Qualitice is a founder-led GxP consultancy for life sciences. We validate GxP-critical systems, prepare you for inspections and lead regulated programmes end to end.
A boutique consultancy built on 15 years of senior practice in Europe and the United States.
“We stay deliberately boutique. I stay personally involved in every engagement.”
Fifteen years in life sciences across Europe and the US: in-house roles at Roche Diagnostics in Germany and Washington, DC, and senior mandates for Boehringer Ingelheim, Novartis, Lonza, Fresenius Kabi, Merck, BASF and Johnson & Johnson.
Regulators are raising the bar. Computer Software Assurance shifts the focus from paper volume to critical thinking, and with draft Annex 22 the EU has published its first GMP guidance for artificial intelligence in manufacturing.
At the same time, your system landscape keeps growing: cloud platforms update multiple times a year, ERP migrations are due, and the first AI features are already inside vendor products. Keeping quality ahead of that pace, without adding headcount or losing rigour, is exactly what we help with.
Every organisation is different, culturally and technologically. We adapt how we work to your teams, your systems and your pace.
Every engagement is led by an experienced consultant who has validated the systems they manage. Requirements, risk, testing and documentation are structured to GAMP 5 and CSA logic from day one.
Proven templates and methods keep the work efficient. Where you want it, AI-assisted drafting adds pace under human-in-the-loop governance.
Every deliverable is challenged and approved by a senior expert against your systems, your processes and the inspection reality we know first-hand. Critical thinking is the product.
Evidence over paper volume. Critical thinking over checklists. Judgement over templates.
Five areas of deep expertise, from a single workstream to full programme delivery.
End-to-end leadership for regulated system implementations: ERP, LIMS, MES and document management platforms such as SAP S/4HANA or Veeva Vault. Programme and workstream leadership, PMO, data migration with integrity controls and change management: one accountable lead from kickoff to hypercare.
→ S/02GxP-critical systems validated rigorously and efficiently: ERP, LIMS, MES, eDMS and QMS platforms, on-premise or cloud. Risk-based to GAMP 5 (2nd Ed.) and FDA CSA logic, delivered as an inspection-ready package.
→ S/03Mock inspections, data integrity gap assessments (ALCOA+), supplier and vendor audits, CAPA strategy and remediation, run by people who know what FDA and EMA inspectors actually look for.
→ S/04ALCOA+ gap assessments, data flow mapping, criticality assessments and audit trail review strategies: pragmatic remediation instead of shelf-ware policies.
→ S/05AI features are arriving inside Veeva, SAP, LIMS, MES and QMS releases you already run. We inventory them, decide and document what is in GxP scope, qualify what stays and design the human oversight around it, working to the ISPE GAMP AI Guide, draft Annex 22 and the EU AI Act.
→Our delivery hub sits in Barcelona: your timezone, your language, and a meaningful rate advantage over DACH onshore resourcing.
Barcelona works when Frankfurt, Basel and Vienna work: standups, workshops and escalations without the offshore lag.
Consultants operate fluently in German and English. Documentation and client interaction in either, audit-ready in both.
Nearshore economics with DACH-grade delivery: more value for direct clients, more margin for consulting partners.
Short-haul to every DACH hub for kickoffs, audits and go-lives. Onsite, hybrid or remote, agreed per workstream.
No deck, no funnel. Describe your situation in a few sentences and a senior expert reads it. You get an honest answer on whether and how we can help.
From a single validation workstream to end-to-end programme delivery. Senior experts lead, and every deliverable is reviewed and approved before it reaches you.
Validation-native project and programme leadership for regulated system implementations: ERP, LIMS, MES and document management platforms such as SAP S/4HANA or Veeva Vault, including harmonisation, migration with integrity controls and change management. One accountable partner from kickoff to hypercare, run by people who have validated the systems they manage.
Scope your programme →GxP-critical systems validated rigorously and efficiently: ERP, LIMS, MES, eDMS and QMS platforms, on-premise or cloud. Risk-based to GAMP 5 (2nd Ed.) and FDA CSA logic, delivered as a complete, inspection-ready validation package.
Talk about your validation backlog →Walk into your audit already knowing the findings. Mock inspections, gap assessments and CAPA strategy, run by people who know what FDA and EMA inspectors actually look for.
Prepare for your inspection →From data flow mapping to ALCOA+ compliance across FDA, EMA, MHRA and WHO expectations: pragmatic remediation instead of shelf-ware policies.
Assess your data integrity →Most AI in GxP today is not a model your team built; it is a feature your vendor enabled in a system you validated years ago. We inventory what is actually in use, document the scope decision per system, qualify what stays and design oversight and monitoring around it, working to the ISPE GAMP AI Guide, draft Annex 22 and the EU AI Act. See the dedicated page.
Go to AI in GxP →Describe your situation in a few sentences. A senior expert reads it and answers honestly. If we can’t help, we’ll tell you who can.
Veeva, SAP, LIMS, MES and QMS vendors are shipping AI features into releases you already run. At the same time the ISPE GAMP AI Guide has given the industry its first holistic framework, draft Annex 22 is heading for a final text, and the EU AI Act already places duties on you as a deployer. We help you decide what is in scope, qualify what stays, and document both.
If an AI output influences a GxP decision, it is in scope. The question is no longer whether, but how deep.
The industry now has a holistic framework: a life cycle from concept through project, operation and retirement, science-based quality risk management, data and model governance, trustworthy AI and AI maturity. It extends GAMP 5 (2nd Ed.) rather than replacing it, which makes it the practical basis for a validation approach an inspector can follow.
The EU’s first dedicated GMP guidance for AI. Consultation closed in October 2025 and a final text is targeted for late 2026; it is not yet part of EudraLex. Intended use, data quality, model qualification, human oversight and performance monitoring are explicit expectations, and the treatment of generative AI remains the open question.
Horizontal regulation that already applies to you as a deployer, not only to your vendors as providers. It intersects GxP in risk classification, data governance, transparency and human oversight, and it obliges you to build AI literacy in the people who use these systems.
The quiet one, and the reason most enquiries reach us. Vendor AI features arrive through ordinary releases in systems you validated years ago. Nobody raises a project, nobody writes a URS, and the feature is live in a GxP process before QA hears about it.
Structured along the GAMP AI Guide life cycle, scaled to the risk of each system rather than to a template.
Every AI touchpoint in your GxP processes, including the features already shipped into your validated platforms. Intended use and context of use per system, a documented scope rationale against Annex 22 and the AI Act, and a risk-ranked remediation plan. Fixed scope, fixed fee.
The Veeva question, answered properly: what the vendor actually qualified, what remains yours as deployer, which questions belong in the supplier assessment, and how release notes become a change-control trigger instead of a surprise.
A validation approach across the life cycle: model requirements and design space, data sets and splits, acceptance criteria, testing of the AI-enabled system rather than the model alone, release documentation and the handover into operation.
Fit-for-purpose data and data quality, provenance and access, model management and versioning, retraining rules and the decision log behind them. The part that most often turns out to be missing when an inspector asks how the model got there.
Oversight that works in practice, not on paper: roles and decision rights, explainability appropriate to the audience, performance and drift monitoring with defined thresholds, incident handling, periodic review and retirement.
Training your QA, IT and business teams to the level the AI Act expects, plus a mock inspection on your AI landscape: the inventory, the scope rationale, the oversight evidence, questioned the way an inspector would.
Most AI in GxP today is not a model your data scientists built. It is a feature your vendor enabled.
Content and quality processes where AI assists classification, review, translation or search. Your validated eDMS or QMS gains a capability that touches controlled documents, and the intended-use assessment is yours to write.
Embedded assistants and predictive functions reaching into batch, supply chain and master data processes, where an output that looks advisory can quietly become the basis for a GxP decision.
Anomaly detection, deviation and CAPA triage, OOS prediction, visual inspection support. High value, and squarely in the critical-process category where scope decisions need to be defensible.
General-purpose assistants used to draft SOPs, summarise deviations or answer regulatory questions. Rarely inventoried, frequently used, and the fastest way to an uncomfortable inspection question.
Intended use and context of use, supplier qualification of the AI component, configuration and control strategy, human oversight design, monitoring, and the documentation set that connects them.
Sometimes the right decision is to switch the feature off, or to keep it out of the GxP process entirely. That decision is just as legitimate, and it also needs to be documented. We will say so when it applies.
No, and it never was for the rest of the platform either. The supplier can qualify what they built; the intended use in your process, the data you feed it, the human oversight around it and the periodic review stay with you as deployer. We translate that split into a supplier assessment, a control strategy and documentation that holds up when it is questioned.
By treating release notes as a change-control input rather than a newsletter. That means a defined assessment step per release, criteria for when a feature triggers revalidation, monitoring thresholds that would reveal a behaviour change, and a periodic review that looks at the AI components specifically.
With the inventory, and it is less painful than it sounds. A structured sweep of platforms, vendor roadmaps, departmental tools and shadow usage typically takes a few weeks and produces the one artefact every credible response depends on: a list of AI touchpoints with intended use, scope decision and rationale.
It extends it. GAMP 5 (2nd Ed.) principles still apply, and the AI Guide adds what AI makes different: the data and model dimension, science-based risk management, trustworthy AI considerations and a life cycle that treats operation and monitoring as seriously as the project phase. For most clients it is the backbone we build the validation approach on.
Yes, and we say so plainly, because your inspectors will. The consultation closed in October 2025, a final text has been targeted for late 2026, and it is not yet part of EudraLex. What you build now is readiness: an inventory, scope decisions and governance that stand whichever final wording arrives. Waiting means starting when your inspector already has the text.
Not the way deterministic software is. The honest answer is a control strategy: bounded intended use, retrieval and prompt controls, output review proportionate to risk, and evidence that a competent human remains accountable for the decision. The 2025 draft kept generative AI out of critical GMP use, and how the final text treats it is the open regulatory question of this year.
Only half. As a deployer you carry obligations of your own, including human oversight, use in line with the provider’s instructions, and AI literacy for the people working with these systems. The literacy duty is the one most quality organisations have not yet addressed, and it is also the easiest to close.
Show me your AI system inventory. Show me who decided what is in scope and on what basis. Show me the human oversight working in practice, not in an SOP. Three questions, and most companies today can answer none of them.
Send us your platform list. We’ll tell you which AI features are in scope, which are not, and what an inspector would ask about each.
GxP-fluent teams that plug into your life sciences engagements: DACH-grade quality at nearshore Barcelona economics, comfortable under your brand and governance.
We work under your brand and your governance, or alongside you as a named specialist, whatever the engagement needs. Our commercial model is deliberately simple: transparent grade mapping, volume tiers, dedicated teams for multi-month programmes.
Request the rate card →When an engagement needs GxP-native specialists at short notice, that is exactly the bench we keep: validation leads, CSA practitioners, data integrity assessors, and Veeva/SAP-fluent quality experts. Nearshore from Barcelona, in your timezone, with short-haul flights for onsite phases.
Discuss a current engagement →From a single specialist to a dedicated validation team: we typically mobilise within two to four weeks of a signed statement of work.
Qualitice exists because compliance work deserved better than the rotating bench.
“The documentation everyone produces to feel safe is not what gets you through an inspection. Critical thinking is. Everything we do starts there.”
Anne Woitzik founded Qualitice in 2021 after fifteen years in the life sciences industry across Europe and the United States. Her career spans in-house roles at Roche Diagnostics in Germany and Washington, DC, and senior consulting mandates for Boehringer Ingelheim, Novartis, Lonza, Fresenius Kabi, Merck, BASF and Johnson & Johnson.
She has directed validation and quality programmes across ERP, LIMS, MES and document management landscapes, contributed to FDA pre-approval inspection readiness at commercial manufacturing sites, and built AI-assisted validation methodology under human-in-the-loop governance before the industry had a name for it. She works in German, English and Spanish and mentors early-career professionals in the ISPE Mentor Programme.
Every deliverable carries a named senior expert’s review and signature. Accountability is our product.
Enquiries go to the founder, not a ticket queue. Short paths, honest answers, no gatekeeping.
A Consultant-to-Director team, senior-led on every engagement.
A Consultant-to-Director team of validation and quality specialists.
Founder & Managing Director. The signature on the method, and on a good share of the deliverables.
Validation leads, CSA practitioners, data integrity assessors, Veeva- and SAP-fluent quality experts, across all delivery grades. Profiles shared per workstream.
Roles open from Consultant to Director, for GxP and validation specialists who want their name on their work. See careers →
Describe your situation in a few sentences. A senior expert reads it and answers honestly. If we can’t help, we’ll tell you who can.
Opinions included. Written by the people who sign the work. The first pieces are in preparation.
Write a few sentences about your systems and your timeline, and you’ll get an honest answer on whether we can help. If we can’t, we’ll tell you who can.
Barcelona, Spain
Onsite, hybrid and remote across DACH & Europe
Deutsch · English · Español
Qualitice is growing deliberately, hiring from Consultant to Director level. If you want to work with modern tooling, real client ownership and your signature on the result, we should talk.
Based in Barcelona or remote across Europe, German and/or English fluent, client-facing ready.
CSV/CSA execution, requirements and risk work, testing coordination on ERP, LIMS, MES and eDMS landscapes.
ALCOA+ assessments, data flow mapping, mock inspections and remediation, with direct client ownership.
Workstream and programme leadership for regulated implementations, and the signature under the deliverables.
Senior-level exposure, international projects, and a working model that fits your life.
Work directly with international life sciences organisations on the systems and processes their quality operations depend on.
A flexible remote-first model. You organise your work; we care about the quality of what you deliver, not where you sit.
Assignments across Germany, Switzerland, Spain and wider Europe, with onsite phases where they genuinely add value.
Work alongside experienced consultants on global transformation programmes, the kind of scope that accelerates a career.
Flexible collaboration models: join as a freelancer or as a permanent employee, whichever suits where you are.
No anonymous bench. You review it, you own it, and the client knows who you are.
What you’ve validated, what you want to own, and when you can start. A human reads it and answers.
Sometimes you don’t need a project. You need someone who has sat on both sides of an inspection to tell you, in an hour, whether your approach holds and what you would be asked about it.
Expert hour. A focused, prepared session with Anne Woitzik on a concrete question: a validation approach, an audit finding, a CSA transition, an AI system you are unsure about, or a supplier assessment you need a second opinion on.
Invoiced per commenced hour. Half-days, workshops and project engagements are quoted per statement of work. Consulting partners work from a separate rate card.
You get the preparation for free; the hour itself is spent on answers.
If what you need is a project rather than an hour.
Systems, timeline, regulatory context: enough for an honest view on whether we are the right fit and what an engagement would look like.
Consulting firms looking for GxP-native delivery capacity: grade mapping and rate card on request. For partners →
Write in one paragraph what is on your desk. If an hour is enough, we book an hour. If it isn’t, I will say so. Get in touch →
Preparation, the session itself and the written summary afterwards. Travel, workshops longer than half a day and anything requiring document production are quoted separately.
Yes. The rate is exclusive of VAT. For business clients inside the EU outside Spain, invoices are issued under the reverse charge procedure with your VAT identification number; Spanish clients are invoiced with IVA.
Invoice after the call, 30 days net, bank transfer. No prepayment for a single hour.
Everything discussed is confidential by default. If your organisation requires a signed non-disclosure agreement first, send yours or ask for mine.
Yes, free of charge up to 24 hours beforehand. Later cancellations are invoiced at half the hour, since the preparation has already happened.
Sensible if you want a sparring partner on call. Blocks of hours and monthly retainers are available; ask and you get a short written offer.
Describe your situation in a few sentences. A senior expert reads it and answers honestly. If we can’t help, we’ll tell you who can.
Qualitice S.L.
Pl. Catalunya 1
08002 Barcelona, Spain
Managing Director: Anne Woitzik
Phone: +34 685 608 122
Email: anne@qualitice.com
VAT identification number: ES-B65478695
Responsible for content: Anne Woitzik
1. Controller: Qualitice S.L., Pl. Catalunya 1, 08002 Barcelona, Spain. VAT identification number: ES-B65478695. Represented by: Anne Woitzik, Managing Director. Contact: anne@qualitice.com, +34 685 608 122.
2. Hosting and server logs: This website is hosted by Netlify, Inc., San Francisco, California, USA. When you visit, the hosting provider technically processes connection data (IP address, date and time of the request, requested page, referrer, browser type and operating system) in server log files, in order to deliver the site reliably and to protect it against misuse. Legal basis: Art. 6(1)(f) GDPR (legitimate interest in the secure and stable operation of this website). A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. This log data is stored only for as long as the provider requires it for secure operation and abuse prevention; Qualitice does not analyse it and does not use it to identify visitors.
3. Contact: If you contact us by email or via the contact form, we process the data you provide (name, email address, message content) solely to handle your enquiry and any resulting business relationship. Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) and Art. 6(1)(f) GDPR. The contact form opens your own email application; no form data is transmitted to or stored on our servers.
4. Cookies and local storage: This website uses no tracking, analytics or advertising cookies. Only your cookie choice and display preferences are stored locally in your browser (consent stored for a maximum of 12 months) and are never transmitted to us. You can change or withdraw your choice at any time via “Cookie settings” in the footer, and delete the stored values in your browser settings.
5. Recipients and third-country transfers: Personal data is not shared with third parties other than the hosting provider named in section 2. Because that provider is based in the United States, technical connection data may be processed outside the EU/EEA. The transfer is safeguarded by the EU Standard Contractual Clauses adopted by the European Commission (Implementing Decision (EU) 2021/914) in conjunction with the provider’s data processing agreement, pursuant to Art. 46(2)(c) GDPR. We are aware that US authorities may, under certain conditions, request access to such data. If we change hosting provider or introduce further recipients, we will update this notice.
6. Applications: If you apply by email, we process your application documents solely for the recruitment process (Art. 6(1)(b) GDPR; in Spain in conjunction with applicable employment law). Application data is deleted no later than six months after the process ends, unless you agree to longer retention.
7. Storage periods: We store personal data only as long as needed for the purposes above or as required by statutory retention obligations (e.g. commercial and tax law).
8. Your rights: You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interest (Art. 21). Where processing is based on consent, you may withdraw it at any time with effect for the future.
9. Complaints: You may lodge a complaint with a data protection supervisory authority, in Spain the Agencia Española de Protección de Datos (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es.
10. No automated decision-making: We do not use automated decision-making or profiling on this website.
Version: August 2026.
We use only technically necessary storage to run this site and to remember your choice. No analytics, no advertising, no third-party tracking. Our hosting provider is based in the USA and processes technical connection data there on the basis of the EU Standard Contractual Clauses, as set out in the privacy notice. If we ever introduce optional services, we will ask you first.
If you are under 16, please ask a legal guardian before consenting to optional services. Details: privacy notice · legal notice.
Your choice is stored for 12 months in your browser only. You can change or withdraw it at any time via “Cookie settings” in the footer.