Compliance risk audit for pharma HCP websites
See the risk before the regulator does.
Viallmed Sentinel scans and audits pharma websites and apps for physicians against the rules regulators enforce, and shows your teams what to fix.
Checked against the rules regulators enforce.
Every finding is mapped to the requirements that regulators and industry code bodies apply to drug promotion, pharmacovigilance, consent and personal data, in Russia and worldwide. What we flag is what they would flag.
Promotion & advertising
13- FDA
- FTC
- MHRA
- ANSM
- AIFA
- AEMPS
- Swissmedic
- Health Canada
- TGA
- MHLW
- NMPA
- ФАС России
- Росздравнадзор
Countries & rules: Promotion & advertising
- USFDAOPDP · 21 CFR 202
- USFTCFTC Act §5
- UKMHRABlue Guide
- FRANSMCode de la santé publique
- ITAIFAD.Lgs. 219/2006
- ESAEMPSRD 1416/1994
- CHSwissmedicAWV
- CAHealth CanadaFood and Drugs Act
- AUTGATherapeutic Goods Act
- JPMHLWPMD Act
- CNNMPADrug Administration Law
- RUФАС России38-ФЗ, ст. 24
- RUРосздравнадзор61-ФЗ, ст. 67
Pharmacovigilance
07- EMA · PRAC
- FDA MedWatch
- MHRA Yellow Card
- WHO UMC
- Canada Vigilance
- Фармаконадзор
- ЕЭК ЕАЭС
Countries & rules: Pharmacovigilance
- EUEMA · PRACGVP · EudraVigilance
- USFDA MedWatch21 CFR 314.80
- UKMHRA Yellow CardYellow Card scheme
- GlobalWHO UMCVigiBase
- CACanada VigilanceHealth Canada
- RUФармаконадзорАИС Росздравнадзора · 61-ФЗ, ст. 64
- EAEUЕЭК ЕАЭСПравила GVP ЕАЭС
Privacy & consent
07- EDPB
- CNIL
- ICO
- AEPD
- Garante Privacy
- HHS OCR
- Роскомнадзор
Countries & rules: Privacy & consent
- EUEDPBGDPR · ePrivacy
- FRCNILCookies · GDPR
- UKICOPECR · UK GDPR
- ESAEPDLSSI · GDPR
- ITGarante PrivacyCodice privacy · GDPR
- USHHS OCRHIPAA
- RUРоскомнадзор152-ФЗ
Industry codes
08- IFPMA
- EFPIA
- PhRMA
- PMCPA
- FSA
- PAAB
- Medicines Australia
- AIPM
Countries & rules: Industry codes
- GlobalIFPMAIFPMA Code
- EUEFPIAEFPIA Code
- USPhRMAPhRMA Code
- UKPMCPAABPI Code
- DEFSAFSA-Kodex
- CAPAABPAAB Code
- AUMedicines AustraliaCode of Conduct
- RUAIPMКодекс AIPM
Names identify the rules we map findings to. Viallmed is not affiliated with or endorsed by these bodies.
Sentinel discovers how your HCP channels connect.
Our software scans public websites and apps across regions, discovers links to external sources and search results, and builds a connected resource map.
- 01
Resource discovery. Identifies public HCP portals, brand websites and apps across markets.
- 02
Connection mapping. Documents links, search references and shared services, with supporting evidence.
Six areas where HCP websites carry risk.
Every scan covers the same ground, so results compare across sites, markets and agencies.
- C.01
Rx promotion
Prescription-drug promotion and who can see it before HCP confirmation.
- C.02
Medical claims
Efficacy and safety statements, comparisons and their visible references.
- C.03
Consent & personal data
Cookie consent, form consents and what loads before a choice is made.
- C.04
Third-party services
Scripts, widgets and embeds, and whether they are disclosed.
- C.05
Pharmacovigilance
A visible route to report a suspected adverse reaction.
- C.06
Registration path
The physician's path to access, step by step, up to the point of submission.
Findings your teams can act on.
For each finding: where it is, a screenshot, the risk level, why it matters and what to change.
For healthcare professionals
Brand A 10 mg
- Risk level
- High
- Area
- Medical claims
- Location
- Home · hero banner
- Observation
- Comparative claim without a visible reference
- Recommended change
- Place the reference next to the claim, or revise the wording with medical
Scan. Brief. Fix. Monitor.
Engineers and analysts deployed alongside your teams. First results in days, not months.
- 01Days
Scan
We review what any visitor can see across your HCP websites and capture evidence for every finding.
- 02One session
Brief
A working session with digital, brand and compliance: each risk, its level and what to change.
- 03Your sprint
Fix
Your team or agency makes the changes. We re-check and confirm what moved.
- 04Monthly
Monitor
Monthly monitoring catches new risks as sites, campaigns and agencies change.
Engineers and analysts who work inside your process, next to the people who own the sites. Not a ticket queue, not a black box.
We look only at what any visitor can see.
Our boundaries are part of the product. Compliance can sign off on how we work as easily as on what we find.
- B.01
Public surface only
We review pages available to any visitor. We do not enter closed or login-protected areas.
- B.02
No form submissions
We never submit forms, create accounts or send data through your sites. Registration paths are reviewed up to the point of submission.
- B.03
No bypassing access controls
We do not work around HCP gates, access restrictions or rate limits.
- B.04
Risk review, not legal opinion
Reports identify and rank risks for your teams to assess. They are not a legal opinion or a certificate of compliance.
Built for the teams who answer for HCP websites.
Digital & omnichannel leads
One view across sites, markets and agencies.
Compliance
Evidence-backed risks before review, not after launch.
Agencies
A second pair of eyes before you hand a site to your client.
Seen a risk on a pharma website or app?
Tell us where. We audit it, and if the risk is confirmed we notify the company responsible and, where the rules call for it, the competent authority.
- 01
Review
We audit the page or app and capture evidence for what you reported.
- 02
Company
If the risk is confirmed, we notify the company that runs the site or app.
- 03
Authority
Where the rules call for it, we inform the competent regulator.
To report a side effect of a medicine, contact the manufacturer or your national authority (in Russia, Росздравнадзор). Do not include patient data or health information in this form.
Start with a scan.
Tell us which HCP websites matter most. We will come back with a scoped express audit and a timeline.
office@viallmed.com