In the highly regulated environment of the pharmaceutical industry, the audits and the Regulatory inspections They are a constant. The proper preparation for these evaluations is crucial for guarantee compliance With good manufacturing practices (GMP) and avoid observations that can lead to impacts legal, economic and reputational.
In this context, the correct qualification of equipment and facilities is one of the fundamental pillars to demonstrate that the processes are robust, reproducible and controlled.
Technical and documentary aspects under the auditor's magnifying glass
Qualification refers to Documented process to ensure that critical equipment, facilities and systems work according to their specifications and are suitable for planned use.
This practice is typically divided into stages: URS (User Requeriments Specification), FRA (Functional Risk Assessment), DQ (Design Qualification), IQ (Installation Qualification), OQ (Operational Qualification) y PQ (Performance Qualification). Each phase documents the conformity of the system with the required quality and functionality requirements.
During an audit (either internal, of client or by a regulatory authority such as EMA or FDA) auditors check these documentary evidence to verify that the company controls its Critical systems and that there are mechanisms for continuous review and maintenance.
What an auditor seeks to see and verify
During an audit or regulatory inspection, auditors evaluate whether the company operates under a robust quality system and according to good manufacturing practices (GMP). In relation to the qualification of equipment and facilities, there are certain key elements whose absence or weakness can generate serious observations.
Next, the main points that auditors usually review with special attention are detailed:
1. Validation Master Plan (PMV)
The PMV is a high -level document that establishes the general validation and qualification strategy in the plant. Must contain:
- The scope and criteria to define which systems and equipment are "critical."
- Risk analysis justification (for example, using FMEA methodology).
- Schedule of qualification activities.
- Roles and responsibilities of personnel involved.
An auditor will verify that the PMV is in force, signed by quality managers and is consistent with the activities executed in the field.
Example: If a sterile filling line appears as "non -critical" in the PMV, the auditor can question the classification and request documentary evidence that justifies that exclusion.
2. Qualification documentation
The stages of DQ, IQ, OQ and PQ must be completely documented, with signed, verifiable and available evidence. It is expected to see:
- Pre -approved protocols with clear and measurable acceptance criteria.
- Execution evidence: field records, data sheets, calibration certificates.
- Final reports that document the results, deviations and conclusions.
- Auditors especially value documentary traceability from specification to the liberation of the equipment.
Example: An HVAC equipment must have OQ protocols that validate the differential pressure, temperature and humidity in controlled conditions, and the PQ must demonstrate that they are maintained during the normal operation.
3. Documented change control
Any modification to systems, facilities or procedures that may affect the qualification must be managed under a change control system. This must include:
- Evaluation of the impact of change (technical, regulatory and validation).
- Prior approval by QA and technical managers.
- Review of the need for requalification.
Example: If the software of a controlled PLC is changed, it should be evaluated whether that change affects the qualified critical functions, and the partial or total OQ must be re -executed if applicable.
4. Periodic and recalification review
Critical teams must be subject to a periodic review, at defined intervals, to evaluate:
- Maintenance results, calibration, use and deviations.
- Changes made in the system.
- Criteria for deciding if recalification is required.
This process ensures the Continuous validation of the state of the team, in line with the system's life cycle approach.
Example: A autoclave should be recalified if temperature sensors are replaced, if the cycle configuration changes, or in defined intervals (for example, every 2 years).
5. DATA INTEGRITY AND COMPLIANCE WITH 21 CFR PART 11 / ALCOA+
The integrity of the data generated during qualifications is a critical focus in every audit. Auditors seek evidence of:
- Access and traceability controls (Audit Trail).
- Electronic signatures with adequate authentication.
- No existence of manipulated, lost or poorly registered data.
- In accordance with the alcoa+principles: attributable, legible, contemporary, original, exact, complete, consistent, durable and available.
Example: If SCADA systems are used to record variables during the OQ of a reactor, they must have enabled Audit Trail and electronic signature controls approved by QA.
Frequent cases of non -conformities in inspections
During regulatory audits, agencies such as FDA or emadect a series of recurring deficiencies in the qualification and validation activities of facilities and equipment. These non -conformities, classified as Observations, Major findings or even Criticism, can lead to warning letters (Warning Letters), product withholdings or manufacturing suspensions.
Next, the most common cases are described:
1. Equipment in use without documented qualification
Problem description: The equipment has been put into operation without having carried out or completed its qualification process (IQ/OQ/PQ). This indicates that it has not been formally proven that the equipment meets the critical requirements of operation and quality.
Impact:
- Invalidates the data generated by said equipment.
- Risk of producing medications out of specification.
- Lack of traceability and scientific validation of the process.
Example: A filtration system used in the production of injectables is working without qualification reports executed or evidence of compliance with its critical parameters.
Recommendation: No team classified as a critic should be used without having been formally qualified and released by the quality area. A procedure must be established that condition the use to the approval of the final PQ report.
2. Absence of recalification after significant changes
Problem description: Changes in the configuration of a equipment, software or operating parameters are detected, without evidence of impact or requalification evaluation.
Impact:
- The initial qualification is invalidated if the changes affect critical functions.
- Loss of control over the validated state of the system.
- Possible cross pollution, temperature deviations, pressure, etc.
Example: After replacing the engine of an HVAC system, it was not evaluated whether it was necessary to repeat differential pressure tests or environmental validation.
Recommendation: Apply the change control procedure provided that any operational condition or critical component is modified. Each change must be analyzed by QA and classified according to its impact on product quality, patient health and operator safety.
3. Protocols with inadequate acceptance criteria or without technical justification
Problem description: The qualification protocols (especially OQ and PQ) lack clear, quantifiable and scientifically justified acceptance criteria. In some cases, they are based on generic standards or simply do not exist.
Impact:
- It hinders the objective evaluation of the results.
- It generates uncertainty about the reliability of the equipment.
- It can lead to unrelated deviations or arbitrary acceptances.
Example: A PQ protocol for a solid mixer establishes as "good mixing" acceptance criteria without defining the degree of homogeneity or the analysis method.
Recommendation: The acceptance criteria must be specific, quantifiable, aligned with product requirements, and validated by technical experts. Use guides such as ISPE, PDA or ISO standards as a technical reference.
4. Lack of traceability of deviations and corrective actions
Problem description: During the execution of qualifications, deviations are presented (for example, failures in alarms, sensor failures, out -of -specification results), but are not documented or deal with corrective actions.
Impact:
- Risk of non -corrected failures reappearing in operation.
- The auditor can consider the invalid results if deviations are not resolved.
- A culture of poor compliance is perceived.
Example: During an OQ of a sterilization tunnel, a temperature alarm is recorded below the setpoint, but the test is not investigated or repeated.
Recommendation: Any deviation must be registered, evaluated, classified and treated in accordance with the non -conformities management procedure. The execution of the protocol should not continue until the deviation is resolved or technically justify its impact.
5. Incomplete documentation, illegible or without control
Problem description: Documents are found without signatures, incorrect dates, loose sheets, without numbering, obsolete documents in use, or non -controlled changes.
Impact:
- Non -compliance with GMP standards and data integrity.
- Loss of legal evidence before authorities.
- Difficulty reconstructing qualification history.
Example: An auditor detects that PQ records are on loose sheets without signature or protocol reference, and some data are written with pencil.
Recommendation: Apply strict documentary control procedures: consecutive numbering, firms with date, use of indelible ink, traceability between versions, digital support in accordance with 21 CFR Part 11 or local standards.
Prepare effectively for a regulatory inspection requires more than complying with the regulations: it implies adopt a culture of proactive quality. The periodic realization of internal audits, the continuous training of the personnel, the rigorous review of the documentation and the implementation of a risk -based approach (Quality Risk Management) allow to anticipate possible findings and sustain the validated state of equipment and facilities. These good practices not only ensure regulatory compliance, but Strengthening the reliability of the quality system and Final product safety.
From IDI, we support our customers at each stage of the system's life cycle, from design to the requalification, ensuring that they are prepared to face any audit with confidence. Contact us and discover how we can help you come true with the maximum technical and normative guarantee.