How V5 Ultimate runs a blood centre or tissue bank, donor to recipient.

Under 21 CFR 1271 (HCT/Ps), 21 CFR 606 (cGMP for Blood) and the AABB / AATB / FACT-JACIE standards that overlay them, every donation is a regulated batch with its own donor-eligibility determination, its own IDM (infectious-disease marker) panel, its own processing record, and its own consignee list. A single reactive donor — HIV, HCV, HBV, HTLV, Treponema pallidum, WNV, Zika, Chagas — fires a lookback that must touch every component made from that donation, every recipient transfused or grafted, and every facility that received product.

The hazards that drive enforcement are unambiguous: a unit released before IDM testing cleared; a deferred donor whose previous donation wasn't quarantined; an ISBT 128 label re-printed without an audit trail; a cold-chain excursion caught at month-end instead of at the moment of excursion; an SOP-of-record that doesn't match SOP-actually-followed.

V5 Ultimate builds the donor record and the processing record together. Quarantine is hard-gated until IDM clears. Lookback is a query. Cold chain is a stream. AABB, AATB, FACT-JACIE and FDA BIMO inspections all read the same record.

Every node carries forward donor identifier (DIN), donation eligibility decision, IDM panel, processing operator, equipment, storage location, cold-chain stream, ISBT 128 label fields and consignee from the node before it. Nothing is re-keyed; nothing is reconciled by hand to the LIS.

Donor registration captures identity (with deduplication against prior donations), demographic and contact data, health-history questionnaire (DHQ — current AABB edition), travel deferral logic (vCJD, malaria, WNV-active, EID-applicable), medication deferrals, behavioural-risk deferrals, and consent. Eligibility determination is structured per 21 CFR 630 (for blood) and 21 CFR 1271 Subpart C (for HCT/Ps).

Deferrals are bounded by start / end dates. A deferred donor cannot proceed to collection; an attempt opens a deviation. Re-entry from a deferral follows the relevant FDA guidance and is recorded with the medical-director signature.

The phlebotomist scans the donor wristband and the pre-printed DIN labels (collection bag set, pilot tubes, donor record). The collection device streams volume, flow, time and any device alarms into the record. Vital signs (hgb / Hct, BP, pulse, temperature) bind to the donation. Pre / post weights and bag-set lot are recorded.

For apheresis, the device kit lot, anticoagulant lot, separation parameters and any inter-procedural alarms are streamed in. For tissue and birth-tissue recovery, the recovery time, site, recovery technician and instruments are recorded at the kiosk.

Pilot tubes route to the testing lab; results stream back to V5 against the DIN. The panel covers HIV-1/2 (Ab + NAT), HCV (Ab + NAT), HBV (HBsAg, anti-HBc, NAT), HTLV-I/II, syphilis (Treponema pallidum), WNV NAT in season, T. cruzi (Chagas), and any pathogen on the current FDA / AABB requirements list (Zika, Babesia, CMV by indication). For HCT/Ps the panel is per 21 CFR 1271.85.

Reactive on any required marker = unit and all co-components moved to Quarantined-Reactive; donor deferred per FDA guidance; lookback workspace opens. Indeterminate / repeat-reactive workflows follow the manufacturer's algorithm and AABB requirements.

Each component / product spec holds: product code (ISBT 128 Product Description Code), source material (whole blood / apheresis / bone graft / birth tissue / HPC), processing routing with step-by-step instructions, in-process control plan (volume, hematocrit, platelet count, leukoreduction CFU, post-thaw recovery, viability, sterility, endotoxin), storage condition with temperature band, and the locked ISBT 128 label layout.

Effectivity is two-signature: the QA author signs the change, the medical director signs that the change is clinically appropriate. New donations pick up the new revision; in-flight donations keep the snapshot they were released against.

If the spec is revised mid-shift, the donation keeps the snapshot it was released against. The inspector sees exactly the spec, label and routing this donation was processed to.

The processor scans the DIN, picks the spec, follows the routing. Equipment (centrifuge, sterile dock, plasma extractor, cell processor, controlled-rate freezer, LN₂ vapour storage) streams setpoints and actuals into the record. Reagent and consumable lots are scanned at the step — using an expired or off-spec consumable hard-stops the step.

For cellular therapy (HPC, CAR-T) the kiosk surfaces FACT-JACIE-aligned checks: cell count, viability, sterility hold, mycoplasma, endotoxin, identity / potency where required, with two-person witness on critical handovers.

Volume / weight, hemoglobin / hematocrit, platelet count, leukocyte residual (post-LR), pH (platelets), sterility (BacT/ALERT, Bactec), endotoxin (LAL), mycoplasma, viability and recovery (post-thaw) — all scheduled by the spec. OOS auto-opens a deviation, holds the unit and notifies QA / medical director.

Post-donation information — a donor calls in a new symptom, a new diagnosis, a new exposure after donation — is structured intake bound to the DIN. The system surfaces every component and every consignee at risk and starts the lookback / market-withdrawal clock per FDA guidance. Donor adverse reactions and recipient transfusion reactions are first-class objects with the AABB-required fields.

CAPAs link to the deviation, affected donations, processors, equipment, consignees and the change-control workspace where indicated.

The label carries: Donation Identification Number, Product Description Code (PDC), expiry date / time, ABO/Rh and special attributes (irradiated, leukoreduced, CMV-negative, HbS-negative, washed, frozen), facility identifier, and consignee fields where the destination is known. Re-print events (smudge, peel-failure) are signed, reason-coded and traceable to the original — the donor record shows every label that ever existed for that DIN.

Release requires: complete IDM panel in-spec, in-process QC in-spec, no open deviations on the unit, storage continuously in-spec since collection, and two qualified e-signatures (typically QA + medical director). The release button is greyed until all conditions are met; an attempted override opens a deviation and notifies the medical director.

Every unit is shipped against a packing slip that carries the DIN, PDC, ABO/Rh, special attributes, expiry, and cold-chain envelope. Consignees acknowledge receipt and confirm storage. When a reactive marker, a PDI or a recipient adverse reaction fires a lookback, V5 walks the ledger in both directions in seconds: every donation from this donor, every component made, every consignee, every onward transfusion / graft record (where the consignee writes back).

Where the recall meets FDA's reporting threshold, the BPDR (Biological Product Deviation Report) and any 21 CFR 803-style adverse reaction report assemble from the same ledger.

Quality manual, scope, interested parties, risks-and-opportunities, objectives, processes, KPIs — all structured. Internal audit, management review and CAPA are live workspaces, not Word documents. Standards-mapping for AABB, AATB, FACT-JACIE and (where applicable) ISO 9001 lives on the same record.

Draft → Review → Approved → Effective → Periodic Review → Superseded / Retired. Two qualified signatures effect every release. Operators see only the effective revision; superseded revisions are retained per 21 CFR 606.160 (typically 10 years for blood records) and per AABB / AATB retention rules (often through donation expiry + traceability period).

V5 maintains a training matrix per role × procedure × competency assessment. Annual competency reassessment is calendar-bounded; an expired assessment locks the operator out of the relevant kiosk action. Competency observations and re-training are first-class records.

Every donation's quality signals, every CAPA, every BPDR, every consignee complaint, every supplier scorecard, every internal-audit finding — all stream into the management-review workspace as they happen.

V5 schedules internal audits, AABB and AATB assessments, FDA BIMO and CBER inspections, FACT-JACIE inspections (where in scope) and customer / consignee audits. When the inspector arrives, the request list — donor records, IDM testing, processing records, training, calibration, lookback files, BPDR log — is a query, assembled and printable in minutes.

Every refrigerator, freezer, platelet incubator, LN₂ tank and shipping container is a tracked asset with product-specific temperature limits, sensor stream, alarm thresholds and excursion criteria. An excursion of duration × magnitude beyond the product spec auto-holds affected units, opens a deviation, and notifies the on-call medical director.

Environmental Monitoring Plan (EMP) per ISO 14644 / USP <1116> where applicable: viable air, surface, personnel and water sampling at scheduled frequency, trending vs. action / alert limits, excursion linkage to affected lots. Cleaning and disinfection cycles are kiosk-led and signed.

Scales, centrifuges, sterile-connect devices, plasma extractors, cell processors, controlled-rate freezers, LN₂ vapour systems, hemocytometers, flow cytometers, BacT culture systems, LAL readers — each is a tracked asset with calibration interval, certificate, tolerance, and an out-of-tolerance impact assessment that triggers a back-look across every donation since the last passing calibration.

Reactions are structured intake against the DIN, with severity classification per AABB. Recurring reactions per chair, per phlebotomist, per device are trended. Donor follow-up is a tracked record.

Forward genealogy from donor → donation → components → consignees → onward records walks the ledger in seconds. Consignee notification letters draft from the same ledger; acknowledgements come back to the same record. Where required, recipient notification is structured per FDA Lookback Guidance.

Intake captures DIN, PDC, consignee, clinician, observed effect, severity, recipient identifier where available. V5 binds the report to the donation, surfaces adjacent units and donations, and routes BPDR-eligible events to the regulatory affairs workspace.

Every signed event carries the actor's verified identity, signature meaning, time, and a sha256 of the record. The signature row is append-only. PDF renders are deterministic from the snapshot.

Unit history by DIN, current cold-chain envelope, recall / lookback notifications, BPDR notifications — all on the portal. Audit-trail of who viewed what is automatic.

A typical centre onboards in 6–12 weeks: master data import, donor-record migration, kiosk training, parallel-run validation, cutover. The validation pack (URS → IQ → OQ → PQ) is built in.

Abbreviated mapping. Each link opens the full readiness guide.