GxP Sonar on Windows (test data; folder names partly blurred).
GXP SONAR
GxP Sonar is a portable Windows app that reviews folders of Excel workbooks and flags GxP data-integrity risks: formulas, VBA macros, protection, external links and hand-typed values where a formula should be. No admin rights, no installation: it runs with the employee's own permissions.
Read-only: GxP Sonar never modifies, saves or runs your files.
GxP Sonar on Windows (test data; folder names partly blurred).
Labs and quality teams rely on hundreds of Excel sheets full of calculations, macros and links. Reviewing them by hand for an audit or a validation takes days, and errors in a single cell or macro go unnoticed.
When to use it: before an audit, a validation or a migration.
A single .exe, no installation or services; uses the employee's permissions.
Never saves your files, runs macros or refreshes links.
Every finding with its risk, sheet and cell, or VBA module and line.
Grok Build, Codex, Claude, Gemini, Copilot Studio or an OpenAI-compatible service, on your own account.
Structure only, masked data or full data (the last one only with your consent).
A draft to review, in the language the analysis is run in: each file with its SHA-256 hash, app version and build date.
New in 0.2.0: review of each finding; a notice when a file had to be split for AI analysis; AI analysis of Word and PDF documents (Pro).
Open GxPSonar.exe and pick the folder. Only what you can already open is analysed.
Reviews each workbook on your PC and records every finding with its risk and exact location: sheet and cell, or VBA module and line. Nothing leaves the machine.
With your own AI engine, it explains the findings and compares the files with each other, in plain language with precise GxP terms.
| Structure only | Masked | Full data | |
|---|---|---|---|
| What the AI receives | Layout and formulas; no value analysis | Values replaced by placeholders | The real content |
| Consent | No | No | Yes, explicit |
| Best for | Reviewing formulas and structure | Linking files without seeing the data | Finding errors in the values |
The AI runs on the customer's own account; GxP Sonar adds no AI licences. Without AI, the analysis stays on your PC.
Seven built-in prompts for the AI analysis. Each one cites the clause it refers to, for guidance. They produce draft evidence for a person to review; they do not decide whether a sheet is fit for use.
| Prompt | What it checks | References (for guidance) |
|---|---|---|
| EUC inventory and classification | Apparent purpose, type, GxP use, proposed criticality and structure facts of the workbook, with questions for the key user | EU GMP Annex 11 §4.3; GAMP 5 2nd ed. App. S3, M4; PIC/S PI 041-1 §9.1.2 |
| GxP risk assessment of the sheet | Risk per sheet and critical function, by impact, probability and detectability | EU GMP Annex 11 §1; GAMP 5 2nd ed. Ch. 5, App. M3; PIC/S PI 041-1 §9.1.5–9.1.6 |
| Map of critical calculations | The calculation chain from inputs to the reported result, formula by formula with cell references | EU GMP Annex 11 §5, §4.7; 21 CFR 211.68(b); GAMP 5 App. S3 |
| Technical integrity of formulas | Errors, incomplete ranges, broken references, fixed values typed over formulas, circular references | EU GMP Annex 11 §5; PIC/S PI 041-1 §9; GAMP 5 App. S3 |
| Protection and access control | Locked cells, workbook and sheet protection, read-only settings | EU GMP Annex 11 §12; 21 CFR Part 11 §11.10(c), (d), (g); GAMP 5 App. O11 |
| ALCOA+ checklist for the file | The file against ALCOA+ (attributable, legible, contemporaneous, original, accurate, complete, consistent, enduring, available) | PIC/S PI 041-1; MHRA GXP Data Integrity Guidance (2018) |
| Findings summary and CAPA proposal | Findings ranked by risk, with proposed corrective and preventive actions (owner and date left to you) | GAMP 5 2nd ed. App. O5, M3; EU GMP Annex 11 §1, §11 |
GxP Sonar helps the owner of the files get ready before any audit. The AI can be wrong, so the review and the decision always stay with a person. It does not replace validation or the judgement of the responsible person.
Basic edition free; Pro (AI) features require a licence. Demo on request.
| GxP Sonar | |
|---|---|
| Status | Available (v0.2.0) · demo on request |
| Download | Download for Windows (zip, about 69 MB) · SHA-256 Basic edition free; Pro (AI) features require a licence. |
| Platform | Windows, portable .exe, no admin, no installation |
| Flyer | Download flyer (PDF, EN) · ES |
| Suite | Castellon.CH Suite flyer (PDF, EN) · ES |
| How to get it | Download (free Basic edition) · Request a Pro licence · Request a demo · Support: [email protected] |
Write to us to request a demo of GxP Sonar for your lab or quality team in Switzerland or the EU.
GxP Sonar helps review spreadsheets; it does not replace validation or the judgement of the responsible person, and does not by itself guarantee regulatory compliance. The AI can be wrong. Grok, Codex, Claude, Gemini, Copilot Studio, OpenAI and Excel are trademarks of their respective owners.
© Antonio Castellon · [email protected] · [email protected]