Welcome to GMP Part 2 — Active Pharmaceutical Ingredients
This course provides comprehensive training on the GMP requirements that govern the manufacture of Active Pharmaceutical Ingredients (APIs) and intermediates, as described in PIC/S GMP Part II — based on the internationally harmonised ICH Q7 guideline.
Why APIs Require Their Own GMP Framework
APIs are the biologically active components that give medicines their therapeutic effect. The quality, purity, and potency of an API directly determines the safety and efficacy of every finished dosage form made from it. A contaminated or sub-potent API propagates through every finished product batch that uses it — potentially affecting thousands of patients.
Because API manufacturing involves fundamentally different processes, equipment, and supply chain considerations compared to finished product manufacturing, PIC/S GMP Part II (ICH Q7) provides a dedicated, tailored GMP framework specifically for API manufacturers.
🔬 What is an API?
An Active Pharmaceutical Ingredient is any substance or mixture of substances intended to be used in the manufacture of a medicinal product that becomes an active ingredient — directly producing a pharmacological, immunological, or metabolic effect.
⚗️ What is an Intermediate?
A material produced during the steps of API processing that must undergo further molecular change or processing before it becomes an API. Intermediates may or may not be isolated.
🏗 API Starting Material
A raw material, intermediate, or API that is used in the production of an API and is incorporated as a significant structural fragment into the API. Determining the starting material is a critical regulatory and quality decision.
📘 ICH Q7
The International Council for Harmonisation guideline Q7 provides the globally harmonised GMP framework for APIs. PIC/S GMP Part II is based on ICH Q7 and is adopted by regulatory authorities including the FDA (21 CFR 211), TGA, EMA, and MHRA.
Who Should Complete This Course?
- New or existing Manufacturing and Quality personnel in API manufacturing
- Suppliers and contractors involved in API operations or supply chain
- Anyone needing a GMP certificate covering API-specific GMP requirements
- Finished product manufacturers who need to understand what they should expect from their API suppliers
- Job applicants seeking roles in API manufacturing, QC, QA, or supply chain
Course Structure
The course is divided into ten content modules covering all major areas of PIC/S GMP Part II. Each module ends with a 3-question knowledge check (70% required). The Final Assessment of 15 questions requires 80% to earn your Certificate of Completion.
Completion of GMP Part 1 is strongly recommended before taking this course. GMP Part 1 covers the foundational principles of GMP — quality systems, documentation, personnel, and regulatory frameworks — that this course builds upon. The 10 Golden Rules of GMP course is also helpful orientation.
Regulatory Framework & ICH Q7
API manufacturing is regulated by a dedicated global GMP framework built on ICH Q7. This module introduces the regulatory landscape, the scope of GMP Part II, and the concept of "GMP applicability" — which defines at what point in the manufacturing process GMP requirements begin to apply.
The ICH Q7 Foundation
ICH Q7 — Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients — was developed by the International Council for Harmonisation to provide a globally harmonised, science-based GMP framework specifically for API manufacturing. It has been adopted by regulatory authorities worldwide, including the FDA, EMA, MHRA, TGA, Health Canada, and PMDA Japan.
This guidance applies to the manufacture of APIs for use in human drug (medicinal) products. It applies to all types of API manufacturing: chemical synthesis, extraction, cell culture/fermentation, recovery from natural sources, or any combination of these processes. It also covers APIs used in clinical trials.
Concept of GMP Applicability — Where Does GMP Begin?
A critical and unique aspect of API GMP is the concept of GMP applicability — determining the point in the manufacturing process from which full GMP requirements apply. This is tied to the definition of the API starting material.
The earlier in the process the API starting material is defined, the more manufacturing steps are subject to full GMP requirements. Regulatory authorities assess the appropriateness of the starting material definition and may require justification.
As API manufacturing progresses from starting material through intermediates to the final API, GMP requirements become progressively more stringent. The final steps — API isolation, purification, and packaging — are subject to the most rigorous controls because they directly determine the quality of the material that enters the finished product.
Regulatory Authority Oversight of API Manufacturers
🇺🇸 FDA
Inspects API manufacturing sites globally — including non-US sites supplying the US market. FDA references ICH Q7 in its API GMP guidance. Findings may result in warning letters or import alerts.
🇪🇺 EMA / National Authorities
EU requires API suppliers to provide written confirmation of GMP compliance with EudraLex Vol. 4 Part II (based on ICH Q7). EU GMP certificates are issued following compliance inspections.
🇦🇺 TGA
API manufacturers supplying the Australian market must hold or be referenced in a TGA manufacturing licence or GMP clearance. TGA conducts site inspections and accepts MRA-equivalent inspections from PIC/S member authorities.
🇬🇧 MHRA
Post-Brexit, MHRA independently oversees GMP compliance for API manufacturers supplying the UK market. MHRA participates in PIC/S and accepts PIC/S-equivalent inspections under defined circumstances.
Contract API Manufacturing
Where API manufacturing steps are contracted to a third party, both the contract giver and contract acceptor bear defined GMP responsibilities. The contract must clearly specify which party is responsible for each GMP activity — including testing, release, and documentation. The contract giver may not absolve itself of quality responsibility by contracting out operations.
Quality Unit & Pharmaceutical Quality System
ICH Q7 requires API manufacturers to establish an independent Quality Unit with specific authority and responsibilities that cannot be delegated to production. The Quality Unit is the cornerstone of the quality system and must function effectively regardless of operational or commercial pressures.
The Quality Unit — Roles and Independence
The Quality Unit in an API manufacturing facility encompasses Quality Assurance and Quality Control functions. The essential requirement is that the Quality Unit is organisationally independent from production — ensuring that product quality decisions are not influenced by production schedules, yield targets, or cost pressures.
The Quality Unit shall have the responsibility and authority to approve or reject all starting materials, intermediates, APIs, and packaging/labelling materials; to approve all procedures impacting on the quality of intermediates or APIs; to ensure that critical deviations are investigated and resolved; and to approve all changes that may impact intermediate or API quality.
Key Quality Unit Functions
✅ Batch Release
Review and approve or reject batch production and laboratory records before release of each batch. The Quality Unit has final authority on release — production cannot override a QU rejection decision.
📋 SOP Approval
All procedures impacting API quality must be approved by the Quality Unit before use. This includes manufacturing SOPs, testing methods, cleaning procedures, and equipment qualification protocols.
🔍 Deviation Management
Ensure all critical deviations are investigated, root causes identified, and appropriate corrective actions implemented. Deviations that may affect API quality must be documented and evaluated before batch disposition.
🔄 Change Control
Approve all changes that may impact intermediate or API quality. This includes changes to processes, equipment, materials, facilities, and computerised systems.
The API Quality Management System
The quality management system for API manufacturing must be comprehensive, documented, and effectively implemented. ICH Q7 requires the system to cover all aspects of API production — from starting material procurement through to API distribution.
Core QMS Elements for API Manufacturers
- Document and records management system
- Deviation and non-conformance management
- CAPA (Corrective and Preventive Action) system
- Change control system
- Internal audit / self-inspection programme
- Supplier qualification and management
- Customer complaints handling
- Recall and withdrawal procedures
- Annual Product Review
Quality Risk Management in API Manufacturing
Risk-based thinking should be applied throughout the API quality system. ICH Q9 principles apply equally to API manufacturing — decisions about testing frequency, validation scope, and supplier oversight should all be informed by documented risk assessment.
Senior management must visibly and actively demonstrate commitment to the quality system. An API manufacturer where quality decisions are routinely overridden by commercial considerations will inevitably drift toward non-compliance — with potentially serious consequences for patient safety and regulatory standing.
Internal Audits and Self-Inspection
ICH Q7 requires API manufacturers to conduct internal audits to verify that their quality systems and operations are consistent with GMP requirements. Audits must be planned, independent, systematic, and documented. Findings must be reported to management and addressed through CAPA with defined timelines for closure.
Personnel, Premises & Utilities
The people, buildings, and support systems of an API manufacturing facility form the fundamental infrastructure within which GMP compliance must be sustained. Requirements for personnel qualifications, facility design, and critical utilities directly determine the quality of APIs produced.
Personnel Requirements for API Manufacturing
API manufacturers must employ an adequate number of personnel who have appropriate education, training, and experience for their assigned GMP responsibilities. Key personnel roles must be filled by individuals with relevant qualifications — particularly in quality and production management.
Training Requirements
- Initial GMP training covering ICH Q7 principles applicable to their role
- Role-specific training on relevant SOPs, processes, and equipment
- Ongoing/refresher training to maintain GMP awareness and respond to changes
- Training records maintained and accessible for inspection
- Effectiveness of training evaluated and documented
While API manufacturing environments typically have different contamination profiles from sterile finished product manufacturing, hygiene requirements are no less important. Personnel with illnesses that could affect API quality must be excluded from direct manufacturing operations. Any person involved in API processing must maintain appropriate personal hygiene and wear suitable protective clothing for the process area.
Premises and Facility Design for APIs
API manufacturing facilities must be designed, constructed, and maintained to prevent contamination and cross-contamination, facilitate cleaning, and enable appropriate environmental controls. Design principles must reflect the specific hazards of the materials being produced.
🔄 Campaign Manufacturing
Highly toxic APIs (e.g., cytotoxics, hormones, beta-lactam antibiotics) must be manufactured in dedicated facilities or with validated equipment cleaning between campaigns. Campaign scheduling must prevent cross-contamination risks.
🧱 Construction Materials
Floors, walls, ceilings, and drains must be constructed of materials that withstand the chemical environments of API manufacturing (solvents, acids, bases). Surfaces must be cleanable and resistant to corrosion.
💨 Ventilation
Adequate ventilation must control air quality, temperature, and humidity appropriate for the manufacturing process. Vapour containment is critical in solvent-based API processes. Air flows must prevent cross-contamination between areas.
🚿 Drains & Waste
Drains must be adequately sized, sealable where required, and not create backflow risks. Waste — including solvent waste, mother liquors, and contaminated materials — must be managed safely and in accordance with environmental regulations.
Utilities Critical to API Quality
Critical utilities whose output directly contacts API or affects API quality must be qualified and routinely monitored. Key critical utilities in API manufacturing include:
💧 Water Systems
Water used in final API purification steps, cleaning, and testing must meet defined quality standards (e.g., Purified Water, Water for Injection). Water systems must be validated, regularly monitored, and sanitised.
🌬 Compressed Gas
Nitrogen, compressed air, and other gases that contact API or are used in reaction vessels must meet defined purity specifications. Gas quality must be tested and certified from qualified suppliers.
♨ Steam
Steam used for API sterilisation or equipment sterilisation must be of defined quality. Clean steam (steam generated from Purified Water) is required where steam contacts product or product contact surfaces.
Equipment — Maintenance, Cleaning & Calibration
In API manufacturing, equipment is directly exposed to chemically reactive intermediates and APIs. Properly designed, maintained, cleaned, and calibrated equipment is essential to producing APIs of consistent quality and ensuring that one batch does not contaminate the next.
Equipment Design for API Manufacturing
Equipment used in API manufacturing must be constructed of materials that do not react with, add to, or absorb materials being processed in a way that could alter API quality. The design must permit thorough cleaning and inspection, and must be appropriately inert to the chemical conditions of the process.
Key Design Requirements
- Materials of construction must not contaminate APIs (e.g., stainless steel grades appropriate to chemical environment)
- Equipment surfaces that contact APIs must be cleanable and inspectable
- Closed systems preferred where API exposure risk is high
- Minimal dead legs, crevices, and areas where material can accumulate
- Seals and gaskets must be compatible with process chemicals and cleaning agents
Equipment Qualification (IQ/OQ/PQ)
Critical equipment must be qualified before use in API production. Qualification provides documented evidence that equipment is installed correctly, operates as intended, and performs consistently within its design parameters.
🔧 IQ — Installation Qualification
Verifies that equipment has been installed correctly per manufacturer specifications, drawings, and facility requirements. Documents equipment identity, location, utilities, and components.
⚡ OQ — Operational Qualification
Verifies that equipment operates correctly across its intended operating ranges. Tests key functions (e.g., temperature control, mixing speed, pressure ranges) against defined acceptance criteria.
📊 PQ — Performance Qualification
Verifies that equipment consistently performs within specifications under realistic production conditions using actual API materials or representative surrogates.
📅 Requalification
Equipment must be requalified after significant changes, major repairs, or moves. A periodic requalification schedule should be defined based on equipment criticality and maintenance history.
Equipment Cleaning — A Critical GMP Requirement
Cleaning of equipment used in API manufacturing must be sufficient to prevent contamination of subsequent batches with product residues, cleaning agents, microbial contamination, or other materials. Cleaning procedures must be validated.
Equipment and utensils shall be cleaned, stored, and, where appropriate, sanitised and sterilised to prevent contamination or carry-over of material that would alter the quality of the API or intermediate beyond the official or other established specifications. Where equipment is used for multiple APIs, cleaning validation shall demonstrate removal of residues to acceptable limits between products.
Cleaning Validation — Key Concepts
- Worst-case identification: Identify the hardest-to-clean equipment location and hardest-to-clean product residue
- Acceptance limits: Typically based on toxicological data (health-based exposure limits), visual cleanliness, and/or analytical residue limits
- Analytical methods: Must be validated (specific, sensitive, and practical) for detecting target residues
- Swab and rinse sampling: Both methods may be used; direct surface sampling preferred for localised residue
- Cleaning procedure: Must be documented as an SOP and followed consistently
Calibration Requirements
All measuring, weighing, recording, and control equipment critical to API quality must be calibrated at defined intervals against traceable standards. Out-of-calibration instruments require retrospective impact assessment on all measurements taken since the last valid calibration.
Each major piece of equipment used in API manufacturing must have an associated logbook recording all use, cleaning, maintenance, and calibration activities in chronological order. Equipment logbooks are reviewed during batch record review and regulatory inspection as evidence of equipment status at the time of manufacture.
API Starting Materials
The API starting material is the entry point into the GMP-controlled portion of the manufacturing process. Its definition, qualification, sampling, testing, and management are critical regulatory and quality activities that determine everything that follows in API production.
Defining the API Starting Material
The API starting material is defined as a raw material, intermediate, or API that is used in the production of an API and that is incorporated as a significant structural fragment into the API structure. The definition of the API starting material must be justified scientifically and agreed with regulatory authorities as part of the marketing authorisation or DMF (Drug Master File).
An API starting material is a raw material, intermediate, or an API that is used in the production of an API and that is incorporated as a significant structural fragment into the structure of the API. An API starting material can be an article of commerce, a material purchased from one or more suppliers under contract or commercial agreement, or produced in-house.
Regulatory authorities pay close attention to how API starting materials are defined. Defining the starting material too late in the process (close to the final API) reduces the number of steps under GMP oversight, which can be seen as an attempt to reduce regulatory burden. Conversely, defining it too early may be impractical. The definition must be scientifically justified based on process chemistry, not regulatory convenience.
Supplier Qualification for API Starting Materials
Starting material suppliers must be evaluated and approved before use. The qualification process involves assessing the supplier's quality system, GMP compliance, and capability to consistently supply materials meeting specification.
Supplier Qualification Steps
- Technical questionnaire / supplier assessment
- Review of supplier's GMP certificate, quality system documentation, and regulatory compliance history
- On-site audit for high-criticality suppliers (particularly where the starting material is complex or hazardous)
- Execution of a Quality Agreement defining responsibilities
- Listing on the Approved Supplier List (ASL)
- Periodic re-evaluation (typically annually or following changes)
Receipt, Sampling, and Testing of Starting Materials
On receipt, each container of API starting material must be examined for physical condition, damage, and correct labelling before being placed in quarantine. Representative sampling must be conducted by trained, designated personnel following a documented sampling procedure.
🏷 Labelling at Receipt
All incoming starting material containers must be labelled with the identity, status (Quarantine), and unique lot/batch number on receipt. Materials must be held in quarantine until released by the Quality Unit.
🧪 Identity Testing
ICH Q7 requires at least one identity test on each container of API starting material received. This requirement cannot be fully replaced by supplier Certificate of Analysis, except under specific, justified conditions.
📜 Certificate of Analysis
A supplier CoA may be used to reduce the extent of testing — but cannot eliminate identity testing. CoA data must be technically evaluated; simply filing the CoA without review is not acceptable GMP practice.
🔄 Re-testing
Starting materials held for extended periods or under inappropriate storage conditions must be re-evaluated against specification before use. Re-test dates must be assigned based on stability data.
Rejected and Returned Starting Materials
Starting materials that fail to meet specification must be clearly labelled as "Rejected" and physically segregated to prevent inadvertent use. Disposition must be documented. Returned materials may only be returned to inventory after evaluation by the Quality Unit confirms that quality has not been affected.
Production & In-Process Controls
API production encompasses all manufacturing steps from the introduction of starting materials through synthesis, isolation, purification, and drying to the final API. At each stage, in-process controls verify that the process is proceeding as intended and that the intermediate and API will meet their specifications.
Production Planning and Batch Documentation
All API production must be performed in accordance with master batch records (or master production instructions) that have been reviewed and approved by the Quality Unit. Each batch must have a complete batch production record that captures the full manufacturing history.
Master Batch Record Content for APIs
- API or intermediate name, strength, and batch size
- List of starting materials, reagents, and solvents with specifications
- Yield calculations and expected yield ranges
- Equipment identification
- Detailed manufacturing instructions with critical parameters
- In-process testing and acceptance criteria
- Sampling instructions
- Storage requirements for the intermediate or API
In-Process Controls (IPCs) in API Manufacturing
IPCs are tests or measurements performed during API manufacturing to monitor the progress of the process and ensure the product is within acceptable parameters at key stages. They are particularly critical in multi-step chemical syntheses where impurity profiles develop progressively.
🌡 Reaction Monitoring
Temperature, pH, pressure, and reaction time are monitored to ensure the chemical reaction proceeds under correct conditions. Deviations from specified reaction parameters must be documented and investigated.
🔬 Purity Testing
Intermediate purity (e.g., HPLC assay, impurity profile) is tested at defined process steps to confirm the reaction has progressed correctly before the next step is initiated.
⚖️ Yield Monitoring
Theoretical and actual yields are calculated and compared at each step. Unexplained yield losses outside established ranges must be investigated — they may indicate process issues or diversion of material.
💧 Residual Solvents
Residual solvent levels in intermediates and APIs must be controlled within ICH Q3C limits. Testing at appropriate drying or purification steps confirms limits are met before progressing to subsequent steps.
Representative samples shall be collected for evaluation. In-process sampling plans shall be based on statistically valid sampling or other scientifically sound method. In-process specifications shall be established and documented. Where in-process specifications are changed, the rationale for the change shall be documented and, where appropriate, approved by the Quality Unit.
Contamination and Cross-Contamination Prevention
Prevention of contamination and cross-contamination between batches or between products is a paramount concern in API manufacturing. Residual impurities in APIs can cause serious harm — both from a toxicological perspective (carryover of toxic intermediates) and from regulatory non-compliance (API failing purity specification).
API impurity profiles must be controlled within limits defined in the regulatory submission and applicable pharmacopoeial monographs. The discovery of unexpected impurities — particularly genotoxic impurities — in APIs is a serious regulatory and patient safety issue that can trigger product recalls, market withdrawals, and regulatory enforcement action.
Time Limitations and Holding of Intermediates
Maximum holding times for intermediates between processing steps must be defined and validated. Extended or undefined holding periods can result in degradation, impurity formation, or microbial growth in intermediates — compromising the API ultimately produced.
Laboratory Controls & OOS Investigations
The quality control laboratory is the independent verification arm of API GMP — testing starting materials, intermediates, and finished APIs against defined specifications to confirm that only compliant material is released. Rigorous laboratory controls and robust OOS investigation processes are essential to API quality assurance.
Laboratory GMP Requirements
Analytical laboratories supporting API manufacturing must operate under the same GMP principles as the manufacturing floor. Equipment must be qualified, test methods validated, analysts trained, and all data recorded and managed in compliance with data integrity requirements.
📐 Method Validation
All analytical methods used for API release testing must be validated per ICH Q2(R1). Key validation characteristics include specificity, accuracy, precision, linearity, range, limit of detection, and robustness.
🔧 Instrument Qualification
Laboratory instruments (HPLC, GC, UV-Vis, Karl Fischer, dissolution apparatus, etc.) must be qualified (IQ/OQ/PQ) before use in API testing. Calibration must be current and traceable.
📊 Reference Standards
Reference standards used in API testing must be of appropriate purity and documented provenance. Primary standards from recognised pharmacopoeial sources are preferred. Working standards must be characterised against primary standards.
🗄 Sample Retention
Retention samples of API batches must be retained for a defined period (typically one year beyond expiry, or per regulatory requirement). They provide a resource for retrospective investigation if quality questions arise post-release.
Out of Specification (OOS) Investigation Process
When a test result falls outside established specification or acceptance criteria, a structured OOS investigation must be initiated. The FDA's OOS guidance (2006) and ICH principles provide the framework for a compliant investigation process.
Phase 1 — Laboratory Investigation
- Review original test data, calculations, and instrument printouts
- Check for obvious assignable causes: transcription errors, instrument malfunction, sample preparation error, analyst error
- If a confirmed laboratory error is identified, the result may be invalidated and retesting performed
- If no laboratory error can be confirmed, proceed to Phase 2
Phase 2 — Full OOS Investigation
- Expand review to production records, process parameters, and materials
- Consider impact on related batches or products sharing the same materials
- Initiate CAPA
- Quality Unit must be involved and must approve disposition of the OOS batch
ICH Q7 and FDA guidance are explicit: retesting a sample from an OOS batch without a legitimate, documented laboratory investigation finding that identifies an assignable cause is not acceptable. "Testing into compliance" — retesting until a passing result is obtained — is a serious GMP and data integrity violation.
Stability Testing of APIs
Ongoing stability testing of APIs must be conducted to confirm that the API continues to meet its specifications throughout its labelled retest period or expiry date. ICH Q1A provides the framework for pharmaceutical stability testing. Stability data informs the setting of retest dates and storage conditions for API specifications.
Materials, Packaging, Labelling & Distribution
Beyond the chemical manufacturing process itself, API GMP governs the management of all materials used in production, the packaging and labelling of the final API, and its storage and distribution to customers — each presenting distinct quality and safety risks.
Materials Management
All materials used in API manufacturing — including solvents, reagents, catalysts, and packaging materials — must be managed to prevent mix-up, contamination, and deterioration. A robust materials management system ensures traceability from supplier through manufacture to distribution.
🏷 Receipt & Labelling
All incoming materials must be labelled with identity, lot/batch number, and status (Quarantine) on receipt. Materials must be physically segregated by status to prevent inadvertent use of unreleased or rejected materials.
✅ Approved Supplier
Materials must only be sourced from approved, qualified suppliers listed on the Approved Supplier List. Use of materials from unapproved sources is a GMP violation — regardless of CoA results.
📦 Storage Conditions
Materials must be stored under conditions that maintain their integrity and prevent contamination. Hazardous materials require appropriate safety measures. FIFO (First In, First Out) rotation must be applied.
🗑 Rejected Materials
Rejected materials must be labelled, physically segregated, and disposed of in a timely manner. They must not be mixed with approved materials or used in subsequent batches.
Solvent Recovery and Recycling
Solvents recovered and recycled from API manufacturing processes may be reused in the same or different processes, provided appropriate controls are in place. Recovered solvents must be tested and meet defined specifications before reuse. Commingled solvent streams require special consideration.
Recovered solvents that have been in contact with multiple different API intermediates or products present cross-contamination risks. The purity specification for recovered solvents must account for all potential contaminants from all processes in which the solvent has been used.
API Packaging and Labelling
Packaging of APIs must protect against environmental contamination and degradation during storage and transport. Labels must be accurate, legible, and indelible — containing all required information for safe identification, storage, and handling.
Required API Label Information
- Name of the API and grade/form if applicable
- Lot/batch number
- Manufacturing date and retest date or expiry date
- Storage conditions (temperature, humidity, light exposure)
- Special handling precautions (e.g., "Keep away from moisture," "Toxic — handle with appropriate PPE")
- Name and address of the manufacturer
- Quantity (weight or volume)
Storage and Distribution of APIs
APIs must be stored and distributed under conditions that maintain their quality. Temperature-controlled storage must be monitored continuously (not just spot-checked). Distribution records must enable full traceability of each API batch from manufacturer to customer.
APIs shall be stored and transported under conditions that protect their quality. Procedures shall be established and followed for the distribution of APIs that ensure they are protected from contamination and degradation. A system shall be in place to recall APIs as required.
Recall Preparedness
API manufacturers must have a written recall procedure and maintain distribution records that enable rapid identification and recovery of distributed API batches. Distribution records must include the customer name, address, batch number, and quantity shipped. Mock recalls should be conducted periodically to verify the effectiveness of the recall system.
Computerised Systems & Data Integrity
Computerised systems are integral to modern API manufacturing — controlling processes, managing data, and supporting quality decisions. GMP requirements for computerised systems are stringent, because data generated by these systems directly supports batch release, regulatory submissions, and patient safety decisions.
Regulatory Framework for Computerised Systems in APIs
Multiple regulatory frameworks govern the use of computerised systems in API and pharmaceutical manufacturing. The key requirements applicable to API manufacturers include:
🇺🇸 21 CFR Part 11
FDA regulation for electronic records and electronic signatures in pharmaceutical manufacturing. Requires validated systems, audit trails, access controls, and electronic signature controls equivalent to handwritten signatures.
🇪🇺 EU GMP Annex 11
EU GMP requirements for computerised systems. Covers validation, access control, audit trails, data storage, business continuity, and electronic batch record management.
📘 ICH Q7 Chapter 5
ICH Q7 specifically addresses computerised systems used in GMP operations for APIs — including process control systems, LIMS, ERP systems, and chromatography data systems.
🔐 GAMP 5
Good Automated Manufacturing Practice guide (ISPE) provides a risk-based framework for validating computerised systems in regulated industries — widely adopted for CSV (Computer System Validation) programmes.
Computer System Validation (CSV)
All computerised systems that are used in API GMP operations must be validated — documented evidence that the system consistently performs its intended functions within defined specifications. The validation approach should be risk-based, with greater rigor applied to systems with more direct impact on product quality.
CSV Validation Lifecycle
- User Requirements Specification (URS): Define what the system must do and what GMP functions it must perform
- Functional Specification (FS) / Design Specification (DS): How the system will meet the requirements
- Installation Qualification (IQ): Verify the system is installed correctly
- Operational Qualification (OQ): Verify the system operates correctly per specification
- Performance Qualification (PQ): Verify the system performs consistently in the intended operational environment
- Ongoing Monitoring and Periodic Review: Verify continued validated state
Data Integrity Requirements for Computerised Systems
All GMP data generated by computerised systems must meet the ALCOA+ data integrity principles. In an electronic environment, this requires specific technical controls:
📋 Audit Trails
Computer systems must have audit trails that record all entries, edits, and deletions — capturing who made the change, what the original value was, what the new value is, and when the change occurred. Audit trails must not be modifiable by the system user.
🔐 Access Controls
User access must be controlled through unique user IDs and secure passwords. Access rights must be commensurate with the user's role — not everyone should have editing or administration rights. Shared logins are prohibited.
💾 Data Backup
Data must be backed up regularly and backup copies stored in a separate location. Restoration of data from backups must be tested periodically. Loss of electronic GMP data is a serious regulatory event.
🕰 Clocks & Timestamps
System clocks must be accurate and time-stamped records must not be editable by users. Clock drift detection and synchronisation with a trusted time source are required. Incorrect timestamps undermine data contemporaneousness.
Sharing computer system logins or passwords in a GMP environment is a serious data integrity violation. When a shared account is used, it is impossible to attribute data entries to a specific individual — violating the Attributable (A) principle of ALCOA+. Each user must have a unique, secure login that they do not share with others under any circumstances.
Documentation, Validation & Change Control
Documentation, validation, and change control form the interlocking backbone of API GMP compliance. Together, they provide the documented evidence that APIs are produced by validated, controlled processes — and that changes to those processes are managed to protect product quality and patient safety.
GMP Documentation for API Manufacturing
ICH Q7 requires comprehensive documentation for all GMP-relevant activities in API manufacturing. Documentation must be accurate, complete, contemporaneous, and retained for the required periods. The foundational rule remains: if it is not documented, it did not happen.
Key Document Types in API GMP
📘 Master Production Records
Approved templates for manufacturing each API — detailing process steps, parameters, equipment, materials, IPCs, and calculations. The basis for each executed batch record.
📋 Batch Production Records
Completed records for each manufactured batch. Must demonstrate that each step was performed correctly, all IPCs were within limits, and all deviations were documented and addressed.
🧪 Laboratory Records
Raw data, calculations, and results from all testing — original instrument printouts, analyst notes, and final results. Must be attributable, contemporaneous, and unaltered.
🏷 Specifications
Approved acceptance criteria for starting materials, intermediates, APIs, solvents, reagents, and packaging. Must be scientifically justified and consistent with regulatory submissions.
Validation in API Manufacturing
Validation provides the documented scientific evidence that processes, equipment, utilities, and systems consistently produce APIs meeting their predetermined specifications. ICH Q7 requires validation of all critical manufacturing steps and cleaning procedures.
The critical aspects of the particular operations being conducted shall be qualified and/or validated. A written validation plan shall be prepared before undertaking validation activities. Validation shall be performed according to predefined protocols with documented results. A validation report summarising results and conclusions shall be prepared.
Process Validation Approaches for APIs
- Prospective Validation: Validation conducted before routine production — appropriate for new processes and new facilities
- Concurrent Validation: Validation conducted during routine production of batches intended for release — requires Quality Unit approval and is used under defined circumstances
- Retrospective Validation: Validation based on accumulated historical data from routine production — ICH Q7 limits this approach to well-established processes with sufficient historical data
- Continued Process Verification: Ongoing monitoring to provide statistical assurance that the process remains in a state of control during routine production
Change Control for API Processes
All changes to validated API manufacturing processes, facilities, equipment, starting materials, and analytical methods must be managed through a formal change control system. Changes may require revalidation, regulatory notification, or both.
Categories of Change and Regulatory Impact
🟢 Minor Changes
Low-impact changes unlikely to affect API quality (e.g., non-critical equipment replacement with equivalent model). May require documentation and Quality Unit approval but not necessarily regulatory notification.
🟡 Moderate Changes
Changes with potential quality impact requiring validation or enhanced testing (e.g., change to a synthesis step parameter within validated range). May require regulatory notification depending on jurisdiction.
🔴 Major Changes
Significant changes with high potential quality impact (e.g., new API starting material, new synthesis route, new manufacturing site). Typically require prior regulatory approval before implementation.
Changes to validated API processes may require regulatory notification to the agencies in whose submissions the API is referenced. Major changes may require prior approval. Failure to notify regulators of reportable changes can result in the API being considered manufactured outside the approved process — making any finished product manufactured from it potentially non-compliant.
Document and Record Retention
ICH Q7 requires that batch records be retained for at least three years after the batch is distributed, or one year after the API expiry date, whichever is longer. Validation records must be retained for the lifetime of the validated process. Records must be accessible for regulatory inspection throughout the retention period.
Final Assessment
Congratulations on completing all ten modules of GMP Part 2. This final assessment covers all course content. You must score 80% or higher (12 of 15 correct) to receive your Certificate of Completion.
Course Complete!
You have successfully completed GMP Part 2 — PIC/S GMP training for Active Pharmaceutical Ingredients. Your Certificate of Completion can be forwarded to your Quality Manager, Supervisor, or HR Department.
It may be provided to Quality Management or HR for inclusion in personnel training files.
eLearning does not replace onsite, product-specific, or site-specific GMP training.