How the United States detects, reviews, verifies, and acts on vaccine safety signals.
Evidence Level: [Established Scientific Methodology] — This page describes the operational structure of the U.S. vaccine safety monitoring system as documented by the CDC, FDA, and peer-reviewed literature.
System: Vaccine Adverse Event Reporting System (VAERS)
Type: Passive surveillance (open-access reporting)
Operated by: CDC and FDA jointly
VAERS serves as the nation's early warning system for vaccine safety. It accepts reports from healthcare providers, vaccine manufacturers, and the general public. The system is designed for high sensitivity — casting the widest possible net to detect rare, unexpected, or previously unrecognized health events across the entire vaccinated population. Reports submitted to VAERS often prompt more detailed clinical and epidemiological evaluation in subsequent stages.
VAERS cannot determine whether a vaccine caused a reported event. As a passive system, it lacks denominator data (the total number of people who received the vaccine without experiencing the event) and does not include a control group. A VAERS report documents a temporal association — an event that occurred after vaccination — not a confirmed causal relationship. Raw VAERS report counts cannot be used to calculate injury rates.
For detailed information, see our VAERS Explained page at /safety/vaers.
System: Clinical Immunization Safety Assessment (CISA) Project
Type: Expert medical review
Operated by: CDC in collaboration with academic medical centers
When VAERS identifies a serious or unusual adverse event, the CISA Project provides expert clinical evaluation. Teams of specialists at academic medical centers review individual cases to identify clinical patterns, assess biological plausibility, and determine whether the reported events share characteristics that warrant large-scale investigation.
CISA serves as a clinical filter between broad signal detection (Stage 1) and resource-intensive epidemiological verification (Stage 3). It helps distinguish events that require population-level study from those that can be explained by individual medical history or coincidental timing.
Systems: Vaccine Safety Datalink (VSD) and Biologics Effectiveness and Safety System (BEST/PRISM)
Type: Active surveillance (linked electronic health records)
Operated by: VSD by CDC; BEST by FDA
These systems link vaccination records directly to medical outcomes across millions of individuals. By comparing health events in vaccinated populations against matched unvaccinated control groups, VSD and BEST calculate actual incidence rates and determine whether a detected signal represents a genuine increased risk. This is the stage where causation is either confirmed or refuted through controlled epidemiological analysis.
The Vaccine Safety Datalink covers approximately 12 million individuals through integrated electronic health records at participating healthcare organizations. The FDA's BEST system uses large-scale insurance claims databases for near real-time safety surveillance. Together, these systems provide the statistical power necessary to detect even rare adverse events.
For detailed information, see our Post-Market Surveillance page at /regulatory/post-market-surveillance.
Action: Federal regulatory oversight
Agencies: FDA (product regulation) and CDC (public health guidance)
When a safety signal is verified through Stage 3 analysis, regulatory agencies take action proportional to the findings. Responses may include updated product labeling (package inserts), revised clinical guidance for healthcare providers, public safety communications, or — in rare cases — temporary pauses on specific vaccine lots or products pending further investigation.
Regulatory actions and the evidence supporting them are published through the Federal Register, MMWR (Morbidity and Mortality Weekly Report), and agency press communications.
The identification of myocarditis risk following mRNA COVID-19 vaccination illustrates the four-stage pipeline in action:
Stage 1 — Detection: VAERS received an elevated number of myocarditis reports in young males following mRNA COVID-19 vaccination, triggering a safety signal.
Stage 2 — Clinical Review: CISA experts reviewed individual cases and identified a consistent clinical pattern: onset typically within days of the second dose, predominantly in males aged 12–29.
Stage 3 — Verification: VSD and BEST conducted controlled epidemiological studies comparing myocarditis rates in vaccinated vs. unvaccinated populations. The studies confirmed an elevated risk of approximately 1–4 cases per 100,000 doses in the identified demographic. Most cases were mild and resolved within days to weeks.
Stage 4 — Regulatory Response: The FDA updated vaccine labeling to include myocarditis as an identified risk. The CDC updated clinical guidance regarding dose intervals and monitoring recommendations for the affected age group.
For detailed information, see our Myocarditis and mRNA page at /safety/myocarditis.