We’ve joined forces with Smartlogic to reveal smarter decisions—together.

MarkLogic Achieves FDA Title 21 CFR Part 11 Security Compliance

We’re proud to announce that MarkLogic Data Hub service has received an attestation of compliance with Title 21 CFR Part 11, a U.S. Food and Drug Administration (FDA) regulatory framework that covers the management and storage of electronic records and signatures.

Compliance with this regulation ensures the trustworthiness and reliability of electronic records. And, it is another confirmation of MarkLogic’s leading position as the simplest and most secure modern data platform for integrating healthcare, pharma, and life sciences data.

MarkLogic is used by 5 of the top 10 pharma companies and runs the largest NoSQL system in the healthcare industry. Also, MarkLogic’s recently announced Pharma Research Hub is also helping pharma companies accelerate drug discovery. With this attestation, healthcare, pharma, and life sciences companies can trust that when using MarkLogic as part of their software stack, they are in compliance with FDA rules and regulations for handling electronic records and electronic signatures.

Overview of FDA Title 21 CFR Part 11

The FDA’s Title 21 Code of Federal Regulations Part 11 (also just called “Part 11”) defines the criteria under which electronic records and electronic signatures are considered trustworthy, reliable, and equivalent to paper records.

The regulation covers multiple aspects of storing and managing electronic records, including reviewing security controls auditing, data validation, use of electronic signatures, and associated documentation. The regulation hits on every part of the data lifecycle, including when information is created, modified, maintained, archived, retrieved, and distributed.

In section 11.3, the FDA defines “electronic record” to mean; “any combination of text, graphics, data, audio, pictorial, or other information representation in digital form that is created, modified, maintained, archived, retrieved, or distributed by a computer system.” In other words, Part 11 is quite broad and most companies in the healthcare, pharma, and life sciences space are impacted by it.

Why this FDA Regulation Matters

The FDA first published this regulation in 1997 and although there have been multiple updates, it continues to stand the test of time. When organizations evaluate software they will use to store sensitive data, particularly organizations with Good Laboratory, Clinical, or Manufacturing Practices (GxP), this regulation is a baseline measure for security and integrity.

As organizations migrate to the cloud, they cannot assume that just because a technology is modern, it is secure. These regulations still apply and are important criteria when researching vendors for data management and data integration.

Other less mature database vendors are often not built with security in mind. MarkLogic has focused on security from the start and is the only NoSQL database vendor that has this level of compliance.

Availability of the Report

The FDA Title 21 CFR Part 11 attestation report is not public, but we are able to share it under a non-disclosure agreement. If you would like a copy of the report, please contact us and one of our security experts will get in touch.

Note that this report has been updated for the year 2020. 

Director of Product Marketing

Matt Allen is a VP of Product Marketing Manager responsible for marketing all the features and benefits of MarkLogic across all verticals. In this role, Matt interfaces with the product and engineering team and with sales and marketing to create content and events that educate and inspire adoption of the technology. Matt is based at MarkLogic headquarters in San Carlos, CA and in his free time he is an artist who specializes in large oil paintings.

Start a discussion

Connect with the community




Most Recent

View All

Unifying Data, Metadata, and Meaning

We're all drowning in data. Keeping up with our data - and our understanding of it - requires using tools in new ways to unify data, metadata, and meaning.
Read Article

How to Achieve Data Agility

Successfully responding to changes in the business landscape requires data agility. Learn what visionary organizations have done, and how you can start your journey.
Read Article

Scaling Memory in MarkLogic Server

This not-too-technical article covers a number of questions about MarkLogic Server and its use of memory. Learn more about how MarkLogic uses memory, why you might need more memory, when you need more memory, and how you can add more memory.
Read Article
This website uses cookies.

By continuing to use this website you are giving consent to cookies being used in accordance with the MarkLogic Privacy Statement.