How should the pilot be scoped?
Narrowly, and on your worst data. Pick three real batches, including one with messy supplier documentation and one that failed something, and ask the vendor to load them and produce one finished output: a deviation write-up, a checked certificate transcription, an audit pack. Timebox it to two weeks.
A pilot on clean demo data tells you what the software does when nothing's wrong, which is never the state of a real quality record. What you're buying is the behaviour in the awkward cases.
