Frequently asked questions about Viallmed Sentinel
What Viallmed does, what a compliance risk audit of a pharma HCP website covers, where its boundaries are and how to start.
About Viallmed
What is Viallmed?
Viallmed is a technology company that reviews pharma's digital channels for physicians against the rules regulators enforce. Its product, Viallmed Sentinel, is a compliance risk audit for pharma HCP websites and apps. Viallmed combines software with engineers and analysts who work alongside the teams that own those channels.
What is Viallmed Sentinel?
Viallmed Sentinel scans and audits pharma websites and apps for healthcare professionals (HCPs). It reviews six areas: Rx promotion, medical claims, consent and personal data, third-party services, pharmacovigilance and the registration path. Each risk is documented with a screenshot, a risk level and a recommended change.
Who is Viallmed Sentinel for?
Sentinel is built for the teams who answer for HCP websites: digital and omnichannel leads who need one view across sites, markets and agencies; compliance and medical affairs teams who want evidence-backed risks before review rather than after launch; and agencies that want a second pair of eyes before handing a site to their client.
Is Viallmed affiliated with regulators or industry code bodies?
No. Viallmed names regulators and industry code bodies only to identify the rules its findings are mapped to. Viallmed is not affiliated with, endorsed by or acting on behalf of any of them.
The risk audit
What is a compliance risk audit of a pharma HCP website?
It is a structured review of what a pharma website or app for healthcare professionals shows to any visitor, checked against the rules that apply to drug promotion, pharmacovigilance, consent and personal data. The result is a ranked list of risks with evidence, so digital, medical and compliance teams can decide what to change and in what order.
What does Viallmed Sentinel check on a pharma website?
Every scan covers the same six areas: prescription-drug promotion and who can see it before HCP confirmation; efficacy and safety claims, comparisons and their visible references; cookie consent, form consents and what loads before a choice is made; third-party scripts, widgets and embeds; a visible route to report a suspected adverse reaction; and the physician's registration path up to the point of submission.
Which regulations and industry codes are findings mapped to?
Findings are mapped to the requirements that regulators and industry code bodies apply to drug promotion, pharmacovigilance, consent and personal data, in Russia and worldwide. Examples include 38-FZ Article 24, 61-FZ and 152-FZ in Russia, EAEU pharmacovigilance rules, FDA OPDP rules in the US, the MHRA Blue Guide in the UK, EMA pharmacovigilance guidance, GDPR, and the IFPMA, EFPIA, PhRMA, ABPI and AIPM codes.
What does an audit report include?
For each finding: where it is, a screenshot, the risk level (high, medium or low), why it matters and what to change. Findings are walked through in a working session with your digital, brand and compliance teams, and re-checked after your team or agency makes the changes.
How long does an HCP website audit take?
First results arrive in days, not months. The scan takes days, the briefing is one working session, fixes follow your own sprint, and monthly monitoring then catches new risks as sites, campaigns and agencies change. Exact timing depends on the sites and markets in scope and is set out in a scoped proposal.
What is the difference between an express audit and monthly monitoring?
An express audit is a one-off review of the HCP websites you choose, followed by a briefing. Monthly monitoring repeats the review every month, so new risks are caught as sites, campaigns and agencies change. You can request either one or both.
How is a Viallmed audit different from MLR review or a legal opinion?
MLR (medical, legal and regulatory) review approves individual materials before they are published. A Viallmed audit looks at what is actually live across your HCP websites and apps, including third-party scripts, consent behaviour and access paths that material-by-material review may not cover. Reports identify and rank risks for your teams to assess; they are not a legal opinion or a certificate of compliance.
Scope and boundaries
Does Viallmed need access to our systems or HCP login areas?
No. Viallmed reviews only the public surface: pages available to any visitor. It does not enter closed or login-protected areas, does not work around HCP gates, access restrictions or rate limits, and never submits forms, creates accounts or sends data through your sites.
How is the physician registration path reviewed without submitting forms?
The registration path is reviewed step by step up to the point of submission: what a physician sees, which consents are requested and what loads before a choice is made. Nothing is submitted.
Can Viallmed review HCP websites across several markets and agencies?
Yes. Sentinel identifies public HCP portals, brand websites and apps across markets, maps how they connect, and applies the same six checks everywhere, so results compare across sites, markets and agencies.
Does Viallmed guarantee compliance?
No. No review can guarantee compliance, and Viallmed does not promise it. Sentinel shows where the risk is, how sure we are and what to change; decisions stay with your medical, legal and compliance teams.
Working with Viallmed
How do we start a risk audit?
Request a briefing on the contact page. Tell us your company and role, the HCP websites, brands or therapy areas in scope, your markets and your timeline. We come back with a scoped express audit and a timeline.
Can agencies that build HCP websites work with Viallmed?
Yes. Sentinel is built for agencies as well as pharma teams: a second pair of eyes before you hand a site to your client, with findings your client's compliance team can follow.
How do I report a risk I have seen on a pharma website or app?
Use the Report an issue page. Reports are anonymous. We audit the page or app, and if the risk is confirmed we notify the company responsible and, where the rules call for it, the competent authority. Please leave out names, contact details and patient information.