Pharmaceutical supplier risk monitoring that turns a warning letter into a cited alert, with cover and options
Every warning letter, disaster or default at a supplier site becomes a cited alert within the hour.
See one case, screen by screen ↓FDA posts a warning letter and an import alert for an API maker in Vapi. Somewhere in the supplier base that is one site among two hundred, and the first questions are always the same: is it our site or another unit of the same group, which materials come from it, which products and markets depend on it, and how many weeks of cover do we really have once the lots held at the port are taken out.
By hand, the answers live in different places — the vendor master, the approved supplier list in the quality system, the bills of materials, the planning snapshot, the filings register and the supply agreement. Tier-2 sources, such as the key starting material behind an API, rarely appear in the vendor master at all. By the time the picture is together, days have gone, and the options — a second source, a prior approval supplement, a shortage notification assessment — are being weighed against less cover than anyone thought.
Estimated split for one regulatory signal at a single-source API site, by hand and with the solution — team estimates, in working hours.
Seven specialist agents read the feeds, map who makes what, work out cover and second sources and write each alert; the risk lead decides the response.
At 06:12 FDA warning letter 320-26-41 and an Import Alert 66-40 entry name Hanvar Fine Chemicals in Vapi — the only US source of the API in Talmirex tablets. Here is what happens next, screen by screen, in the working solution.
Omar opens the exposure map: 214 supplier sites in 31 countries watched, 96 feeds, last sweep 06:14. The map runs tier-2 sources, tier-1 sites, critical materials and products with their annual sales. At the top of Needs you sits A-1042, score 91: Hanvar Vapi Unit II, Regulatory — Talmirex US, 23.3 weeks of cover, sole US source.
“15 supplier sites · 10 critical materials · 7 products. 3 sites under alert feed 3 products.”
The signal reader pulled the firm, address, FEI and dates from the letter and the import alert. The site matcher matched FEI 3009817742 and Plot 214/2, GIDC Phase I to Vapi Unit II. Hanvar’s Vapi Unit IV has a different FEI (3011094418) and address (Plot 88, Phase III), so it is logged as a near miss, with no alert. A trade-press story on the same event is attached as corroboration.
“Everything the agents read — matched to a supplier site, a near miss, or not ours, always with the reason.”
A-1042 opens on “3 signals matched Hanvar Vapi Unit II at 06:12”. The warning letter sits beside it with the key passages marked: 41 chromatographic injections for related substances in talmirex sodium run, not reported and not investigated; the facility placed on Import Alert 66-40 on October 5; a written response due within 15 working days.
“Seven agents read the letter and the alert, confirm the exact site, trace every material and product that depends on it, work out weeks of cover and time to recover, check the filings, and propose responses with the evidence. You decide.”
The dependency mapper traces Vapi Unit II to talmirex sodium to Talmirex 20 mg and 40 mg, US and EU. The cover calculator finds 412 kg on hand, 96 kg held at the port, 29 kg a week of US demand and 9.1 weeks of finished goods. The alternate source finder names Meridian Química, Tarragona — approved for the EU, 180 kg by Nov 30. The regulatory impact checker reads the filings.
The summary leads with the impact: Vapi Unit II is the only source of talmirex sodium in the US filing, so Talmirex tablets in the US ($1.9B a year) have 23.3 weeks of cover. Talmirex 40 mg in the US reaches 26.8 weeks. EU supply continues from Tarragona, and Talmirex oral solution is not affected — it comes from Unit IV. Each line carries its citation.
Cover counts released and in-test material only — the 96 kg held at the port is not counted.
Bring Tarragona into the US filing: a prior approval supplement now and a 180 kg order, first US lot release about week 22 — covered, with 1.3 weeks to spare. Ask FDA to exclude talmirex sodium from the alert, with independent batch testing: outcome uncertain, 9–20 weeks. Wait for Hanvar to resolve the alert: typically a year or more after re-inspection. The first is marked Suggested, with its six tasks listed.
Cover is under 26 weeks, so the plan carries a shortage notification decision for regulatory.
A letter to Rakesh Varma, Managing Director of Hanvar, from Sam Patel in external manufacturing. It cites clause 9.3 — written notice of any warning letter or import alert within five business days, not yet received — and asks by October 14 for the FDA response and corrective action plan, the status of the two lots held at the port, and, under clause 14.2, the technical information needed to qualify a second source.
“You can edit before sending · the reply is read and attached to this alert.”
Omar approves “Bring Tarragona into the US filing”. The reason is written for him from the assessment — cover is 23.3 weeks, Tarragona recovers US supply in about 22 weeks if filed this month, the exclusion request kept as a fallback — and he signs with his password. The meaning of the signature, “I approve this response plan”, is recorded with his name, date and time.
Signing moves A-1042 to Mitigating and sends the tasks: Dana Okafor orders 180 kg from Tarragona by Oct 9; Priya Raman files the prior approval supplement by Oct 23 and decides on a shortage notification by Oct 14; Dr. Maya Chen confirms Tarragona for US supply in the quality system by Oct 16; Lena Ortiz holds the 412 kg for US Talmirex and allocates the 40 mg strength by Oct 10; Sam Patel asks Hanvar for its response by Oct 8.
“Mitigating · 6 tasks open with their owners · re-checked on every new signal.”
The dashboard shows 1,240 signals read in 30 days, 11 alerts raised, 38 minutes median from signal to alert against a 60-minute target, and 2.6 days median from alert to a signed response. Sales on single-source paths are coloured by weeks of cover, and a country-by-risk-type grid shows where the risk sits.
The same alert, seen by the five people who act on it — what their week looked like, and what it looks like now.
Seven specialist agents read the feeds, map who makes what, work out cover and second sources and write each alert; the risk lead decides the response.
Reads every feed — FDA warning letters and import alerts, EU non-compliance reports, news in 6 languages, weather and seismic, credit, trade and sanctions notices, supplier mail — and pulls the event, firm, address, FEI and dates.
Builds and refreshes product to material to supplier to site, two tiers deep, from bills of materials, the approved supplier list, the vendor master and supplier surveys — every night at 02:00.
Resolves each signal to a supplier site — by FEI, address, legal entity, parent and geography — or explains why it is not ours, including near misses in the same group.
Works out weeks of cover per product and market — material on hand, in transit and finished goods — against the plan, and the time to recover for each option.
Finds second sources and ranks them by approval status per market, capacity, lead time and price; asks suppliers for capacity when needed.
Lists the filings that name the site, the change each option needs — a prior approval supplement, an EU variation — and any shortage-notification clock.
Writes the cited alert — what happened, impact, cover against time to recover, options and tasks — and drafts the message to the supplier.
Decides the response. The agents propose; a named person decides.
Ask what a signal means for us, what depends on a site, or tell it what to watch. Every answer carries its citations.
What breaks if Vapi Unit II stops shipping?
Talmirex 20 mg in the US has 23.3 weeks of cover and 40 mg has 26.8 weeks; EU supply comes from Tarragona. That is $1.9B a year from a single US source. Talmirex oral solution is not affected — it comes from Unit IV.
Is there a second source for talmirex sodium?
Yes — Meridian Química, Tarragona. It is approved for the EU but not named in the US filing, so US use needs a prior approval supplement (4-month review goal). Meridian can release 180 kg by Nov 30 and 120 kg a month from January. Filed this month, US supply recovers in about 22 weeks — inside the 23.3 weeks of cover.
Do we owe FDA a shortage notification?
Probably an assessment, not yet a notice. Talmirex US cover is 23.3 weeks, under the 26-week line, and the recovery plan lands at about week 22. The response plan includes a task for Priya Raman to decide by Oct 14. EU reporting is not triggered: EU supply continues from Tarragona.
Alert me when a supplier’s credit rating drops two notches
Done — new rule “Credit drops two notches”: any rating action of two notches or more on a supplier or its parent raises a Financial alert, owned by Dana Okafor. On today’s data it would have caught Lumen Glass AG, B− to CCC+ — already alert A-1041. You can switch it off in Settings.
13 screens from the working solution, on its sample data. Pick one to see it large.
What to watch, when a signal becomes an alert and who signs are settings, not a project.
| Setting | Default | Choose from |
|---|---|---|
| What to watch | 10 feed groups, read every 15 minutes | Each on or off |
| Hazard distance | 150 km | 25–400 km, in steps of 25 |
| Earthquake size, within 50 km of a site | M5.0 | M4.0–M7.0, in steps of 0.5 |
| High severity below | 26 weeks of cover on a single-source path | 8–52 weeks, in steps of 2 |
| Same-group check · Reach tier 2 · Filing check | On | On · off |
| Who owns each alert type | Regulatory and natural hazard: Omar Haddad | Any named person, per risk type |
| Dependency map | Nightly refresh at 02:00; changes need a person | Refresh now · survey tier-1 suppliers every 6 months |
| Your own rules | Described in one sentence | Turned into a rule for your approval |
Every figure is labelled: a target the solution is built to, an estimate, a typical published result, or a proven one.
“demo” = seen in the working solution, on its sample supplier data · “target” = the design goal, measured in the live solution · “estimated” = team estimates of by-hand times · Drug shortage notice rules: FDCA section 506C. Companies, sites and products in the screens are fictional. People, companies and products named on this page are fictional — characters and sample data in the working solution.
Watching every supplier site you depend on — API makers, key starting material sources, packaging, devices and bioprocess materials — for regulatory actions, natural hazards, financial trouble, trade measures and logistics delays, and knowing at once which products and markets each signal touches. The Supplier and API Risk Sentinel does this with seven agents and a two-tier dependency map.
The site matcher matches on identifiers first — the FEI and the site address — then on legal entity, parent and geography. A group name alone is never a match: in the sample case, Hanvar’s Vapi Unit IV had a different FEI and address, so it was logged as a near miss with the reason and kept on watch, not alerted.
Yes. The dependency mapper reads the sources your tier-1 suppliers declare in supplier surveys, so a key starting material maker behind an API — such as Kestrel Pharmachem in Taizhou behind Calder Synthesis in Linz — sits on the map and is watched like any other site.
From the planning system: released and in-test material on hand, in transit and finished goods, against planned weekly use, per product and market. Held or detained stock is not counted, and every number shows the row it came from.
It advises. The regulatory impact checker lists the filings that name the site, the change each option needs — such as a prior approval supplement to add a second API manufacturer in the US — and flags cover under 26 weeks for a shortage notification assessment under FDA’s drug shortage notice rules (section 506C). Regulatory decides.
Yes. The agents propose responses; the risk lead chooses one and signs it with a reason, a password and the meaning of the signature. Supplier messages are only drafts until a person sends them, and changes to the dependency map wait for the category manager.
Bills of materials and the vendor master from ERP, the approved supplier list from the quality system, stock and demand from planning, the filing register and supply agreements, and 96 feeds — FDA warning letters and import alerts, EU non-compliance reports, news, weather and seismic, credit, trade, sanctions and supplier notices.
The Agentic Solution Engine builds and deploys it from your requirements and documents — your bills of materials, approved supplier list, supplier register and the feeds you want watched — and it goes live once every quality gate has passed. We will walk you through it on your own supplier base first.
Ask any supply question in plain words and get a traced answer in seconds.
1-min filmSpecialist BuilderAn analyst builds a new data specialist by conversation in minutes, with no code.
1-min filmSupply Early WarningEvery supply signal read as it lands, and a ranked, cited shortage alert raised weeks before stock runs out.
1-min filmWe’ll run the Supplier and API Risk Sentinel on your own bills of materials and approved supplier list.