Vaccines go through a multi-stage testing process that typically takes years, moving from laboratory work to animal studies, then through three phases of human trials, and finally a rigorous regulatory review before approval. Even after a vaccine reaches the public, monitoring continues indefinitely. Each stage is designed to answer a specific question: Does this work in theory? Is it safe? Does it trigger an immune response? Does it actually prevent disease in large populations?
Laboratory and Animal Testing
Before a vaccine candidate is ever given to a person, it spends months or years in preclinical testing. Researchers first study the vaccine in the lab to establish a basic rationale: does this formulation provoke the kind of immune response that should, in theory, protect against the target disease? This is sometimes called “proof of concept.”
The next step involves animal studies. The FDA requires developers to select animal species with anatomy and physiology comparable to humans and to justify that choice scientifically. These studies serve two purposes. First, researchers test for effectiveness in animal models of the disease to see whether the vaccine actually provides protection. Second, they test for safety in healthy animals, looking at a wide range of outcomes: mortality, blood chemistry, organ weights, tissue damage, and any signs of toxicity in both the targeted area and elsewhere in the body. A pathologist reviews the tissue samples without knowing which animals received the vaccine and which received a placebo.
The studies are designed to mimic the real clinical scenario as closely as possible, matching the intended dose, delivery method, number of doses, and timing. Researchers must use enough animals per group to draw statistically meaningful conclusions and follow them long enough to catch both immediate and delayed effects. All of this data goes into an Investigational New Drug (IND) application, submitted as complete study reports rather than summaries, before human trials can begin.
Phase 1: First Tests in People
Phase 1 trials are small, typically involving a few dozen volunteers. The primary goal is safety, not effectiveness. Researchers are looking for side effects, determining what dose levels appear safe, and figuring out the best dosing schedule. Participants are monitored closely, and the data from this phase helps set the parameters for larger trials ahead.
These early volunteers are usually healthy adults. Because the group is so small, Phase 1 can only detect relatively common side effects. Rare reactions won’t show up until thousands or tens of thousands of people have been vaccinated.
Phase 2: Immune Response and Dose Refinement
Phase 2 expands the trial to hundreds of participants and shifts the focus toward two questions: does the vaccine generate a measurable immune response, and what’s the right dose? Importantly, these trials typically recruit people from the population the vaccine is actually intended for, not just healthy young adults.
Researchers measure immune markers in the blood to gauge how well the body responds. In a cholera vaccine trial, for example, volunteers might have blood drawn before vaccination and again two weeks after the second dose, with “seroconversion” defined as at least a fourfold increase in specific antibodies. Safety monitoring continues in parallel, with participants tracked for several days after each dose to detect adverse events. Phase 2 gives a much clearer picture of both immunogenicity (how well the vaccine primes the immune system) and the side effect profile at different dose levels.
Phase 3: Large-Scale Efficacy Trials
Phase 3 is where a vaccine proves whether it actually prevents disease in the real world. These trials enroll thousands to tens of thousands of volunteers, randomly assigning them to receive either the vaccine or a placebo. Neither the participants nor the researchers evaluating outcomes know who got which (a design called double-blinding), which prevents bias from influencing the results.
The key measurement here is vaccine efficacy: the percentage reduction in disease among vaccinated people compared to the placebo group. If 100 people in the placebo group get sick and only 5 in the vaccinated group do, that’s 95% efficacy. Because these trials are large and participants come from varied backgrounds and geographic locations, Phase 3 can also detect less common side effects that smaller trials would miss.
These trials can last months to years, depending on how common the disease is and how quickly enough cases accumulate to draw reliable conclusions. Researchers may analyze results at planned interim points rather than waiting for the full trial to finish, particularly during outbreaks when speed matters.
Independent Safety Boards
Throughout clinical trials, an independent group called a Data and Safety Monitoring Board (DSMB) watches over the process. These experts periodically review the accumulating data on participant safety, study progress, and, when appropriate, early efficacy signals. They operate independently from the vaccine developers.
A DSMB has real power. Before a trial begins, the board defines specific triggers that would call for an unscheduled review and establishes stopping rules. If serious safety concerns emerge, if enrollment is inadequate, or if the vaccine is working so well that it would be unethical to keep giving some participants a placebo, the board can recommend modifying or terminating the trial. When findings are serious and immediate, the DSMB chair notifies the relevant authorities on the same day, both verbally and in writing.
Manufacturing Quality Testing
A vaccine that works brilliantly in trials is useless if it can’t be manufactured consistently. Before approval, developers must demonstrate that their manufacturing process produces a reliable product, batch after batch. The FDA requires consistency to be shown across at least three batches, preferably produced consecutively.
Each batch undergoes testing for purity, potency, and the presence of contaminants. Purity testing checks for impurities that might be introduced during production, including residual proteins from the cells used to grow the vaccine, leftover DNA, and bacterial toxins called endotoxins. Potency testing uses biological assays to confirm the vaccine is strong enough to do its job, with results measured against a U.S. Reference Standard. Acceptable limits for every impurity and every potency measure must be defined and consistently met.
Regulatory Review and Approval
Once preclinical work, all three clinical trial phases, and manufacturing validation are complete, the developer submits a Biologics License Application (BLA) to the FDA. This is a comprehensive package containing every piece of preclinical and clinical data, detailed descriptions of the manufacturing process, and information about the production facilities.
An FDA scientific team evaluates the entire submission, assessing whether the safety and effectiveness data support approval and whether the manufacturing process ensures consistent quality. If the evidence meets the agency’s standards, the vaccine is licensed for use in the United States.
Emergency Use Authorization
During public health emergencies, the FDA can grant an Emergency Use Authorization (EUA) before full approval. This isn’t a shortcut that skips steps. It allows authorization based on an interim or final analysis from a Phase 3 trial, provided specific thresholds are met. The FDA expects all safety data from Phase 1 and 2 trials, a Phase 3 safety database of well over 3,000 vaccine recipients, and a median follow-up of at least two months after the full vaccination regimen. A high proportion of Phase 3 participants must have been monitored for serious adverse events for at least one month. The difference from full approval is primarily the length of follow-up, not the rigor of the review.
Post-Approval Safety Monitoring
Approval doesn’t end the testing process. Even the largest Phase 3 trials can’t detect side effects that occur in, say, one in 100,000 people. That’s why the CDC operates four complementary monitoring systems that track vaccine safety after a vaccine reaches the general population.
VAERS (the Vaccine Adverse Event Reporting System) accepts reports from anyone, including patients, parents, and healthcare providers, about health problems that occur after vaccination. It functions as an early warning system: a spike in reports of a particular symptom can signal a problem worth investigating, even though individual reports don’t prove the vaccine caused the issue.
The Vaccine Safety Datalink (VSD) takes a more structured approach, using health records from participating medical centers to conduct controlled studies comparing rates of health problems in vaccinated and unvaccinated people. The Clinical Immunization Safety Assessment (CISA) project is a network of vaccine safety experts from the CDC, research centers, and other institutions that evaluates complex cases and conducts focused research. During the COVID-19 vaccine rollout, V-safe added a smartphone-based system that let recipients report how they felt in the days and weeks following vaccination.
Together, these systems create a safety net that can catch problems too rare to appear in clinical trials. When a signal is detected through passive reporting in VAERS, it can be rigorously investigated through the VSD’s medical records or CISA’s expert analysis, closing the loop between early detection and confirmed evidence.
Diversity in Clinical Trials
Vaccines don’t always work identically across different populations. Age, genetics, underlying health conditions, and other factors can influence both safety and effectiveness. Historically, clinical trials have underrepresented certain racial, ethnic, and age groups, which can leave gaps in the evidence.
The FDA now requires sponsors of certain clinical studies to submit Diversity Action Plans describing how they will improve enrollment of underrepresented populations. This requirement, mandated by the Food and Drug Omnibus Reform Act, applies to the format, content, and timing of these plans. Sponsors can request waivers, but they must go through a formal evaluation process. The goal is to ensure that by the time a vaccine is approved, the evidence reflects the full range of people who will actually receive it.