Glossary · Ethics and oversightUpdated October 15, 2026

What is a CRO (contract research organization)?

A contract research organization is a company that a trial sponsor hires to carry out some or all of the work of running a clinical trial, such as monitoring, data management, statistics, regulatory submissions or site management.

  • CRO in plain language
  • How it works in practice
  • Related terms

Free sandbox · No credit card · 21 CFR Part 11 aligned

Trial rolesCRO

Contract research organization

noun · clinical research

An organization to which a sponsor transfers one or more of its trial-related duties and functions under a written agreement.

Related terms

SponsorMonitorInvestigatorTransfer of obligationsVendor oversight

In short

  • A CRO performs trial tasks on behalf of the sponsor, the party that initiates and takes responsibility for the trial. Sponsors can be pharmaceutical or device companies, universities, hospitals, charities or individual investigators.
  • CROs may be full-service (most of the trial) or functional (for example only monitoring, data management or biostatistics). Some are specialised by therapeutic area or region.
  • In the US, regulation lets a sponsor transfer any or all of its obligations to a CRO, but the transfer must be in writing and, if partial, must describe each obligation. Obligations not described are treated as not transferred. Commentary and ICH guidance emphasise that the sponsor keeps oversight and ultimate responsibility for the trial.
  • Many small and academic studies run without a CRO, using self-serve software and in-house staff. The choice depends on skills, capacity and risk, not on trial size alone.

Explained

What a CRO actually does

Running a trial involves many specialist jobs: writing the protocol, getting ethics and regulatory approvals, selecting and training sites, building the database, monitoring data quality, managing safety reports, analysing the results and writing the study report. A sponsor with a small team or no clinical operations department can hire a CRO to do some of these. Large sponsors also use CROs to add capacity, reach new countries or run studies outside their core therapeutic areas.

The relationship is contractual. A master services agreement and a statement of work define which tasks the CRO owns, the timelines and the deliverables. That written description is more than administration: under US regulation (21 CFR 312.52, check the current text) a sponsor may transfer any or all of its obligations to a CRO, the transfer must be described in writing, anything not described is deemed not transferred, and a CRO that assumes an obligation is subject to the same regulatory action as a sponsor for failing to meet it.

Typical CRO services

Common services include project management; regulatory and ethics submissions; site identification, start-up and contracting; clinical monitoring, including source data verification and risk-based monitoring; EDC set-up and data management; pharmacovigilance and safety reporting; medical writing; and biostatistics and programming, including CDISC datasets. Some CROs supply their own technology, others work on the sponsor's systems.

Full-service versus functional service models

In a full-service model a single CRO runs most operational activities from start-up to close-out. In a functional service provider (FSP) model the sponsor buys specific functions, such as data management staff or monitors, and directs the work itself. A third pattern is a niche or regional CRO, for example one that focuses on a country or therapeutic area. See clinical trial software for regional CROs and best EDC for CRO small studies.

What a sponsor still owns

Hiring a CRO does not remove the sponsor's duty to make sure the trial is run to protocol and Good Clinical Practice. Sponsors typically perform vendor qualification, review the CRO's procedures, oversee key metrics (enrolment, query ageing, deviations, safety timelines) and audit when needed. They also keep the relationship with the IRB or ethics committee where the protocol requires it. The practical lesson is that oversight needs visibility into the data.

Sponsor oversight view of a CRO-run study (demo values)

Participants enrolled

142 / 200

Open queries > 14 days

9

Major deviations

3

Overdue SAE follow-ups

0

Site 001 data entry current96/100
Site 002 data entry current81/100
Site 003 data entry current58/100
Illustrative numbers only.

Deciding

CRO or in-house: how to think about it

FactorA CRO helps when...In-house can work when...
Team skillsYou lack monitoring, regulatory or biostatistics experienceYou have trained research coordinators and a statistician
Number of sites and countriesMany sites or several regulatory regionsA single site or a few sites in one country
TimelineYou need to scale up fastYou can work at the pace of a small team
BudgetThe study budget includes CRO feesFunding is limited and the design is simple
TechnologyYou want the CRO's systems and processesYou prefer to control a self-serve EDC yourself
OversightYou have capacity to oversee a vendorYou prefer direct control of every task

Many studies mix both: in-house operations with a CRO for monitoring or statistics.

Run your own study, or share it with your CRO

Build the study in the free Capture sandbox and invite roles with the access they need. No credit card.

Try Capture free

Technology

Choosing and sharing a data system with a CRO

One of the first questions in a sponsor-CRO relationship is whose system holds the data. If the CRO uses its own EDC, the sponsor depends on the CRO for access and on the contract for data ownership and export. If the sponsor owns the EDC, the CRO works within it, which makes oversight, portability and switching vendors easier. Either way, the contract should state who owns the data, when exports are delivered and how the audit trail is made available to inspectors. See clinical trial data ownership and portability.

Smaller sponsors have a third option: skip the full-service CRO and use self-serve software with a few specialist consultants. See clinical trial software without a CRO, EDC for independent trial sites and EDC for clinical trial sponsors. For CROs themselves, CRO EDC and EDC for independent CRO trials cover what an EDC should offer a CRO.

Whichever model you pick, look for role-based access so each party sees only what it needs, a field-level audit trail that shows who changed what, query management, by-site filtering for oversight reports, and clean exports. Those are the controls that let a sponsor oversee a vendor without having to take the vendor's word for it.

In Capture

A self-serve EDC for sponsors, with roles for everyone involved

Capture is a self-serve clinical trial platform: EDC, eCRF builder, ePRO, eConsent, randomization and monitoring workflows in one system with one audit trail. Researcher, site coordinator and admin roles keep access separate, site-level data filtering and exports support oversight across sites, and the free sandbox lets you test the whole study before you pay. You can start without an enterprise sales call.

  • Multi-site enrollment by QR code, site-level participant numbering.
  • Separate site coordinator portal.
  • Auto-queries from edit checks and field-level audit trail.
Clinical trial software without a CRO

Stage 1

Draft

Build and edit freely

Stage 2

Approved

Locked for live use

Stage 3

In the casebook

Only approved forms

Audit trail
  • SDV requirement changed on Systolic BP

    Data manager · Reason: critical safety value

  • Form approved: Vital Signs (VS) v2

    Study owner · Locked for live use

  • Answer changed: Weight 68.0 to 68.5 kg

    Site coordinator · Reason: transcription error

FAQ

Common questions

Something not covered here? Ask us directly.

What is a CRO in clinical research?

A contract research organization is a company that a trial sponsor contracts to perform some or all of the operational tasks of a trial, such as monitoring, data management, biostatistics, safety reporting or regulatory submissions.

What is the difference between a CRO and a sponsor?

The sponsor initiates the trial and is ultimately responsible for it. The CRO works for the sponsor under a written agreement and performs the tasks the sponsor assigns.

Do all clinical trials need a CRO?

No. Many academic, investigator-initiated and small studies are run in-house with self-serve software. A CRO is useful when the sponsor lacks the capacity or expertise, or the study spans many sites or countries.

What is the difference between a full-service CRO and an FSP?

A full-service CRO runs most of the trial. A functional service provider supplies specific functions, such as data management staff or monitors, which the sponsor directs.

Does the sponsor remain responsible when using a CRO?

US regulation allows the sponsor to transfer obligations to a CRO in writing, and obligations not described are not transferred. Guidance such as ICH GCP also expects the sponsor to oversee the CRO and keep ultimate responsibility for trial quality.

Who owns the data in a CRO-run trial?

The contract should say. Sponsors usually own the study data; the agreement should cover access, exports, the audit trail and what happens at close-out.

Can I run a trial without a CRO on Capture?

Yes. Capture is self-serve: build the study, test it in the free sandbox and go live when ready. You can still work with a CRO or consultants by giving them roles in the study.

Own your study data from day one

Free sandbox with every feature. No credit card, no sales call.

Try Capture free