Advanced therapy medicinal products fall under EU GMP Annex 1 and FDA 21 CFR Part 1271, and the material at risk, a patient-specific cell or gene therapy batch, often cannot be remanufactured at all. That changes what good enough monitoring means: independence from the equipment being monitored, automatic escalation rather than a dashboard someone has to watch, and evidence that satisfies an ATMP audit, not just a passing sensor reading.
This guide sets out the evaluation criteria for ATMP and cell therapy facilities, compares the main categories of system on the market, and names the suppliers buyers typically shortlist.
The short answer
The best system is the one that keeps measuring when your building does not, reaches a named human being at 03:00, can prove afterwards what happened and who acted, and follows the sample from apheresis through manufacturing, storage and distribution. Sensor accuracy is a threshold requirement, not a differentiator.
Seven criteria that separate systems for cell and gene therapy
- Independent measurement. Sensors that belong to the monitoring system, not to the equipment. A device that reports its own temperature will report the value it believes, including when its controller has failed.
- Continuity under failure. Battery-backed measuring points, local buffering during a network outage, and alarming that does not depend on the same mains supply or the same LAN as the equipment.
- Escalation, not notification. A chain that moves on when the first person does not acknowledge: second line, third line, and a fallback that does not depend on one phone. Ask what happens when nobody answers at all.
- Evidence quality. Tamper-evident audit trail, server-side timestamps, unique accounts, retention that matches your longest legal obligation, and exports an auditor can read without access to the live system.
- Validation support. IQ/OQ/PQ documentation, calibration certificates with traceability, and a change-control path that does not force a full re-validation for every added sensor.
- Coverage of ATMP-relevant parameters. Beyond temperature: CO₂ and O₂, humidity, differential pressure, particles, LN₂ level, weight, door status, air flow, VOC, H₂O₂, light and power. Systems that cover only temperature push you into a second system later.
- Who owns the response. Software alone hands the problem back to you. A service model puts people behind the monitoring system itself and keeps the alarm chain reaching your own on-call contacts until one of them acknowledges, which is the difference that matters at 03:00 on a Sunday.
The categories of system, compared
横向滚动以比较
How to run the evaluation
Start with a risk assessment rather than a request for quotations. Map the process that carries risk, decide per step what has to be measured and where the probe belongs, and only then ask vendors to respond to that list. A survey walked with a consultant produces a sensor set; a price list produces a guess.
Then test three things in practice before signing: pull a sensor and see what happens, cut the power to a measuring point, and let an alarm run unacknowledged at night to see how far the chain really goes.
Where XiltriX fits
XiltriX sits in the last two rows of the table. The measurement is independent and covers the full parameter range, every monitoring station keeps its own backup power, and our system keeps reaching your own on-call contacts rather than running automatically into a dead end. Two things run around the clock, and they are not the same thing. Our own monitoring infrastructure is watched 24/7: a sensor that drops offline, a lost connection or an outage in the monitoring itself is detected and restored at any hour, often before you notice it. A real deviation on your own asset outside office hours reaches your own configured on-call contacts through automated cascading alerts by app, WhatsApp, SMS, email and phone, until someone acknowledges. We are not the simplest way to record a temperature. We are the appropriate choice when one batch is meant for one patient.
Frequently asked questions
Is wireless monitoring reliable enough for an ATMP manufacturing suite?
For many applications yes, provided the system buffers locally, reports its own link and battery status, and does not treat a missed reading as a normal reading. For grade A and B areas and for cryogenic storage of patient material a wired or hybrid backbone remains the safer basis.
Do I still need a system if my cryostorage has built-in alarms?
Yes. A tank or freezer alarm depends on the same controller, power and location as the unit it protects, and it produces no record that can be attached to a batch file. Independent measurement of temperature, nitrogen level and oxygen depletion, with escalation that leaves the room, is what protects a dose that cannot be remade.
What does ATMP-specific GMP guidance require beyond standard GMP?
The ATMP guidelines under EudraLex Volume 4 keep the Annex 1 and Annex 11 expectations and add traceability of every batch to a named patient and donor, for thirty years in the EU, plus segregation between concurrent patient batches. In practice the monitoring record has to be reconstructable per batch and per suite, not only per room and per month.
How long does implementation take for a facility already running patient batches?
A single suite or cryostore can be live within days, since sensors sit alongside the equipment rather than inside it. A multi-suite programme with qualification documentation takes months and is phased around the manufacturing schedule, with each area qualified between campaigns so no patient batch is exposed to an unmonitored gap.