Skip to content
  • Mon–Sat, 9:30–18:30 IST
  • Vapi, Gujarat, India
PharmaBridge
Sign inGet started

Trust & security

Checked by people. Clear about its limits.

Here is exactly what we verify, how we validate manufacturing sites, what the badges mean, what PharmaBridge does not do, and how we look after your data.

Ask our team a question
Illustration · fictional supplier

Document verification

How a supplier gets verified

AI speeds up the typing. A person makes the decision.

  1. 1

    Supplier uploads documents

    GST certificate, PAN, bank proof, drug manufacturing licence, WHO-GMP or Schedule M and ISO certificates.
  2. 2

    AI reads, code cross-checks

    AI extracts the fields. Our code checks the GSTIN checksum, PAN inside the GSTIN, account holder against legal name, and expiry dates.
  3. 3

    Supplier confirms

    The supplier reviews every value the AI filled in and corrects anything that's wrong before submitting.
  4. 4

    Our team verifies

    A person on our team reviews the company in 2–3 working days. If everything checks out, the Verified badge is awarded.

What our team checks

  • GST registration and drug manufacturing licence, checked against official sources
  • Sanctions lists and regulator warning letters
  • A spot-check of the values the AI read, against the original documents
  • Anything the automatic cross-checks flagged, such as a name mismatch or an expired certificate

Badges

Two badges, two different promises

VerifiedLive

Verified: the documents check out

The company is registered, holds a valid drug manufacturing licence and the GMP and ISO certificates it lists, and doesn't appear on the sanctions and warning-letter lists we check. Awarded by our team after the review above.

Site verifiedLive

Site verified: we've seen the site

Awarded per manufacturing site after a physical or live video visit by our team, because GMP compliance is site-specific. Buyers see it on product cards and in comparisons.

  • Valid for 1 year, renewable from 60 days before expiry
  • Re-validation is due before the badge expires
  • Confirms the site exists and matches the documents; it is not a quality audit

Site validation

How a manufacturing site gets validated

Documents show what a supplier holds. A site visit shows the site behind them.

  1. 1

    Supplier adds sites and requests a visit

    Each manufacturing site is listed separately, because GMP compliance is site-specific. A supplier can ask for a visit at any time.
  2. 2

    Our team prioritises by risk

    Sites with no badge yet, a badge close to expiry, live orders, cold-chain or CGT products, an open supplier request, or a long time since the last visit come first.
  3. 3

    A GMP checklist visit

    In person with a phone or tablet, or as a live video walkthrough. 13 checks covering premises, storage and temperature, QC lab, documentation, water, pest control, people and training, and cold rooms and freezers for CGT, with geotagged, time-stamped photos.
  4. 4

    Site verified badge

    A passed visit awards the badge for that site, valid for 1 year. The supplier requests a renewal before it expires.

The supplier sees the outcome and a summary of the visit. Our team's internal visit notes stay with staff.

Honest limits

What PharmaBridge is, and isn't

Quality and regulatory responsibility stays where it is today. We make the supply side easier to check and easier to record.

PharmaBridge is

  • Verifies that suppliers are registered, licensed and hold the certificates they list
  • Validates manufacturing sites with a GMP checklist visit, in person or by live video
  • Verifies logistics partners before sellers can book them
  • Records who scanned each lot, when and optionally where, at every handoff
  • Keeps a full, timestamped record of quotes, negotiations and order updates
  • Supports your own quality records with an audit log and documents you can review

PharmaBridge is not

  • A quality certifier. We don't audit or certify materials or manufacturing. Quality audits stay commissioned by the buyer, as they are today.
  • A validated GxP system, yet. PharmaBridge is not validated to 21 CFR Part 11 during the proof of concept.
  • A payment service. During the proof of concept, suppliers invoice and buyers pay outside the platform. Our team helps resolve disputes.

Later, not in the proof of concept:

  • Payments and escrow
  • Auctions
  • Supplier trust scores
  • Testing labs
  • Live temperature sensors
  • 21 CFR Part 11 validation

Data protection

Your data, kept separate and in India

Pharma supply data is commercially sensitive. These protections are built into the platform, not added on.

Each company's data is isolated
Row-level security in the database means a company can only read its own records, an extra safeguard on top of the checks in the application.
Negotiations are private
Quote requests, offers and orders are visible only to the two companies involved and our staff. Buyer programme profiles are never shown to suppliers.
Bank numbers encrypted
Bank account numbers are encrypted at rest and shown masked, for example •••• 4821.
Stored in India
Your data and documents are stored on Microsoft Azure in the Central India (Pune) region.
Audit log of every action
Confirmations, edits, approvals, offers and status changes are recorded with who did it and when.
AI processing, disclosed
Documents are read by Anthropic's Claude to pre-fill forms and questionnaires, read specifications and CoAs, answer questions about your vault and check qualification packs. That processing may happen outside India; the files stay stored in India.

Your consent under the DPDP Act, 2023. Some documents, such as PAN and bank details, contain personal data. We ask for your consent, including to the AI processing described above, before you upload them. Read the privacy notice

Responsible AI

AI does the typing, people confirm

We use AI for one job: reading documents so you don't have to retype them. It never approves a company or accepts a deal.

  • Every value the AI fills in is marked until a person confirms or edits it
  • Low-confidence values are flagged in red so they get a closer look
  • Checksums and formats (GSTIN, PAN, IFSC) and cross-document matches are verified in code, not by the AI
  • The AI is instructed to treat document text as data and never to follow instructions written inside a document
  • Verification decisions are made by our staff
Illustration · fictional company

Running a supplier audit or a security review of PharmaBridge? We're happy to answer questionnaires from QA and IT teams.

Contact us about security

Ready to join the proof of concept?

We're onboarding design-partner suppliers and buyers now. Sign up in minutes; our team will guide you.

Get started Talk to us