Clinical Research Organisation Agreement Template and Key Clauses (2026)

What is a CRO agreement, and when do you need one? A clinical research organisation (CRO) agreement is the contract under which a sponsor (usually a pharmaceutical, biotech or medical-device company) delegates some or all of the conduct of a clinical trial or bioavailability/bioequivalence study to a CRO. It sets out which trial tasks, duties and obligations the sponsor transfers to the CRO, the standards the CRO must follow, how data and safety reporting are handled, who owns the results and intellectual property, and how liability and indemnities are allocated. Because a clinical trial is highly regulated, the agreement sits on top of statutory duties, not instead of them. You need one whenever a sponsor uses an outside organisation to run any part of a trial, from site selection and monitoring to data management, regulatory submissions or the whole study. The agreement matters because the sponsor keeps overall accountability for the trial even when work is delegated, so it must be precise about exactly which regulated duties move to the CRO and which stay with the sponsor. In India, the rules changed recently: an amendment to the New Drugs and Clinical Trials Rules, 2019 introduced a dedicated regime for CROs, including a registration requirement, so the agreement now interacts with the CRO's own statutory obligations. This article is general guidance, not legal advice. Clinical-research regulation is complex and varies by jurisdiction, so have qualified regulatory and legal professionals review any CRO agreement. ## CRO agreement template Copy the block below and fill the bracketed fields. This is a framework; the detailed delegation sits in a schedule. ```

CLINICAL RESEARCH ORGANISATION (CRO) SERVICES AGREEMENT This Agreement is made on [DATE] BETWEEN: [SPONSOR NAME], [address] ("Sponsor") AND [CRO NAME], [registration details], [address] ("CRO") 1. SCOPE AND DELEGATED SERVICES The CRO will perform the services in Schedule 1 for the study "[protocol title / number]" ("Study"). Schedule 1 sets out, task by task, which sponsor duties are delegated to the CRO and which the Sponsor retains (the transfer-of-obligations / delegation log). 2. REGULATORY STATUS The CRO confirms it holds, and will maintain, the registrations and approvals required to perform the Services [including registration with the applicable regulatory authority], and will provide evidence on request. 3. STANDARDS AND COMPLIANCE The CRO will perform the Services in accordance with the protocol, applicable good clinical practice (GCP), and all applicable laws and regulatory requirements, and will notify the Sponsor of any non-compliance. 4. PROTOCOL AND CHANGES The CRO will follow the agreed protocol. Changes require the Sponsor's prior written approval and, where needed, regulatory and ethics-committee approval. 5. SAFETY AND PHARMACOVIGILANCE Responsibilities for adverse-event and serious-adverse-event recording, assessment and reporting within required timelines are allocated in Schedule 2, with ultimate reporting responsibility as the law requires. 6. DATA, RECORDS AND AUDIT The CRO will collect, manage and retain data and records as the protocol and law require, keep the trial master file, and allow the Sponsor and regulators to monitor, audit and inspect. 7. SUBJECT PROTECTION, CONSENT AND COMPENSATION The parties will ensure informed consent, ethics-committee oversight, and medical management and compensation for trial-related injury, with duties allocated as the applicable rules require. 8. CONFIDENTIALITY AND DATA PROTECTION Each party protects confidential information and processes personal and health data only as the law and the protocol allow. 9. INTELLECTUAL PROPERTY AND RESULTS All Study data, results and arising IP belong to the Sponsor. The CRO is granted only the rights needed to perform the Services. [Publication rules.] 10. LIABILITY AND INDEMNITY Each party indemnifies the other for loss caused by its own negligence or breach. The Sponsor [typically] indemnifies subjects for study-related injury not caused by CRO negligence; the CRO indemnifies for its own negligence. Insurance of [amounts] is maintained by [each party]. 11. TERM, TERMINATION AND TRANSITION This Agreement runs for the Study term. Either party may terminate for material breach or on notice. On termination, the CRO transfers all data, records and the trial master file to the Sponsor and supports an orderly handover. 12. GOVERNING LAW AND DISPUTES This Agreement is governed by the laws of [jurisdiction], with disputes subject to [arbitration seat / courts]. Signed for the Sponsor: __________ Signed for the CRO: __________ Name / title / date Name / title / date SCHEDULE 1 - Delegated services / transfer of obligations log SCHEDULE 2 - Safety reporting responsibilities and timelines

- **Regulatory status (clause 2).** Require the CRO to confirm and maintain the registrations it needs. In India, check the CRO's registration under the applicable rules and require a compliance undertaking.
- **Safety and pharmacovigilance (clause 5 and Schedule 2).** Adverse-event and serious-adverse-event reporting has strict timelines, and a gap here is a patient-safety and regulatory risk. Allocate each step precisely and name the party with ultimate reporting responsibility.
- **Data, records and the trial master file (clauses 6 and 11).** The sponsor must be able to monitor, audit and, on termination, take back all data and the trial master file. Weak transition terms can leave a sponsor unable to recover its own study data.
- **Liability and indemnity (clause 10).** Typically the sponsor indemnifies for study-related injury not caused by CRO negligence, while each party covers its own negligence. Match this to the compensation rules that apply and to each party's insurance. ## Common mistakes to avoid - No task-by-task delegation log, so it is unclear which regulated duties the CRO actually holds.
- Vague safety-reporting responsibilities, which is both a patient-safety and a regulatory risk.
- Weak data-transition terms, leaving the sponsor unable to recover data and the trial master file on termination.
- Not confirming the CRO's regulatory registration before work starts.
- Indemnity and insurance that do not line up with who actually bears study-related injury compensation. ## A note on jurisdiction and India's CRO rules Clinical-research regulation varies significantly by jurisdiction, and the CRO agreement has to be read with the local rules. In India, the conduct of clinical trials is governed by the New Drugs and Clinical Trials Rules, 2019 under the oversight of the Central Drugs Standard Control Organisation (CDSCO). A recent amendment introduced a dedicated regime for CROs, including a requirement that a CRO obtain registration from the central licensing authority before conducting clinical trials or bioavailability/bioequivalence studies, and it distinguishes the CRO's own obligations from the sponsor's, making CROs directly accountable under the rules. Sponsors are expected to engage registered CROs. Indian good clinical practice and Schedule Y have requirements, for example on ethics-committee composition and informed consent, that may differ from ICH E6, and CDSCO has been updating its GCP guidance, so confirm the current position. Outside India, trials follow other frameworks (for example ICH-GCP alongside national regulators in the UK, EU, Ireland, Singapore, Australia and the US), and registration, compensation and reporting rules differ. Treat the regulatory detail as varying by jurisdiction and confirm the current rules with regulatory counsel. Last verified October 2026, and specific rule details should be checked against the current rules. ## Where a contract workspace helps A CRO agreement allocates duties for one study, but across a sponsor's programme the delegation logs, safety-reporting matrices and indemnity terms have to stay consistent across studies and CROs, each proposed amendment has to be checked, and registrations and reporting timelines have to be tracked. Drafting, reviewing, tracking and governing a clinical research organisation agreement can live in one AI workspace tuned to how your programme runs, with the clauses linked so per-clause risk shows and compliance dates stay in view, while the regulatory review itself still belongs with qualified professionals. [Adira](https://adiralaw.com) is one tool built around that single-workspace idea for research contracts like a CRO agreement. This template and the regulatory notes are enough to understand a CRO agreement.