerate the individualized layer on top. So can AI let us leapfrog around the missing standardization? Sometimes yes; sometimes the messy reality is the whole reason your custom tool is valuable.

Products are an artifact of cost, not need. Paul's epiphany: the explosion of products since 1990 isn't a reflection of need — it's a reflection of how cheap it became to bring a solution to market and wrap it in sales and marketing. Every product then accumulates functionality to justify its existence, until — Matt's line — the product becomes the problem.

What actually needs to be centralized. A relatively small amount of data must live in highly regulated, locked-down systems. Everything else — the messy, unstructured, contextual layer that supports the art of the work rather than the science of it — has been artificially wedged into expensive applications where it never belonged. Paul's clinical-trial example: a huge amount of real-world Phase IV signal is already out in the world; you don't need to lock it down at the point of first inspection, only when you build a hypothesis on it.

Why software companies have to reinvent themselves. With AI writing an increasing share of software (Paul references Anthropic's public numbers on internal AI-written code), the moat under any SaaS resting purely on software gets very thin, very fast. Paul's bet: winners like Veeva don't get displaced — they reinvent themselves from "product for these roles" into a role-enablement layer that uses their unmatched understanding of how the work is done to build self-forming, naturalistic support for each user.

The Star Trek IV point. In the film, Scotty tries to talk to a 1980s Mac and Bones hands him the mouse like it's a microphone. The joke: the future is one where you talk to the computer and it responds. That future has arrived — and it means the same tool should present four different faces to four different people doing the same job, adjusting to how each of them actually thinks and works.

The ugly middle ground on pricing. We're paying legacy subscriptions plus token consumption plus occasional old licenses — the worst of every pricing model at once. Paul's read: pick a lane. His preference is everything is a token — like electricity. Leave the lights on all night, pay more. Cleaner accountability, cleaner incentives.

Local models vs. the data center. The recent Dell / Microsoft / NVIDIA announcements around local AI processing hint at a different future — where most inference runs on the user's expensive workstation and only escapes to the cloud for the heavy lift. That may be the shape of the cost curve that finally makes token economics work.

Nothing about work is fit for purpose. Paul's summary line: technology infrastructure, organizational infrastructure, information infrastructure — none of it is where the puck is. On alternate mornings that terrifies him ("we're all going to be out of a job") and thrills him ("that is a lot of work for a lot of people"). Either way, it's the biggest reset since the PC.

The AI-Ready Human and the third framing. Paul's book is designed to meet people wherever they're at — from wall push-ups to elite AI users — and centered on the evergreen part: the human. In work with creatives at Adobe he's landed on a third way to think about AI, beyond productivity-enhancer and quality-improver: AI as medium. Things that couldn't have been created any other way — the Beatles' Now and Then, the short-form work of surrealist artists — are the flipside of AI slop. Same technology, different intent.

Notable Quotes

"I built something way more useful than any commercial software at all for my job in twelve hours."

"You can literally vibe code the perfect workflow support system for whatever job you have."

"The product becomes the problem."

"You wind up being held back by the very solutions that you're paying for."

"Almost every aspect of how work is structured and how work is done is not fit for purpose."

"AI can do a poor job of mimicking things humans would do, but it might do a really good job of creating things humans cannot."

Who This Episode Is For

Life sciences, Reg Ops, and Quality leaders trying to see around the corner of the SaaS-and-AI shift; enterprise architects and IT strategists rethinking buy-versus-build; software vendors serving regulated industries; and anyone wondering what "AI-ready" means for their own job in the next twelve months, not the next five years.

References, People & Resources

Guest & Work

Tools & Platforms Discussed

Concepts & Cultural References

  • Vibe coding
  • AI as productivity enhancer / quality improver / medium
  • The Beatles' Now and Then — AI-enabled restoration of John Lennon's vocal
  • Star Trek IV's "hello, computer" moment
  • Buy-vs-build, product-as-artifact, and role-enablement as a software-company model

Transcript provided by Otter.ai.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> 06 | Vibe Coding the Perfect Workflow: Building Systems That Fit Like a Glove — with Paul Slater Matt Neal 00:54:09 Something meaningfully different has happened in the last few weeks — and Paul Slater is one of the few people talking about it in a way that goes past the hype. Paul is a two-decade Microsoft veteran (where he defined the company's Life Sciences strategy), current Adobe thought leader, author of The AI-Ready Human, and host of the Humanity Working podcast. When he says he just built a hybrid CRM / CMS / news feed for his own job in twelve hours using Claude Code, it isn't a party trick. It's a signal. Matt and Paul spend an hour on what that signal means. The new frontier isn't asking Claude for help; it's vibe coding the perfect workflow for whatever job you have. They get into why every commercial product is an artifact of cost to market, not necessity — and why the product becomes the problem. What survives from the standard-software stack in regulated industries. Why companies like Veeva and Salesforce may need to reinvent themselves as role-enablement layers. And the reason for both Paul's morning "we're all screwed" moments and his afternoon "this is enormous work" ones: almost nothing about how we structure work is fit for purpose. Something meaningfully different has happened in the last few weeks — and Paul Slater is one of the few people talking about it in a way that goes past the hype. Paul is a two-decade Microsoft veteran (where he defined the company's Life Sciences strategy), current Adobe thought leader, author of The AI-Ready Human, and host of the Humanity Working podcast. When he says he just built a hybrid CRM / CMS / news feed for his own job in twelve hours using Claude Code, it isn't a party trick. It's a signal. Matt and Paul spend an hour on what that signal means. The new frontier isn't asking Claude for help; it's vibe coding the perfect workflow for whatever job you have. They get into why every commercial product is an artifact of cost to market, not necessity — and why the product becomes the problem. What survives from the standard-software stack in regulated industries. Why companies like Veeva and Salesforce may need to reinvent themselves as role-enablement layers. And the reason for both Paul's morning "we're all screwed" moments and his afternoon "this is enormous work" ones: almost nothing about how we structure work is fit for purpose. false full 6 0a6e112b-56d9-4c9a-b333-597fdea9df97 05 | Trust Architecture: Rethinking Validation for a Probabilistic World — with Nuno Valério Executive Summary

For most of life sciences history, validation has been a snapshot — freeze the configuration, prove it behaves as designed, trust the system until you change it. Nuno Valério has spent his career inside that paradigm, and he's now one of the clearest public voices on what has to change for it to survive the AI era. As Head of Innovation, R&D Quality at Merck, Nuno is building AI governance frameworks for pharma R&D in real time — and he joins Matt Neal for a wide-ranging conversation about validating probabilistic systems, the trap of blanket "human-in-the-loop" thinking, and what genuine trust looks like when the model itself keeps changing.

Key Topics

AI as a liberator — when you stay the driver. Nuno's framing: AI is an enabler and a modulator, but the moment you let it produce your voice instead of you being behind the voice, it becomes hollow. The F1 analogy: what was great about watching Senna and Prost wasn't the cars, it was the art of the driver — the late brake that was almost too late, but not quite. AI is a powerful car. The driver still matters.

Set the model to challenge you. A practical antidote to the validation-loop trained into LLMs: prompt the model to push back, ask clarifying questions, and always offer a different angle. Sometimes the angle is irrelevant; sometimes it reshapes the whole question. It's how you keep the tool from collapsing into agreeable blandness.

The expertise paradox. AI is hugely powerful when you know your subject deeply — you can dig with a backhoe instead of a shovel. When you don't, it sounds great and can be completely wrong, and you won't know to push back. Matt's framing: when you really know something, you notice how not great it is on first blush.

AI as the first alien intelligence. Not alien in the extraterrestrial sense — alien in the sense of an intelligence that originated outside the patterns of natural selection that produced us. We've never met one before. The implication: we shouldn't assume it will behave like the only kind of intelligence we already know.

Trust architecture — validating the workflow, not the model. The old validation paradigm — take a snapshot of a deterministic system, freeze the configuration, trust it holds — doesn't survive probabilistic models whose outputs change with each input. Nuno's framework validates the whole ecosystem around the model: the tool, the human reviewing the output, the infrastructure, the guardrails, and the drift monitoring that flags when the model wanders. The goal isn't perfection — it's predictability you can sign under.

The human-in-the-loop trap. Putting a human everywhere isn't governance — it's burnout. Picture the reviewer at 5pm with 300 outputs to validate and a partner waiting at home. The first 257 were perfect, so he clicks through 258, 259, 260. "Human-in-the-loop" needs to mean human-on-the-loop where it matters — triggered by drift, risk thresholds, or signals the model is operating outside its trusted envelope.

Risk-based proportionality. A model that summarizes a meeting doesn't carry the same risk as one producing a safety report for a submission. The validation effort should reflect the consequence of failure. Quality has been doing risk-based work for decades — sampling, focusing where it counts, accepting you can't be everywhere. AI doesn't change that principle; it raises the stakes for applying it well.

The customization trap. Nuno's pushback on Matt's optimism about Veeva and Salesforce implementations: pharma companies routinely insist they're special, customize the standard configuration to match how they already work, and then can't absorb new features. AI capabilities increasingly only work — or only work well — on standard configurations. The cost of "specialness" is now showing up in the roadmap. And requirements gathered from people doing it the old way produce new systems that look exactly like the old systems.

Data quality, compounded over decades. Pharma's data is messy because there was never an incentive to fix it. Decades of operations stack up. Synergies across silos and regions matter only if the underlying data can be connected — which is exactly why frontier AI labs see life sciences as so much opportunity. Nuno's advice: don't try to fix 50 years; cut a reasonable line and move forward from useful data.

The GIP provocation. Matt's controversial proposal: the industry is missing a standard. GMP and GCP cover their domains. The little "x" in GxP gets stretched until everything is high-risk — and the result is fear-based bottlenecks. He proposes Good Information Practice — a discipline grounded in modern systems that trace every click, every change, every reason. If a spreadsheet column took three months to add, the real risk isn't governance; it's the columns you stopped adding. Nuno's response: he's wary of more letters, but agrees the binary GxP / non-GxP switch is broken, and proportionality has to be applied inside GxP too.

Sandboxes and pre-competitive collaboration. Nuno's call for shared, experimental spaces where industry, regulators, and vendors define what "good" looks like together — modeled on aviation safety. Pre-competitive information isn't IP. We can all get better at what everyone has to do, without giving up what makes anyone different. He sees the beginnings of that maturity in the sector, and signs from regulators that make him hopeful.

The dawn of AI maturity. Quality is a culture used to knowing what it's talking about — built from decades of guidelines, mistakes, and corpus. AI shifts every professional out of that seat. The only honest path forward, in Nuno's framing, is to think out loud, share the work, and accept that nobody has it all figured out yet.

Notable Quotes

"If you use AI just to produce your voice instead of you being behind that voice, it becomes hollow."

"What I was seeing was not the cars. What I was seeing was the art of the person at the wheel."

"AI might be the first alien intelligence — not in the sense of being from outside Earth, but in the sense of being originated outside of our patterns."

"Trust, to me, is predictability that you can sign under."

"He actually was very thorough. He checked everything. This one is certainly fine as well. Click, click, click."

"Every pharma company thinks they are very special. And then they pay the price of that specialty."

"The age of AI shifts everyone — every professional — from their seat."

References, People & Resources

Guest & Company

Events & Public Work

Platforms & Tools Discussed

Concepts Referenced

  • Trust architecture (provenance, drift monitoring, human-on-the-loop, predictability)
  • Deterministic vs. probabilistic validation
  • Risk-based proportionality in GxP
  • Good Information Practice (GIP) — Matt's proposed framing
  • Pre-competitive collaboration and regulatory sandboxes

Everyone relaxes when you say "human in the loop." Nobody pictures the reviewer at 5pm, 257 clean outputs deep, clicking approve on the 258th because the first 257 were fine. The loop isn't a safeguard; it's an architecture problem. Validation used to prove a system does what you specified; with probabilistic systems the spec can't save you, so the real question stops being *does it work* and becomes *under what conditions can I sign under it.* That's the shift I care about. That's what I mean by trust architecture; not a new framework I'm selling, more a way of framing what our industry already half-know.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> Fri, 19 Jun 2026 07:00:00 +0000 mattnealcomedy@gmail.com (Matt Neal) https://operations-utopia.simplecast.com/episodes/05-nuno-valerio-9hFQT6RV Executive Summary

For most of life sciences history, validation has been a snapshot — freeze the configuration, prove it behaves as designed, trust the system until you change it. Nuno Valério has spent his career inside that paradigm, and he's now one of the clearest public voices on what has to change for it to survive the AI era. As Head of Innovation, R&D Quality at Merck, Nuno is building AI governance frameworks for pharma R&D in real time — and he joins Matt Neal for a wide-ranging conversation about validating probabilistic systems, the trap of blanket "human-in-the-loop" thinking, and what genuine trust looks like when the model itself keeps changing.

Key Topics

AI as a liberator — when you stay the driver. Nuno's framing: AI is an enabler and a modulator, but the moment you let it produce your voice instead of you being behind the voice, it becomes hollow. The F1 analogy: what was great about watching Senna and Prost wasn't the cars, it was the art of the driver — the late brake that was almost too late, but not quite. AI is a powerful car. The driver still matters.

Set the model to challenge you. A practical antidote to the validation-loop trained into LLMs: prompt the model to push back, ask clarifying questions, and always offer a different angle. Sometimes the angle is irrelevant; sometimes it reshapes the whole question. It's how you keep the tool from collapsing into agreeable blandness.

The expertise paradox. AI is hugely powerful when you know your subject deeply — you can dig with a backhoe instead of a shovel. When you don't, it sounds great and can be completely wrong, and you won't know to push back. Matt's framing: when you really know something, you notice how not great it is on first blush.

AI as the first alien intelligence. Not alien in the extraterrestrial sense — alien in the sense of an intelligence that originated outside the patterns of natural selection that produced us. We've never met one before. The implication: we shouldn't assume it will behave like the only kind of intelligence we already know.

Trust architecture — validating the workflow, not the model. The old validation paradigm — take a snapshot of a deterministic system, freeze the configuration, trust it holds — doesn't survive probabilistic models whose outputs change with each input. Nuno's framework validates the whole ecosystem around the model: the tool, the human reviewing the output, the infrastructure, the guardrails, and the drift monitoring that flags when the model wanders. The goal isn't perfection — it's predictability you can sign under.

The human-in-the-loop trap. Putting a human everywhere isn't governance — it's burnout. Picture the reviewer at 5pm with 300 outputs to validate and a partner waiting at home. The first 257 were perfect, so he clicks through 258, 259, 260. "Human-in-the-loop" needs to mean human-on-the-loop where it matters — triggered by drift, risk thresholds, or signals the model is operating outside its trusted envelope.

Risk-based proportionality. A model that summarizes a meeting doesn't carry the same risk as one producing a safety report for a submission. The validation effort should reflect the consequence of failure. Quality has been doing risk-based work for decades — sampling, focusing where it counts, accepting you can't be everywhere. AI doesn't change that principle; it raises the stakes for applying it well.

The customization trap. Nuno's pushback on Matt's optimism about Veeva and Salesforce implementations: pharma companies routinely insist they're special, customize the standard configuration to match how they already work, and then can't absorb new features. AI capabilities increasingly only work — or only work well — on standard configurations. The cost of "specialness" is now showing up in the roadmap. And requirements gathered from people doing it the old way produce new systems that look exactly like the old systems.

Data quality, compounded over decades. Pharma's data is messy because there was never an incentive to fix it. Decades of operations stack up. Synergies across silos and regions matter only if the underlying data can be connected — which is exactly why frontier AI labs see life sciences as so much opportunity. Nuno's advice: don't try to fix 50 years; cut a reasonable line and move forward from useful data.

The GIP provocation. Matt's controversial proposal: the industry is missing a standard. GMP and GCP cover their domains. The little "x" in GxP gets stretched until everything is high-risk — and the result is fear-based bottlenecks. He proposes Good Information Practice — a discipline grounded in modern systems that trace every click, every change, every reason. If a spreadsheet column took three months to add, the real risk isn't governance; it's the columns you stopped adding. Nuno's response: he's wary of more letters, but agrees the binary GxP / non-GxP switch is broken, and proportionality has to be applied inside GxP too.

Sandboxes and pre-competitive collaboration. Nuno's call for shared, experimental spaces where industry, regulators, and vendors define what "good" looks like together — modeled on aviation safety. Pre-competitive information isn't IP. We can all get better at what everyone has to do, without giving up what makes anyone different. He sees the beginnings of that maturity in the sector, and signs from regulators that make him hopeful.

The dawn of AI maturity. Quality is a culture used to knowing what it's talking about — built from decades of guidelines, mistakes, and corpus. AI shifts every professional out of that seat. The only honest path forward, in Nuno's framing, is to think out loud, share the work, and accept that nobody has it all figured out yet.

Notable Quotes

"If you use AI just to produce your voice instead of you being behind that voice, it becomes hollow."

"What I was seeing was not the cars. What I was seeing was the art of the person at the wheel."

"AI might be the first alien intelligence — not in the sense of being from outside Earth, but in the sense of being originated outside of our patterns."

"Trust, to me, is predictability that you can sign under."

"He actually was very thorough. He checked everything. This one is certainly fine as well. Click, click, click."

"Every pharma company thinks they are very special. And then they pay the price of that specialty."

"The age of AI shifts everyone — every professional — from their seat."

References, People & Resources

Guest & Company

Events & Public Work

Platforms & Tools Discussed

Concepts Referenced

  • Trust architecture (provenance, drift monitoring, human-on-the-loop, predictability)
  • Deterministic vs. probabilistic validation
  • Risk-based proportionality in GxP
  • Good Information Practice (GIP) — Matt's proposed framing
  • Pre-competitive collaboration and regulatory sandboxes

Everyone relaxes when you say "human in the loop." Nobody pictures the reviewer at 5pm, 257 clean outputs deep, clicking approve on the 258th because the first 257 were fine. The loop isn't a safeguard; it's an architecture problem. Validation used to prove a system does what you specified; with probabilistic systems the spec can't save you, so the real question stops being *does it work* and becomes *under what conditions can I sign under it.* That's the shift I care about. That's what I mean by trust architecture; not a new framework I'm selling, more a way of framing what our industry already half-know.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> 05 | Trust Architecture: Rethinking Validation for a Probabilistic World — with Nuno Valério Matt Neal 00:57:46 Nuno Valério is Head of Innovation, R&D Quality at Merck, based in Germany. With 11+ years in pharma quality across deviations, audits, and observations, plus an active public-facing practice on AI governance, Nuno has become a distinctive voice on what trustworthy AI looks like inside a regulated R&D organization. He writes and speaks regularly on a framework he calls trust architecture — a multi-dimensional approach to validating not the model itself but the workflow, guardrails, and human-machine ecosystem around it. He's a featured speaker at the 2026 Clinical Trial Innovation Summit in Basel, where his session focuses on designing AI governance from both sides of the wall — pharma and regulator — drawing on his hands-on work at Merck. Nuno Valério is Head of Innovation, R&D Quality at Merck, based in Germany. With 11+ years in pharma quality across deviations, audits, and observations, plus an active public-facing practice on AI governance, Nuno has become a distinctive voice on what trustworthy AI looks like inside a regulated R&D organization. He writes and speaks regularly on a framework he calls trust architecture — a multi-dimensional approach to validating not the model itself but the workflow, guardrails, and human-machine ecosystem around it. He's a featured speaker at the 2026 Clinical Trial Innovation Summit in Basel, where his session focuses on designing AI governance from both sides of the wall — pharma and regulator — drawing on his hands-on work at Merck. false full 5 8fbf764c-be03-431e-8136-2b21fbfb0fae 04 | From Alexa to Agents: Two Decades of Change in RegOps — with Scott Cleve Host: Matt Neal Guest: Scott Cleve, Vice President, Regulatory Operations, Information and Compliance, Daiichi Sankyo

Executive Summary

Few people have lived through more change cycles in regulatory operations than Scott Cleve. Across 20+ years at Accenture, AbbVie, Astellas, Boehringer Ingelheim, bluebird bio, and now Daiichi Sankyo, Scott has built and led global Reg Ops organizations through wave after wave of new technology — and figured out a few things about how change actually sticks.

Matt and Scott trace the arc from a 2017 Alexa pilot at Boehringer Ingelheim (RIP — voice capture for affiliate correspondence) to today's reality of AI agents working alongside humans as teammates. Along the way: the three obstacles that quietly slow every change initiative, why "training" a workforce two weeks before go-live with a PowerPoint is the corporate equivalent of asking a kid to play in the World Cup, and the backhanded compliment that defines a great Reg Ops team — you guys do your job so well, I don't even think about it.

About the Guest

Scott Cleve is Vice President of Regulatory Operations, Information and Compliance at Daiichi Sankyo. His 20+ year career spans consulting at Accenture and Reg Ops leadership at AbbVie, Astellas, Boehringer Ingelheim (where he led the company's global Reg Ops org from Germany), and bluebird bio — giving him a rare view across big pharma, family-owned multinationals, and cell & gene therapy.

Scott is a regular voice in the Reg Ops community — keynoting the Veeva R&D and Quality Summit, appearing on industry podcasts, and serving on conference panels (he and Matt have shared the stage at DIA RSIDM on "Regulatory 3.0 — A Data-Driven Approach"). His focus throughout: pulling organizations forward through change without breaking the people inside them.

Key Topics

Building a global Reg Ops org. Scott's first big leadership challenge was inheriting Boehringer Ingelheim's global Reg Ops function — a US leader living in Germany, navigating a family-owned multinational with a different time horizon and culture, and footprints across Japan, China, Europe, and the US. The playbook he refined: gather requirements, honestly assess where you're strong and where you need to grow, align investments with the company's priorities, and use outsourced centers of excellence for what fits.

The 2017 Alexa pilot. Long before Copilot and ChatGPT, Scott's team ran a pilot using Amazon Alexa to capture correspondence from global affiliates — voice in, PDF out, archived directly into document management. The catch: "Alexa has a really short attention span." It didn't roll out, but it opened doors to voice capture, voice-to-text archiving, and the broader question of how to embed new tech in real workflows.

Finding the tinkerers. Every Reg Ops team has early adopters who want to do their job easier — the people who actually read Word and Excel release notes. Scott's pattern: identify the advocate, give them a single use case on a single deliverable, demonstrate visible progress, and let the knock-on effect pull the rest of the group along.

The three obstacles to fast change. Data first — is it structured, clean, complete enough to feed into modern tools? Organizational readiness second — disrupting processes people have run for years creates real anxiety, not just resistance. Compliance and validation overhead third — the documentation and testing burden that makes iteration slow, even when the technology itself isn't the bottleneck.

The training paradox. Scott's analogy: a pro athlete gets coached and feedback from age seven onward. The corporate version is to roll out a new document management system, hand people a PowerPoint two weeks before go-live, and call it "hyper care" when it goes sideways. "We're asking people to fundamentally change the way they've worked for years with a minimal amount of support" — and Matt's revelation from a recent summit: why are you making me train people on your software?

Change as a constant. Five or ten years ago the industry talked about change fatigue. Today, between iPhone updates, Outlook updates, and the Veeva release cadence, change is just the default — and the leadership job is reframing it as continuous improvement and sharing the vision: "I've been to the beach, I know it's there. You're still on the other side of the mountain."

The Reg Ops symphony. As teams have grown, the publisher-does-everything model has bifurcated — into publishing, submission management, and an emerging data-steward track for IDMP, PQ/CMC, and future data submissions. The question Scott hasn't fully solved: how do you keep these specialists working in symphony without losing the cross-functional reach that made the old generalist Reg Ops role so valuable?

Bots as team members. RPA was the warm-up. The new mental model: think of an agent the same way you'd think of a new hire. "Bot one, you're going to do all the document formatting checks — here's how much work I expect from bot one in a typical day. Bob is overseeing bot one." Humans become managers of humans and bots, with the human-in-the-loop critical for change control, error handling, and upskilling the agents over time.

The self-driving tipping point. Matt's analogy: when self-driving is genuinely better than humans in every condition, it becomes irresponsible to drive. The same logic is coming for Reg Ops work — and the open question is the time scale. Scott's read: a lot will change in the next five years, technology is pushing the field along, and AI is going to start "eating from the bottom" of the task list.

The career arc for publishers. As automation absorbs the click-work, the people who built that expertise become the most valuable teachers in the building — data stewards, submission managers, and trainers of the next wave of both humans and bots. Retaining that knowledge in the organization is the leadership challenge of the decade.

The hidden magic of Reg Ops. When the team does its job perfectly 99.9% of the time, nobody notices — they only see the 0.1%. Submissions go out two days earlier after a Veeva upgrade, and no one outside the team knows why. Scott calls the resulting feedback "the most backhanded compliment": you guys do your job so well, I don't even think about it. The trusted-partner relationship with regulatory strategists is real and valuable — and chronically under-recognized.

Notable Quotes

"Everyone's favorite system is the one you just stopped using."

"You guys do your job so well, I don't even think about it. It's the most backhanded compliment."

Who This Episode Is For

Regulatory operations and regulatory affairs leaders managing change at scale; Reg Ops professionals navigating new tools, validation overhead, and shifting role definitions; R&D IT, RIM, and digital transformation leaders in life sciences; and anyone interested in what AI and automation actually look like inside a high-performing operations team.

References, People & Resources

Guest & Career

Tools & Platforms Mentioned

Industry Events & Concepts

Transcript provided by Otter.ai.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> Fri, 12 Jun 2026 15:00:00 +0000 mattnealcomedy@gmail.com (Matt Neal, Frits Stulp) https://operations-utopia.simplecast.com/episodes/scottcleve-Jm4ZueXi Host: Matt Neal Guest: Scott Cleve, Vice President, Regulatory Operations, Information and Compliance, Daiichi Sankyo

Executive Summary

Few people have lived through more change cycles in regulatory operations than Scott Cleve. Across 20+ years at Accenture, AbbVie, Astellas, Boehringer Ingelheim, bluebird bio, and now Daiichi Sankyo, Scott has built and led global Reg Ops organizations through wave after wave of new technology — and figured out a few things about how change actually sticks.

Matt and Scott trace the arc from a 2017 Alexa pilot at Boehringer Ingelheim (RIP — voice capture for affiliate correspondence) to today's reality of AI agents working alongside humans as teammates. Along the way: the three obstacles that quietly slow every change initiative, why "training" a workforce two weeks before go-live with a PowerPoint is the corporate equivalent of asking a kid to play in the World Cup, and the backhanded compliment that defines a great Reg Ops team — you guys do your job so well, I don't even think about it.

About the Guest

Scott Cleve is Vice President of Regulatory Operations, Information and Compliance at Daiichi Sankyo. His 20+ year career spans consulting at Accenture and Reg Ops leadership at AbbVie, Astellas, Boehringer Ingelheim (where he led the company's global Reg Ops org from Germany), and bluebird bio — giving him a rare view across big pharma, family-owned multinationals, and cell & gene therapy.

Scott is a regular voice in the Reg Ops community — keynoting the Veeva R&D and Quality Summit, appearing on industry podcasts, and serving on conference panels (he and Matt have shared the stage at DIA RSIDM on "Regulatory 3.0 — A Data-Driven Approach"). His focus throughout: pulling organizations forward through change without breaking the people inside them.

Key Topics

Building a global Reg Ops org. Scott's first big leadership challenge was inheriting Boehringer Ingelheim's global Reg Ops function — a US leader living in Germany, navigating a family-owned multinational with a different time horizon and culture, and footprints across Japan, China, Europe, and the US. The playbook he refined: gather requirements, honestly assess where you're strong and where you need to grow, align investments with the company's priorities, and use outsourced centers of excellence for what fits.

The 2017 Alexa pilot. Long before Copilot and ChatGPT, Scott's team ran a pilot using Amazon Alexa to capture correspondence from global affiliates — voice in, PDF out, archived directly into document management. The catch: "Alexa has a really short attention span." It didn't roll out, but it opened doors to voice capture, voice-to-text archiving, and the broader question of how to embed new tech in real workflows.

Finding the tinkerers. Every Reg Ops team has early adopters who want to do their job easier — the people who actually read Word and Excel release notes. Scott's pattern: identify the advocate, give them a single use case on a single deliverable, demonstrate visible progress, and let the knock-on effect pull the rest of the group along.

The three obstacles to fast change. Data first — is it structured, clean, complete enough to feed into modern tools? Organizational readiness second — disrupting processes people have run for years creates real anxiety, not just resistance. Compliance and validation overhead third — the documentation and testing burden that makes iteration slow, even when the technology itself isn't the bottleneck.

The training paradox. Scott's analogy: a pro athlete gets coached and feedback from age seven onward. The corporate version is to roll out a new document management system, hand people a PowerPoint two weeks before go-live, and call it "hyper care" when it goes sideways. "We're asking people to fundamentally change the way they've worked for years with a minimal amount of support" — and Matt's revelation from a recent summit: why are you making me train people on your software?

Change as a constant. Five or ten years ago the industry talked about change fatigue. Today, between iPhone updates, Outlook updates, and the Veeva release cadence, change is just the default — and the leadership job is reframing it as continuous improvement and sharing the vision: "I've been to the beach, I know it's there. You're still on the other side of the mountain."

The Reg Ops symphony. As teams have grown, the publisher-does-everything model has bifurcated — into publishing, submission management, and an emerging data-steward track for IDMP, PQ/CMC, and future data submissions. The question Scott hasn't fully solved: how do you keep these specialists working in symphony without losing the cross-functional reach that made the old generalist Reg Ops role so valuable?

Bots as team members. RPA was the warm-up. The new mental model: think of an agent the same way you'd think of a new hire. "Bot one, you're going to do all the document formatting checks — here's how much work I expect from bot one in a typical day. Bob is overseeing bot one." Humans become managers of humans and bots, with the human-in-the-loop critical for change control, error handling, and upskilling the agents over time.

The self-driving tipping point. Matt's analogy: when self-driving is genuinely better than humans in every condition, it becomes irresponsible to drive. The same logic is coming for Reg Ops work — and the open question is the time scale. Scott's read: a lot will change in the next five years, technology is pushing the field along, and AI is going to start "eating from the bottom" of the task list.

The career arc for publishers. As automation absorbs the click-work, the people who built that expertise become the most valuable teachers in the building — data stewards, submission managers, and trainers of the next wave of both humans and bots. Retaining that knowledge in the organization is the leadership challenge of the decade.

The hidden magic of Reg Ops. When the team does its job perfectly 99.9% of the time, nobody notices — they only see the 0.1%. Submissions go out two days earlier after a Veeva upgrade, and no one outside the team knows why. Scott calls the resulting feedback "the most backhanded compliment": you guys do your job so well, I don't even think about it. The trusted-partner relationship with regulatory strategists is real and valuable — and chronically under-recognized.

Notable Quotes

"Everyone's favorite system is the one you just stopped using."

"You guys do your job so well, I don't even think about it. It's the most backhanded compliment."

Who This Episode Is For

Regulatory operations and regulatory affairs leaders managing change at scale; Reg Ops professionals navigating new tools, validation overhead, and shifting role definitions; R&D IT, RIM, and digital transformation leaders in life sciences; and anyone interested in what AI and automation actually look like inside a high-performing operations team.

References, People & Resources

Guest & Career

Tools & Platforms Mentioned

Industry Events & Concepts

Transcript provided by Otter.ai.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> 04 | From Alexa to Agents: Two Decades of Change in RegOps — with Scott Cleve Matt Neal, Frits Stulp 00:48:43 Few people have lived through more change cycles in regulatory operations than Scott Cleve. Across 20+ years at Accenture, AbbVie, Astellas, Boehringer Ingelheim, bluebird bio, and now Daiichi Sankyo, Scott has built and led global Reg Ops organizations through wave after wave of new technology — and figured out a few things about how change actually sticks. Matt and Scott trace the arc from a 2017 Alexa pilot at Boehringer Ingelheim (RIP — voice capture for affiliate correspondence) to today's reality of AI agents working alongside humans as teammates. Along the way: the three obstacles that quietly slow every change initiative, why "training" a workforce two weeks before go-live with a PowerPoint is the corporate equivalent of asking a kid to play in the World Cup, and the backhanded compliment that defines a great Reg Ops team — you guys do your job so well, I don't even think about it. Few people have lived through more change cycles in regulatory operations than Scott Cleve. Across 20+ years at Accenture, AbbVie, Astellas, Boehringer Ingelheim, bluebird bio, and now Daiichi Sankyo, Scott has built and led global Reg Ops organizations through wave after wave of new technology — and figured out a few things about how change actually sticks. Matt and Scott trace the arc from a 2017 Alexa pilot at Boehringer Ingelheim (RIP — voice capture for affiliate correspondence) to today's reality of AI agents working alongside humans as teammates. Along the way: the three obstacles that quietly slow every change initiative, why "training" a workforce two weeks before go-live with a PowerPoint is the corporate equivalent of asking a kid to play in the World Cup, and the backhanded compliment that defines a great Reg Ops team — you guys do your job so well, I don't even think about it. implement consulting group, biotech, validation, veeva, regulatory operations, innovation, veeva systems, life sciences false full 4 a23f8fa2-bef8-4ba7-913c-5a0507f6cef2 03 | Rethinking the Fence: Data, Standards, and the New Energy in Regulatory — with Crystal Allard About the Guest

Crystal Allard is Senior Director of Government Strategy at Veeva Systems, where she works with regulators and industry to shape the future of the submissions ecosystem and increase speed to market.

Crystal spent roughly 15 years at the FDA across innovation and technology roles — including time working for the agency's Chief Data Officer and at the Center for Tobacco Products, plus stints as an FDA consultant. She also worked in regulatory operations before joining the agency, giving her a rare full-circle view of how submissions are built, reviewed, and inspected. She recently co-authored published commentary on the joint FDA–EMA Guiding Principles of Good AI Practice in Drug Development (January 2026) and is a speaker at the Veeva R&D and Quality Summit.

Key Topics

A new wave of energy. After years of stasis, health authorities are increasingly open to modern, data-driven technology. Crystal's read: it feels inevitable now in a way it simply didn't two years ago.

Standards bodies in flux. Standards like CDISC have been in place for essentially Crystal's whole career — but new leadership at CDISC, HL7, and its Vulcan FHIR Accelerator is creating real willingness to revisit old assumptions. HL7 groups already use AI to draft standards, data models, APIs, and implementation guides, compressing timelines with far fewer resources. The new bottleneck: the testing, voting, and adoption infrastructure, still geared to a three-years-ago cadence.

The lasting lesson of COVID. Rolling reviews proved faster review is possible — but regulators did it the hard way, because data wasn't in the format they needed. The insight: standardization doesn't always equal usability, or even validity. Data needs to be accessible and analyzable. The goal now is to keep the speed but build the "easy button."

Global convergence — and its limits. At DIA Europe, multiple health authorities discussed reliance and the "inevitability" of a shared submission process, while staying cagey on technology. Standards organizations are quietly driving convergence — ICH guidelines like M4Q(R2) now publish in a common format across many countries. Missed opportunities remain, notably the lack of shared data-security requirements and a separate ICH Module 1 per country.

Rethinking the submission "fence." Today's model is over-the-fence: build a package, toss it across. Crystal floats a reframe — what if the space between sponsor and regulator isn't just a transfer point but a shared storage and viewing space? APIs and direct connections could enable continuous, "live" review. It's a different paradigm than eCTD and even eCTD v4.0, which Crystal frames as both a globalization attempt and a missed opportunity at better exchange technology.

Security, IP, and who owns the data. Centralization cuts both ways — a single shared space is either a bigger target or a better-defended fortress. In the US, submission data is owned by the sponsor; FDA only stewards it — so sponsors can do more with their own data, and their own FDA letters, than they realize. Meanwhile FDA wants earlier access to sponsor data but can't share its review memos across authorities — a catch-22 that may take legislation to resolve.

The RIM blind spot — and the special-format mistake. Many at health authorities have never built a submission, so they underestimate the data management, QC, and validation work behind one — and were often unaware of regulatory information management (RIM) systems at all. Crystal shares a candid "learning experience" from her Center for Tobacco Products days: special submission formats (a PDF-backbone structure, and later eSTAR and other e-submitter formats) were designed to be easier — but modern AI tooling is now so good at standard formats like eCTD that the special ones cost more time and money.

The reviewer disconnect. Many format rules exist not because a reviewer wants to read a document, but because review software needs specific data sets for automated analyses. Yet reviewers are rarely in the room when those tools or the guidance are built — "a massive disconnect." See the endless bookmark-and-hyperlink debate, and an industry that fears a technical rejection that, inside FDA, is barely a blip.

The future of Reg Ops and review. Both roles are converging on a hybrid: regulatory or scientific expertise, plus the ability to move data, separate signal from noise, and prompt effectively. Less document-and-business-process, more data-and-structure.

A shared vision, freely given. As a public benefit corporation, Veeva balances commercial interest with contributing to the wider ecosystem — and Crystal argues data standards, and possibly exchange platforms, must be freely available for true interoperability. The bigger gap: ICH-style groups have reviewers, health authorities, and industry, but are missing the "third leg of the stool" — technologists.

Notable Quotes

"EMA is writing it down. FDA is saying it out loud." — on regulators and APIs

"Standardization doesn't always equate to use and usability, or even validity."

"[They] want to keep doing it, but maybe make it the easy button." — on COVID-era rolling reviews

"It takes more effort and time and money to create these special sources that we thought were easier."

"What if we just rethink the fence?"

"You can leave the FDA, but you never leave the public health mission behind."

Who This Episode Is For

Regulatory operations and regulatory affairs leaders; data standards and submissions professionals (CDISC, HL7, ICH); clinical operations and R&D IT teams; health authority and policy professionals tracking modernization; and anyone interested in how AI and data standards are reshaping regulatory review.

References, People & Resources

Guest & Company

Regulators & Standards Organizations

Submission Standards, Formats & AI Guidance

Events & Concepts Referenced

  • DIA (Drug Information Association) and DIA Europe
  • Regulatory reliance; "live review"; RIM systems; Meaningful Use (cited as a legislation-driven data-sharing precedent)

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> Fri, 29 May 2026 15:00:00 +0000 mattnealcomedy@gmail.com (Matt Neal, Frits Stulp) https://operations-utopia.simplecast.com/episodes/crystalallard-i3pGl_bc About the Guest

Crystal Allard is Senior Director of Government Strategy at Veeva Systems, where she works with regulators and industry to shape the future of the submissions ecosystem and increase speed to market.

Crystal spent roughly 15 years at the FDA across innovation and technology roles — including time working for the agency's Chief Data Officer and at the Center for Tobacco Products, plus stints as an FDA consultant. She also worked in regulatory operations before joining the agency, giving her a rare full-circle view of how submissions are built, reviewed, and inspected. She recently co-authored published commentary on the joint FDA–EMA Guiding Principles of Good AI Practice in Drug Development (January 2026) and is a speaker at the Veeva R&D and Quality Summit.

Key Topics

A new wave of energy. After years of stasis, health authorities are increasingly open to modern, data-driven technology. Crystal's read: it feels inevitable now in a way it simply didn't two years ago.

Standards bodies in flux. Standards like CDISC have been in place for essentially Crystal's whole career — but new leadership at CDISC, HL7, and its Vulcan FHIR Accelerator is creating real willingness to revisit old assumptions. HL7 groups already use AI to draft standards, data models, APIs, and implementation guides, compressing timelines with far fewer resources. The new bottleneck: the testing, voting, and adoption infrastructure, still geared to a three-years-ago cadence.

The lasting lesson of COVID. Rolling reviews proved faster review is possible — but regulators did it the hard way, because data wasn't in the format they needed. The insight: standardization doesn't always equal usability, or even validity. Data needs to be accessible and analyzable. The goal now is to keep the speed but build the "easy button."

Global convergence — and its limits. At DIA Europe, multiple health authorities discussed reliance and the "inevitability" of a shared submission process, while staying cagey on technology. Standards organizations are quietly driving convergence — ICH guidelines like M4Q(R2) now publish in a common format across many countries. Missed opportunities remain, notably the lack of shared data-security requirements and a separate ICH Module 1 per country.

Rethinking the submission "fence." Today's model is over-the-fence: build a package, toss it across. Crystal floats a reframe — what if the space between sponsor and regulator isn't just a transfer point but a shared storage and viewing space? APIs and direct connections could enable continuous, "live" review. It's a different paradigm than eCTD and even eCTD v4.0, which Crystal frames as both a globalization attempt and a missed opportunity at better exchange technology.

Security, IP, and who owns the data. Centralization cuts both ways — a single shared space is either a bigger target or a better-defended fortress. In the US, submission data is owned by the sponsor; FDA only stewards it — so sponsors can do more with their own data, and their own FDA letters, than they realize. Meanwhile FDA wants earlier access to sponsor data but can't share its review memos across authorities — a catch-22 that may take legislation to resolve.

The RIM blind spot — and the special-format mistake. Many at health authorities have never built a submission, so they underestimate the data management, QC, and validation work behind one — and were often unaware of regulatory information management (RIM) systems at all. Crystal shares a candid "learning experience" from her Center for Tobacco Products days: special submission formats (a PDF-backbone structure, and later eSTAR and other e-submitter formats) were designed to be easier — but modern AI tooling is now so good at standard formats like eCTD that the special ones cost more time and money.

The reviewer disconnect. Many format rules exist not because a reviewer wants to read a document, but because review software needs specific data sets for automated analyses. Yet reviewers are rarely in the room when those tools or the guidance are built — "a massive disconnect." See the endless bookmark-and-hyperlink debate, and an industry that fears a technical rejection that, inside FDA, is barely a blip.

The future of Reg Ops and review. Both roles are converging on a hybrid: regulatory or scientific expertise, plus the ability to move data, separate signal from noise, and prompt effectively. Less document-and-business-process, more data-and-structure.

A shared vision, freely given. As a public benefit corporation, Veeva balances commercial interest with contributing to the wider ecosystem — and Crystal argues data standards, and possibly exchange platforms, must be freely available for true interoperability. The bigger gap: ICH-style groups have reviewers, health authorities, and industry, but are missing the "third leg of the stool" — technologists.

Notable Quotes

"EMA is writing it down. FDA is saying it out loud." — on regulators and APIs

"Standardization doesn't always equate to use and usability, or even validity."

"[They] want to keep doing it, but maybe make it the easy button." — on COVID-era rolling reviews

"It takes more effort and time and money to create these special sources that we thought were easier."

"What if we just rethink the fence?"

"You can leave the FDA, but you never leave the public health mission behind."

Who This Episode Is For

Regulatory operations and regulatory affairs leaders; data standards and submissions professionals (CDISC, HL7, ICH); clinical operations and R&D IT teams; health authority and policy professionals tracking modernization; and anyone interested in how AI and data standards are reshaping regulatory review.

References, People & Resources

Guest & Company

Regulators & Standards Organizations

Submission Standards, Formats & AI Guidance

Events & Concepts Referenced

  • DIA (Drug Information Association) and DIA Europe
  • Regulatory reliance; "live review"; RIM systems; Meaningful Use (cited as a legislation-driven data-sharing precedent)

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> 03 | Rethinking the Fence: Data, Standards, and the New Energy in Regulatory — with Crystal Allard Matt Neal, Frits Stulp 00:53:44 For the first time in a long while, regulatory innovation in life sciences feels less like stasis and more like movement. In this episode of Operations Utopia, Matt Neal sits down with Crystal Allard — a 15-year veteran of the FDA, now leading government strategy at Veeva Systems — for a wide-ranging conversation about why the last year or two feel genuinely different. The throughline is inevitability. External forces — new leadership at standards bodies like CDISC and HL7, the hard lessons of COVID-era rolling reviews, a generation of digitally-native reviewers, and AI itself — are pushing health authorities toward modern, data-centric, API-driven approaches faster than anyone expected. Along the way, Crystal and Matt get into the parts of the system that still don't work: format rules built for review software rather than reviewers, a submission "fence" that may need rethinking entirely, and the quiet truth that hard-won regulatory knowledge is now being handed to AI whether the industry is ready or not. For the first time in a long while, regulatory innovation in life sciences feels less like stasis and more like movement. In this episode of Operations Utopia, Matt Neal sits down with Crystal Allard — a 15-year veteran of the FDA, now leading government strategy at Veeva Systems — for a wide-ranging conversation about why the last year or two feel genuinely different. The throughline is inevitability. External forces — new leadership at standards bodies like CDISC and HL7, the hard lessons of COVID-era rolling reviews, a generation of digitally-native reviewers, and AI itself — are pushing health authorities toward modern, data-centric, API-driven approaches faster than anyone expected. Along the way, Crystal and Matt get into the parts of the system that still don't work: format rules built for review software rather than reviewers, a submission "fence" that may need rethinking entirely, and the quiet truth that hard-won regulatory knowledge is now being handed to AI whether the industry is ready or not. implement consulting group, biotech, validation, veeva, regulatory operations, innovation, veeva systems, life sciences false full 3 acf1a1b7-54b8-41cc-9dcb-e593b269d48d 02 | Validation Reimagined: From Paper Binders to Agentic AI, with Bryan Ennis Executive Summary

Computer system validation in life sciences is at the most significant inflection point of the last 25 years. In this conversation, Matt Neal sits down with Bryan Ennis — co-founder of Sware and a 27-year veteran of regulated systems work at Genzyme and Veeva — to trace how validation evolved from rooms full of IBM testers writing scripts against floppy-disk installs, through the cloud era's shift of responsibility to vendors, and into today's reality of agentic AI and vibe coding.

Key Topics

Why validation exists in the first place Validation's purpose is common sense — proving that a manufacturing line stamping 100,000 pills an hour, a heart-rate-monitoring device, or a clinical trial data pipeline actually works the way it was designed. Patient safety, product quality, data integrity, and signature legitimacy are the real targets; everything else is overhead.

The on-prem era (late 1990s–2000s) Bryan recalls 35 IBM testers in a room writing scripts for a Siemens e-clinical system. Companies built their own machines (this predates ordering a Dell or Gateway through the mail), installed software from 25-disk floppy sets, and rewrote their own GxP applications. Validation made sense because everything was bespoke and error-prone — but it meant nobody changed software for three to five years.

Risk-based validation, pre-CSA Bryan was doing risk-based validation at Genzyme starting in 2005, guided by ISPE's GAMP framework. The principles were already there; the industry just wasn't following them.

The cloud transition and the Veeva era Cloud vendors began delivering validation evidence with the platform — but also pushed three to four releases per year. Installation got easier; maintenance got harder. Companies went from validating once every three to five years to validating thousands of releases annually.

FDA's CSA guidance — rebrand or revolution? The Computer Software Assurance guidance flips CSV's document-heavy default into a critical-thinking, risk-based exercise. For practitioners who'd been advocating this for a decade, it felt like rebranding — but it's a clear signal from the agency to redesign the process around patient safety, product quality, and data integrity rather than testing every field.

Why the change has been slow Many sponsors externalized validation to billable-hour consultancies whose business model rewards more testing, not less. Internal common-sense streamlining is the only way to break the pattern, but companies often default to "if it ain't broke, don't fix it" until they swap a vendor entirely.

Vendor responsibility is now table stakes You cannot sell GxP software in life sciences today without ISO and SOC certifications, a validation package, and ongoing maintenance services. Veeva helped normalize this; the entire vendor ecosystem has caught up.

The AI inflection — vibe coding hits regulated software "You can't fund a software company right now unless AI is core to your narrative." Vendors are using Claude Code and similar tools internally. Sware itself runs Claude Code agents end-to-end. Requirements are no longer drafted up front — they emerge from the system, which interestingly mirrors the old waterfall model from the on-prem era.

The "SaaS-pocalypse" and analysis paralysis Foundations are shifting under buyers in real time. This may be the slowest growth year ever for SaaS in the space as customers reevaluate roadmaps and vendors reinvent themselves on AI-native architectures.

Agentic validation and the MCP connect layer Nearly every software company Bryan has spoken to in recent months has a Model Context Protocol connect layer on its roadmap. AI agents inside one platform can talk to agents like Salesforce Agentforce, crawl audit trails and configuration logs, and signal a validation platform to auto-generate requirements, draft test scripts, and execute them. This is what cracks the "final mile" problem that brittle automated testing scripts could never solve.

Real-time, continuous validation The future state: every release re-validates the entire system. Paper records become end-state artifacts that emerge from the data, not the foundation of the effort. Quarterly release cadences and 18-to-24-month migrations give way to something closer to real time.

The trust question Customers have already trusted vendors with disaster recovery, the cloud, and their data. The next layer of trust is validation itself — and the rumblings around Salesforce reportedly monetizing customer data are a cautionary signal that this trust isn't unconditional.

What doesn't change "AI self-validation is only going to go so far." There's still a human component — domain expertise, judgment, and the responsibility for patient safety — that doesn't go away just because agents are doing the grunt work.

Notable Quotes

  • "Paper validation is just dead in that model. There's no way it scales to an AI company that's going to do 3,000, 5,000, 10,000, 20,000 releases a year."
  • "I used to have stacks of paper in my office. They were so tall I created a maze so that nobody could see me at my desk."
  • "We're in a very similar position with AI as we were at the cloud right now."
  • "There's no CIO at any pharma of any size who's going to say, 'Yeah, we're not going to do AI because the validation team told me they don't want to.'"
  • "By this time next year, I think we're in a completely different spot."

People, Companies & Resources Mentioned

Guest & Company

  • Bryan Ennis — Co-Founder & Chief Quality Officer
  • Sware — Digital validation platform; validates Salesforce, Box, Blue Mountain, TrackWise, and 40+ other GxP systems

Bryan's Career Background

  • Genzyme (acquired by Sanofi) — early risk-based validation work starting 2005
  • Veeva Systems — early cloud-era validation

Regulatory & Standards

Software & Vendors Discussed

AI & Developer Tooling

Transcript provided by Otter.ai.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> Fri, 15 May 2026 15:00:00 +0000 mattnealcomedy@gmail.com (Matt Neal, bryan ennis) https://operations-utopia.simplecast.com/episodes/bryanennis-zEb9WUXT Executive Summary

Computer system validation in life sciences is at the most significant inflection point of the last 25 years. In this conversation, Matt Neal sits down with Bryan Ennis — co-founder of Sware and a 27-year veteran of regulated systems work at Genzyme and Veeva — to trace how validation evolved from rooms full of IBM testers writing scripts against floppy-disk installs, through the cloud era's shift of responsibility to vendors, and into today's reality of agentic AI and vibe coding.

Key Topics

Why validation exists in the first place Validation's purpose is common sense — proving that a manufacturing line stamping 100,000 pills an hour, a heart-rate-monitoring device, or a clinical trial data pipeline actually works the way it was designed. Patient safety, product quality, data integrity, and signature legitimacy are the real targets; everything else is overhead.

The on-prem era (late 1990s–2000s) Bryan recalls 35 IBM testers in a room writing scripts for a Siemens e-clinical system. Companies built their own machines (this predates ordering a Dell or Gateway through the mail), installed software from 25-disk floppy sets, and rewrote their own GxP applications. Validation made sense because everything was bespoke and error-prone — but it meant nobody changed software for three to five years.

Risk-based validation, pre-CSA Bryan was doing risk-based validation at Genzyme starting in 2005, guided by ISPE's GAMP framework. The principles were already there; the industry just wasn't following them.

The cloud transition and the Veeva era Cloud vendors began delivering validation evidence with the platform — but also pushed three to four releases per year. Installation got easier; maintenance got harder. Companies went from validating once every three to five years to validating thousands of releases annually.

FDA's CSA guidance — rebrand or revolution? The Computer Software Assurance guidance flips CSV's document-heavy default into a critical-thinking, risk-based exercise. For practitioners who'd been advocating this for a decade, it felt like rebranding — but it's a clear signal from the agency to redesign the process around patient safety, product quality, and data integrity rather than testing every field.

Why the change has been slow Many sponsors externalized validation to billable-hour consultancies whose business model rewards more testing, not less. Internal common-sense streamlining is the only way to break the pattern, but companies often default to "if it ain't broke, don't fix it" until they swap a vendor entirely.

Vendor responsibility is now table stakes You cannot sell GxP software in life sciences today without ISO and SOC certifications, a validation package, and ongoing maintenance services. Veeva helped normalize this; the entire vendor ecosystem has caught up.

The AI inflection — vibe coding hits regulated software "You can't fund a software company right now unless AI is core to your narrative." Vendors are using Claude Code and similar tools internally. Sware itself runs Claude Code agents end-to-end. Requirements are no longer drafted up front — they emerge from the system, which interestingly mirrors the old waterfall model from the on-prem era.

The "SaaS-pocalypse" and analysis paralysis Foundations are shifting under buyers in real time. This may be the slowest growth year ever for SaaS in the space as customers reevaluate roadmaps and vendors reinvent themselves on AI-native architectures.

Agentic validation and the MCP connect layer Nearly every software company Bryan has spoken to in recent months has a Model Context Protocol connect layer on its roadmap. AI agents inside one platform can talk to agents like Salesforce Agentforce, crawl audit trails and configuration logs, and signal a validation platform to auto-generate requirements, draft test scripts, and execute them. This is what cracks the "final mile" problem that brittle automated testing scripts could never solve.

Real-time, continuous validation The future state: every release re-validates the entire system. Paper records become end-state artifacts that emerge from the data, not the foundation of the effort. Quarterly release cadences and 18-to-24-month migrations give way to something closer to real time.

The trust question Customers have already trusted vendors with disaster recovery, the cloud, and their data. The next layer of trust is validation itself — and the rumblings around Salesforce reportedly monetizing customer data are a cautionary signal that this trust isn't unconditional.

What doesn't change "AI self-validation is only going to go so far." There's still a human component — domain expertise, judgment, and the responsibility for patient safety — that doesn't go away just because agents are doing the grunt work.

Notable Quotes

  • "Paper validation is just dead in that model. There's no way it scales to an AI company that's going to do 3,000, 5,000, 10,000, 20,000 releases a year."
  • "I used to have stacks of paper in my office. They were so tall I created a maze so that nobody could see me at my desk."
  • "We're in a very similar position with AI as we were at the cloud right now."
  • "There's no CIO at any pharma of any size who's going to say, 'Yeah, we're not going to do AI because the validation team told me they don't want to.'"
  • "By this time next year, I think we're in a completely different spot."

People, Companies & Resources Mentioned

Guest & Company

  • Bryan Ennis — Co-Founder & Chief Quality Officer
  • Sware — Digital validation platform; validates Salesforce, Box, Blue Mountain, TrackWise, and 40+ other GxP systems

Bryan's Career Background

  • Genzyme (acquired by Sanofi) — early risk-based validation work starting 2005
  • Veeva Systems — early cloud-era validation

Regulatory & Standards

Software & Vendors Discussed

AI & Developer Tooling

Transcript provided by Otter.ai.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> 02 | Validation Reimagined: From Paper Binders to Agentic AI, with Bryan Ennis Matt Neal, bryan ennis 00:47:05 Matt & Bryan talk Modern Computer System Validation. Matt & Bryan talk Modern Computer System Validation. implement consulting group, biotech, validation, veeva, regulatory operations, innovation, veeva systems, life sciences false full 2 a1cbc052-8071-4e59-aeb1-29586dfa6255 01 | Why Biopharma Operating Models Collapse Under Scale Why Biopharma Operating Models Collapse Under Scale
What regulatory operations and R&D platforms reveal about how organizations actually function

Most life sciences organizations don’t struggle because of regulation—they struggle because of how they interpret it.

From the vantage point of Global Regulatory and R&D information systems, this episode examines why modern platforms like Veeva promise leverage but often deliver friction. The issue isn’t technology—it’s how operating models distribute ownership across IT, Quality, and the business, and how risk is interpreted at scale.

This conversation explores how over-validation, misaligned incentives, and legacy thinking slow execution, fragment systems of record, and ultimately increase risk.

This is not a technology discussion.
It is a systems-level diagnosis.

This episode is based on a fireside chat with Fritz Stolp at an industry session hosted by Implement Consulting Group, exploring real-world experiences with Veeva Systems platforms in regulatory and R&D environments.

Key Themes

1. The Expectation Gap

Organizations expect a connected operating system but configure fragmented tools.
Platforms designed to unify data and workflows become siloed and underutilized.

2. Misaligned Ownership Across Functions

  • IT optimizes for requirements and infrastructure
  • Quality applies legacy validation models
  • The business often lacks visibility into what’s possible

Result: No single group owns the outcome.

3. Over-Validation as Risk Creation

Validation is necessary—but often misapplied.

When simple changes take weeks or months:

  • Work moves into spreadsheets and email
  • Systems of record are bypassed
  • Traceability decreases

Risk doesn’t go away. It moves.

4. Decision Latency at Scale

Governance structures intended to reduce risk often increase it by slowing execution and diffusing accountability.

Simple configuration changes become prolonged processes, creating friction across the organization.

5. SaaS Reality vs Legacy Thinking

Modern platforms evolve continuously.
Organizations that resist change fall behind the very capabilities designed to improve them.

In no other industry do customers ask technology providers to stop innovating.

6. The User Adaptability Myth

A major interface change introduced no disruption in practice.

Users adapt quickly.
Organizations assume they won’t.

This gap reinforces unnecessary controls and slows adoption.

7. Trust as an Operating Requirement

Execution speed depends on trust:

  • Between internal teams
  • Between organizations and vendors

Reducing redundant validation and enabling faster deployment requires explicit risk ownership.

8. Patient Time as the Ultimate Constraint

Operational delay is not abstract.

In some cases, time spent in internal processes directly impacts patient outcomes.

Efficiency is not just a business concern—it is an ethical obligation.

Key Quotes

“Most organizations don’t fail because of technology—they fail because no one owns how it’s supposed to work.”

“Over-validation doesn’t reduce risk—it pushes work out of the system of record.”

“If a simple change takes months, the system has already failed.”

“We don’t need less regulation—we need better interpretation.”

Who Should Listen

  • CEOs and COOs in life sciences
  • Heads of Regulatory, Quality, and Operations
  • CIOs and Digital leaders
  • Regulatory and policy stakeholders

What This Episode Is Not

  • Not a Veeva implementation guide
  • Not a validation methodology tutorial
  • Not a vendor perspective
  • Not a “digital transformation” narrative

This is a diagnosis of how operating models behave under scale and constraint.

Closing Thought

Regulatory operations don’t just execute the operating model. They expose it.

Information Mentioned in this Episode:

Summaries and show notes created from transcript using ChatGPT w/ some light editing - let me know if you find anything crazy that needs to change.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> Fri, 24 Apr 2026 02:45:29 +0000 mattnealcomedy@gmail.com (Matt Neal, Frits Stulp) https://operations-utopia.simplecast.com/episodes/01-implement-veeva-consortium-fireside-chat-if8_DN7p Why Biopharma Operating Models Collapse Under Scale
What regulatory operations and R&D platforms reveal about how organizations actually function

Most life sciences organizations don’t struggle because of regulation—they struggle because of how they interpret it.

From the vantage point of Global Regulatory and R&D information systems, this episode examines why modern platforms like Veeva promise leverage but often deliver friction. The issue isn’t technology—it’s how operating models distribute ownership across IT, Quality, and the business, and how risk is interpreted at scale.

This conversation explores how over-validation, misaligned incentives, and legacy thinking slow execution, fragment systems of record, and ultimately increase risk.

This is not a technology discussion.
It is a systems-level diagnosis.

This episode is based on a fireside chat with Fritz Stolp at an industry session hosted by Implement Consulting Group, exploring real-world experiences with Veeva Systems platforms in regulatory and R&D environments.

Key Themes

1. The Expectation Gap

Organizations expect a connected operating system but configure fragmented tools.
Platforms designed to unify data and workflows become siloed and underutilized.

2. Misaligned Ownership Across Functions

  • IT optimizes for requirements and infrastructure
  • Quality applies legacy validation models
  • The business often lacks visibility into what’s possible

Result: No single group owns the outcome.

3. Over-Validation as Risk Creation

Validation is necessary—but often misapplied.

When simple changes take weeks or months:

  • Work moves into spreadsheets and email
  • Systems of record are bypassed
  • Traceability decreases

Risk doesn’t go away. It moves.

4. Decision Latency at Scale

Governance structures intended to reduce risk often increase it by slowing execution and diffusing accountability.

Simple configuration changes become prolonged processes, creating friction across the organization.

5. SaaS Reality vs Legacy Thinking

Modern platforms evolve continuously.
Organizations that resist change fall behind the very capabilities designed to improve them.

In no other industry do customers ask technology providers to stop innovating.

6. The User Adaptability Myth

A major interface change introduced no disruption in practice.

Users adapt quickly.
Organizations assume they won’t.

This gap reinforces unnecessary controls and slows adoption.

7. Trust as an Operating Requirement

Execution speed depends on trust:

  • Between internal teams
  • Between organizations and vendors

Reducing redundant validation and enabling faster deployment requires explicit risk ownership.

8. Patient Time as the Ultimate Constraint

Operational delay is not abstract.

In some cases, time spent in internal processes directly impacts patient outcomes.

Efficiency is not just a business concern—it is an ethical obligation.

Key Quotes

“Most organizations don’t fail because of technology—they fail because no one owns how it’s supposed to work.”

“Over-validation doesn’t reduce risk—it pushes work out of the system of record.”

“If a simple change takes months, the system has already failed.”

“We don’t need less regulation—we need better interpretation.”

Who Should Listen

  • CEOs and COOs in life sciences
  • Heads of Regulatory, Quality, and Operations
  • CIOs and Digital leaders
  • Regulatory and policy stakeholders

What This Episode Is Not

  • Not a Veeva implementation guide
  • Not a validation methodology tutorial
  • Not a vendor perspective
  • Not a “digital transformation” narrative

This is a diagnosis of how operating models behave under scale and constraint.

Closing Thought

Regulatory operations don’t just execute the operating model. They expose it.

Information Mentioned in this Episode:

Summaries and show notes created from transcript using ChatGPT w/ some light editing - let me know if you find anything crazy that needs to change.

Operations Utopia - Where Regops, Innovation, Technology, and Execution Meet.

Disclaimer: This podcast reflects only the opinion of the podcaster and guests and does not reflect those of their organizations, system vendors, or service provider

Original show theme "Little Sammy" by Matt Neal

]]> 01 | Why Biopharma Operating Models Collapse Under Scale Matt Neal, Frits Stulp 00:25:13 Why Biopharma Operating Models Collapse Under Scale: What regulatory operations and R&D platforms reveal about how organizations actually function. The Fireside Chat with Frits Stulp from at the Implement Consulting Group's Veeva Consortium in November 2025. Why Biopharma Operating Models Collapse Under Scale: What regulatory operations and R&D platforms reveal about how organizations actually function. The Fireside Chat with Frits Stulp from at the Implement Consulting Group's Veeva Consortium in November 2025. implement consulting group, biotech, validation, veeva, regulatory operations, innovation, veeva systems, life sciences false full 1