A Barcelona-headquartered pharmaceutical company (EUR 2.4B revenue, specialising in plasma-derived therapies, hospital injectables, and dermatology products, operating 12 manufacturing plants across Spain, Portugal, France, and Germany, 8,400 employees, 180+ products in 90 countries) needed to deploy AI capabilities to transform manufacturing quality, R&D productivity, and pharmacovigilance — while maintaining absolute control over data that included patient clinical information, proprietary manufacturing processes, and pre-patent drug development research. Core challenges: (1) Pharmaceutical data sovereignty — the company processed four categories of extraordinarily sensitive data. Clinical trial data: data from 28 active clinical trials involving 14,000 patients across 120 trial sites in 18 countries. Clinical trial data included: patient demographics, medical histories, adverse events, laboratory results, and efficacy endpoints. This data was governed by the Clinical Trials Regulation (EU 536/2014), ICH GCP guidelines, and each country's national data protection law.
Any breach of clinical trial data could terminate trials, trigger regulatory action from EMA and national authorities (AEMPS in Spain, ANSM in France, BfArM in Germany), and expose the company to massive litigation. Manufacturing process data: proprietary formulation parameters, process recipes, quality control specifications, and yield optimisation data for 180+ products. The company's plasma fractionation processes (separating plasma into therapeutic proteins — albumin, immunoglobulins, clotting factors) were refined over 35 years of manufacturing experience. These processes represented hundreds of millions in R&D investment and were protected as trade secrets. A competitor accessing manufacturing process data could replicate products that took decades to develop. Pharmacovigilance data: adverse event reports, safety signals, and periodic safety update reports (PSURs) for all marketed products. Pharmacovigilance data included patient-identifiable health information and was regulated by EMA and national authorities — any data breach could trigger regulatory action and public safety concerns.
Pre-patent research data: drug discovery data, molecular screening results, and formulation research preceding patent filing. Premature disclosure of this data could invalidate patent applications worth billions in future revenue. (2) Manufacturing quality AI — GMP requirements. The company's 12 manufacturing plants operated under EU GMP (Good Manufacturing Practice) requirements, inspected by AEMPS (Spain), ANSM (France), Regierungsprasidium (Germany), and INFARMED (Portugal). GMP required: complete traceability of manufacturing decisions (if AI influenced any manufacturing parameter, the AI's input, reasoning, and human decision must be documented), validated computer systems (EU Annex 11 requiring that computer systems affecting product quality are validated — AI systems falling under this requirement), and data integrity (ALCOA+ principles — Attributable, Legible, Contemporaneous, Original, Accurate — applied to AI-processed data and AI-generated recommendations).
Cloud AI APIs could not satisfy GMP computer system validation requirements because the company had no control over model versioning, could not validate the system according to EU Annex 11, and could not guarantee data integrity end-to-end. Self-hosted AI with full model lifecycle control was the only GMP-compliant option. (3) Plasma fractionation optimisation — the company's most complex manufacturing challenge. Plasma fractionation involved separating human blood plasma into therapeutic proteins through a series of chemical and physical processes (cold ethanol fractionation, chromatography, filtration, viral inactivation). Each step had 40-60 controllable parameters (temperature, pH, ethanol concentration, centrifugation speed, buffer composition, incubation time) that affected yield, purity, and product quality.
Optimising these parameters could: increase yield (extracting more therapeutic protein from the same volume of plasma — each percentage point of yield improvement worth approximately EUR 8M annually given the company's plasma volume), improve purity (reducing contaminants and improving product safety profiles), reduce batch failures (failed batches representing EUR 200K-500K in lost material plus production schedule disruption), and extend product shelf life (optimised formulation parameters affecting product stability). The company had 35 years of manufacturing batch records — 420,000 batch records with complete process parameter data and quality outcomes. AI could analyse these records to identify optimal parameter combinations, predict batch outcomes, and recommend adjustments. But this data — the company's complete manufacturing knowledge — could never leave company-controlled infrastructure. (4) Drug development acceleration — the company's R&D pipeline included 14 development-stage products.
AI could accelerate: formulation screening (testing drug-excipient combinations computationally rather than through physical experimentation), stability prediction (predicting product stability under various storage conditions from molecular and formulation properties), clinical trial optimisation (identifying optimal patient populations, predicting enrollment challenges, and analysing interim results), and literature analysis (processing 12,000+ scientific papers annually to identify relevant research findings, competitive intelligence, and regulatory trends). R&D data was pre-competitive intelligence — any external exposure could compromise patent strategy and competitive positioning. (5) Pharmacovigilance signal detection — the company monitored safety data for 180+ marketed products across 90 countries. Current pharmacovigilance processes relied on manual case processing and statistical signal detection (proportional reporting ratio, empirical Bayesian methods).
AI could enhance: case processing automation (extracting adverse event information from medical literature, spontaneous reports, and clinical trial data), signal detection (identifying safety patterns from narrative case descriptions that statistical methods missed), and PSUR preparation (automated periodic safety update report generation from accumulated case data). Pharmacovigilance was regulated by EMA and national authorities — AI processing of pharmacovigilance data required validated systems with complete audit trails.