Why Interpret Efficacy and Safety Together?
A treatment can improve the chance of clinical benefit while also increasing the chance of serious toxicity. Reporting those findings separately is informative, but it does not answer a practical decision question: how strongly do the data support benefit of a clinically meaningful size together with an acceptable safety profile? A joint posterior probability can address that question when the outcome definitions, thresholds, model, and decision rule are specified in advance.
The goal is not to collapse efficacy and safety into one universal score. Their clinical importance depends on the disease, available alternatives, severity and reversibility of toxicity, and patient preferences. Instead, this tutorial uses a transparent example: require a minimum efficacy improvement and place a maximum tolerable increase on serious toxicity, then assess the posterior probability that both conditions hold.
Both outcomes must be defined for a common target population and an interpretable follow-up period. For example, “efficacy” might mean clinical response by week 24 and “serious toxicity” might mean at least one qualifying event by week 24. Changing the time window, event definition, or handling of treatment discontinuation changes the estimand and therefore changes the benefit-risk question. Randomization supports causal comparisons of assigned treatment when the analysis respects the trial design and the chosen estimands; it does not make outcome definitions interchangeable.
A Simple Binary-Outcome Model
For a transparent calculation, suppose a two-arm randomized trial records one binary efficacy outcome and one binary serious-toxicity outcome per participant. Write \(y_{E,T}\) and \(y_{E,C}\) for the numbers with the efficacy outcome, and \(y_{S,T}\) and \(y_{S,C}\) for the numbers with serious toxicity. Let \(n_T\) and \(n_C\) be the arm sizes. A basic model treats each arm-specific endpoint count as binomial, conditional on its event probability. With independent \(\operatorname{Beta}(1,1)\) priors for the four probabilities, the posterior distribution for each probability is beta:
The uniform prior is a simple illustration, not a default that is automatically appropriate for every trial. The beta posterior mean and variance, for \(p\mid y\sim\operatorname{Beta}(a',b')\), are \(a'/(a'+b')\) and \(a'b'/[(a'+b')^2(a'+b'+1)]\). These give a direct way to summarize arm-specific uncertainty. Posterior uncertainty for a difference is then obtained from the arm-specific distributions; it is not the difference of two standard errors calculated as though the probabilities were known.
The model above makes a further assumption that matters for the joint decision: the endpoint likelihoods and their priors factor across efficacy and safety, so the posterior distributions for \(\Delta_E\) and \(\Delta_S\) are independent. Under that assumption,
This product is justified only by posterior independence. Efficacy and toxicity are both measured on participants, and their outcomes can be associated. Randomization does not imply that the outcomes are independent. If the analysis must preserve within-participant association, a joint outcome model and joint posterior draws are needed; then estimate \(P(B\mid\text{data})\) by counting draws satisfying both inequalities, rather than multiplying marginal probabilities.
From Posterior Distributions to a Decision
In practice, posterior probabilities for differences of beta-distributed quantities are often evaluated numerically, for example by drawing values from each posterior and calculating the differences. For hand calculations, a normal approximation to each difference is convenient when the arm-specific posterior distributions are not too skewed and probabilities are not concentrated near zero or one. If the arm-specific posterior probabilities are independent, the approximate posterior mean of a difference is the difference of the posterior means, and its variance is the sum of their posterior variances. For \(Z\sim N(0,1)\), write \(\Phi(z)=P(Z\leq z)\). Then, if \(\Delta_E\) is approximated by \(N(m_E,s_E^2)\),
For a safety threshold, the corresponding calculation is \(P(\Delta_S\leq\delta_S\mid\text{data})\approx\Phi[(\delta_S-m_S)/s_S]\). A decision rule can then compare the joint posterior probability with a prespecified cutoff. The rule is a decision convention, not a theorem about what regulators, clinicians, or patients must prefer. Its thresholds and probability cutoff should reflect the intended decision and be set before interpreting the trial results.
Worked Example: Efficacy Evidence With Uncertain Safety
Consider a hypothetical randomized trial with 100 participants per arm. By the specified follow-up, 70 of 100 treatment participants and 55 of 100 control participants meet the efficacy outcome. Serious toxicity occurs in 12 of 100 treatment participants and 8 of 100 control participants. Assume independent \(\operatorname{Beta}(1,1)\) priors and the factorized model above.
Efficacy posteriors. The treatment probability has posterior \(\operatorname{Beta}(71,31)\), and the control probability has posterior \(\operatorname{Beta}(56,46)\). Their means are \(71/102=0.6961\) and \(56/102=0.5490\), so \(m_E=0.1471\), or a 14.71 percentage-point estimated improvement. The posterior variances are \(71(31)/[102^2(103)]=0.002054\) and \(56(46)/[102^2(103)]=0.002404\). Thus \(s_E=\sqrt{0.002054+0.002404}=0.06677\), and
Safety posteriors. The treatment and control probabilities have posteriors \(\operatorname{Beta}(13,89)\) and \(\operatorname{Beta}(9,93)\). Their means are \(0.1275\) and \(0.08824\), giving \(m_S=0.03922\). Their variances are \(13(89)/[102^2(103)]=0.001080\) and \(9(93)/[102^2(103)]=0.0007813\). Therefore \(s_S=\sqrt{0.001080+0.0007813}=0.04314\), and
Under the assumed posterior independence, the joint probability is approximately \(0.927\times0.415=0.385\). Although the efficacy probability exceeds 0.90, the joint probability does not. Under the stated rule, these hypothetical results do not meet the criterion to proceed. The result is not a claim that treatment is ineffective; it says the posterior probability of meeting both prespecified conditions is about 0.385 under this model and these data.
Interpreting the Joint Probability Carefully
A joint probability is useful because it keeps the two requirements visible. A high probability of efficacy benefit alone cannot compensate, under the stated rule, for weak evidence that toxicity stays within its limit. Conversely, favorable safety evidence alone does not establish a meaningful efficacy improvement. The joint criterion also differs from asking whether either endpoint is “statistically significant”: it directly evaluates a prespecified region of the two-dimensional effect space.
The normal approximation in the examples is a calculation aid. It can be inaccurate with small samples, rare serious events, strongly skewed beta posteriors, or a threshold near a posterior boundary. A practical analysis should compare the approximation with direct numerical integration or posterior simulation from the specified model. With \(M\) posterior draws, an estimate of the joint probability is
where \(I(\cdot)\) equals 1 when the condition is true and 0 otherwise. If draws come from a joint model, they retain posterior dependence between the endpoint effects. Monte Carlo uncertainty should also be checked: increasing \(M\) should make the estimate stable enough for the decision, especially when it lies near the prespecified cutoff.
Worked Example: Favorable Safety Does Not Guarantee the Joint Criterion
Consider another hypothetical trial with the same sample size and efficacy counts as the preceding example: 70 of 100 treatment participants and 55 of 100 control participants meet the efficacy outcome. Serious toxicity occurs in 5 of 100 treatment participants and 8 of 100 control participants. Use the same priors, thresholds, and independence assumption.
The efficacy calculation is unchanged, giving \(P(\Delta_E\geq0.05\mid\text{data})\approx0.927\). The safety posteriors are now \(\operatorname{Beta}(6,96)\) for treatment and \(\operatorname{Beta}(9,93)\) for control. Their means are \(6/102=0.05882\) and \(9/102=0.08824\), so \(m_S=-0.02941\). Their variances are \(6(96)/[102^2(103)]=0.0005375\) and \(0.0007813\), giving \(s_S=\sqrt{0.0013188}=0.03632\). Consequently,
The joint probability is approximately \(0.927\times0.949=0.880\). Despite favorable marginal evidence for both conditions, 0.880 is below the prespecified 0.90 joint cutoff. The illustrative rule is not met. This example shows why two separate marginal probabilities above a seemingly high level do not necessarily produce a joint probability above that same level.
Worked Example: A Safety Concern Can Dominate a Strong Efficacy Signal
In a third hypothetical trial, suppose efficacy again occurs in 70 of 100 treatment participants and 55 of 100 control participants, while serious toxicity occurs in 24 of 100 treatment participants and 8 of 100 control participants. The efficacy probability remains approximately 0.927. The safety posteriors are \(\operatorname{Beta}(25,77)\) and \(\operatorname{Beta}(9,93)\), with means \(25/102=0.2451\) and \(9/102=0.08824\). Thus \(m_S=0.1569\). The posterior variances are \(25(77)/[102^2(103)]=0.001796\) and \(0.0007813\), giving \(s_S=\sqrt{0.002578}=0.05077\).
The approximate safety probability is
The joint probability is approximately \(0.927\times0.0062=0.0057\). Under the stated rule, the evidence clearly fails the benefit-risk criterion because the posterior probability of staying within the toxicity limit is very low, despite the same efficacy result as before.
Assumptions, Diagnostics, and Alternatives
A coherent interpretation requires more than arithmetic. Check that the efficacy and toxicity outcomes are defined consistently across arms; event ascertainment and follow-up are comparable; the binomial model is reasonable for the analyzed participants; and missing outcomes or competing events are handled in a way that matches the estimands. With appreciable loss to follow-up, simply treating observed participants as the full randomized groups may be misleading. The analysis should state what assumptions connect observed outcomes to the intended treatment-policy or other estimand.
Also examine prior sensitivity, particularly when serious toxicity is rare or when sample sizes are small. A \(\operatorname{Beta}(1,1)\) prior can have a material influence when few events are observed. Compare the decision under clinically defensible alternative priors and report whether the posterior probability crosses the decision cutoff. Inspect posterior draws or distributions for skewness and extreme probabilities; if the normal approximation is questionable, use exact numerical evaluation or simulation rather than relying on its tail estimate.
There are several alternatives, each answering a different question. Separate marginal posterior probabilities are easy to report, but do not alone represent the probability that both requirements hold. A utility-based analysis can assign different values to efficacy and toxicity and summarize expected utility, but its result depends on defensible utility weights. A composite endpoint combines outcomes into one binary measure, but can obscure which component drives the result. Frequentist co-primary endpoint procedures use their own prespecified error-control framework; their outputs are not the same as a posterior probability of a joint region. These approaches can complement one another, but their numerical criteria should not be treated as interchangeable.
Common Pitfall: Multiplying Marginal Probabilities Automatically
Incorrect reasoning: “The efficacy probability is 0.90 and the safety probability is 0.90, so the probability of both is 0.81.” That multiplication is valid only if the relevant posterior events are independent. Separate endpoint analyses do not establish that independence, and shared participants can induce dependence between endpoint data and effect estimates.
Correction: State the joint model and its dependence assumptions. If posterior independence is justified by the model, multiply the marginal probabilities. Otherwise, calculate the probability of both conditions from joint posterior draws or a joint posterior distribution. In either case, describe the result as conditional on the model, prior, data, and prespecified thresholds—not as a model-free probability that treatment is “safe and effective.”
Check Your Understanding
Answer each question, then compare your reasoning with the short solutions.
- Why does randomization alone not justify multiplying posterior probabilities for efficacy benefit and acceptable safety?
- Suppose the posterior probability of meeting the efficacy threshold is 0.96 and the safety probability is 0.80. Under posterior independence, what is the joint probability, and does it meet a 0.90 cutoff?
- What does the event \(\Delta_S\leq0.03\) mean when \(\Delta_S\) is treatment minus control serious-toxicity risk?
- Name one diagnostic concern that makes a normal approximation for a difference of beta probabilities less reliable.
Solutions: (1) Randomization assigns treatment but does not imply independent efficacy and toxicity outcomes; multiplication requires posterior independence under the model. (2) The joint probability is \(0.96\times0.80=0.768\), which is below 0.90. (3) The treatment-associated increase in serious-toxicity risk is at most 3 percentage points; a negative difference also satisfies the condition. (4) Examples include rare events, a small sample, strongly skewed posterior distributions, or a threshold in an extreme tail.