contactus@innovizz.com
INNOVIZZ
INNOVIZZ.COM/CLINICAL · AUTOMATED TLF QC · CERTUSAI

TLF quality control
that a reviewer can audit cell by cell.

CertusAI is the INNOVIZZ method for automated comparison and validation of tables, listings and figures. Structured outputs are re-derived deterministically from the analysis datasets and compared against production cell by cell; figures and free text are flagged for a person. The result is a comparison record per output and a discrepancy report your QC lead can act on, produced inside your SAS or R estate under your SOPs.

Request a scoped proposal See a run in the Evidence Room
How it worksWhat is automatedValidationWho it fitsQuestions
THE PROBLEM, AS QC LEADS DESCRIBE IT

Double programming finds what it looks for

Independent re-programming remains the standard for a reason. Its cost is not the method; it is what happens around the method.

PATTERN 01 · THE QUEUE
QC starts when production ends

Outputs arrive in a batch three weeks before lock. The QC programmer re-derives the first forty tables carefully and the last sixty quickly. Nobody chooses this; the calendar does.

PATTERN 02 · THE EYEBALL
Comparison is visual

Two outputs side by side, a programmer reading numbers across. A transposed digit in a footnote survives because nobody reads footnotes at eleven at night, and the compare utility was never configured for that layout.

PATTERN 03 · THE RECORD
The evidence is a sign-off form

The QC record says the output was checked and by whom. It does not say what was compared, with what tolerance, against what version of the data, or what was waived. The auditor asks exactly that.

HOW CERTUSAI WORKS

Deterministic re-derivation, cell-level comparison, a person on every flag

The method is a pipeline, not a model. A model is used only where a rule cannot decide, and its output is reviewed like any other.

01
Shell interpretation

The output shell and the analysis specification are parsed into a machine-readable definition: population, analysis variable, statistics, grouping, display precision, footnote rules. Ambiguities go back to the statistician as questions, not assumptions.

You receive: A structured definition per output, with the open questions logged and answered on the record.
02
Deterministic re-derivation

Each structured output is regenerated from the analysis datasets by independent code in your SAS or R environment, under your versions and macros, from the same data cut as production.

You receive: Independent results per output, reproducible from the recorded inputs.
03
Cell-level comparison

Production and re-derived outputs are compared cell by cell with explicit tolerances: numeric precision, rounding rules, ordering, labels, titles and footnotes. Figures and free-text listings are routed to a reviewer with the data behind them.

You receive: A comparison record per output: matched, mismatched, waived, each with its reason.
04
Discrepancy report and disposition

Mismatches are grouped by cause and linked to the cell, the derivation and the data. Your QC lead dispositions each one: production error, QC error, spec ambiguity or accepted difference. Nothing is closed without a named disposition.

You receive: A reviewer-ready discrepancy report and a disposition log that is the QC evidence.
05
Evidence packet

Inputs, code versions, data cut, tool events, comparison results and dispositions are hashed and packaged per output and per run. The Evidence Room shows what this looks like on synthetic data.

You receive: An audit-ready packet that answers the auditor before the audit.
WHAT IS AUTOMATED AND WHAT IS NOT

Structured outputs are compared by machine; judgment stays with people

AUTOMATED
Tables and structured listings

Summary tables, shift tables, frequency and incidence tables, structured listings with defined sort order and columns. Compared deterministically, every cell, every run.

AUTOMATED
Titles, footnotes, population counts

The parts that fail most often in manual QC and are read least: header text against the shell, N counts against the population flags, footnote references against the rules.

REVIEWED
Figures and free text

Kaplan-Meier curves, forest plots, narratives and unstructured listings are flagged for a person with the underlying data re-derived and attached, so review time goes to judgment rather than arithmetic.

VALIDATION

Built to be qualified in your framework

CertusAI is delivered as parser configuration, comparison rules and code inside your environment, qualified the way you qualify any tool that touches submission outputs.

SPEC
A written specification per rule set

Tolerances, precision rules, waiver categories and figure routing are documented and versioned before the pilot. Changes go through your change control.

TEST
Known-answer runs

The pipeline is tested on outputs with seeded discrepancies. Every seeded error must be found; every clean output must pass. The test evidence is part of the package.

RECORD
Traceability from shell to packet

Each comparison record references the shell version, the data cut, the code versions and the disposition. The packet reproduces on request.

THE FOUR RULES

Why the method can be trusted with submission outputs

RULE 01
Deterministic first

Rules settle every case they can. A model is consulted only for the residual the rules cannot decide, and its output passes through the same rules before anyone sees it.

RULE 02
Inside your perimeter

Processing runs in your environment, under your identity system. Nothing potentially unblinding reaches an outside model. The data flow diagram is available under NDA before kickoff.

RULE 03
A named reviewer approves

Every output that matters is accepted by a person on your side whose name is on the record. Model output never writes a finding into a deliverable on its own.

RULE 04
Evidence travels with the work

Inputs, versions, tool events and decisions are logged as they happen, so the packet an auditor asks for exists before the audit does.

THE EXCHANGE

What you provide, what you receive, who signs

YOU PROVIDE

Output shells and the analysis specification, a QC sample set with known results, your comparison SOP and tolerances, access to the SAS or R environment and the analysis datasets.

YOU RECEIVE

Parser configuration and comparison rules in your estate, a comparison record per output, a discrepancy report per run, the evidence packet, validation evidence for the rule sets.

SIGN-OFF

Your QC lead accepts each rule set before it is used on production. A named person clears every flagged figure and dispositions every mismatch.

This is the right engagement when

✓Your QC backlog grows toward every database lock and the last outputs get the least attention.
✓You want a comparison record that shows what was compared, not only that it was.
✓Double programming stays, and you want it to cover judgment instead of arithmetic.
✓An inspection finding or a near miss has made the QC evidence a leadership question.
✓The work must run inside your SAS or R environment under your SOPs.

It is not the right engagement when

✕The outputs have no shells or specifications yet. The method needs a definition to compare against.
✕The expectation is that a model will decide what is correct. It does not; rules and reviewers do.
✕The data cut changes daily and no run can be reproduced. Reproducibility is a precondition.
✕The request is for staff augmentation. We deliver a method and its evidence, not programmer hours.

The Validated Automation Review will say which of these applies before anything is built.

QUESTIONS BIOMETRICS LEADS ASK FIRST

Before you decide

The questions that come up in the first technical conversation, answered the way we answer them on a call.

Does CertusAI replace double programming?

It replaces the arithmetic part of it. Independent re-derivation still happens, by code rather than by a tired person, and the comparison is complete rather than sampled. Your QC programmers spend their time on figures, narratives, spec ambiguities and dispositions.

Where does it run?

In your SAS or R environment, under your versions and macros, from your data cut. Nothing is sent to an outside service. The data flow diagram is available under NDA.

How is a model used, if at all?

Only for the residual that rules cannot settle, such as reading an ambiguous shell instruction, and only to propose. Every proposal passes through the rules layer and is reviewed by a person. No model output enters the comparison record on its own.

Can we see it work before committing?

Yes. The Evidence Room on this site shows a complete synthetic run, pipeline step by step, with the packet. A pilot on your own sample set with seeded discrepancies is the first phase of every engagement.

How long does a first corridor take?

The Validated Automation Review runs two to four weeks and ends with a build estimate. A first CertusAI corridor on one study is typically scoped in phases: template analysis, parser configuration, validation rules, pilot and deployment, each accepted before the next.

How is it priced?

Against a written statement of work with deliverables, milestones and acceptance criteria. No figure before the scope is understood.

THE REST OF THE CLINICAL PRACTICE

Where this sits

PROOF
The Evidence Room

A complete synthetic TLF QC run, with the evidence packet and the execution score.

OPEN THE EVIDENCE ROOM
UPSTREAM
Axiom AI: SDTM and CDISC transformation

Cleaner analysis datasets mean fewer QC findings. The standards corridor that sits before this one.

SEE AXIOM AI
PROGRAMMING
Coding Operations

SAS to R parity validation, governed IDE agents, lineage: the packages for programming teams.

SEE CODING OPERATIONS

Start with the study whose QC queue worries you most.

Tell us the phase, the environment and the lock date. We reply with a scoped proposal: pilot sample, rule sets, acceptance criteria.

Or start with the Validated Automation Review: two to four weeks, one workflow corridor, fixed scope. The plan is yours whether or not we build it.




    Prefer a call first? Book a 30-minute fit call.