

The increasing adoption of Artificial Intelligence (AI) in drug discovery and development can fundamentally revolutionize drug safety functions. However, healthcare's highly regulated environment demands more than generic one-size-fits-all governance approaches.
In this two-part blog, Marie Flanagan, Regulatory and AI Governance Lead, IQVIA Safety Technologies, explores how IQVIA's deployment of AI governance into pharmacovigilance (PV) systems has valuable lessons for pharma companies working in this complex environment.
Part 2 takes a look at real world data gleaned from extensive field testing conducted with customers, and the key takeaways from that data. Navigating the evolving global regulatory landscape, retaining the human factor in AI governance, and looking at the road forward are also addressed as the blog concludes.
Part 1 can be found here
As the saying goes, a picture is worth a thousand words, but in this case Figure 4 below shows much more than that. Mass-scale testing from April to August 2025 demonstrates the overall governance approach, with effective oversight enhancing rather than slowing performance.
Figure 4: IVP AI Assistant - April to August 2025 initial testing results
Boiling down all the data from early testing, here are three key takeaways:
1. Care Must Be Taken When Interpreting Confidence Scores
2. Traditional Evaluation Metrics Fall Short
3. Trust Must Be Established In, Not Bolted On
The global regulatory landscape for healthcare AI continues to evolve quickly. The EU AI Act brings with it certain healthcare specifications and January 2025 draft FDA guidelines emphasize validation in settings of intended use and lifecycle monitoring. IQVIA's forward-looking regulatory engagement included the contribution of 17 subject matter experts to the development of FDA guidance, showing value from industry engagement in shaping frameworks rather than responding after publication.
AI governance is more of a people challenge in the end. Success is about meticulous alignment between business, compliance, and technical teams. Business teams must prepare organizations through redesigned workflows rather than automating current ones, having clear use cases and success criteria, and pushing change management. Compliance teams define acceptable levels of risk, enable regulatory harmonization geographically, monitor changing requirements and set effective escalation processes. Technical teams implement secure architecture, enable guardrails and traceability, maintain model performance and security, and construct effective feedback loops with business processes.
Organizations that are exploring similar implementations must address critical questions:
IQVIA continues to lead and prove that successful AI governance within regulated domains requires more than technical expertise checkboxes or technical eminence. It requires deep domain expertise, constant multi-disciplinary partnerships, and unwavering commitment to the formation of trust through transparency and proven performance.
Pharma's AI adoption will be measured, not by algorithmic sophistication or rate of uptake, but by the robustness of governance systems that ensure these technologies deliver on their full potential: better patient outcomes while maintaining the utmost safety standards. Firms committing to strong governance systems today, borrowing from the experiences of IQVIA but being context-specific, will be the ones to finally realize AI's transformative potential. It is an investment that requires waiting, but long-term dividends are worth the effort. As regulatory landscapes evolve and artificial intelligence technologies continue to advance, the principles illustrated – security by design, traceability for transparency, human oversight integration and continuous monitoring – will remain valid as regulating technologies and regulations evolve.
The destiny of AI in drug safety does not depend on an urge for technological progress, but rather on industry foresight and caution employing governance frameworks that win and maintain the trust of patients, regulators and healthcare professionals globally.
In closing, I leave you with an overview of what enterprises must demand from AI providers to ensure their tools meet compliance and safety standards: