Study context · relevant precedent · consequence · authority
Architecture and integrations
Keep one study model aligned across every system.
Tenvia links approved study intent with relevant historical and public evidence, the systems that execute the study and the records that show what happened. Your specialist platforms remain in place.
Connected study lifecycle
Carry approved intent through execution and assurance.
The study remains connected from the approved design to the evidence produced during delivery.
Define
Design, simulate and approve the study once.Protocol intent, relevant precedent, operational assumptions, CRO commitments and downstream requirements become one versioned study definition that is independent of vendors and linked to its evidence.
Build
Translate one approved definition for every target.Compilers prepare supported configuration packages for each system. Connector capability determines what can be generated, what needs completion and what requires vendor services.
Operate
Let specialist systems execute the study.EDC, CTMS, eTMF, IRT, eCOA, labs, safety and other systems remain accountable for the work and records they own.
Assure
Detect divergence and govern what changes next.Tenvia compares observed reality with approved intent, exposes evidence and impact, prepares change sets and waits for the right human authority.
Reference architecture
Clear separation between intent, translation, execution and authority.
Select a layer to inspect its responsibility and its hard boundary.
Canonical Study Definition
Represent protocol structure, visits, assessments, countries, milestones, operational responsibilities, dependencies and approved assumptions without embedding configuration for a particular vendor.
- Receives
- Approved protocol and operating model decisions, with relevant evidence linked as context rather than treated as study truth
- Produces
- Stable study objects, evidence relationships and versioned change sets
- Hard boundary
- It defines the approved study. Clinical records remain in their source systems.
Amendment orchestration
Carry an approved change through the whole study.
A versioned change set links the decision to work for each target, named approvers and the final execution record.
- 01Approved change
Eligibility threshold changes
Amendment 3 changes eGFR ≥45 to ≥60 mL/min/1.73m². Baseline v3.2 remains active until approval is complete.
- 02Impact graph
Affected objects identified
Population assumptions, enrolment forecast, lab requirements, site workload, participant content and build targets become inspectable.
- 03Change sets
Work prepared by target
EDC and eCOA mappings change. CTMS milestones and eTMF expectations require review. IRT remains unaffected.
- 04Human gate
Authority stays visible
The Sponsor approves protocol intent. The CRO owns the coordinated plan. System and content owners validate the work for their targets.
- 05Deploy & verify
Supported actions are controlled
Approved packages move through validated connector boundaries. External identifiers, warnings and verification results enter the manifest.
- 06Assure
Reality is reconciled to intent
Tenvia compares observed versions and attributable evidence with the approved definition, then routes gaps for qualified review.
Build once and prepare every target
Use one definition to create governed packages for each system.
Each target declares what can be generated, what needs completion and what stays with the vendor or system owner.
EDC
- Potential scope
- Study structure, visits, forms, fields, specifications for edit checks and metadata where supported.
- Human gate
- Validation by Data Management and authorised deployment.
- Explicit limitation
- Exact output depends on the selected platform interface and study validation approach.
Connector lifecycle
Every connection has a defined operating boundary.
Scope, permissions, validation, failure ownership and release status are recorded for each connection.
- 01
Discover
Confirm the customer’s systems, interfaces, ownership and first decision thread.
- 02
Authorise
Grant only the required organisation, study, object and operation scope.
- 03
Map
Bind source and target objects to the canonical definition with provenance.
- 04
Validate
Test positive, negative, failure, retry, conflict and recovery behaviour.
- 05
Activate
Release only the approved connector capability for the agreed environment.
- 06
Monitor
Observe health, latency, version drift, warnings and attributable outcomes.
- 07
Revoke
Pause credentials and external action without losing the study record.
Required behaviour
Failures remain visible.
- No silent overwrite of a source system
- Failed writes remain visible and attributable
- Retries are controlled, bounded and auditable
- Conflicts follow deterministic policy or human review
- Connector access can be paused or revoked
- Bespoke connections cannot bypass the canonical baseline
AI, evidence and authority
See the evidence behind the insight.
AI can retrieve, compare and explain relevant evidence within the same permissions and provenance model as every other capability. Accountable people still make the decision.
Current availability
What exists. What is being proved. What comes next.
Procurement decisions should not depend on an implied roadmap.
Product foundation
- Governed study and protocol model
- Versioned decisions with source relationships
- Operating model foundations for Sponsors and CROs
- Product and assurance experience using fixture data
In development
- Matching of relevant studies with evidence sources attached
- Canonical coverage that systems can process
- Attributable evidence and mapping contracts
- Connector capability model
Platform direction
- System compilers for named vendors
- Validated live connectors
- Configuration drift detection
- Governed action and assurance across systems
Start with your real environment