How do I manage protocol versions at the site?

A coordinator must ensure the site is always working from the current, approved protocol version (and current consent form). When an amendment is approved, the new version supersedes the old, and using a superseded version is a protocol deviation. So apply strict version control: a clear version/date on the protocol and each amendment, distribute only the current approved version to the team, and archive every version in the regulatory binder so you can show exactly what was in force at any point. As a PDF practice this is the same disciplined versioning used in any high-stakes document set, applied to the documents an auditor will scrutinise most.

How should CRFs be handled?

CRFs capture the study data, and accuracy and traceability are paramount. Where paper or PDF CRFs are used, structure them with clear named fields so the data is clean and attributable, and follow the study's data-management plan. Many trials use electronic data capture, but paper/PDF CRFs and worksheets still appear, and the coordinator ensures data is entered accurately and matches source documents (source-data verification). Whatever the medium, the data must be accurate, attributable, legible, contemporaneous, and original — the ALCOA principles auditors apply. Build fillable CRFs cleanly, and treat the data with the rigor a trial demands.

How do I keep the regulatory binder (ISF) audit-ready?

The Investigator Site File / regulatory binder is the site's file of record, and an auditor expects it complete, current, and organised. Keep it structured by the standard sections (protocol, approvals, consent versions, delegation log, training, correspondence, monitoring), with documents filed as they arrive and navigable so any item can be produced instantly. As PDFs, bookmark a large binder by section and keep version control rigorous — superseded documents archived, not discarded. A coordinator who can hand an auditor exactly the current document and its history in seconds is doing the job; a disorganised binder is where audit findings come from.

How do I protect participant confidentiality?

Participant data is highly sensitive and protected, so use coded identifiers rather than names where the protocol allows, store documents encrypted with access limited to the study team, transmit through secure channels, and redact identifying information — with true redaction that removes the underlying text — when sharing source documents (for example, for monitoring or queries) beyond those who need full identifiers. De-identification for any sharing or reporting must follow the protocol, ethics approval, and applicable privacy law. The combination of coded IDs, encryption, access control, and proper redaction protects participants and keeps the site compliant.

What about signatures on consent and site documents?

Informed consent must use the current approved version and capture the participant's (and where required, the person obtaining consent's) signature and date, archived per participant — this is among the most scrutinised parts of a trial. Many site documents (delegation logs, training records, some forms) also require signatures. Where electronic signatures are permitted by the sponsor and applicable rules, build documents as signable PDFs and capture signatures on screen; confirm what your study and regulations allow, since some documents have specific execution requirements. Whatever the method, the signed, dated, current-version document, properly archived, is what matters.

How long must site documents be retained?

Clinical-trial site documents have long, regulated retention periods set by the sponsor, regulations, and Good Clinical Practice — often many years after study completion, with the exact period specified by the applicable authorities. The regulatory binder must be retained complete and retrievable for that full period. Maintain a documented retention plan, keep records in a durable, access-controlled archive (archival PDF formats exist for exactly this durability), and do not dispose of anything before the required period. Confirm the specific retention obligations with your sponsor and regulatory function; this article covers handling the documents, not the retention rules.

Is it safe to use online tools for site documents?

Trial site documents contain participant data and confidential study information, so prefer a tool that processes files locally. ScoutMyTool builds forms, merges, bookmarks, redacts, encrypts, and converts to archival PDF entirely in your browser tab, so documents never leave your machine. Trial environments also have software-validation and data-integrity requirements — confirm any tool against your site's policies before using it in a regulated workflow. For participant or regulatory documents, local processing plus your site's sign-off is the safe path.

6 min read

PDF for clinical research coordinators: CRFs and protocols

By ScoutMyTool Editorial Team · Last updated: 2026-05-22

A clinical research coordinator lives at the document frontline of a trial: making sure the site uses the current protocol and consent version, keeping CRFs accurate and source-verified, and maintaining a regulatory binder an auditor could open at any moment. The cost of a slip — a superseded consent form, a disorganised binder — is a finding, or worse. This guide is the coordinator’s PDF workflow: version-controlling protocols and consents, handling CRFs and source documents, keeping the ISF audit-ready, and protecting participant confidentiality. It covers document handling; the trial conduct, consent process, and retention rules are governed by GCP, your protocol, ethics approval, and your sponsor and regulatory functions.

The site documents

Document	Role	PDF need
Protocol (+ amendments)	Study definition	Versioned; only current in use
Case report forms (CRFs)	Capture study data	Structured fields; clean data
Informed consent forms	Participant consent	Current version; signed; archived
Source documents	Verify CRF data	Searchable (OCR); secured
Regulatory binder / ISF	Site file of record	Complete, organised, navigable
Monitoring / visit logs	Trial-conduct evidence	Accurate, dated, retained

Step by step — site document discipline

Version-control protocols and consents. Clear version/date, only the current approved version in use, every version archived — the discipline detailed in clinical trial documentation.
Structure CRFs cleanly. Build fillable CRFs with named fields using the Fillable Form Builder (see adding form fields), following your data-management plan (ALCOA principles).
OCR and secure source documents. Make scanned source documents searchable and store them encrypted with Protect PDF; use coded identifiers.
Sign consents and logs. Capture signatures with Sign PDF where permitted; archive signed, dated, current-version documents per participant.
Keep the regulatory binder navigable. Assemble and bookmark the ISF by section with Merge PDF and Add Bookmarks so any item is producible instantly.
Protect confidentiality. Redact identifiers when sharing source docs with true redaction; follow the privacy practices in medical-record security.
Archive for the retention period. Durable, access-controlled storage (validate PDF/A where used — see PDF/A validation); confirm periods with your sponsor/regulatory function.

Clinical trial documentation: the broader trial-docs guide.
Medical-record security: protecting participant data.
Add fillable form fields: structured CRFs.
Real redaction: de-identification done properly.
Validate PDF/A: durable archival documents.
Fillable Form Builder: build CRFs in your browser.
All ScoutMyTool PDF tools: the full toolkit.

FAQ

How do I manage protocol versions at the site?: A coordinator must ensure the site is always working from the current, approved protocol version (and current consent form). When an amendment is approved, the new version supersedes the old, and using a superseded version is a protocol deviation. So apply strict version control: a clear version/date on the protocol and each amendment, distribute only the current approved version to the team, and archive every version in the regulatory binder so you can show exactly what was in force at any point. As a PDF practice this is the same disciplined versioning used in any high-stakes document set, applied to the documents an auditor will scrutinise most.
How should CRFs be handled?: CRFs capture the study data, and accuracy and traceability are paramount. Where paper or PDF CRFs are used, structure them with clear named fields so the data is clean and attributable, and follow the study's data-management plan. Many trials use electronic data capture, but paper/PDF CRFs and worksheets still appear, and the coordinator ensures data is entered accurately and matches source documents (source-data verification). Whatever the medium, the data must be accurate, attributable, legible, contemporaneous, and original — the ALCOA principles auditors apply. Build fillable CRFs cleanly, and treat the data with the rigor a trial demands.
How do I keep the regulatory binder (ISF) audit-ready?: The Investigator Site File / regulatory binder is the site's file of record, and an auditor expects it complete, current, and organised. Keep it structured by the standard sections (protocol, approvals, consent versions, delegation log, training, correspondence, monitoring), with documents filed as they arrive and navigable so any item can be produced instantly. As PDFs, bookmark a large binder by section and keep version control rigorous — superseded documents archived, not discarded. A coordinator who can hand an auditor exactly the current document and its history in seconds is doing the job; a disorganised binder is where audit findings come from.
How do I protect participant confidentiality?: Participant data is highly sensitive and protected, so use coded identifiers rather than names where the protocol allows, store documents encrypted with access limited to the study team, transmit through secure channels, and redact identifying information — with true redaction that removes the underlying text — when sharing source documents (for example, for monitoring or queries) beyond those who need full identifiers. De-identification for any sharing or reporting must follow the protocol, ethics approval, and applicable privacy law. The combination of coded IDs, encryption, access control, and proper redaction protects participants and keeps the site compliant.
What about signatures on consent and site documents?: Informed consent must use the current approved version and capture the participant's (and where required, the person obtaining consent's) signature and date, archived per participant — this is among the most scrutinised parts of a trial. Many site documents (delegation logs, training records, some forms) also require signatures. Where electronic signatures are permitted by the sponsor and applicable rules, build documents as signable PDFs and capture signatures on screen; confirm what your study and regulations allow, since some documents have specific execution requirements. Whatever the method, the signed, dated, current-version document, properly archived, is what matters.
How long must site documents be retained?: Clinical-trial site documents have long, regulated retention periods set by the sponsor, regulations, and Good Clinical Practice — often many years after study completion, with the exact period specified by the applicable authorities. The regulatory binder must be retained complete and retrievable for that full period. Maintain a documented retention plan, keep records in a durable, access-controlled archive (archival PDF formats exist for exactly this durability), and do not dispose of anything before the required period. Confirm the specific retention obligations with your sponsor and regulatory function; this article covers handling the documents, not the retention rules.
Is it safe to use online tools for site documents?: Trial site documents contain participant data and confidential study information, so prefer a tool that processes files locally. ScoutMyTool builds forms, merges, bookmarks, redacts, encrypts, and converts to archival PDF entirely in your browser tab, so documents never leave your machine. Trial environments also have software-validation and data-integrity requirements — confirm any tool against your site's policies before using it in a regulated workflow. For participant or regulatory documents, local processing plus your site's sign-off is the safe path.

Not regulatory or clinical advice. This article covers handling site documents as PDFs. Trial conduct, consent, data integrity, and retention are governed by GCP, your protocol, ethics approval, and your sponsor and regulatory functions.

Citations

Wikipedia — “Clinical trial,” on trial conduct and documentation. en.wikipedia.org/wiki/Clinical_trial
Wikipedia — “Good clinical practice,” the standard governing site documents and retention. en.wikipedia.org/wiki/Good_clinical_practice
Wikipedia — “Informed consent,” the consent requirement coordinators manage. en.wikipedia.org/wiki/Informed_consent

An audit-ready site, document by document

Build CRFs, bookmark the regulatory binder, redact, and encrypt with ScoutMyTool’s in-browser tools — participant and site documents never leave your machine.

Open the Fillable Form Builder →