A new version is available.
For Health Canada-Regulated NHP Manufacturers

When the inspector asks for your stability data, what do you hand them?

StabilityForge is the operating system for your NHP stability program — auto-numbered protocols, time-point reports, and expiry justification, all version-controlled and aligned to ICH Q1A(R2) and Health Canada NHPD standards. Built for the moment the audit begins.

ICH Q1A(R2) aligned Health Canada NHPD NHPR §44–46
Aligned ToICH Q1A(R2)
AuthorityHealth Canada NHPD
RegulationNHPR · SOR/2003-196
Climate ZoneZone II · Canadian Market
MethodsUSP · ICH Q2(R1)
Three Audit Scenarios

The questions most NHP companies cannot answer in 90 seconds.

These aren't hypothetical. They are the actual questions Health Canada inspectors are asking. The companies losing are not the ones with bad data — they're the ones with scattered data.

Scenario 1 · Site Inspection
Show me the most recent time-point report for NPN 80012345 and the version-controlled protocol it was tested against.
What happensEmail archaeology starts. Two QA staff lose 4 hours. The inspector documents the delay. Finding written.
Scenario 2 · NHPD Submission
Justify the 24-month expiry claim with stability data showing all attributes within specification through T = 24 months.
What happensThe submission stalls. Reviewer requests are sent. Six weeks lost rebuilding documentation. Launch slips by a quarter.
Scenario 3 · Staff Departure
The stability coordinator just resigned. Where is the current state of the program?
What happensThe replacement spends 60 days reconstructing what one person held in their head. Two product launches go on hold. Audit exposure climbs.
The StabilityForge System

Four documents. One controlled chain.

Health Canada will eventually ask to see four documents in this exact order: the protocol, the time-point reports, the pass/fail evaluation, and the expiry justification. StabilityForge connects them into a single auto-numbered, version-controlled workspace where the audit trail is the byproduct of doing the work — not a separate task.

01

Project

Auto-coded workspace per product or product line. Every document inherits the project number.

02

Protocol

ICH-compliant study design. Auto-numbered, version-controlled. References inline.

03

Report

Time-point results per batch. Pass/fail auto-evaluated against the protocol's spec.

04

Conclusion

Expiry justification generated from results. Citations attached. Sign-off ready.

=
OUTPUT

Audit-Ready

Inspector asks the question. You answer in 90 seconds. Every time.

What You Replace

  • Word protocol drafts on a shared drive
  • Excel result trackers — one per analyst, none current
  • Pass/fail decided by the QA manager at 4pm Friday
  • Expiry justification rebuilt during submission week
  • Audit prep that takes two weeks of overtime
  • One coordinator holding it all in their head

What You Get

  • Auto-numbered protocols under a project code
  • Time-point reports linked to the source protocol
  • Auto-evaluated against the protocol's acceptance criteria
  • Generated at every time point, ready to attach
  • Audit prep that is the work itself
  • A system that survives staff turnover
Compliance Framework Embedded

Every citation. Every section. Inline.

The inspector should never have to ask why a particular condition, time point, or specification was chosen. Every choice in a StabilityForge protocol is cited inline to its source guideline — and printed in the final document the same way.

ICH Q1A(R2)
Stability Testing
Storage conditions, study design, significant change definitions. The backbone of every protocol.
ICH Q1B
Photostability
Confirmatory design Option 2 for products susceptible to photodegradation.
ICH Q1D
Bracketing & Matrixing
Reduced study designs with formal justification for analogous formulations.
ICH Q1E
Statistical Evaluation
Regression analysis with 95% one-sided confidence limits for shelf-life estimation.
ICH Q2(R1)
Method Validation
Analytical procedures validated as stability-indicating per ICH framework.
ICH Q3B(R2)
Impurities
Degradation product specifications and reporting thresholds for drug products.
QNHP Guide v2.0
NHP-Specific Quality
Health Canada's NHP framework for identification, assay, and microbial limits.
NHPR §44–46
Expiry Data Requirements
The regulation behind the claim. Every shelf-life statement is defensible against this.
See Before You Buy

See exactly what the system produces.

12 pages. Five real documents. Stability protocol, time-point report, final shelf-life justification, inspection response memo, and a side-by-side audit comparison. Watermarked SAMPLE so it cannot be misused — every other detail is the actual output format StabilityForge generates.

SAMPLE · NOT FOR SUBMISSION
DOC 01

Stability Protocol

Full ICH Q1A(R2)-aligned protocol with all 11 sections, references, and signature block.

DOC 02

Time-Point Report

T = 12 month interim report. Three batches. Twenty-four results, all pass/fail evaluated.

DOC 03

Final Stability Report

T = 24 trend analysis with regression statistics and signed expiry justification.

DOC 04

Inspection Response

Documented memo response to an inspector observation. 56-second retrieval timeline.

DOC 05

Before vs After Comparison

Five audit scenarios under the same conditions — with and without StabilityForge — showing the operational impact in minutes vs seconds.

Who Buys StabilityForge

For the people on the line when the inspector arrives.

If you're accountable for showing the chain of evidence behind a shelf-life claim, you're the person we built this for.

NHP

NHP Manufacturers

Single-site or multi-site operations managing 10–500 SKUs. Direct-to-consumer brands, supplement formulators, herbal product lines.

CMO

Contract Manufacturers

CMOs running stability programs for multiple client brands. Auto-numbering and project workspaces keep client portfolios cleanly separated.

QA

QA / QC Managers

The people running stability operations day-to-day. You stop being the single point of knowledge failure. The system becomes the institutional memory.

RA

Regulatory Affairs

Submission-ready documents on demand. NHPD-aligned formatting. No more reconstructing expiry justification the week of filing.

Built On The Floor, Not In The Cloud

Compliance designed by manufacturing, not by software.

StabilityForge wasn't designed by software engineers reading regulations. It was built by manufacturing supervision leadership with three decades of production-floor experience — people who have stood beside the inspector, answered the question, and felt the consequence of an unfindable file.

Every workflow choice is grounded in how real GMP operations actually function. The auto-numbering convention exists because document numbering has always been an audit finding. The version history exists because revision control is a recurring observation. The expiry justification automation exists because nobody should rebuild that document under submission deadline pressure.

Building tools the people on the floor actually want — not the tools software vendors think they need. — Moe Elahresh · Founder, Victory Hour Multimedia Inc.
30+
YearsManufacturing supervision leadership behind the system design.
10%
Non-NegotiableEvery dollar Victory Hour generates supports the fight against world hunger.
100%
Citation CoverageEvery protocol section references its source guideline. Inline. Always.
90s
Inspector ResponseTarget time from question to documented answer. Designed for it.
Pricing

Less than one day of a stability coordinator's time. Per month.

Anchor pricing to what it replaces: one FTE stability coordinator costs $75K–$120K/year. One avoided audit finding pays for three years of StabilityForge. Decide accordingly.

Tier 01 · Standard

For single-site NHP manufacturers

Implementation$4,997 one-time
Then$297 /month Year 1 total: ~$8,561 · Year 2+: $3,564/yr
  • Up to 50 active products
  • Unlimited protocols & time-point reports
  • Version control & CSV exports
  • Print-ready documents (ICH/NHPD format)
  • Email support + monthly office hours
Book Demo
Tier 03 · Enterprise

For contract manufacturers & validation-driven environments

From$24,997 implementation
Then$1,497+ /month Custom pricing · scoped to deployment
  • White-label deployment
  • IQ/OQ/PQ validation pack
  • QMS / ERP integration
  • On-site or virtual full-team training
  • Dedicated implementation specialist
  • Custom regulatory module extensions
Talk to Sales

Consultant Partner Program — $4,997/year

For GMP, QA, and RA consulting firms. Deploy StabilityForge into unlimited client engagements, co-branded with your firm. One flat annual license. Partner directory listing included.

Become a Partner
Questions Buyers Ask

What you'll want to know before booking.

Where does our stability data go? Is it secure?
Your stability data lives in your browser's local storage by default — never leaves the device unless you choose to export it. The optional AI narrative feature is the only outbound call, anonymized, routed through Cloudflare Workers with no data retention. For enterprise deployments we provide self-hosted, air-gapped, or on-prem options. We'll send you the data flow diagram before your Audit Readiness Assessment. → Read the full Privacy & Security Brief
We have a QMS already. Doesn't this duplicate it?
StabilityForge sits next to your QMS — not on top of it. Your QMS handles SOPs, CAPAs, deviations, change controls. StabilityForge handles the four stability-specific documents your QMS probably doesn't model natively: the protocol, time-point reports, pass/fail evaluation, and expiry justification. We integrate with Veeva, MasterControl, TrackWise, and others via document export at minimum, custom integrations at the Enterprise tier.
How long does deployment take?
Standard tier: 5–10 business days from contract signature. Professional: 10–20 days. Enterprise: scoped to validation requirements, typically 30–90 days including IQ/OQ/PQ documentation. The Audit Readiness Assessment itself takes 20 minutes and you walk away with a sample protocol regardless of whether you move forward.
Do we need to validate the system?
Pharma-grade environments do. NHP environments vary by company maturity. The Enterprise tier includes a full IQ/OQ/PQ validation pack designed around GAMP 5 Category 4 (configurable software) framing — your validation team will recognize the structure immediately. Standard and Professional tiers include validation outline documentation; full IQ/OQ/PQ is an optional add-on at any tier.
What about existing stability data? Can we migrate it in?
Yes. The Implementation fee includes migration support: existing protocols are converted to StabilityForge-numbered documents, historical time-point results can be entered as legacy reports against the migrated protocol. Most companies migrate their most-exposed SKUs first (anything heading to NHPD submission or recent inspection) and bring the rest in over the first quarter.
Can we build this ourselves?
You can. Most companies that try take 6–18 months and burn $80,000–$200,000 in engineering time before they have something equivalent, and then they maintain it forever — including regulatory updates. We've already built it, we maintain the regulatory references, and we're $4,997 to deploy. The question is whether stability software is your core competency or whether NHP manufacturing is.
Health Canada hasn't asked us for this format specifically.
Health Canada doesn't mandate format — they mandate substance. NHPR §44–46 requires stability data sufficient to support the expiry claim under labeled storage conditions. What inspectors increasingly ask for is the traceable chain: protocol → results → evaluation → conclusion. StabilityForge isn't selling a format requirement. It's selling defensibility.
What's the difference between this and big-pharma stability software?
Most stability software was built for big pharma — $50,000+ to deploy, six-month onboarding, feature sets that overshoot the NHP use case by 10x. We built StabilityForge specifically for the Canadian NHP industry: Climate Zone II baked in, NHPD references inline, NHP-specific dosage form templates, deployable in days. We're not competing with Veeva or LabWare on feature count. We're competing on time-to-value for NHP.
The Next Step

Book a 20-minute Audit Readiness Assessment.

No demo pressure. No proposal. We open one of your active NPN products, walk it through the StabilityForge frame, and you walk away with three concrete deliverables — yours to keep regardless of whether you move forward.

DELIVERABLE 01

Audit Gap Report

A documented assessment of where your current stability documentation chain has exposure under ICH and NHPD review.

DELIVERABLE 02

Sample Protocol

A fully populated ICH-aligned stability protocol generated for one of your active products. Yours to use, edit, or compare against your own.

DELIVERABLE 03

Citation Map

A regulatory citation reference for your most-exposed SKU, mapping each compliance touchpoint to its source guideline.

PRE-READ · OPTIONAL

Privacy & Security Brief

Two-page architecture document for your IT/security reviewer. Sub-processors, compliance framework alignment, deployment options. Read now →

No credit card · No commitment · Deliverables are yours
SF
StabilityForge AI
Project-Based NHP Protocol Engine
ICH Q1A(R2) NHPD Site Saved
SF

StabilityForge

The Operating System for Your NHP Stability Program
Aligned To
ICH Q1A(R2) · Q1B · Q1D · Q1E
Health Canada NHPD
NHPR (SOR/2003-196) §44–46
When the inspector asks for your stability data, what do you hand them?
stabilityforge.ca
Victory Hour Multimedia Inc.
Windsor · Ontario

The Problem

  • Documentation lives everywhere except where you need it.Word drafts. Excel trackers. Email threads. Shared drives no one has cleaned in two years.
  • Pass/fail is decided from memory.The QA manager remembers the acceptance criterion. The lab tech remembers the result. Nobody documents the comparison.
  • Expiry justification is rebuilt under deadline pressure.Submission week. Inspector visit. Recall investigation. Always too late, always reconstructed.
  • The program lives in one person's head.Stability coordinator resigns. Replacement spends 60 days reconstructing the institutional memory.

The System

Four documents. One controlled chain. Auto-numbered, version-controlled, ICH-cited inline.

01PROJECT
02PROTOCOL
03REPORT
04CONCLUSION
▸ AUDIT-READY · INSPECTOR-RESPONSE IN 90 SECONDS

What It Replaces

Today

  • Word protocol drafts
  • Excel result trackers
  • Email-based handoffs
  • 4pm Friday pass/fail decisions
  • Expiry rebuilt at submission
  • Two weeks of audit prep

With StabilityForge

  • Auto-numbered protocols
  • Linked time-point reports
  • Single controlled workspace
  • Auto-evaluated vs. spec
  • Generated at every time point
  • Audit prep IS the work

Who Buys It

NHP
Manufacturers
CMO
Contract Mfg
QA/QC
Managers
RA
Affairs

Compliance Framework Embedded

Every protocol section cites its source guideline inline — printed in the final document the same way.

ICH Q1A(R2) ICH Q1B ICH Q1D ICH Q1E ICH Q2(R1) ICH Q3B(R2) QNHP v2.0 NHPR §44–46 USP <711> USP <791> USP <2021> USP <51>

Pricing

TierImplementationMonthly
Standard
Single-site NHP, ≤50 SKUs
$4,997 $297
Enterprise
CMO, validation pack, integration
$24,997+ $1,497+
Consultant Partner
GMP / RA firms, unlimited clients
$4,997 / year flat license

Anchor: One stability coordinator FTE costs $75K–$120K/yr. One avoided audit observation costs $15K–$50K. One avoided recall costs $100K–$500K+.

Book a 20-min Audit Readiness Assessment

You walk away with three concrete deliverables — yours to keep Documented audit gap report · Sample stability protocol for one of your products · Regulatory citation map for your most-exposed SKU. No proposal pressure.
Book Assessment
SAMPLENot For Submission
SF

StabilityForge

Stability Program Management System
Document Type Sample Proof Pack

Version Pack v1.0 · 2026

Total Pages 12
For NHP Manufacturers, Contract Manufacturers & GMP Consultants

What the system actually produces.

A complete walkthrough of StabilityForge output — protocol, time-point report, expiry justification, inspection response, and the operational comparison every QA manager should see before their next audit.

Aligned ToICH Q1A(R2)
Q1B · Q1D · Q1E
AuthorityHealth Canada NHPD
QNHP Guide v2.0
RegulationNHPR · SOR/2003-196
§44–46
10%
Non-Negotiableof all Victory Hour
proceeds fight world hunger
Why This Pack Exists

Operational Proof, Not Marketing Proof.

Victory Hour Multimedia Inc.
Windsor, Ontario, Canada
stabilityforge.ca
Most stability software companies open with customer logos. StabilityForge doesn't have a logo wall yet. What it has is documented output — the actual artifacts the system produces. That's what this pack contains.

What you'll find in the following pages is exactly what StabilityForge generates for an NHP product moving through a full stability program: the controlled protocol, an interim time-point report, the final shelf-life justification, an inspection-response memo demonstrating audit retrieval, and a side-by-side of what the same operational scenario looks like with the system versus without it.

These are not screenshots. They are not mockups. They are the document templates StabilityForge produces when you enter your product information — formatted to ICH Q1A(R2) and Health Canada NHPD expectations, cited inline to source guidelines, version-controlled, and audit-defensible. The watermark is present so this pack cannot be confused with a real regulatory submission. Everything else is exactly what the system outputs.

Built On The Floor, Not In The Cloud

StabilityForge was not designed by software engineers reading regulations from the outside. It was built by manufacturing supervision leadership with decades of production-floor experience — people who have stood beside the inspector, signed the deviation, closed the CAPA, and felt the weight of an unfindable file at the worst possible moment.

Every workflow decision in this system is grounded in how real GMP operations actually function. The auto-numbering convention exists because document control has always been an audit finding. The version history exists because revision tracking is a recurring observation. The expiry justification automation exists because nobody — not even your best stability coordinator — should be rebuilding that document under submission deadline pressure.

What This Pack Contains

Documents Enclosed
DOC 1Stability ProtocolFull ICH Q1A(R2)-aligned protocol for a Magnesium Glycinate 300 mg capsule.
DOC 2Time-Point ReportInterim T = 12 months long-term stability report for 3 primary batches.
DOC 3Final Stability ReportT = 24 months final report with expiry justification and trend analysis.
DOC 4Inspection ResponseDocumented response to a Health Canada inspector observation, with retrieval timeline.
DOC 5Before vs AfterOperational comparison of stability program with and without StabilityForge.

How To Read This Pack

Walk through each document the way an auditor would. Look for: document numbering, version control, citation density, traceability between protocol and result, signature blocks, and the logical chain from study design → data → conclusion → expiry claim. These are the things that determine whether a stability program survives inspection or generates findings.

If what you see is consistent with how your audits run, we should talk. If it raises questions, also good — those are the questions worth answering before deployment, not during it.

The Next Step

A 20-minute Audit Readiness Assessment. We open one of your active NPN products, walk it through the StabilityForge frame, and produce a documented gap report — yours to keep, regardless of whether you choose to move forward. The deliverable is real either way.

Moe Elahresh
Founder · Victory Hour Multimedia Inc. · Windsor, Ontario
Document 01 · Stability Protocol · ICH Q1A(R2) · Health Canada NHPD

Vitality+ Magnesium Glycinate 300 mg

HARD GELATIN CAPSULE · 60 CT · CLIMATE ZONE II
Document IDSAMPLE-VTL-2026-SP-001 · v1.0
ProjectVTL-2026 — Vitality+ Magnesium Line
Issue Date2025-04-10
StatusApproved
ManufacturerSample NHP Manufacturer Inc.
Windsor, Ontario, Canada
NPNSAMPLE-80012345
AuthorQA Manager (Sample)
ApproverHead of Quality (Sample)

1. Scope, Objective & Rationale

This protocol defines the stability study design for Vitality+ Magnesium Glycinate 300 mg, a hard gelatin capsule natural health product manufactured for the Canadian market. The objective is to generate data sufficient to support the proposed shelf-life claim of 24 months under the recommended storage conditions stated on the product label, in accordance with the Natural Health Products Regulations (SOR/2003-196) §44–46 and ICH Q1A(R2).

The storage conditions selected align with ICH Climate Zone II applicable to Canada. Three primary batches at pilot scale will be enrolled, exceeding the minimum three-batch requirement of ICH Q1A(R2) §2.1.3. The container closure system (HDPE bottle with child-resistant PP cap and induction seal) represents the marketed configuration, satisfying §2.2.5 of the same guideline.

2. Product Description

2.1 Identification

AttributeSpecification
Product nameVitality+ Magnesium Glycinate 300 mg
Dosage formHard gelatin capsule (size #00, opaque off-white)
Strength / dosage300 mg elemental magnesium per capsule
Batch size100,000 capsules (pilot scale)
Proposed shelf life24 months

2.2 Quantitative Formulation — Medicinal Ingredients

IngredientSourceQuantity per Unit
Magnesium bisglycinate chelateUSP/Ph.Eur. grade synthetic chelate1,500 mg (providing 300 mg elemental Mg)

2.3 Non-Medicinal Ingredients

Microcrystalline cellulose (USP), magnesium stearate (USP), silicon dioxide (USP), hypromellose (capsule shell, USP).

3. Container Closure System

ComponentDescription
Primary packagingHDPE bottle, USP-grade, 75 mL
ClosureChild-resistant polypropylene cap with induction seal
MaterialsUSP-grade HDPE; PE/foil induction liner
Light protectionOpaque/amber
Desiccant / scavengerSilica gel canister (2 g)
Fill size60 capsules per bottle
Reference ICH Q1A(R2) §2.2.5 — Stability studies must use the container closure system proposed for marketing.
Doc SAMPLE-VTL-2026-SP-001 v1.0 Page 1 of 3 · StabilityForge™ Sample Output Status Approved · 2025-04-10
Document 01 · Continued

4. Storage Conditions

The labeled storage statement for this product is: "Store between 15–30 °C, protect from moisture and light. Keep desiccant in bottle."

StudyTemperatureRelative HumidityReference
Long-term25 °C ± 2 °C60% RH ± 5% RHICH Q1A(R2) §2.2.7.1
Intermediate*30 °C ± 2 °C65% RH ± 5% RHICH Q1A(R2) §2.2.7.2
Accelerated40 °C ± 2 °C75% RH ± 5% RHICH Q1A(R2) §2.2.7.3

*Intermediate testing will be initiated if "significant change" (ICH Q1A(R2) §2.1.7.2) is observed at accelerated condition.

4.1 Photostability

Photostability testing will be conducted per ICH Q1B on one primary batch using the confirmatory study design (Option 2): integrated near-UV (320–400 nm) and cool white fluorescent light at minimum 1.2 million lux-hours of overall illumination and 200 watt-hours/m² UV energy. Light-protected and dark controls will be analyzed in parallel.

5. Study Design — Batches

A minimum of 3 primary batches manufactured at pilot scale will be enrolled. Batch designations: LOT-VTL-A001, LOT-VTL-A002, LOT-VTL-A003. All batches share the same formulation, manufacturing process, and container closure system as the marketed product, satisfying ICH Q1A(R2) §2.1.3.

6. Testing Schedule

6.1 Long-Term — 25 °C ± 2 °C / 60% RH ± 5% RH

Time PointTests Performed
T = 0 monthsComplete panel (release / baseline)
T = 3 monthsComplete panel
T = 6 monthsComplete panel
T = 9 monthsComplete panel
T = 12 monthsComplete panel
T = 18 monthsComplete panel
T = 24 monthsComplete panel
T = 36 monthsComplete panel (commitment)

6.2 Accelerated — 40 °C ± 2 °C / 75% RH ± 5% RH

Time PointTests Performed
T = 0 monthsComplete panel
T = 3 monthsComplete panel
T = 6 monthsComplete panel

7. Test Parameters & Acceptance Criteria

ParameterMethodAcceptance CriterionReference
AppearanceVisual inspectionOff-white opaque #00 capsules; no defects, chips, or moisture damage.QNHP §3.3.1
IdentificationHPLC, ion chromatographyRetention time corresponds to magnesium glycinate reference standard ± 5%.USP <197>
Assay (Mg content)HPLC, validated90.0% – 110.0% of label claim (300 mg elemental Mg).ICH Q1A(R2) §2.2.6
Related substancesHPLC, related substancesIndividual unspecified ≤ 0.2%; total ≤ 1.0%.ICH Q3B(R2)
DisintegrationUSP <701>Not more than 30 minutes in purified water at 37 °C.USP <701>
Weight variationUSP <2091>Individual ± 7.5% of mean fill weight.USP <2091>
Loss on dryingUSP <731>Not more than 5.0% w/w.USP <731>
Microbial enumerationUSP <2021>TAMC ≤ 10⁴ CFU/g; TYMC ≤ 10² CFU/g; absence of E. coli, Salmonella, S. aureus.USP <2021>, <2022>
Note All analytical procedures are stability-indicating and validated per ICH Q2(R1).
Doc SAMPLE-VTL-2026-SP-001 v1.0 Page 2 of 3 · StabilityForge™ Sample Output Status Approved · 2025-04-10
Document 01 · Continued

8. Statistical Evaluation

Quantitative stability attributes (assay, total related substances, loss on drying) will be evaluated per ICH Q1E §2.5 using linear regression of attribute against time, with the 95% one-sided confidence limit used to estimate the retest period/shelf life. Poolability of batches will be assessed using analysis of covariance (ANCOVA) with a significance level of 0.25. Where the data show little degradation and variability, formal statistical analysis may be omitted with documented justification per ICH Q1E §2.3.

9. Out-of-Specification (OOS) Procedure

Any individual result falling outside the acceptance criterion shall trigger an OOS investigation per Site Master File SOP-QA-007. Confirmed OOS results at the accelerated condition, or any "significant change" as defined in ICH Q1A(R2) §2.1.7.2 (5% assay loss from initial; any specified degradant exceeding its acceptance criterion; failure to meet dissolution / disintegration; physical change such as phase separation or capsule integrity; or pH failure where applicable), shall trigger initiation of intermediate testing at 30 °C ± 2 °C / 65% RH ± 5% RH and root-cause analysis prior to release of subsequent batches.

10. Reporting

Interim stability reports will be issued at each annual time point (T = 12, 24, 36 months) and made available to Health Canada upon request. The final stability report will be issued upon completion of the long-term study or upon achievement of the proposed shelf-life claim, whichever occurs first, in accordance with NHPR §46.

11. References

Prepared By
QA Manager · 2025-04-10
Reviewed By
QC Manager · 2025-04-10
Approved By
Head of Quality · 2025-04-10
Doc SAMPLE-VTL-2026-SP-001 v1.0 Page 3 of 3 · End of Protocol Status Approved · 2025-04-10
Document 02 · Stability Time-Point Report · Certificate of Compliance

Vitality+ Magnesium Glycinate 300 mg

T = 12 MONTHS · LONG-TERM (25 °C / 60% RH)
Report NumberSAMPLE-VTL-2026-SP-001-R-005
Protocol ReferenceSAMPLE-VTL-2026-SP-001 · v1.0
ProjectVTL-2026 — Vitality+ Magnesium Line
ProductVitality+ Magnesium Glycinate 300 mg
NPN: SAMPLE-80012345
Test Date2026-04-15
Time PointT = 12 months
Storage ConditionLong-Term · 25 °C ± 2 °C / 60% RH ± 5%
StatusFinal
Tester / AnalystLab Analyst (Sample)
Reviewer / QCQC Manager (Sample)

1. Scope of Report

This time-point stability report documents the analytical results obtained from 3 primary batches of Vitality+ Magnesium Glycinate 300 mg held at long-term storage condition (25 °C ± 2 °C / 60% RH ± 5% RH) for 12 months in accordance with the testing schedule defined in stability protocol SAMPLE-VTL-2026-SP-001 (v1.0). Results are evaluated against the predefined acceptance criteria from §7 of the protocol, derived from ICH Q1A(R2), ICH Q3B(R2), and the Health Canada Quality of Natural Health Products Guide.

2. Batches Tested

Batch / LotManufacture DatePassFailPendingVerdict
LOT-VTL-A0012025-04-12800CONFORMING
LOT-VTL-A0022025-04-12800CONFORMING
LOT-VTL-A0032025-04-13800CONFORMING

3. Test Results vs. Acceptance Criteria

Batch LOT-VTL-A001 · Mfg: 2025-04-12

ParameterAcceptance CriterionResultVerdictNotes
AppearanceOff-white opaque #00 capsulesOff-white opaque, no defectsPASS
IdentificationRT corresponds to reference ± 5%RT = 4.31 min (ref 4.30 min)PASS
Assay (Mg)90.0% – 110.0% LC99.8%PASS
Related substancesIndiv ≤ 0.2%; total ≤ 1.0%Max 0.06%; total 0.12%PASS
DisintegrationNMT 30 min8 minPASS
Weight variationIndiv ± 7.5% of mean± 1.7%PASS
Loss on dryingNMT 5.0% w/w3.1%PASS
Microbial enum.TAMC ≤ 10⁴, TYMC ≤ 10²TAMC < 10² CFU/gPASSPathogens absent

Batch LOT-VTL-A002 · Mfg: 2025-04-12

ParameterAcceptance CriterionResultVerdictNotes
AppearanceOff-white opaque #00 capsulesOff-white opaque, no defectsPASS
IdentificationRT corresponds to reference ± 5%RT = 4.30 minPASS
Assay (Mg)90.0% – 110.0% LC99.4%PASS
Related substancesIndiv ≤ 0.2%; total ≤ 1.0%Max 0.05%; total 0.10%PASS
DisintegrationNMT 30 min9 minPASS
Weight variationIndiv ± 7.5% of mean± 1.9%PASS
Loss on dryingNMT 5.0% w/w3.2%PASS
Microbial enum.TAMC ≤ 10⁴, TYMC ≤ 10²TAMC < 10² CFU/gPASS
Doc SAMPLE-VTL-2026-SP-001-R-005 Page 1 of 2 · StabilityForge™ Sample Output Status Final · 2026-04-15
Document 02 · Continued

Batch LOT-VTL-A003 · Mfg: 2025-04-13

ParameterAcceptance CriterionResultVerdictNotes
AppearanceOff-white opaque #00 capsulesOff-white opaque, no defectsPASS
IdentificationRT corresponds to reference ± 5%RT = 4.32 minPASS
Assay (Mg)90.0% – 110.0% LC99.1%PASS
Related substancesIndiv ≤ 0.2%; total ≤ 1.0%Max 0.07%; total 0.14%PASS
DisintegrationNMT 30 min8 minPASS
Weight variationIndiv ± 7.5% of mean± 1.5%PASS
Loss on dryingNMT 5.0% w/w3.0%PASS
Microbial enum.TAMC ≤ 10⁴, TYMC ≤ 10²TAMC < 10² CFU/gPASS

4. Overall Conclusion

Conforming — Expiry Justified Through T = 12 Months

All test results obtained at the T = 12 month time point under long-term storage (25 °C ± 2 °C / 60% RH ± 5% RH) for batches LOT-VTL-A001, LOT-VTL-A002, and LOT-VTL-A003 meet the predefined acceptance criteria established in protocol SAMPLE-VTL-2026-SP-001. 24 of 24 parameters across the three batches pass.

Based on the earliest manufacturing date in this study (2025-04-12) and the proposed shelf life of 24 months, the calculated expiry date is 2027-04-12. The proposed expiry date of 24 months for Vitality+ Magnesium Glycinate 300 mg continues to be supported by stability data at this interim time point.

The study will continue per the protocol schedule, with the next long-term time point scheduled for T = 18 months (2026-10-15).

5. Regulatory References

Tested By
Lab Analyst · 2026-04-15
Reviewed By
QC Manager · 2026-04-15
Approved By
Head of Quality · 2026-04-15
Doc SAMPLE-VTL-2026-SP-001-R-005 Page 2 of 2 · End of Time-Point Report Status Final · 2026-04-15
Document 03 · Final Stability Report · Expiry Justification

Vitality+ Magnesium Glycinate 300 mg

FINAL · T = 24 MONTHS · EXPIRY CLAIM DEFENDED
Report NumberSAMPLE-VTL-2026-SP-001-FSR-001
Protocol ReferenceSAMPLE-VTL-2026-SP-001 · v1.0
Issue Date2027-05-02
StatusFinal
ProductVitality+ Magnesium Glycinate 300 mg
NPN: SAMPLE-80012345
Shelf-Life Claim24 months
Study Period2025-04-12 to 2027-04-13
Climate ZoneII (Canadian market)

1. Executive Summary

This Final Stability Report presents the consolidated data from the long-term and accelerated stability studies conducted on three primary batches of Vitality+ Magnesium Glycinate 300 mg in accordance with stability protocol SAMPLE-VTL-2026-SP-001 (v1.0). The proposed shelf-life claim of 24 months under the labeled storage conditions ("Store between 15–30 °C, protect from moisture and light") is supported by the data presented herein and is justified in accordance with ICH Q1A(R2), ICH Q1E, and Health Canada NHPR (SOR/2003-196) §44–46.

2. Long-Term Assay Trend Analysis (25 °C / 60% RH)

Time PointLOT-A001 (%)LOT-A002 (%)LOT-A003 (%)Mean (%)Verdict
T = 0101.4100.799.8100.6PASS
T = 3101.1100.599.7100.4PASS
T = 6100.6100.099.5100.0PASS
T = 9100.299.799.399.7PASS
T = 1299.899.499.199.4PASS
T = 1898.998.598.098.5PASS
T = 2497.997.496.897.4PASS

Observation: Mean assay decreased from 100.6% at T = 0 to 97.4% at T = 24 months, a total decline of 3.2 percentage points over 24 months. This is well within the acceptance criterion of 90.0%–110.0% of label claim and shows no significant change per ICH Q1A(R2) §2.1.7.2.

3. Related Substances Trend (Total Degradants)

Time PointLOT-A001 (%)LOT-A002 (%)LOT-A003 (%)Limit (%)Verdict
T = 00.080.060.09≤ 1.0PASS
T = 120.120.100.14≤ 1.0PASS
T = 240.180.160.21≤ 1.0PASS

Observation: Total related substances increased from approximately 0.08% at release to 0.18% at T = 24 months. The maximum value observed across all batches and time points (0.21%) remains well below the acceptance limit of 1.0% total.

4. Accelerated Conditions Summary (40 °C / 75% RH)

Time PointMean Assay (%)Mean Total RS (%)Disintegration (min)Verdict
T = 0100.60.087PASS
T = 398.80.189PASS
T = 696.60.3011PASS

No "significant change" per ICH Q1A(R2) §2.1.7.2 was observed at the accelerated condition (assay decline < 5%, all attributes within criteria). Intermediate testing at 30 °C / 65% RH was therefore not triggered.

Doc SAMPLE-VTL-2026-SP-001-FSR-001 Page 1 of 2 · StabilityForge™ Sample Output Status Final · 2027-05-02
Document 03 · Continued

5. Statistical Evaluation

Per ICH Q1E §2.5, linear regression of mean assay against time was performed for each batch and for the pooled dataset. Slopes were: LOT-A001 = −0.148 %/month; LOT-A002 = −0.139 %/month; LOT-A003 = −0.125 %/month. Pooled slope: −0.137 %/month. Poolability assessed via ANCOVA at α = 0.25 confirms slopes and intercepts are statistically indistinguishable, justifying pooled analysis.

The 95% one-sided lower confidence limit of the pooled regression intersects the lower specification limit (90.0% LC) at 52 months, providing substantial margin beyond the proposed 24-month shelf-life claim.

6. Photostability Summary (ICH Q1B)

Photostability testing conducted on LOT-VTL-A001 per ICH Q1B confirmatory design (Option 2): integrated near-UV (320–400 nm) plus cool white fluorescent at 1.2 million lux-hours and 200 watt-hours/m² UV. Assay: 100.8% (light-exposed) vs 101.4% (dark control), Δ = 0.6% — within method variability. Related substances: 0.09% vs 0.08%. No photodegradation of concern. The opaque/amber HDPE primary container provides adequate light protection.

7. Conclusion & Expiry Justification

Shelf-Life Of 24 Months Justified — Approved For Release

All test results obtained through T = 24 months under long-term storage conditions (25 °C ± 2 °C / 60% RH ± 5% RH) for three primary batches of Vitality+ Magnesium Glycinate 300 mg meet the predefined acceptance criteria established in protocol SAMPLE-VTL-2026-SP-001. No "significant change" was observed at the accelerated condition. Statistical evaluation per ICH Q1E §2.5 supports a shelf life substantially exceeding 24 months.

The proposed shelf life of 24 months for Vitality+ Magnesium Glycinate 300 mg under the labeled storage condition "Store between 15–30 °C, protect from moisture and light" is hereby justified by the stability data presented in this report, in accordance with ICH Q1A(R2), ICH Q1E, Health Canada QNHP Guide v2.0, and NHPR (SOR/2003-196) §44–46.

Recommended product expiry: 24 months from manufacture under the labeled storage conditions.

8. Commitments

The manufacturer commits to: (a) continued long-term stability monitoring through T = 36 months on the three primary batches per protocol §6.1; (b) annual stability reporting to internal QA review through year three; (c) initiation of stability testing on the first three commercial-scale production batches per ICH Q1A(R2) §2.1.3.2.

Prepared By
QA Manager · 2027-05-02
Reviewed By
RA Director · 2027-05-02
Approved By
Head of Quality · 2027-05-02
Doc SAMPLE-VTL-2026-SP-001-FSR-001 Page 2 of 2 · End of Final Stability Report Status Final · 2027-05-02
Document 04 · Inspection Response Memo · GMP Documentation

Stability Documentation Response

HEALTH CANADA SITE INSPECTION · ON-SITE REQUEST
TO:
Health Canada NHPD Site Inspector (Sample Scenario)
FROM:
QA Manager · Sample NHP Manufacturer Inc.
DATE:
2026-06-12 · 10:43 EDT
RE:
Stability documentation for NPN SAMPLE-80012345 (Vitality+ Magnesium Glycinate 300 mg)

"Please provide the current stability protocol and most recent time-point report supporting the 24-month expiry claim for NPN SAMPLE-80012345. Include version control documentation and any related deviations or OOS investigations."

Response Timeline & Documents Provided

10:43:00 Step 1 · Request Received Inspector observation logged. Documentation lookup initiated in StabilityForge under project VTL-2026.
10:43:18 Step 2 · Protocol Retrieved Stability protocol SAMPLE-VTL-2026-SP-001 (v1.0, Approved 2025-04-10) located. Full revision history available; v1.0 is the only version (no revisions made since approval). Document retrieved with all 11 sections, signature block, and regulatory citations intact.
10:43:31 Step 3 · Time-Point Reports Retrieved Five time-point reports retrieved: T = 0 (release), T = 3, T = 6, T = 9, T = 12 months. Most recent: SAMPLE-VTL-2026-SP-001-R-005 (T = 12, completed 2026-04-15). All reports include batch-level results, pass/fail evaluation against the protocol's acceptance criteria, and signed conclusion statements.
10:43:42 Step 4 · Deviation / OOS Review Deviation register cross-referenced for this NPN. No OOS results, no deviations, no investigations open or closed against this stability program.
10:43:56 Step 5 · Documents Compiled For Inspector Documents printed and provided. Total elapsed time from request to documents in hand: 56 seconds.

Documents Provided

Document IDDescriptionVersionStatus
SAMPLE-VTL-2026-SP-001Stability Protocol — Vitality+ Magnesium Glycinate 300 mgv1.0Approved
SAMPLE-VTL-2026-SP-001-R-001Time-Point Report — T = 0 months (release/baseline)v1.0Final
SAMPLE-VTL-2026-SP-001-R-002Time-Point Report — T = 3 monthsv1.0Final
SAMPLE-VTL-2026-SP-001-R-003Time-Point Report — T = 6 monthsv1.0Final
SAMPLE-VTL-2026-SP-001-R-004Time-Point Report — T = 9 monthsv1.0Final
SAMPLE-VTL-2026-SP-001-R-005Time-Point Report — T = 12 months (most recent)v1.0Final
Audit-Readiness Note All documents above were generated by StabilityForge as part of routine stability operations. Retrieval time, version traceability, and acceptance-criteria pass/fail evaluation are byproducts of the standard workflow — no special audit preparation was required.
Response Prepared By
QA Manager · 2026-06-12
Verified By
Head of Quality · 2026-06-12
Submitted To Inspector
Time: 10:43 EDT
Doc SAMPLE-RESPONSE-MEMO-2026-001 Page 1 of 1 · StabilityForge™ Sample Output Status Final · 2026-06-12
Document 05 · Operational Comparison

The Same Scenario, Two Outcomes.

Five real audit moments that decide whether a stability program survives inspection or generates findings. Same product, same data, same regulatory scrutiny — different operational systems.

Without StabilityForge

Word + Excel + Email + Shared Drives
Inspector asks for the current stability protocol.
QA staff searches three shared drives, an email thread, and the previous coordinator's archive folder. Finds v1.0, v1.0-final, v1.0-final-FINAL, and v1.0-revised-Jan2026 — none clearly the canonical version.
⏱ 22 MIN
Inspector asks for the most recent T = 12 report.
Lab results are in Excel on the analyst's laptop. The pass/fail evaluation was done from memory by the QA manager and never formally documented. The "report" is reconstructed live in front of the inspector.
⏱ 47 MIN
Inspector asks how the 24-month expiry was justified.
The justification was written during submission week in 2023 and lives in a Word doc on a former colleague's drive. Retrieval requires IT involvement.
⏱ NEXT DAY
Stability coordinator resigned 3 weeks ago.
Replacement is mid-onboarding. Critical institutional knowledge — including which lots are at which time point, and which results are still pending — exists primarily in the departed coordinator's head.
⏱ 60-DAY RECOVERY
NHPD submission requires updated stability data package.
Two QA staff dedicate one full week to compiling protocol + results + justification from scattered sources. Submission delayed by 3 weeks beyond planned launch window.
⏱ 5 WORK-DAYS

With StabilityForge

Single Auto-Numbered, Version-Controlled Workspace
Inspector asks for the current stability protocol.
QA opens project VTL-2026 in StabilityForge. Protocol SAMPLE-VTL-2026-SP-001 v1.0 (Approved) appears. Full version history available — only v1.0 exists.
⏱ 18 SECONDS
Inspector asks for the most recent T = 12 report.
Report SAMPLE-VTL-2026-SP-001-R-005 opens with all 24 results auto-evaluated against the protocol's acceptance criteria. Pass/fail verdicts color-coded. Conclusion auto-generated.
⏱ 13 SECONDS
Inspector asks how the 24-month expiry was justified.
Final Stability Report SAMPLE-VTL-2026-SP-001-FSR-001 displays the trend analysis, regression statistics, and signed expiry justification. ICH Q1E citation embedded.
⏱ 24 SECONDS
Stability coordinator resigned 3 weeks ago.
Replacement opens StabilityForge. Every project, every protocol, every time-point report, every signature, every revision is documented and findable. The institutional memory IS the system.
⏱ DAY 1 PRODUCTIVE
NHPD submission requires updated stability data package.
Export PDFs of the protocol, all time-point reports, and the final stability report. Compilation takes the time it takes to download files. Submission filed on schedule.
⏱ 18 MINUTES
The product is the same. The data is the same. The system decides the audit outcome.
Doc SAMPLE-COMPARISON-2026-001 Page 1 of 1 · StabilityForge™ Sample Output Status Reference Document
The Next Step

What you've just reviewed.

Five documents. One operational chain. Every artifact generated from a single project workspace, version-controlled, ICH-cited inline, and audit-defensible by design. This is what StabilityForge produces in routine operations — not under audit pressure.

You Just Walked Through

  • A complete ICH Q1A(R2)-aligned stability protocol with 11 mandatory sections
  • An interim T = 12 month time-point report with auto-evaluated pass/fail results
  • A final stability report with statistical analysis and expiry justification
  • A documented inspector response with sub-60-second retrieval timeline
  • A side-by-side of audit outcomes with and without operational system support

Three Ways To Move Forward

Victory Hour Multimedia Inc. Windsor, Ontario, Canada
stabilityforge.ca · audit@stabilityforge.ca

This Document Sample Proof Pack v1.0 · 2026
Watermarked SAMPLE · Not for regulatory submission
10%
Non-Negotiableof all Victory Hour
proceeds fight world hunger
#ClaudizeIt
Page 01 / 02
SF
StabilityForge™ · Privacy & Security Brief

Where Your Stability Data Lives.

Document Brief v1.0 · 2026
Owner Victory Hour Multimedia
Review Annual / on change
Your stability data never leaves your browser by default.
StabilityForge inverts the typical SaaS data model. There is no multi-tenant database. There is no server-side data store. There is no cloud account to breach. Your regulated formulations, batch results, and stability conclusions live in your browser's local storage and are exported only when you explicitly choose to do so. This brief documents the architecture, sub-processors, compliance framework alignment, and deployment options for your security review.

Four Security Commitments

Client-Side By Default

All project, protocol, and stability report data is stored in your browser's localStorage. No backend database. No remote storage. Clearing your browser data clears your StabilityForge data.

Zero Outbound Transmission

The application is a single HTML file fetched once from Cloudflare's CDN. After load, no data leaves your device unless you explicitly invoke the optional AI Narrative generator.

Anonymized AI Calls (Opt-In)

The optional AI Narrative routes through a Cloudflare Worker to Anthropic's API. Anthropic does not train on API data per commercial terms. Prompts contain only the product context you authorize.

Enterprise Deployment Options

Self-hosted, air-gapped, and validated (IQ/OQ/PQ) deployments available for environments requiring 21 CFR Part 11 or GAMP 5 alignment.

Architecture & Data Flow

Default Operation · Zero Outbound
Cloudflare Pages CDN
Static HTML, CSS, JS. No database. No backend logic. SOC 2 Type II, ISO 27001.
Source of application
Your Browser
Application runs entirely on your device. All stability data written to and read from localStorage.
Runtime + storage
Optional AI Narrative · Explicit Opt-In
Only When You Click "Generate"
Cloudflare Worker
Routes the authorized prompt to Anthropic. No request payload retention.
No Training Use
Anthropic Claude API
Processes prompt synchronously, returns narrative. Not used for model training per commercial terms.

Data Flow Table

Data TypeWhere It LivesOutbound?Retention
Project & protocol metadataBrowser localStorageNoUntil cleared by user
Test results & batch dataBrowser localStorageNoUntil cleared by user
Stability reports & conclusionsBrowser localStorageNoUntil cleared by user
AI Narrative promptsCloudflare Worker → Anthropic APIOnly if invokedNot retained by Victory Hour
Analytics / telemetryNot collected
Cookies / tracking pixelsNot set
Login credentials / accountsNot implemented
Page 02 / 02
SF
StabilityForge™ · Privacy & Security Brief · Continued

Sub-Processors, Compliance, Deployment.

Document Brief v1.0 · 2026
Contact security@stabilityforge.ca
Response < 24 hours

Sub-Processors (Complete List)

Sub-ProcessorPurposeCertificationsData Shared
Cloudflare, Inc.Static asset CDN, DNS, edge Workers (AI proxy)SOC 2 Type II · ISO 27001 · PCI DSSNone at rest; transient routing only
Anthropic, PBCAI Narrative generation (opt-in feature only)SOC 2 Type IIOnly the prompt content you authorize; not used for model training per commercial terms
Google LLCWeb font CSS (Bebas Neue, Barlow Condensed)SOC 2 · ISO 27001Font CSS request only; can be self-hosted on Enterprise tier

No other sub-processors. Any future additions will be communicated 30 days in advance with right-to-opt-out.

What We Do Not Do

No multi-tenant databaseThere is no central database holding customer formulations. None to query, leak, or breach.
No training on customer dataOptional AI calls route through Anthropic API; commercial terms exclude training use.
No data sale or sharingCustomer data is never sold, licensed, or shared with third parties under any circumstance.
No telemetry / analyticsNo tracking pixels, no third-party analytics scripts, no behavior telemetry.
No support backdoorVictory Hour staff cannot access your in-browser data. Support is consultative only.
No background syncThe app does not phone home, check for updates silently, or transmit usage data.

Compliance Framework Alignment

PIPEDA (Canada) GDPR Art. 25 GAMP 5 Cat. 4 21 CFR Part 11* ISO 27001 SOC 2 Type II

Architecture aligned to data minimization, purpose limitation, and storage limitation by design. *21 CFR Part 11 (electronic records & signatures) addressable via Enterprise tier with audit trail module.

Data Lifecycle

CreationUser input in browser
StorageDevice localStorage
BackupUser-initiated CSV / HTML export
DeletionIn-app delete or clear browser data
Retention (our side)Zero

Deployment Options

OptionOutbound Risk
Browser-Local
Standard tier · default
Zero (unless AI invoked)
Managed Cloudflare
Professional tier
Static delivery + opt-in AI
Self-Hosted
Customer infrastructure
Customer-controlled
Air-Gapped
Offline workstation
None (no internet)
Validated Enterprise
IQ/OQ/PQ included
Per customer architecture

Right To Access, Portability & Deletion

Your data is fully portable at all times. Built-in mechanisms: CSV export of all projects, protocols, and reports; HTML export of individual protocol and time-point report documents; direct localStorage access via browser developer tools (your data, your access, always). Deletion is immediate and complete — clear browser data or use the in-app delete functions. Because Victory Hour does not retain customer data on its infrastructure, there is no parallel deletion request required on our side.

Incident Response & Coordinated Disclosure

Contact
security@stabilityforge.ca
Acknowledgment
Within 24 hours
Assessment
Within 72 hours
Disclosure
Coordinated per industry standard; public advisory if confirmed
Scope
Static application code · Cloudflare Worker proxy · sub-processor incidents that materially affect customers

Cleared by your security team? Book the assessment.

20-Minute Audit Readiness Assessment We review your stability documentation chain, produce a gap report you keep regardless of outcome. Security review questions welcome — submit to security@stabilityforge.ca for a written response within 48 hours.
Book Assessment