DSRV.io · Enforcement-informed quality intelligence
DSRVDSRV.io
Browse by regulation1 article · 1 moderate

21 CFR 11.10(a)

Every DSRV article whose Regulatory Snapshot cites 21 CFR 11.10(a): the enforcement case behind it, the inspection exposure it created, and what the desk would do about it.

Inspection exposure across the set
In brief
What has FDA cited under 21 CFR 11.10(a)?
1 DSRV article cite 21 CFR 11.10(a). Enforcement cases behind them: Tetrate governance framework, Securing the MCP Supply Chain, published in the first week of June 2026, alongside MCPManager.ai's regulated-industry MCP compliance guide and the Agentic AI Institute's June 2026 enterprise adoption analysis. Inspection exposure across them: 1 moderate.
What does DSRV recommend for 21 CFR 11.10(a)?
From the newest article (What Pharma Quality Teams Need to Know About MCP Governance): MCP governance is not a new compliance category; it is Part 11 and Annex 11 applied to a new connection layer, and the validation boundary must cover the agent's tool access before deployment rather than after. DSRV is decision support, not legal advice; verify against the official source each article names.
  1. 5 min readModerate exposurecited as a tag

    What Pharma Quality Teams Need to Know About MCP Governance

    Three governance frameworks for MCP-connected AI agents landed in the first week of June 2026. The controls they describe, including audit trails, identity management, sandboxing, and human oversight for high-risk actions, are the same ones 21 CFR Part 11 and EU GMP Annex 11 have required from regulated computer systems for decades. The question is whether your AI agent deployment includes them.

    Case
    Tetrate governance framework, Securing the MCP Supply Chain, published in the first week of June 2026, alongside MCPManager.ai's regulated-industry MCP compliance guide and the Agentic AI Institute's June 2026 enterprise adoption analysis.
    DSRV take
    MCP governance is not a new compliance category; it is Part 11 and Annex 11 applied to a new connection layer, and the validation boundary must cover the agent's tool access before deployment rather than after.
Address this risk

Pressure-test your evidence before an inspector reads it

Bring the document that has to hold up under 21 CFR 11.10(a). DSRV maps the evidence, names the gaps, and routes judgment calls to human review. Controlled intake, no public file upload.

Apply for the Stability Pilot Ask The Vault about 21 CFR 11.10(a)

Regulatory intelligence and interpretation, not legal advice. Verify against the official FDA or ICH source each article names.