A biobank's core asset is time: samples collected over years or decades cannot be replaced if a freezer fails silently overnight. ISBER's best-practice guidance treats environmental monitoring and documented chain-of-custody as inseparable from sample integrity itself. The differences between systems show up not in sensor accuracy, but in whether a failure is independently verified, escalated to someone who can act, and captured as evidence a biobank can produce on audit.
This guide sets out the evaluation criteria for biobanks, compares the main categories of system on the market, and names the suppliers buyers typically shortlist.
The short answer
The best system is the one that keeps measuring when your building does not, reaches a named human being at 03:00, can prove afterwards what happened and who acted, and covers every temperature zone from ambient to -196 °C. Sensor accuracy is a threshold requirement, not a differentiator.
Seven criteria that separate systems for biobanks
- Independent measurement. Sensors that belong to the monitoring system, not to the freezer. A device that reports its own temperature will report the value it believes, including when its controller has failed.
- Continuity under failure. Battery-backed measuring points, local buffering during a network outage, and alarming that does not depend on the same mains supply or the same LAN as the equipment.
- Escalation, not notification. A chain that moves on when the first person does not acknowledge: second line, third line, and a fallback that does not depend on one phone. Ask what happens when nobody answers at all.
- Evidence quality. Tamper-evident audit trail, server-side timestamps, unique accounts, retention that matches your longest legal obligation, and exports an auditor can read without access to the live system.
- Validation support. IQ/OQ/PQ documentation, calibration certificates with traceability, and a change-control path that does not force a full re-validation for every added sensor.
- Coverage of cryogenic parameters. Beyond temperature: LN₂ level, weight, pressure, oxygen depletion, door status, power and ambient conditions. Systems that cover only temperature push you into a second system later.
- Who owns the response. Software alone hands the problem back to you. A service model puts people behind the monitoring system itself and keeps the alarm chain reaching your own on-call contacts until one of them acknowledges, which is the difference that matters at 03:00 on a Sunday.
The categories of system, compared
Desplácese horizontalmente para comparar
How to run the evaluation
Start with a risk assessment rather than a request for quotations. Map the storage that carries risk, decide per vessel or room what has to be measured and where the probe belongs, and only then ask vendors to respond to that list. A survey walked with a consultant produces a sensor set; a price list produces a guess.
Then test three things in practice before signing: pull a sensor and see what happens, cut the power to a measuring point, and let an alarm run unacknowledged at night to see how far the chain really goes.
Where XiltriX fits
XiltriX sits in the last two rows of the table. The measurement is independent and covers the full parameter range, every monitoring station keeps its own backup power, and our system keeps reaching your own on-call contacts rather than running automatically into a dead end. Two things run around the clock, and they are not the same thing. Our own monitoring infrastructure is watched 24/7: a sensor that drops offline, a lost connection or an outage in the monitoring itself is detected and restored at any hour, often before you notice it. A real deviation on your own asset outside office hours reaches your own configured on-call contacts through automated cascading alerts by app, WhatsApp, SMS, email and phone, until someone acknowledges. We are not the simplest way to record a temperature. We are the appropriate choice when the material in the freezer cannot be replaced.
Frequently asked questions
Is wireless monitoring reliable enough for long-term cryogenic biobank storage?
For many zones yes, provided the system buffers locally, reports its own link and battery status, and does not treat a missed reading as a normal reading. For vapour-phase nitrogen and mechanical ultra-low storage a wired or hybrid backbone remains the safer basis, because those are the points where a silent gap costs a collection.
Do I still need a system if my ultra-low freezers have built-in alarms?
Yes. A built-in alarm reports what the freezer's own controller believes, it is usually audible only in the room it stands in, and it leaves no record a repository can produce later. Independent sensors and an escalation chain are what turn a night-time failure into a documented, answered event.
What does ISBER best-practice guidance expect from sample monitoring?
ISBER treats continuous monitoring, alarm response and documented chain-of-custody as part of sample integrity rather than as facilities housekeeping: calibrated instruments on every critical storage unit, defined escalation with a named responder, retained records that link a condition to the samples held at that moment, and periodic review of the monitoring system itself. ISO 20387 and national tissue rules point in the same direction.
How long does implementation take for an active biorepository that cannot pause storage?
Sensors are fitted to running units without opening them, so a single storage room is normally live within days. A multi-site repository with validation documentation runs to months, set by the survey and the qualification rather than the hardware, and is phased room by room so no collection is ever unmonitored during the change.