CORPEX LIMS · Saudi Arabia · SFDA

A LIMS for labs that answer to the SFDA.

CORPEX LIMS runs QC release testing, ICH stability, out-of-specification investigations and Certificates of Analysis on one sample record, one audit trail and one set of electronic signatures. It is installed on your own servers or private cloud, so the data can stay in the Kingdom. Built for pharma manufacturers, food laboratories and independent testing labs.

Or meet us in Riyadh during CPHI Middle East, 26–28 April 2027.

CORPEX LIMS sample record: QC number, six-step sample lifecycle, barcode and tabs for tests and results, investigation, equipment used and record history
  1. Step 1Registered
  2. Step 2Assigned
  3. Step 3In progress
  4. Step 4Pending review
  5. Step 5Technically reviewed
  6. Step 6Approved

A batch sample takes the same six steps from receipt to release. Approval records the usage decision, and the Certificate of Analysis is issued from that record.

2023
SFDA joins PIC/SFirst Arab authority admitted
18%
More licensed facilitiesAll SFDA sectors, 2025 vs 2024
IVa
GCC zones III and IVa30 °C / 65 % RH long-term
3
OOS phasesPhase I (Ia/Ib), then II as needed
Saudi Context

What Changed for Saudi QC Laboratories


Three facts shape a LIMS decision in the Kingdom today. SFDA inspects as a PIC/S participating authority. Its own GMP guide carries a computerised-systems annex that names data integrity and audit trails. And the base of licensed sites keeps growing.

PIC/S since July 2023

The PIC/S member list shows SFDA’s accession in July 2023. SFDA’s announcement says Saudi Arabia was the first Arab country admitted. An inspection of your laboratory is now an inspection by a PIC/S participating authority.

Annex 11 in the SFDA GMP guide

The SFDA Guide to Good Manufacturing Practice for Medicinal Products includes Annex 11 on computerised systems. Decisions on validation and data integrity controls are to rest on a documented risk assessment, and audit trails are to be reviewed.

More licensed facilities

SFDA reported an 18 % rise in licensed factories and warehouses in 2025: 9,155 against 7,750 in 2024, across all the sectors it regulates, not drugs alone. SFDA also held a generic drugs conference in Riyadh in December 2025 on local manufacturing.

QC Release Testing

Release testing for local generics and API manufacturers

Every incoming material, intermediate and finished batch gets a QC number and walks the same six steps. Results are judged against the specification version in force, and the usage decision is recorded on the sample, not in a separate sheet.

  • Specifications and test methods held as versioned master data.
  • Worksheets with calculations, so the analyst enters raw values rather than a computed result.
  • The analyst cannot review their own result; review and approval are separate electronic signatures.

All CORPEX LIMS modules

CORPEX LIMS sample register: samples counted by status, samples received per day, and filters by status, section, result and sample type with CSV and XLSX export
Stability · ICH Q1A(R2) · Zone IVa

Stability at the conditions SFDA names

SFDA’s GCC stability guideline (DS-G-005, version 3.4) puts the GCC states in climatic zones III and IVa. For the general case it sets long-term storage at 30 °C ± 2 / 65 % RH ± 5 for 12 months at submission and accelerated at 40 °C ± 2 / 75 % RH ± 5 for 6 months. Zone IVb (30 °C / 75 % RH) is not the GCC condition, so read the current guideline before you set up a Saudi protocol.

  • The zone and condition table is editable master data: your regulatory team sets it to the SFDA document, with no code change.
  • Chambers, pull schedules and time-point labels generated from the protocol.
  • Shelf life from the 95 % one-sided confidence bound across pooled batches, as ICH Q1E describes.

ICH Q1A stability testing: what inspectors check

CORPEX LIMS product stability evaluation at 30 °C / 65 % RH: batches included, shelf life claimed and supported, and the 95 % one-sided bound verdict
Data Integrity · Audit Trail

An audit trail built for Annex 11

The SFDA guide asks for a record of GMP-relevant changes and deletions, a documented reason for each, and an audit trail that is readable and regularly reviewed. CORPEX LIMS writes every create, change and delete with the old and new value, the user, the time and the reason, and each entry carries a fingerprint of the one before it.

  • Chain verification on demand; a break is reported, not hidden.
  • Raw instrument files are fingerprinted at upload and cannot be deleted.
  • Read-only, filterable and exportable for the inspector.
CORPEX LIMS audit trail: hash chain intact over the most recent 500 entries, matching entries, read-only access mode and change history
OOS Investigations

Out-of-specification results, handled in order

The SFDA GMP guide expects out-of-specification and out-of-trend results to be investigated under a written procedure. In CORPEX LIMS an OOS result raises an investigation that moves through Phase I (Ia/Ib), then Phase II as needed, ending in CAPA where the root cause calls for it.

  • The original result is never edited or excluded.
  • The sample is held while the investigation is open and returns to the step it left.
CORPEX LIMS OOS investigations list with state, phase, status and source module for assay investigations
Instrument Capture

HPLC and balance data without retyping

Instruments post readings to the LIMS in one of four formats (delimited, fixed-width, key-value or JSON), or a shared folder is watched. Each sending system gets its own revocable API key, so every transfer is attributable; rejected rows are listed with the reason.

  • Rejected rows are listed with the reason rather than dropped.
  • The equipment register tracks calibration, and a site policy can refuse work on an instrument past its date.
  • Each instrument is set up once; the same door serves balances, pH meters and chromatography systems.

Data and instrument integration · SAP integration (project-based)

CORPEX LIMS equipment register with calibration valid, due soon and expired counts, instrument status and equipment inventory
Certificate of Analysis

A CoA that cannot be issued early

The certificate is generated from the approved sample record. If a test has no result entered, the system says so and refuses to issue. The registry lists every certificate with its conclusion and usage decision, so a QA reviewer can find a batch in seconds.

  • Conclusion and usage decision shown beside each certificate.
  • PDF download from the live record.
  • A retest produces a new certificate version, with results not re-measured marked as carried forward.
CORPEX LIMS sample at step 1 of 6 with the notice that 11 tests have no result entered, so the work cannot go to review
Testing Laboratories

ISO/IEC 17025 and SAAC Accreditation


SAAC (Saudi Accreditation Center) accredits testing and calibration laboratories against ISO/IEC 17025. A LIMS does not accredit a lab, but it supplies much of the evidence an assessor asks for.

Were the analyst and the instrument fit for the test?

Analyst qualification is checked before work is allocated, and calibration status sits on every instrument record.

Was the method validated?

Method validation runs in the system against ICH Q2(R2) characteristics, and the approved protocol is frozen.

Can you trace the certificate to the raw data?

The number on the certificate is the number the analyst entered and the reviewer signed, with the audit trail behind it.

Is the result trending out of control?

Control charts with Nelson’s eight run rules flag drift while results still pass specification.

Deployment

Your Servers, Your Data Location


CORPEX LIMS is installed on the customer’s own servers or private cloud. It is not a hosted subscription service, so where the data sits is your decision, including inside Saudi Arabia. A LIMS holds some personal data: user accounts, electronic signatures and audit entries. The Personal Data Protection Law applies in the Kingdom, and SDAIA’s Regulation on Personal Data Transfer Outside the Kingdom sets conditions for moving personal data abroad. Keeping the system in-Kingdom is a fact about deployment. It is not a PDPL certification, and your counsel should confirm what applies to your organisation.

Arabic where it counts today

The application shell, navigation, sign-in page and in-app help are available in Arabic with right-to-left layout. The working screens are in English today.

Validated like any GMP system

The CORPEX team documents IQ, OQ and PQ with a risk-based approach; see computer system validation.

Part of the same Saudi stack

Pair it with Corpex-eQMS for Saudi Arabia for deviations, CAPA and change control, and Corpex-EBR for Saudi Arabia for batch records.

Book an Online Demo

CORPEX Informatics is based in the New Capital, Egypt, and serves the region. Take a demo online: one sample from registration through an OOS investigation to its certificate. Or meet us in Riyadh during CPHI Middle East, 26–28 April 2027.

Book an online demo

LIMS in Saudi Arabia: Common Questions

Does SFDA require a LIMS?

The SFDA Guide to Good Manufacturing Practice for Medicinal Products does not name a LIMS. Its Annex 11 applies to all forms of computerised systems used as part of GMP-regulated activities, so a LIMS that holds QC and stability results has to be validated and controlled like any other GMP computerised system. CORPEX LIMS is built for that, and the CORPEX validation team documents it through computer system validation.

Is SFDA a PIC/S member, and does it change what a QC lab needs?

Yes. SFDA joined the Pharmaceutical Inspection Co-operation Scheme in 2023 and was the first Arab authority admitted; the PIC/S member list shows accession in July 2023. For a QC laboratory the practical effect is that inspections follow PIC/S-style expectations, including its data integrity guidance (PI 041). CORPEX LIMS is designed around ALCOA+ and PIC/S PI 041. That is our design basis; it is not a statement that SFDA has adopted PI 041.

Which stability storage conditions does SFDA expect?

SFDA's GCC guideline for stability testing (DS-G-005, version 3.4) places the GCC states in climatic zones III and IVa and sets the general-case long-term condition at 30 °C ± 2 °C / 65 % RH ± 5 % RH for 12 months at submission, with accelerated testing at 40 °C ± 2 °C / 75 % RH ± 5 % RH for 6 months. Zone IVb (30 °C / 75 % RH) is not the GCC condition. In CORPEX LIMS the zone and condition table is editable master data, so your regulatory team sets it to the current SFDA document.

What does SFDA expect from an audit trail?

Annex 11 in the SFDA GMP guide asks that, based on a risk assessment, the system record all GMP-relevant changes and deletions, that a reason is documented for a change or deletion of GMP-relevant data, and that the audit trail is available, convertible to an intelligible form and regularly reviewed. CORPEX LIMS writes a hash-chained audit trail with user, time, old and new value and reason, shows it read-only, and can verify the chain on demand.

Can the LIMS run on our own servers so data stays in the Kingdom?

CORPEX LIMS is installed on the customer's own servers or private cloud, so you choose where the data sits, including inside Saudi Arabia. A LIMS holds some personal data, such as user accounts, signatures and audit entries. SDAIA's Regulation on Personal Data Transfer Outside the Kingdom sets conditions for moving personal data out of the Kingdom, and the Personal Data Protection Law is the legal frame. Hosting in-Kingdom is a deployment fact, not a legal certification; take advice from your own counsel on what applies to you.

Does CORPEX LIMS have an Arabic interface?

Partly. The application shell, navigation, sign-in page and in-app help are available in Arabic with right-to-left layout. The working screens (samples, worksheets, investigations, stability) are in English today. If your analysts need those screens in Arabic, ask us at the demo what that would involve.

Does the LIMS help a testing lab pursue SAAC accreditation to ISO/IEC 17025?

SAAC (Saudi Accreditation Center) accredits testing and calibration laboratories against ISO/IEC 17025. A LIMS does not make a lab accredited. CORPEX LIMS supplies controls an assessor looks for: analyst qualification checked before work is allocated, calibration status on every instrument, validated methods, an analyst who cannot review their own result, with review and approval as separate electronic signatures, and a traceable record behind every certificate.

Where is CORPEX based, and how do we meet?

CORPEX Informatics is based in the New Capital, Egypt, and serves the region. There is no Saudi office. You can book a demo online, or meet us in Riyadh during CPHI Middle East (26 to 28 April 2027).

Sources

  1. SFDA, Guide to Good Manufacturing Practice for Medicinal Products, version 4.4: Annex 11.
  2. SFDA, GCC guidelines for stability testing (DS-G-005, version 3.4), as published by SFDA.
  3. SFDA, SFDA Obtains PIC/S Membership (12 May 2023); PIC/S, participating authorities; PIC/S, publications (PI 041, data integrity).
  4. SFDA, licensed factories and warehouses in 2025 (26 January 2026); the 18 % covers all SFDA sectors.
  5. SDAIA, Guide to the Saudi Personal Data Protection Law; SDAIA, Regulation on Personal Data Transfer Outside the Kingdom.
  6. SAAC, Saudi Accreditation Center, accreditation of testing and calibration laboratories (ISO/IEC 17025).

Check the current versions on the issuing authority’s site. Compliance belongs to your validated system and procedures, not to the software alone. See also the global CORPEX LIMS page.