Before a contract is signed, a sponsor should share everything a CRO needs to price and staff the study accurately, and very little beyond that. In practice, that means a protocol synopsis or draft protocol with the schedule of assessments, clear operational assumptions, the target timeline, the regulatory status of the program, and a summary of the safety profile, all under a confidentiality agreement. Detailed manufacturing information, full nonclinical reports, financial data, and plans for other programs can usually wait until after award.
Why does the information you share matter so much?
A CRO prices the study it can see. When key details are missing, each CRO fills the gap with its own assumptions, and proposals stop being comparable. Those assumptions often return after award as change orders. Sharing too much carries a different risk: confidential information about your molecule, your strategy, or your finances travels to organizations you may never work with. The goal is a disciplined middle path, with each piece of information released when it is needed for a decision.
What should be in place before you share anything confidential?
A confidentiality agreement, often called a CDA or NDA, signed with each CRO before the RFP package goes out. Most sponsors use their own template, which avoids reviewing a different CRO form for every bidder. Pay attention to a few terms in particular: the permitted use, which should be limited to evaluating and proposing on your study; the duration of the confidentiality obligation; any residuals clause that would let the CRO use information retained in memory; and the obligation to return or destroy materials if the CRO is not selected.
What do CROs need in order to price the study?
A well-built RFP package usually contains:
A protocol synopsis or draft protocol, including the schedule of assessments
The target population and key eligibility criteria
Assumptions for countries, number of sites, enrollment, screen failure, and duration
The target timeline for first participant, last participant, and database lock
The scope of services you want priced, and the vendors you will contract directly
The regulatory status of the program, including IND status and recent agency feedback
A summary of the safety profile, often drawn from the investigator brochure
Your expectations for governance, reporting, and the proposal format
What can wait until after award?
The full investigator brochure, detailed chemistry, manufacturing, and controls information, complete nonclinical study reports, detailed financial information beyond confirmation that the study is funded, and anything about other programs in your pipeline. If a CRO asks for one of these during the bid, ask what decision it informs. Sometimes there is a good reason, such as drug supply logistics affecting the startup plan, and a targeted summary will meet the need.
How should you stage information across the selection?
Think in four steps. For initial outreach, a one-page, non-confidential overview is enough to confirm interest and capacity. With the RFP, share the confidential package under the CDA. At the bid defense, answer deeper questions and allow focused discussion of risks. After award, release the full documents the CRO needs for startup. Staging information this way protects confidentiality and keeps every bidder working from the same baseline at the same time.
How do you run a data room well?
Use one secure location with version control, so every CRO works from the current documents. Keep a single question-and-answer log and share every answer with all bidders, which keeps the process fair and prevents one CRO from pricing information the others never saw. Track who accessed what. When the selection ends, close access for CROs that were not selected and request written confirmation that materials have been returned or destroyed, as the CDA requires.
What about information the CROs share with you?
Confidentiality runs both ways. CRO proposals contain pricing, staffing models, and methods the CRO considers proprietary. Treat them with the same care you expect for your own information, limit circulation to the people evaluating the bids, and never share one CRO's proposal or pricing with another. Sponsors that handle proposals carefully earn more candid answers in the bid defense and in every future selection.
Keep reading: A CRO Due Diligence Checklist for Emerging Sponsors
