📚 Part of the OBX-319 Regulatory Dossier — Reader's Guide. This article shows the live document; edits to the source appear here automatically.

---

Quality Management Plan (OBX319-301)

Document ID: QA-001
Version: 1.0
Change History: 1.0 — Initial issue.
Standard(s): ICH E6(R3)

Quality Management Plan — OBX319-301

Describes the quality system for OBX319-301: quality objectives, roles and responsibilities, risk-based quality management (critical-to-quality factors), deviation/CAPA handling, vendor oversight, and the audit/inspection-readiness approach. ICH E6(R3) quality management.

This Quality Management Plan (QMP) governs the design, conduct, oversight, and reporting of Study OBX319-301, a Phase 3, randomized, double-blind, placebo-controlled, 1:1:1, 52-week trial of OBX-319 on a background of standard-of-care in participants with moderate-to-severe active Systemic Lupus Erythematosus (SLE). OBX-319 is a humanized IgG1 anti-CD19 × anti-CD20 B-cell-depleting bispecific monoclonal antibody produced by Chinese hamster ovary (CHO) cell culture and administered subcutaneously. The QMP operationalizes the ICH E6(R3) principle that quality should be built into the scientific and operational design of the trial ("quality by design") and managed proportionately to the risks that matter to participant safety, rights, and well-being and to the reliability of results. The Sponsor, Virtual Biopharma Inc., holds ultimate accountability for the quality system described here; delegated activities remain under Sponsor oversight. This plan is a living document maintained under version control and reviewed at pre-specified milestones and whenever a material change in risk is identified.

Quality Objectives

The overarching objective is that decision-critical data and processes are fit for purpose and that participant protection is never subordinated to operational convenience. Specific objectives are:

• Protect the safety, rights, and well-being of enrolled participants, with particular vigilance for the risks intrinsic to sustained B-cell depletion — serious and opportunistic infections and hypogammaglobulinaemia — and for injection-site/systemic administration reactions and immunogenicity.
• Preserve the integrity of the double-blind, 1:1:1 randomized design (162 High / 158 Low / 160 Placebo among the 480 randomized) across the 52-week treatment period, including protection against functional unblinding via pharmacodynamic (PD) readouts.
• Ensure the reliability of the primary and key secondary efficacy determinations — SRI-4 with low disease activity defined as SLEDAI-2K ≤ 4 at Week 52, and the SLEDAI-2K LS-mean change from baseline — through standardized, blinded, source-verifiable assessment.
• Maintain the chain of integrity for the investigational product (IP) as a cold-chain biologic, from label and kit release through site storage, administration, and accountability.
• Deliver a submission-ready evidence base consistent with the expectations of a Biologics License Application under 21 CFR Part 601 and applicable ICH quality and nonclinical guidances for a therapeutic monoclonal antibody.

Progress against these objectives is monitored through pre-defined key risk indicators (KRIs) and quality tolerance limits (QTLs) and is reported to Sponsor governance on a recurring cadence.

Roles and Responsibilities

Quality accountability is layered so that ownership is explicit at each level:

• Sponsor (Virtual Biopharma Inc.). Retains overall responsibility for trial quality and for oversight of all delegated activities. Approves this QMP, the risk assessment, protocol and amendments, and the monitoring strategy; ensures resourcing of the quality function.
• Sponsor Quality Assurance (QA). Owns the independent audit program, the deviation/CAPA system, inspection readiness, and vendor qualification. Operates independently of the study delivery line to preserve objectivity.
• Clinical Operations / Study Management. Executes the operational plan, manages sites and vendors day-to-day, and maintains the trial master file (TMF) contemporaneously.
• Medical Monitor / Pharmacovigilance. Provides medical oversight, safety signal detection, and expedited-reporting governance, with defined escalation for infection-related serious adverse events, significant hypogammaglobulinaemia, and administration reactions.
• Independent Data Monitoring Committee (IDMC). Reviews accumulating unblinded safety data under a charter, with a firewall separating the IDMC and its unblinded statistician from the blinded study team.
• Biostatistics and Data Management. Own the statistical analysis plan, randomization/blinding specifications, the database, and endpoint-derivation programming for SRI-4 and SLEDAI-2K.
• Investigators and Site Staff. Responsible for protocol-compliant conduct, informed consent, source documentation, IP handling, and reporting.
• Central Vendors (laboratory, bioanalytical/PK-ADA, flow cytometry, IRT/randomization). Deliver validated, controlled services under quality agreements.

A RACI-style delegation log records who is responsible, accountable, consulted, and informed for each critical activity and is maintained alongside this plan.

Risk-Based Quality Management — Critical-to-Quality (CtQ) Factors

A cross-functional risk assessment identifies the factors critical to quality, evaluates each for likelihood, impact, and detectability, and assigns proportionate mitigation, monitoring, and (where appropriate) QTLs. The assessment is revisited at defined intervals and upon triggering events. The CtQ factors specific to OBX319-301 are:

• Participant safety monitoring for B-cell-depletion risks. Serious and opportunistic infections and hypogammaglobulinaemia are the key identified risks of the mechanism. Mitigations include eligibility screening (including latent tuberculosis and hepatitis B/C status and vaccination review), scheduled immunoglobulin monitoring, protocol-specified infection-management and dose-interruption rules, and rapid safety escalation. KRIs track infection-related event rates and immunoglobulin decrements by site and arm.
• Immunogenicity and administration-reaction capture. As a therapeutic antibody, OBX-319 carries an expected potential for anti-drug antibodies (ADA) and for injection-site and systemic administration reactions. CtQ controls cover on-schedule ADA/PK sampling, correct handling and shipment of bioanalytical samples, and standardized reaction assessment and reporting.
• Blinding integrity against PD unblinding. Near-complete peripheral CD19+ B-cell depletion on active arms (approximately 210 → approximately 7 cells/µL) versus unchanged placebo, together with directional movement in anti-dsDNA and complement C3/C4, is a strong PD signature that could functionally unblind investigators or the study team. A biomarker/PD data firewall restricts access to depletion, ADA, and PK results; matched placebo administration and consistent kit presentation protect the double blind at the point of care.
• Efficacy endpoint reliability. The primary SRI-4/low-disease-activity endpoint and the SLEDAI-2K LS-mean change depend on consistent disease-activity scoring against a baseline SLEDAI-2K of approximately 11. Controls include assessor training and qualification, blinded and where feasible independent assessment, standardized background standard-of-care and corticosteroid/immunosuppressant management, and defined windows for the Week 52 assessment.
• Investigational product integrity (cold-chain biologic). Temperature-controlled storage, continuous excursion monitoring, in-use/administration handling, and rigorous drug accountability are critical for a subcutaneously administered CHO-derived biologic. Excursions are quarantined and dispositioned before any further use.
• Randomization and IP dispensing. Correct 1:1:1 allocation and dispensing via the interactive response technology (IRT) system are verified, with reconciliation against the randomization schedule.
• Data integrity and traceability. Complete, contemporaneous, attributable, and verifiable source-to-database flow for safety and efficacy variables, supporting ALCOA+ expectations.

QTLs are defined for a limited set of parameters where a systematic departure would threaten the reliability of results or participant safety (for example, aggregate premature treatment discontinuation, primary-endpoint assessment completeness at Week 52, and IP temperature-excursion frequency). Breach of a QTL triggers a documented root-cause evaluation and, where warranted, corrective action, distinct from routine KRI drift, which prompts targeted follow-up.

Deviation Management and CAPA

Protocol deviations and quality events are captured, classified by impact (with important deviations flagged for aggregate review and inclusion in the clinical study report), and trended by site, region, and category. Root-cause analysis is applied proportionately to significance; corrective and preventive actions (CAPA) are assigned owners and due dates, verified for effectiveness, and closed with evidence. Recurrent or systemic issues — for example, repeated IP temperature excursions, missed PD/ADA sampling, or scoring inconsistencies on SLEDAI-2K — are escalated to Sponsor governance and, where relevant, feed back into the risk assessment and monitoring emphasis. The deviation/CAPA record is maintained in a controlled system and reconciled against the TMF.

Vendor and Site Oversight

Central vendors and investigative sites are qualified before engagement and overseen throughout the trial under written quality agreements that define roles, data ownership, quality expectations, and audit rights. Given the modality, particular oversight attention is placed on the specialized vendors whose outputs are decision-critical: the flow cytometry laboratory performing CD19+ B-cell enumeration (where pre-analytical sample handling and timing are critical to viable-cell measurement), the bioanalytical laboratory performing PK and ADA assays, and the central safety laboratory. Oversight combines centralized/statistical monitoring, targeted risk-based on-site and remote source data review, KRI/QTL surveillance, and periodic vendor performance review. Delegated activities remain under documented Sponsor oversight; oversight findings feed the deviation/CAPA and audit systems.

Audit and Inspection Readiness

An independent, risk-prioritized audit program covers high-impact sites, critical vendors, the database and endpoint-derivation programming, safety/pharmacovigilance processes, and the TMF. The TMF is maintained inspection-ready — complete, contemporaneous, and reconciled — throughout the trial rather than reconstructed at closeout. Inspection-readiness activities anticipate Health Authority review in support of a Biologics License Application under 21 CFR Part 601, including the traceability of the primary SRI-4 and key secondary SLEDAI-2K results and the coherence of the safety narrative for the mechanism-based risks. The nonclinical and quality framework supporting the submission reflects the antibody modality: the cynomolgus monkey is the sole pharmacologically relevant toxicology species (no rodent cross-reactivity), target-mediated drug disposition informs the pharmacokinetic interpretation, and the applicable ICH guidances are Q5A(R2), Q5C, Q6B, and S6(R1); consistent with established practice for a monoclonal antibody, genotoxicity, carcinogenicity, hERG, and thorough-QT assessments are not warranted. Audit and inspection outcomes are managed through the CAPA system, with lessons learned incorporated into the evolving risk assessment and this QMP.