In This Article
- Executive Summary
- The Data Assets Behind Access Strategy, and What Each One Cannot Tell You
- Claims Data: Lag, Capture, and the Questions It Cannot Answer
- Formulary and Plan Data: Many Sources, Different Refresh Rates
- Gross-to-Net: Reconciliation Dressed as Measurement
- Government Pricing: Where a Data Defect Becomes Legal Exposure
- Contract Analytics and the Assumptions Nobody Writes Down
- Master Data: Payer, Plan, Product, and Relationships That Keep Moving
- The Governed Layer: Architecture, Ownership, and Privacy Constraints
- Conclusion
- For Further Reading
- References & Sources
Executive Summary
Market access decides whether a product reaches patients. It also runs on some of the least governed data in a pharmaceutical company. Purchased claims files, formulary feeds, contract terms, chargeback transactions, rebate accruals, and government price calculations sit across finance, contracting, commercial analytics, and a set of vendor platforms that were never designed to reconcile with each other. The business treats the outputs as measurements. Most of them are estimates built on assumptions that are not written down anywhere a reviewer could find them.
The scale of the arithmetic is what makes this worth a technology leader’s attention. Drug Channels Institute estimates that total gross-to-net reductions for brand-name drugs in the United States reached $416 billion in 2025, up from $356 billion in 2024.12 That figure is not measured directly. It is assembled from millions of transactions across systems with different keys, different refresh cycles, and different owners. When the same underlying transaction data also feeds Medicaid rebate, 340B, and average manufacturer price calculations, a data quality defect stops being a reporting problem and becomes a legal one.
This article is about the systems and the data underneath access strategy, not about what your pricing position should be. It covers the real limitations of each purchased and internal data asset, why gross-to-net is usually a reconciliation exercise rather than a measurement, what would have to be true for the figure to be trustworthy, how government pricing turns data lineage into a compliance control, how to evaluate a contract model before anyone signs it, and what a governed data layer for market access actually contains.
The Data Assets Behind Access Strategy, and What Each One Cannot Tell You
Ask a market access team where their numbers come from and you will usually get a list of vendors rather than a list of data assets. That is the first problem. A vendor name tells you who invoices you. It does not tell you what population the file covers, how the records were collected, what was excluded, how long it takes for a transaction to appear, or what happens to the record when it is later corrected. Those five properties determine which questions the data can answer, and they are almost never written down in a place an analyst can consult before building a model.
A useful starting inventory for a mid-cap or large pharmaceutical company looks like this. Purchased longitudinal prescription and medical claims, usually from one or two syndicated suppliers. Retail and specialty pharmacy dispense data, sometimes direct from a limited distribution network. Wholesaler transaction feeds, including the sell-through detail that shows where product actually went. Chargeback claims submitted by distributors. Rebate submissions from payers and pharmacy benefit managers. Formulary and plan design files. Payer and plan reference data. Contract terms, held in a contract lifecycle system, a revenue management platform, and often a set of spreadsheets that the contracting team trusts more than either. Government price calculations, held in a separate compliance system. Internal shipment and invoice data from the enterprise resource planning system. And, increasingly, tokenized patient-level data assembled for evidence work that then gets borrowed for access questions it was never scoped for.
Each of these has a specific failure mode. The failure modes are knowable. What makes access analytics fragile is that they are rarely documented alongside the data, so every analyst rediscovers them, and some of them do not.
| Data asset | What it is good for | The limitation that actually bites |
|---|---|---|
| Open (pre-adjudicated) claims | Fast signal on prescribing, switching, and site of care | Not fully adjudicated, so payment amounts and final payer disposition are not authoritative; capture varies by clearinghouse participation |
| Closed (adjudicated) payer claims | Financially accurate view for a defined enrolled population | Long lag and enrollment-restricted; patients disappear when they change plans |
| Wholesaler sell-through | Channel movement and inventory position | Reflects where product moved, not who was treated; class-of-trade attribution is inferred |
| Chargeback claims | Contract price realization by customer | Submitted by a third party with its own error rate; disputes and resubmissions restate prior periods |
| Rebate submissions | Payer-level utilization under contract | Arrive late, arrive aggregated, and use the payer’s own plan taxonomy, not yours |
| Formulary and plan design files | Coverage status, tier, and utilization management | Source-dependent, refreshed on different cycles, and often lags the effective date of the change |
| Electronic health record and lab data | Clinical detail claims cannot provide | Limited to participating systems; substantial missingness in exactly the variables analysts want |
Purchased does not mean authoritative
There is a habit in commercial analytics of treating a purchased file as ground truth because someone paid for it. The invoice creates a psychological guarantee that the data does not earn. A syndicated claims file is a sample assembled from whichever data contributors the supplier has agreements with in a given period. Those agreements change. When a large pharmacy chain or a clearinghouse enters or leaves a supplier’s network, the apparent market shifts, and unless someone is tracking the supplier’s coverage notices, that shift will be read as a real change in prescribing behavior.
The practical control is unglamorous and it works: maintain a data asset register that records, for every file feeding an access decision, the population covered, the collection method, known exclusions, the lag from event to availability, the restatement policy, and the contractual limits on how the data may be used. Update it when the supplier changes anything. Require an analyst to cite it in any model that goes to a governance committee. This is the same discipline applied to source data in regulated work, moved to a commercial context where nobody has required it yet.
A question worth asking in your next access review: for the primary number on the slide, can anyone in the room state the lag between the underlying event and the data being available, and whether the prior period has been restated since the last time this slide was shown? If not, the trend on the chart may be an artifact of the refresh schedule.
Claims Data: Lag, Capture, and the Questions It Cannot Answer
Claims data is the workhorse of access analytics, and the distinction between open and closed claims is the single most consequential thing a technology leader can understand about it. The two are not different vendors selling the same thing. They are different data products with different physics.
Open claims are captured during processing, before final adjudication, typically from pharmacies, practice management systems, and clearinghouses. They arrive quickly, often within days of the encounter. Because they are not restricted to a single payer’s enrolled population, open claims datasets can be very large; published comparisons describe open sources with sample sizes an order of magnitude or more above closed datasets.3 The trade-off is that the dollar amounts and the final payer disposition are not authoritative, and coverage depends on which data contributors participate in a given geography and channel.
Closed claims are fully paid and adjudicated. They are financially accurate for the lives they cover, and they support enrollment-based denominators, which matters for anything resembling a rate. The trade-off is lag and scope. Published work on health outcomes research notes that most commercial closed claims sources carry a lag of roughly six months, with Medicare and Medicaid research files considerably longer.3 Closed sources are also restricted to the payers who contribute, and commercial insurers see meaningful annual disenrollment, so requiring multi-year continuous enrollment shrinks the usable population sharply.
What the lag does to an access decision
Lag is not just a delay. It changes the shape of what you see. A launch tracking dashboard built on closed claims will show a curve that is six months behind the market and will keep restating recent months upward as claims complete. If the same dashboard is used to judge whether a formulary win produced uptake, the early reading will always look worse than reality, and the correction will arrive after the decision window has closed. Teams that do not model completeness explicitly end up reacting to the fill pattern rather than to the market.
The fix is to publish a completeness curve alongside the data. For each source, estimate what proportion of a month’s eventual volume is visible at 30, 60, 90, and 180 days, and apply it. This is ordinary practice in claims-based research and it is routinely skipped in commercial reporting. Once the curve exists, the reporting layer can present both the raw and the completeness-adjusted series, and the conversation about a launch trend stops being an argument about whose extract is right.
Where claims and clinical data genuinely fall short
Claims record billed events, not clinical reality. They will not reliably tell you the line of therapy, the biomarker status, the reason for discontinuation, or whether a prior authorization was submitted and denied as opposed to never attempted. Teams reach for electronic health record and lab data to fill those gaps, and it does help, but that data has its own coverage problem. A study of a large research cohort linked to health insurance claims found that a majority of patient-encounter months appeared in only one of the two sources, and that adding claims to participants with existing records contributed substantial additional service dates, diagnosis codes, and medications per person.4 Separately, a 2025 review of electronic health record completeness reported that in some settings 30 to 40 percent of variables are missing more than half their expected values, with overall missingness for key clinical variables commonly in the 15 to 30 percent range.5
The point for an access leader is not that the data is unusable. It is that the missingness is not random. Fragmented care produces gaps that correlate with the very populations access strategy is often trying to understand: patients who move between systems, patients with unstable coverage, patients treated outside large academic networks. An analysis that quietly drops incomplete records will produce a cleaner answer about a less representative population, and nothing in the output will say so.
A defect pattern worth checking for. When a cohort definition requires continuous enrollment plus complete lab values plus a documented line of therapy, each requirement removes patients. Ask for the attrition table, not just the final N. If the final cohort is a small fraction of the starting population, the finding may be true only of patients whose data happened to be complete.
Formulary and Plan Data: Many Sources, Different Refresh Rates
Formulary data looks like the simplest asset in the stack and behaves like one of the most treacherous. The question it answers sounds binary. Is the product covered, at what tier, with what utilization management? The reality is that the answer depends on which source you asked, which plan you meant, and when the file was cut.
For Medicare Part D there is at least a public reference point. CMS publishes prescription drug plan formulary, pharmacy network, and pricing files that contain plan information, formulary detail at the National Drug Code level, cost-share tier, and indicators for step therapy, quantity limits, and prior authorization.6 Researchers using these files are cautioned that the formulary information is organized by formulary identifier rather than by plan, and that linking formulary detail to a specific beneficiary’s plan requires a crosswalk that is easy to get wrong.7 That structural detail matters. A great deal of published and internal analysis silently assumes a one-to-one relationship between plan and formulary that does not exist.
Commercial formulary data has no such public backstop. It comes from syndicated suppliers who assemble it from plan documents, pharmacy benefit manager publications, and their own field research. Different suppliers refresh on different cycles. An effective date on a formulary change and the date the change appears in a purchased file are often weeks apart, and in some cases the file records the publication date rather than the effective date. If the analytics team treats the file date as the effective date, every pull-through measurement will be misaligned by the difference.
The three questions that make formulary data usable
Which source, and how was it produced?
Published plan documents, PBM feeds, and supplier field research have different accuracy profiles and different revision behavior. Record the source on every row, not on the file.
Effective date or publication date?
Store both. A coverage change has a date it takes effect and a date you learned about it. Analyses that measure response to a change need the first; analyses of internal responsiveness need the second.
What entity does this row describe?
Formulary, plan, contract, employer group, and covered lives are different grains. Aggregating across them without an explicit hierarchy produces double counting that is very hard to detect downstream.
Is this a correction or a change?
A supplier restating last quarter’s coverage status is not the same event as a payer changing coverage. Without a distinction, trend analysis conflates data revision with market movement.
Any formulary table that does not carry effective date, publication date, source, and a revision flag will eventually produce a wrong answer to a question someone cares about. Building those four columns in from the start is cheap. Retrofitting them into three years of history is not.
Gross-to-Net: Reconciliation Dressed as Measurement
Gross-to-net is the number the commercial business actually runs on. It is the bridge between what was invoiced and what the company keeps. And in most organizations it is not measured. It is reconciled, which is a different activity with a different error profile.
The size of the gap has grown to the point where the estimate itself is a material financial statement item. Drug Channels Institute put total gross-to-net reductions for brand-name drugs at $356 billion in 2024, a 7 percent increase and the slowest growth in at least a decade,1 then at $416 billion for 2025.2 Its 2026 review of manufacturer disclosures found that among the small number of companies that publish an average discount from list, the unweighted average was around negative 51.7 percent, meaning those manufacturers retained less than half of list price.2 When roughly half of gross revenue is removed by a calculation, the integrity of that calculation is not an accounting detail.
Why it is a reconciliation
The components of gross-to-net arrive on different clocks, in different formats, from different counterparties, and none of them share a primary key with the invoice they relate to.
- Commercial rebates are claimed by payers and pharmacy benefit managers, usually one or two quarters in arrears, aggregated at a level the payer chooses, using the payer’s own plan naming rather than yours.
- Chargebacks are submitted by wholesalers when they sell at a contract price below wholesale acquisition cost. They arrive as transaction claims, are validated against contract eligibility, and are frequently disputed and resubmitted, which restates prior periods.
- Government rebates are invoiced by state Medicaid programs on a quarterly cycle, calculated from a unit rebate amount your own system produced from price data reported months earlier.
- Medicare discount obligations flow through plan sponsors and program contractors and land as invoices you did not originate.
- Patient support and copay assistance come from a hub or card vendor, on their schedule, in their categories.
- Fees, returns, and distribution service charges arrive from yet other counterparties on yet other cycles.
Finance closes the books monthly. None of these components are complete monthly. So the organization books an accrual based on a model, then trues it up when the actual claims arrive, then explains the variance. That process is legitimate and unavoidable. What is not unavoidable is doing it without lineage. In many companies the accrual model lives in a spreadsheet maintained by two people, its assumptions are carried forward without review, and the true-up variance is treated as noise rather than as evidence that an assumption is wrong.
What would have to be true for the number to be trustworthy
This is the question worth putting to the team that produces gross-to-net, and it is answerable. A gross-to-net figure deserves trust when all of the following hold. Not most of them.
Every deduction line traces to a source transaction or to a named, versioned assumption
No line item is allowed to exist because it has always been there. If a component is estimated, the estimate has an owner, a method, a version, and a date it was last challenged.
Gross sales, deductions, and net revenue reconcile to the general ledger on a fixed schedule
The commercial analytics view and the finance view start from the same gross figure. If the two organizations quote different gross sales, everything downstream is a negotiation rather than a calculation.
Accrual-to-actual variance is tracked by component and by contract, over time
A single blended variance hides offsetting errors. Persistent one-directional variance in a specific component is a defect signal, not a rounding issue.
Restatements are versioned and visible
When a prior period changes because chargebacks were disputed or a rebate was recalculated, the system retains both versions and reporting can show which version a decision was made on.
Contract terms in the model match the executed contract
There is a controlled path from the signed agreement to the terms the accrual engine uses. Amendments propagate. Somebody signs off that they did.
The same customer, product, and plan identifiers are used across finance, contracting, and analytics
Without shared master data, reconciliation is manual mapping, and manual mapping is where undetected error accumulates.
Most organizations can satisfy two or three of these. The gap between two and six is the real state of gross-to-net governance, and it is measurable. A useful first exercise is simply to attempt the trace on one product for one quarter and record where it breaks. That artifact tends to be more persuasive to an executive committee than any maturity assessment.
A note on where systems fit
Revenue management platforms adjudicate chargebacks and rebates. Planning platforms model accruals and scenarios. Analytics platforms reconcile and report. These are genuinely different jobs, and a tool built for one rarely does another well. The architecture question is not which vendor wins. It is which system is the system of record for each object: contract terms, transaction claims, accrual assumptions, and reported net revenue. If more than one system claims the same object, the reconciliation burden is permanent.
Government Pricing: Where a Data Defect Becomes Legal Exposure
Everything above concerns internal accuracy. Government pricing is where the same underlying transaction data acquires legal weight, because the outputs are certified submissions to federal programs.
Under the Medicaid Drug Rebate Program, manufacturers report average manufacturer price and best price, and the basic rebate for a single-source or innovator multiple-source drug is the greater of 23.1 percent of AMP or the difference between AMP and best price, with an additional inflation-based rebate when AMP rises faster than the Consumer Price Index for urban consumers.8 The regulations define in detail which sales are included in AMP and which are excluded, and which prices are and are not taken into account for best price.910 Those inclusion and exclusion rules are, in data terms, filters applied to transaction-level records, driven by class of trade, customer eligibility, and the treatment of fees and discounts.
That is the whole point. AMP and best price are not finance opinions. They are queries over transaction data, and the correctness of the answer depends on the correctness of the customer classification, the completeness of the discount capture, and the fidelity of the contract terms in the system. A defect in any of those propagates into a certified federal submission.
The enforcement record is a data quality record
The government pricing enforcement history reads, from a technology perspective, like a catalog of master data and calculation-logic failures. Government price reporting has produced repeated False Claims Act litigation and settlements involving how prices were calculated and how products were classified.11 In one widely reported matter, a manufacturer agreed to pay $260 million to resolve allegations that it underpaid Medicaid rebates for a long-marketed product by reporting a base date AMP as though the drug had first been marketed in 2013 rather than decades earlier, and agreed to correct the base date AMP as part of the resolution.12 Whatever the intent behind such decisions, the mechanism is a stored reference value that determines every subsequent inflation rebate calculation.
Oversight has long recognized the verification problem. A Government Accountability Office review of the Medicaid Drug Rebate Program found that program oversight did not ensure that manufacturer-reported prices or the methods used to determine them were consistent with program criteria, and that only limited checks for reporting errors were performed.13 The practical consequence is that the primary control over these figures is the manufacturer’s own internal control environment. Nobody else is going to catch the defect first.
The governance implication. If AMP, best price, and 340B ceiling price are calculated from the same transaction store that feeds commercial reporting, then that store is in scope for a compliance control framework, whether or not anyone has said so. Change control on class-of-trade logic, customer master updates, and price-type mappings is not a nice-to-have. It is the audit trail you will be asked for.
340B and the duplicate discount problem
The 340B program adds a second calculation off the same base and a well-known reconciliation problem. Manufacturers are not required to provide both a 340B discount and a Medicaid rebate on the same unit, but preventing that duplicate depends on identifying which claims were 340B-eligible, which is information the manufacturer does not originate. The Health Resources and Services Administration maintains program integrity mechanisms including the Medicaid Exclusion File and audits of covered entities and manufacturers.14 A 2025 Government Accountability Office review found that agency oversight had improved but that audits did not adequately assess whether duplicate discounts were being prevented, among other unresolved weaknesses.15
The policy environment is also moving. HRSA has been working through a rebate model approach for certain drugs, with an initial pilot that was withdrawn, a Request for Information in February 2026, and then a Notice issued on 31 July 2026 establishing a rebate model under which qualifying manufacturers may provide the 340B price for selected drugs through retrospective rebate for the 2026 and 2027 initial price applicability years.16 A rebate model changes the data flow materially: instead of a discount applied at purchase, the manufacturer would process claims after the fact, which means claim-level validation, dispute handling, and a new reconciliation stream. Whatever the final shape, the technology leader’s planning assumption should be that 340B becomes more claim-driven and more data-intensive, not less.
Medicare adds another reconciliation stream
The Part D redesign that took effect in 2025 replaced the coverage gap discount with the Manufacturer Discount Program, changing both the obligation and the invoicing path.17 From January 2026, negotiated maximum fair prices took effect for selected drugs, with CMS operating a Medicare Transaction Facilitator to move dispense data between plans, the agency, manufacturers, and their processing partners, and an optional payment module to distribute refunds to dispensing entities.1819 Independent analysis of the effectuation design highlighted the operational questions this raises around data exchange, timing, and dispute handling across the pharmacy, plan, and manufacturer chain.20
The architectural reading is straightforward. Each of these programs adds a claim-level or dispense-level data stream that must be received, validated, matched to internal transactions, reconciled, and retained. None of them replace an existing stream. The number of reconciliations a manufacturer performs is going up, and each one needs an owner, a service level, and an exception process. Treating any of them as a temporary spreadsheet is how organizations end up with a compliance obligation running on a personal file share.
Contract Analytics and the Assumptions Nobody Writes Down
The recurring commercial question is whether a proposed contract is worth signing. Stated plainly, it is whether the additional access purchased by a rebate produces enough incremental net revenue to more than offset the rebate, across the whole book of business affected by the terms, including the business that would have been retained anyway.
That is a modeling question, and the model is usually built. The problem is not the absence of a model. The problem is that the model’s assumptions about volume, mix, and payer behavior are rarely documented alongside it, so the model cannot be evaluated later against what actually happened, and the next model repeats the same assumptions because nobody knows they were assumptions.
The assumptions that decide the answer
A contract valuation model typically rests on a small number of judgments that dominate the output. Published guidance on payer contract analytics describes the same set: eligible lives, the expected change in utilization management and how strictly the payer enforces it, comparable past events used to size the lift, the uncertainty range around that lift, and the break-even lift required for the deal to pay for itself.
How many lives are genuinely affected
Covered lives counts are frequently quoted at the payer level when the contract applies to a subset of books of business. The gap between quoted and affected lives is often the largest single error in the model.
What incremental share the access change produces
Usually derived from comparable prior events. Whether those comparables were genuinely comparable in class, competitive position, and utilization management is the judgment that matters most and is documented least.
Which segments the volume comes from
Incremental volume in a segment with a lower existing net price is worth less than the headline suggests. Mix shift between channels can erase a deal’s value without any change in units.
What the terms do to other prices
A discount structure can affect statutory price calculations. Modeling a contract without checking the effect on government pricing is how a commercially sensible deal becomes an expensive one.
Making the model reviewable
The engineering answer here is not a better algorithm. It is provenance. A contract model becomes reviewable when four things are stored with it and survive after the decision.
- The input snapshot. The exact extract of claims, formulary status, and lives used, with the extract date, so the model can be rerun on the same inputs. Rerunning a model against a refreshed source and getting a different number teaches nothing about the model.
- The named assumptions. Each judgment stated as a value with a rationale and an owner, in a structured field rather than a comment in a cell. Assumptions in comments do not survive a copy of the workbook.
- The scenario set. A small number of distinct, plausible states rather than a single point estimate, with the break-even lift shown explicitly so reviewers can judge whether it is achievable rather than debating a forecast.
- The commitment to measure. A defined post-deal read: which metric, measured on which source, at which lag, compared against which scenario. Written before signing, not after the results are known.
The compounding benefit. Once assumptions and outcomes are stored in the same structure across many deals, an organization can do something it usually cannot: measure whether its own lift assumptions have been systematically optimistic. That is a far more valuable analytic asset than any individual deal model, and it requires no new data purchase. It only requires that the assumptions were captured in a form that can be joined to the outcome.
One caution on post-deal measurement. Attributing an observed change in share to a formulary event requires a counterfactual, and the honest version of that analysis will produce a range rather than a number. Reporting a single attribution figure with no interval implies a precision the data cannot support, and it trains the organization to expect certainty from an analysis that cannot deliver it.
Master Data: Payer, Plan, Product, and Relationships That Keep Moving
Every problem described so far reduces, at some point, to identity. Which customer is this. Which plan does this claim belong to. Which contract governs this transaction. Which product configuration is this NDC. Market access is unusually hard on master data because the entities themselves are unstable and because the relationships between them change more often than the entities do.
Four domains, and the joins between them
Payer, plan, product, and customer are usually treated as four master data domains. In access analytics the relationships carry most of the meaning and get the least governance.
| Domain | What changes, and how often | The downstream effect when it is wrong |
|---|---|---|
| Payer | Mergers, acquisitions, book-of-business transfers, PBM changes | Historical performance attributed to an entity that no longer exists, or split across two records that should be one |
| Plan | New plans, terminations, benefit design changes, employer group movement between plans | Formulary status joined to the wrong population; lives counts that do not tie to anything |
| Product | NDC changes, package configurations, authorized generics, presentation changes | Volume series that break at a package change; government price calculations applied to the wrong configuration |
| Customer | Class of trade, ownership, GPO and IDN affiliation, 340B status of associated sites | Chargeback eligibility errors and, where class of trade drives statutory inclusion, government price defects |
| Relationships | Plan to formulary, plan to payer, customer to affiliation, contract to eligible customers | The most common source of silent double counting and of pull-through measured against the wrong denominator |
The relationship row is the one that gets missed. Master data programs tend to be scoped as entity resolution: deduplicate the customer file, build a golden record. That work is necessary and it is not sufficient here. If a plan moves from one formulary to another mid-year and the model has no effective-dated relationship, the historical view will be silently rewritten to reflect the current state, and every prior period comparison becomes wrong without any error appearing.
Effective dating is the requirement, not a refinement
Access master data must be bitemporal in the places that matter. Two dates: when a fact was true in the world, and when the system learned it. That sounds like an architectural luxury until the first time someone asks why last quarter’s board number changed. With effective dating and knowledge dating, the answer is a query. Without them, it is a forensic exercise across extract files.
Practically, this means the payer, plan, and customer hierarchies need history tables rather than overwrite-in-place updates, and reporting needs to declare which date basis it is using. It also means resisting the common shortcut of resolving hierarchy at report time from the current state. The current state is the right answer to exactly one question: what is true now.
A scoping test for a master data effort in commercial
If the proposed scope includes deduplication and survivorship rules but does not include effective-dated relationships between plan, formulary, payer, and contract, the project will deliver a cleaner customer file and will not fix access analytics. The relationships are where the analytic value is, and they are where the maintenance burden is. Fund both or neither.
The Governed Layer: Architecture, Ownership, and Privacy Constraints
The last question is the practical one. What actually belongs in a governed layer for market access data, and what can safely stay in the hands of analysts working quickly?
What belongs in the governed layer
The test is consequence. A dataset belongs in the governed layer when a defect in it produces a financial statement error, a certified regulatory submission error, a contractual obligation error, or a privacy exposure. That yields a shorter list than most data platform programs assume, which is a feature. A governed layer that tries to contain everything gets bypassed.
- The transaction store that feeds both commercial reporting and government price calculations. Change controlled, lineage tracked, retained.
- Contract terms as executed, with amendment history, and the mapping from terms to the eligibility and calculation logic that uses them.
- Customer master with class of trade and affiliation, effective dated, because it drives both chargeback eligibility and statutory inclusion.
- Product master including NDC and package configuration history.
- Payer and plan master with effective-dated relationships to formulary and to contract.
- Gross-to-net component ledger: accrual assumptions, actuals, and variance by component and contract, versioned.
- Government price calculation inputs and outputs, with the ability to reproduce a prior submitted value from the data as it stood at submission.
Everything else, including exploratory cohort work, scenario modeling, and field-facing analytics, can live in a faster layer that reads from the governed one. The critical rule is directional: the fast layer consumes governed data, and results that will drive a contract, an accrual, or a submission must be reproduced from governed inputs before they count. This distinction, sometimes framed as separating the system of record from the system of analysis, is the difference between a platform people use and a platform people route around.
Ownership: the part that is not technical
Market access data has an ownership problem more than a tooling problem. Finance owns the accrual. Contracting owns the terms. Commercial analytics owns the demand view. Government pricing compliance owns the statutory calculations. Legal owns the exposure. IT owns none of the content and all of the plumbing. In that arrangement, the reconciliation between components is unowned by default, which is precisely why it degrades.
The workable pattern is to name an accountable owner per data object rather than per system, and to make the reconciliation itself a named deliverable with a named owner. Someone owns the customer master. Someone owns the mapping from contract terms to calculation logic. Someone owns the monthly reconciliation between the commercial net revenue view and the general ledger, and reports the variance whether or not it is comfortable. Governance in this domain is mostly a matter of assigning those names and then not quietly reassigning them when the person leaves.
Privacy constraints shape what analysis is permissible
Patient-level data in access analytics is subject to constraints that are frequently misunderstood inside commercial teams, and misunderstanding them is how an organization acquires a problem it did not know it was buying.
Under the HIPAA Privacy Rule there are two recognized routes to de-identification: the Safe Harbor method, which requires removal of a specified list of identifiers, and Expert Determination, in which a qualified person applies statistical principles and documents that the risk of re-identification is very small.21 Both are documented processes with artifacts. Neither is achieved simply by removing names, and tokenization on its own does not constitute de-identification: tokenization enables linkage across sources, and the resulting linked dataset still has to satisfy one of the two methods.
Three constraints follow for architecture.
Linkage increases risk, so the determination has to cover the linked product
An expert determination on one source does not extend to that source joined to three others. The governed layer needs to know which datasets may be joined to which, and enforce it rather than document it.
Contractual use restrictions are usually narrower than the legal limit
Data supply agreements commonly restrict use by function, by purpose, and sometimes by named affiliate. The permitted-use terms need to be encoded as access policy, not stored in a contract file nobody consults.
Some questions cannot be answered at the grain the business wants
Requests to identify individual prescribers’ patients, or to act on patient-level detail in a commercial context, are the point at which the right answer is no. Making that boundary explicit in advance is far easier than adjudicating it under deadline.
These constraints are not obstacles to access analytics. They are design inputs. An architecture that encodes permitted use and join eligibility as policy lets analysts move faster inside the boundary, because the boundary is machine-checked instead of relitigated in every project. The organizations that struggle are the ones where the rules exist only in a legal reviewer’s memory.
Conclusion
Market access is the part of a pharmaceutical business where the data is least governed and the consequences are most concrete. The gross-to-net figure is a reconciliation across systems that were never built to agree, and its credibility depends entirely on whether the assumptions inside it are named, versioned, and challenged. The government pricing calculations that sit on the same transaction data are certified submissions, which means a master data defect or an untested change to class-of-trade logic is a compliance matter rather than a reporting inconvenience. The contract models that shape commercial strategy are usually sound arithmetic resting on undocumented judgments about volume and mix, which is why the organization rarely learns whether its assumptions were any good. And underneath all of it sit payer, plan, product, and customer relationships that change constantly and are usually stored as though they do not.
None of this requires a transformation program. It requires a small number of specific commitments: a data asset register that records what each source can and cannot support, effective-dated relationships in the master data, a traceable path from executed contract terms to calculation logic, an accrual-to-actual variance tracked by component rather than blended away, provenance stored with every contract model, and permitted use encoded as policy rather than remembered. Each of those is achievable in a quarter or two. Together they change gross-to-net from a number the business hopes is right into a number it can defend.
Sakara Digital works with pharma and biotech organizations building the data foundations underneath commercial and access analytics. If you are working through gross-to-net traceability, government pricing data controls, or the master data model behind payer and plan reporting, and you want an independent perspective on where to start, we are happy to have that conversation.
For Further Reading
For Further Reading
- Digital Transformation Roadmap for Pharma Commercial Operations
- Master Data Management for Life Sciences: Creating a Single Source of Truth Across Global Operations
- Data Lakehouse Architecture for Pharma: Unifying Clinical, Manufacturing, and Commercial Data
- Tokenized Patient Data for Real-World Evidence: What Works in 2026
- Choosing the Right Data Governance Model for Pharma: Centralized, Decentralized, or Federated?
- MDM Vendor Selection for Mid-Cap Pharma: A 2026 Comparison Framework
References & Sources
- Fein, Adam J. “Gross-to-Net Bubble Hits $356B in 2024, But Growth Slows to 10-Year Low.” Drug Channels Institute, July 2025. https://www.drugchannels.net/2025/07/gross-to-net-bubble-hits-356b-in.html
- Fein, Adam J. “2025 Gross-to-Net Realities at Eight Top Drugmakers: The Net Pricing Drug Channel Emerges.” Drug Channels Institute, July 21, 2026. https://www.drugchannels.net/2026/07/2025-gross-to-net-realities-at-eight.html
- Baser, Onur, Gabriela Samayoa, Nehir Yapar, Erdem Baser, and Fatih Mete. “Use of Open Claims vs Closed Claims in Health Outcomes Research.” Journal of Health Economics and Outcomes Research, 2023;10(2). https://jheor.org/article/87538-use-of-open-claims-vs-closed-claims-in-health-outcomes-research
- Yang, et al. “Investigation into EHR data coverage in the All of Us Research Program via linkage to health insurance claims.” PLOS One, January 23, 2026. https://journals.plos.org/plosone/article?id=10.1371/journal.pone.0336967
- Gurupur, Varadraj, Sahar Hooshmand, Deepa Fernandes Prabhu, Elizabeth Trader, and Sanket Salvi. “Incompleteness of Electronic Health Records: An Impending Process Problem Within Healthcare.” Healthcare (Basel), 13(22):2900, November 13, 2025. https://pmc.ncbi.nlm.nih.gov/articles/PMC12652376/
- Centers for Medicare & Medicaid Services. “Prescription Drug Plan Formulary, Pharmacy Network, and Pricing Information Files for Order.” https://www.cms.gov/research-statistics-data-and-systems/files-for-order/nonidentifiabledatafiles/prescriptiondrugplanformularypharmacynetworkandpricinginformationfiles
- Research Data Assistance Center (ResDAC). “Part D Formulary Information in the CMS Data Files.” https://resdac.org/articles/part-d-formulary-information-cms-data-files
- Electronic Code of Federal Regulations. 42 CFR 447.509, “Medicaid drug rebates (MDR).” https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-C/part-447/subpart-I/section-447.509
- Electronic Code of Federal Regulations. 42 CFR 447.504, “Determination of AMP.” https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-C/part-447/subpart-I/section-447.504
- Electronic Code of Federal Regulations. 42 CFR 447.505, “Determination of best price.” https://www.ecfr.gov/current/title-42/chapter-IV/subchapter-C/part-447/subpart-I/section-447.505
- Goodwin Procter LLP. “Pharma Manufacturer Federal Government Price Reporting: Recent Litigation and Settlements.” August 2022. https://www.goodwinlaw.com/en/insights/publications/2022/08/08_04-pharma-manufacturer-federal-government
- U.S. Department of Justice, Office of Public Affairs. “Mallinckrodt Agrees to Pay $260 Million to Settle Lawsuits Alleging Underpayments of Medicaid Drug Rebates and Payment of Illegal Kickbacks.” March 2022. https://www.justice.gov/archives/opa/pr/mallinckrodt-agrees-pay-260-million-settle-lawsuits-alleging-underpayments-medicaid-drug
- U.S. Government Accountability Office. “Medicaid Drug Rebate Program: Inadequate Oversight Raises Concerns about Rebates Paid to States.” GAO-05-102, February 2005. https://www.gao.gov/products/gao-05-102
- Health Resources and Services Administration, Office of Pharmacy Affairs. “340B Program Integrity.” https://www.hrsa.gov/opa/program-integrity
- U.S. Government Accountability Office. “340B Drug Discount Program: Agency Oversight Has Improved, but Actions Needed to Address Weaknesses.” GAO-26-108784, October 23, 2025. https://www.gao.gov/products/gao-26-108784
- Federal Register. “Request for Information: 340B Rebate Model Pilot Program.” February 17, 2026. https://www.federalregister.gov/documents/2026/02/17/2026-03042/request-for-information-340b-rebate-model-pilot-program
- Centers for Medicare & Medicaid Services. “Final CY 2025 Part D Redesign Program Instructions.” https://www.cms.gov/files/document/final-cy-2025-part-d-redesign-program-instructions.pdf
- Centers for Medicare & Medicaid Services. “Medicare Drug Price Negotiation Program: Final Guidance, IPAY 2027 and Manufacturer Effectuation of the Maximum Fair Price in 2026 and 2027.” https://www.cms.gov/files/document/medicare-drug-price-negotiation-final-guidance-ipay-2027-and-manufacturer-effectuation-mfp-2026-2027.pdf
- Centers for Medicare & Medicaid Services. “Pharmacy and Dispensing Entity Resources,” Medicare Drug Price Negotiation Program (Medicare Transaction Facilitator). https://www.cms.gov/initiatives/medicare-prescription-drug-affordability/overview/medicare-drug-price-negotiation-program/pharmacy-dispensing-entity-resources
- USC Schaeffer Center for Health Policy & Economics. “Operational and Policy Considerations in the Effectuation of Medicare’s Maximum Fair Drug Prices for Part D.” October 16, 2025. https://schaeffer.usc.edu/research/medicare-drug-prices-mfp-effectuation/
- U.S. Department of Health and Human Services, Office for Civil Rights. “Guidance Regarding Methods for De-identification of Protected Health Information in Accordance with the HIPAA Privacy Rule.” https://www.hhs.gov/hipaa/for-professionals/special-topics/de-identification/index.html








Your perspective matters—join the conversation.