The GxP acronym decoder.

The set of attributes that define trustworthy GxP data. A record is data-integrity compliant when it can be traced to who made it, read, made at the time of the activity, an original (or true copy), and accurate — plus complete, consistent, enduring, and available for its full retention period.

The degree to which data is complete, consistent, and accurate throughout its lifecycle. DI failures — backdating, shared logins, deleted results, disabled audit trails — are among the most serious findings a regulator can issue.

A secure, computer-generated, time-stamped record of who did what and when to an electronic record — created, modified, or deleted — that cannot be altered. Reviewing audit trails as part of record review is a core data-integrity expectation.

The closed-loop process of investigating a problem to root cause, correcting it, and taking preventive action so it (and similar issues elsewhere) does not recur — with an effectiveness check to confirm the fix held. The preventive half is the one most systems under-invest in.

A departure from an approved procedure, specification, or standard. Deviations must be documented, investigated proportionate to risk, and trended — pattern recognition across deviations is what regulators expect, not just individual closure.

The structured investigation that identifies the underlying cause of a problem rather than its symptom. A weak RCA — stopping at "human error" — is the reason many corrective actions fail and problems recur.

The formal process for evaluating, approving, implementing, and documenting changes to a validated process, system, or document — assessing risk before implementation so improvements do not introduce new problems.

The overarching quality management system for pharmaceuticals defined by ICH Q10 — management responsibility, CAPA, change management, and continual improvement operating as one system across the product lifecycle. FDA’s QMM program rates the maturity of exactly this system.

The formalized system of processes, procedures, and responsibilities that directs and controls an organization’s quality. In pharma it is the ICH Q10 PQS; in devices, the ISO 13485 / FDA QMSR system.

FDA’s voluntary program to rate the maturity of a manufacturer’s quality management practices beyond baseline CGMP compliance — created to help reduce drug shortages and recalls and signal manufacturing reliability. Assessed across five practice areas on a 10-point scale.

The total cost a business incurs because of quality failures — internal failure (scrap, rework, investigations), external failure (recalls, complaints, lost trust), plus appraisal and prevention costs. Much of it is hidden below the line, like an iceberg.

The systematic process for the assessment, control, communication, and review of risks to quality across the product lifecycle (ICH Q9). Tools include FMEA, HACCP, and risk ranking; it underpins risk-based decisions throughout GxP.

A structured risk-assessment tool that identifies potential failure modes, their effects, and their causes, then ranks them (often by severity × occurrence × detectability) to prioritize controls. A common QRM technique.

The periodic review of a product’s manufacturing and quality data (batches, deviations, OOS, changes, complaints, stability) to verify consistency and identify improvement. A common inspection starting point (US §211.180; EU GMP Chapter 1).

The three-stage FDA approach to process validation: Stage 1 process design, Stage 2 process qualification (PPQ), and Stage 3 continued process verification. Validation is a lifecycle, not a one-time event.

The classic qualification stages for equipment and systems: IQ confirms it is installed correctly, OQ that it operates across its intended range, and PQ that it performs consistently under real conditions. Often preceded by design qualification (DQ).

Stage 2 of process validation — confirming that the commercial process, running with qualified equipment and trained staff, reproducibly produces product meeting its quality attributes (typically demonstrated over defined qualification batches).

Stage 3 of process validation — the ongoing monitoring and trending of the commercial process to ensure it stays in a state of control, providing early warning of drift before it becomes a deviation or batch failure.

The document defining what a system, equipment, or facility must do from the user’s perspective — the traceable starting point for qualification, verification, and acceptance.

The integrated engineering and quality process of bringing facilities, equipment, and utilities into GxP service. ASTM E2500 reframed it around risk- and science-based verification of the aspects critical to product quality.

A systematic development approach (ICH Q8) that builds quality into the product by understanding the process and defining a design space, rather than testing quality in at the end. Anchored by critical quality attributes and critical process parameters.

A physical, chemical, biological, or microbiological property that must be within a limit or range to ensure product quality. CQAs are the outputs a validated process must reliably deliver.

A process parameter whose variability affects a critical quality attribute and therefore must be monitored or controlled to ensure the process produces the desired quality.

Establishing documented evidence that a GxP computerized system does what it is intended to do and will continue to — spanning requirements, risk assessment, verification, and lifecycle control (GAMP 5; 21 CFR Part 11; EU GMP Annex 11).

A risk-based, critical-thinking evolution of CSV promoted by FDA — focusing test effort and documentation on the software functions whose failure would affect patient safety, product quality, or data integrity, rather than exhaustive scripting.

The ISPE guide providing a risk- and category-based framework for validating computerized systems, scaling effort to system complexity and novelty. The de facto global reference for CSV.

FDA’s regulation on electronic records and electronic signatures — the criteria (audit trails, access control, trustworthy e-signatures) under which electronic records are considered as reliable as paper. The EU analogue is GMP Annex 11.

The holistic, facility-wide set of controls for microbial, particulate, and pyrogen contamination, derived from product and process risk (EU GMP Annex 1). It ties together design, procedures, monitoring, and personnel into one documented strategy.

Manufacturing a sterile product by separately sterilizing the product and components and combining them under conditions that prevent microbial contamination — used when terminal sterilization is not possible. The highest-risk manufacturing operation.

A simulation of the aseptic filling process using sterile growth medium in place of product, to validate that the process and operators can maintain sterility. Contaminated units above the acceptance limit indicate a loss of aseptic assurance.

The routine sampling of air, surfaces, and personnel in classified areas for viable and non-viable particles, with alert and action limits, to demonstrate the manufacturing environment stays in a state of control.

The population of viable microorganisms on or in a product, component, or surface before sterilization. Controlling and monitoring bioburden is fundamental to sterility assurance.

A heat-stable component of the outer membrane of Gram-negative bacteria that causes fever and can be dangerous in injectables even after sterilization. Controlled via bioburden control and tested by the bacterial endotoxin (LAL) test.

Barrier technologies that separate operators from the aseptic filling zone to reduce contamination risk. An isolator provides a sealed, decontaminated environment; a RABS provides a physical barrier with controlled access.

A test result that falls outside the registered specification (OOS) or deviates from the expected trend (OOT). OOS results require a documented, thorough investigation before any decision to release or reject — a frequent inspection focus.

The master batch record is the approved manufacturing instruction; the executed (or electronic, EBR) batch record is the completed evidence that a specific batch was made and controlled as specified. Independent review precedes release.

The study of how a product’s quality changes over time under defined conditions (ICH Q1A), used to establish its shelf life or re-test period. Long-term, intermediate, and accelerated conditions are standard.

The demonstration that a product’s quality, safety, and efficacy are maintained after a manufacturing change (ICH Q5E for biologics). Because the process largely defines a biologic, comparability is a defining regulatory theme for them.

The documented process of transferring a product and its process knowledge between development and manufacturing, or between sites, so the receiving site can reproduce the process in a validated, controlled way (ICH Q10).

The process by which a trial participant voluntarily confirms their willingness to take part after being informed of all aspects relevant to their decision. Consent process and documentation are among the most-cited GCP inspection findings.

The original records (and certified copies) of clinical findings, observations, and activities in a trial, from which case report form data is derived. Source-data verification checks that reported data matches the source.

The science and activities of detecting, assessing, understanding, and preventing adverse effects of medicines once on the market — collecting adverse events, managing signals, and acting to protect public health.

An AE is any untoward medical occurrence in a patient given a medicine; an SAE is one that is fatal, life-threatening, or otherwise serious; an ADR is an AE with at least a reasonable causal link to the medicine. Reporting timelines are strict.

Information suggesting a new or changed causal association between a medicine and an event, warranting further investigation. Signal detection, validation, and assessment turn scattered case reports into knowledge that can change a product’s use.

Documented plans of the pharmacovigilance and risk-minimization activities proportionate to a medicine’s risks — the EU RMP and the US REMS. Kept current as the safety profile evolves.

The PSMF describes a marketing-authorization holder’s pharmacovigilance system; the QPPV is the named individual accountable for its operation and oversight in the EU. Both are inspection focal points.

The "current" qualifier signals that manufacturers must use up-to-date technologies and systems to comply with GMP — the expectation evolves, so yesterday’s acceptable practice may not meet today’s standard.

The form an FDA investigator issues at the close of an inspection listing observed conditions that may violate the FD&C Act. A 483 is not a final determination, but an unaddressed 483 can escalate to a warning letter or further action.

FDA’s formal notification that a firm has significantly violated regulations, requiring prompt corrective action. Publicly posted, it is a serious escalation that can precede import alerts, seizures, or consent decrees.

US FDA application types: IND (investigational new drug, to begin trials), NDA (new drug application, for a novel drug), ANDA (abbreviated, for a generic), and BLA (biologics license application, for a biologic).

A confidential submission to FDA containing information about facilities, processes, or articles used in the manufacture of drugs — commonly used by API and component suppliers to support customers’ applications without disclosing trade secrets.

A document, signed by an authorized party, summarizing the testing results for a specific batch of material against its specification — the release evidence that a lot meets its quality requirements.

The systematic process (ISO 13485 clause 7.3, incorporated by FDA’s QMSR; formerly 21 CFR 820.30) for controlling medical-device design — inputs, outputs, review, verification, validation, transfer, and changes — captured in a traceable design history file.

The international standard for the application of risk management to medical devices — identifying hazards, estimating and evaluating risks, controlling them, and monitoring effectiveness across the device lifecycle. The core of device quality.

Software intended for a medical purpose that performs that purpose without being part of a hardware device. Its lifecycle is governed by IEC 62304, and computer-software-assurance thinking increasingly applies.

A system to mark and identify medical devices through their distribution and use with a unique code, improving traceability, recall effectiveness, and adverse-event reporting (FDA UDI rule; EU MDR EUDAMED).

In the US, Medical Device Reporting (21 CFR 803) is mandatory post-market reporting of device deaths, serious injuries, and malfunctions. In the EU, the MDR (Regulation 2017/745) is the overarching device regulation. Context distinguishes the two.

The requirements governing how regulated products are made and controlled so every batch meets consistent, defined quality. The baseline body of standards regulators inspect against. SPEQ has a full GMP discipline page.

The international standard (ICH E6) for designing, conducting, and reporting trials involving human subjects — protecting participant rights and safety and ensuring data credibility.

The quality system (OECD; 21 CFR 58) governing non-clinical safety studies, organized around reconstructability — any study must be reproducible from its raw data.

The standards for storing and transporting medicinal products through the supply chain so quality is preserved from manufacturer to patient, and falsified medicines are kept out.

The standards for monitoring the safety of medicines once marketed (EU GVP Modules) — collecting, assessing, and acting on adverse-event and signal data across the lifecycle.

The established engineering methods applied to designing, commissioning, and qualifying facilities, equipment, and utilities (ASTM E2500) — where quality is built in before manufacturing begins.

The data-integrity discipline underneath every GxP record — the ALCOA+ principles applied to how records and data are created, reviewed, and retained across paper and electronic systems.

The standards for analyzing specimens generated in clinical trials — applying GLP-grade laboratory rigor to clinical-trial samples so those endpoints are credible.

The systematic, preventive approach to food safety (Codex; the basis of FSMA preventive controls) — identifying hazards and controlling them at critical points rather than relying on end-product testing.

Medicines manufactured from living systems — proteins, vaccines, cell and gene therapies, blood and tissue products — where quality turns on characterization, viral safety, and comparability after change.

Cleaning validation is the documented evidence that a cleaning procedure reliably removes product residues, cleaning agents, and microbial contamination from shared or product-contact equipment to below scientifically justified limits. It protects the next product made on the same equipment from cross-contamination and demonstrates the process is reproducible, not a one-off clean.

A Health-Based Exposure Limit (HBEL), commonly expressed as a Permitted Daily Exposure (PDE), is the maximum daily amount of a substance a person can be exposed to without an appreciable health risk, derived toxicologically from the point of departure (e.g. NOAEL) divided by adjustment factors. In shared-facility manufacturing it sets the scientific basis for cross-contamination and cleaning limits.

MACO is the maximum quantity of a residue from a previous product that may be carried over into the next product without posing a safety risk to the patient. It is the numerical acceptance limit that a cleaning validation must demonstrate the equipment falls below.

Recovery studies quantify how much of a known residue a sampling method actually retrieves from a surface — the swab or rinse never captures 100%. The measured recovery factor is applied to every routine result so that reported residue reflects true surface contamination rather than only what the sampling captured.

Bracketing (and its cousin, worst-case selection) is a scientifically justified strategy to validate the extremes of a range of similar products, equipment, or process parameters rather than every permutation, on the rationale that the extremes bound everything between them. It reduces validation effort while still assuring the full matrix is covered.

A hold-time study establishes the maximum period a material, intermediate, or piece of equipment can be held at a defined stage without compromising quality. In cleaning it defines the clean hold time (equipment clean but not yet used) and dirty hold time (used but not yet cleaned); in processing it defines how long bulk or intermediates may wait between steps.

Design Qualification is the documented verification, before purchase or build, that the proposed design of a facility, system, or equipment meets the user requirements and GMP expectations. It is the first qualification stage and the point at which requirements are confirmed to be met on paper, before anything is installed.

Requirements traceability is the documented linkage from each user and functional requirement, through the design and configuration, to the specific test that verifies it — usually captured in a Requirements Traceability Matrix (RTM). It proves that every requirement was implemented and tested, and that no test exists without a requirement behind it.

The computerized system lifecycle is the structured set of activities a GxP system passes through from concept and requirements, through supplier assessment, specification, configuration/coding, verification, and release, to operation, change control, and eventual retirement/decommissioning with data migration. Validation is not a one-time event but a state maintained across this whole lifecycle.

A functional risk assessment evaluates each function of a computerized system or process for its impact on product quality, patient safety, and data integrity, and drives the depth of specification and testing applied to it. It is how a validation effort is scaled — high-risk functions get rigorous testing, low-risk functions get proportionate coverage.

An electronic signature is a computer data compilation that an individual adopts as the legally binding equivalent of their handwritten signature. Under GxP records rules it must be uniquely attributable to one person, permanently linked to the record it signs, and show the signer’s name, the date/time, and the meaning of the signing (e.g. authorship, review, approval).

The data lifecycle is all phases a record passes through from initial generation and capture, through processing, review, reporting and use, to retention, retrieval, and eventual destruction. Data integrity controls must apply at every phase, not only at the point the data is created.

Static data is a fixed record such as a paper printout or a PDF, where the format is set at the moment of creation. Dynamic data allows ongoing interaction — reprocessing, re-integration, zooming into a chromatogram, or requerying — so the record must remain in a form that preserves that interactive capability.

Metadata is the contextual data that gives a result its meaning — who acquired it, when, on what instrument, with which method and parameters, and any audit-trail entries and processing history. Without its metadata a value is just a number; the record is the result plus the metadata that makes it attributable and reconstructable.

A true copy is a copy of an original record — paper or electronic, in the same or a different format — that has been verified to preserve the full content and meaning of the original, including all data and relevant metadata. Once verified, a true copy can be used in place of the original and, in some cases, the original can then be retired.

A backup is a copy of current data made for disaster recovery — to restore operations if data is lost or corrupted — and is typically overwritten on a rolling schedule. An archive is the long-term, secure, independent retention of records for their required retention period, protected against alteration or deletion. They serve different purposes and are not interchangeable.

Disaster recovery is the documented, tested capability to restore a GxP computerized system and its data to a known-good state after a failure, corruption, or catastrophic event. It is the operational safety net that ensures records and system function survive incidents without loss of data integrity.

Time synchronization is the control ensuring that the clocks of all GxP computerized systems — and the timestamps they write into records and audit trails — are accurate, consistent, and traceable to a reliable time source. It is what makes the "contemporaneous" and "attributable" elements of ALCOA+ verifiable across systems.

Audit trail review is the routine, risk-based examination of a system’s audit trail entries to detect changes, deletions, aborted runs, re-tests, and other events that could indicate data-integrity problems. Having an audit trail is not enough — regulators expect it to be actively reviewed, or it provides no assurance.

F0 is the accumulated lethality delivered by a moist-heat sterilization cycle, expressed as the equivalent number of minutes at 121.1 °C with a z-value of 10 °C. It converts a real, variable temperature-time profile into a single number that lets cycles of different shapes be compared for microbial kill.

The D-value is the time (at a given temperature) or dose required to reduce a microbial population by one log (90%). The z-value is the temperature change required to change the D-value by one log — it describes how sensitive an organism’s resistance is to temperature, and is the constant that lets lethality be normalized across temperatures.

The Sterility Assurance Level is the probability that a single unit remains non-sterile after a sterilization process, expressed as a negative exponent — a SAL of 10⁻⁶ means no more than one in a million units is expected to be non-sterile. It is the quantitative target that defines "sterile" for terminally sterilized product.

Depyrogenation is the process of removing or inactivating pyrogens — chiefly bacterial endotoxins — from product-contact components such as glass vials and stoppers. Because endotoxins are far more heat-stable than microorganisms, depyrogenation (typically dry heat) requires much higher temperatures or doses than sterilization.

Vaporized (or vapor-phase) hydrogen peroxide is a low-temperature sporicidal agent used to bio-decontaminate enclosed spaces such as isolators, RABS, transfer hatches, and cleanrooms. It achieves surface sterilization/decontamination without the heat or moisture that would damage sensitive equipment and materials.

Purified Water (PW) and Water for Injection (WFI) are the two principal pharmaceutical waters. PW is used for non-parenteral products and general processing, while WFI is the higher grade used for parenteral (injectable) manufacture and final rinsing of product-contact surfaces, with a strict bioburden and endotoxin limit.

Conductivity and Total Organic Carbon (TOC) are the two core chemical purity attributes of pharmaceutical water. Conductivity measures ionic (inorganic) contamination, while TOC measures organic contamination; together they replace the older wet-chemistry tests and are typically monitored online in real time.

A HEPA filter integrity test challenges an installed filter with an aerosol and scans the downstream face to detect leaks in the medium, frame, or seal that would let unfiltered air (and its particles/microbes) bypass the filter. It confirms not just filter efficiency but the integrity of the installation.

A smoke study (airflow visualization) uses a visible, neutrally buoyant fog to make cleanroom and critical-zone airflow patterns visible on video, demonstrating that unidirectional air sweeps contamination away from exposed product and that no turbulence or dead zones draw contamination toward it. It is direct visual evidence that the protection is real under actual conditions.

First air is the air that flows directly from a HEPA filter to the critical exposed surfaces (open product, container mouths, stoppers) without passing over any intervening object first. Preserving first air means nothing — no hand, tool, or equipment part — comes between the filter and the exposed product in the unidirectional flow.

EU GMP classifies sterile-manufacturing cleanrooms into grades A, B, C, and D by the maximum permitted airborne particle concentrations and microbial limits, at rest and in operation. Grade A is the critical zone for high-risk aseptic operations; B is its immediate background; C and D are cleaner and less clean support areas.

Environmental monitoring of cleanrooms tracks two distinct populations: non-viable airborne particles (total particle counts by size, measured by particle counters) and viable microorganisms (colony-forming units, captured by air samplers, settle plates, contact plates, and glove/gown sampling). Both are needed because a low particle count does not guarantee the absence of microbes.

Container Closure Integrity Testing verifies that a sealed primary package (vial and stopper, syringe, ampoule, blister) maintains a barrier against microbial ingress and, where relevant, gas or moisture exchange, over the product’s shelf life. It is the evidence that the "sterile" seal actually stays sealed.

Lyophilization (freeze-drying) removes water from a frozen product by sublimation under vacuum, producing a dry cake that is more stable than the liquid and reconstituted before use. It is used for heat-sensitive biologics, vaccines, and injectables whose active would degrade in solution or under heat drying.

Terminal sterilization applies a validated lethal process — moist heat, dry heat, radiation, or gas — to product already sealed in its final container, so the finished, packaged unit is rendered sterile. Because a defined lethal step acts on every unit, it can achieve and demonstrate a sterility assurance level, and is the regulator-preferred route wherever the product can withstand it.

Parametric release is the release of a terminally sterilized batch based on documented evidence that the validated sterilization cycle’s critical parameters were met, in place of routine finished-product sterility testing. It relies on the fact that a fully validated and monitored physical process is a more reliable indicator of sterility than a limited end-product sterility test.

The IMDRF framework categorizes Software as a Medical Device by combining the significance of the information it provides to a healthcare decision (inform, drive, or treat/diagnose) with the state of the healthcare situation (non-serious, serious, or critical). The resulting category (I to IV) sets the level of regulatory scrutiny the software warrants.

IEC 62304 is the international standard defining the software development life-cycle processes for medical device software. It requires software to be assigned a safety class (A, B, or C) based on the severity of harm a software failure could cause, and scales the required development, documentation, and testing activities to that class.

Medical device cybersecurity is the design, documentation, and lifecycle management of a device’s resistance to unauthorized access, tampering, and exploitation that could compromise safety or data. Regulators now treat cybersecurity as a patient-safety issue integral to device design, not an IT afterthought, and require it addressed from premarket design through post-market vulnerability management.

SOUP (software of unknown provenance) — closely related to off-the-shelf (OTS) software — is software already developed and generally available, or previously developed with records not accessible, that is incorporated into a medical device but was not developed under the device’s own controlled lifecycle. Because its internal development quality is not fully known, it must be risk-assessed and controlled as an integrated component.

Verification confirms that software was built correctly against its specified requirements ("did we build the thing right?"), while validation confirms the software meets user needs and intended use in its operational environment ("did we build the right thing?"). Both are required across the software lifecycle, at increasing depth with risk.

Interoperability is the ability of a medical device to exchange and safely use information with other devices, systems, or health IT. Regulators focus on it because a device that shares or receives data can cause harm if the exchange is incomplete, mistimed, or misinterpreted — so the interface itself becomes a design consideration requiring verification.

GAMP 5 classifies computerized systems into software categories to scale validation effort to risk and complexity: broadly infrastructure software, non-configured (off-the-shelf used as supplied), configured, and custom/bespoke software. The category, combined with risk, determines how much specification and verification a system needs.

A Predetermined Change Control Plan is a document, authorized as part of a device marketing submission, that specifies planned future modifications to a device (notably AI/ML-enabled software) and the methods that will be used to develop, validate, and implement those changes. Once authorized, changes made within the plan can be implemented without a new premarket submission each time.

A Software Bill of Materials is a structured, machine-readable inventory of the software components — including third-party, open-source, and off-the-shelf elements — that make up a device’s software. It gives manufacturers and regulators visibility into what is inside the software so vulnerabilities in any component can be identified and managed.

ICH E6(R3) is the current-generation Good Clinical Practice guideline, restructured around a set of overarching principles and a risk-proportionate, quality-by-design approach to trial conduct. It reframes GCP away from uniform, checklist compliance toward fitness-for-purpose: sponsors build quality into protocol design and focus oversight on the factors and data that matter to participant safety and result reliability. It explicitly accommodates modern trial designs, diverse data sources, and technology such as electronic systems and decentralized elements.

RBQM is the systematic application of risk management across a clinical trial's lifecycle — identifying the factors critical to participant safety and data reliability, assessing and controlling the risks to them, and concentrating oversight where the risk is highest. It replaces uniform, activity-based monitoring with a proportionate model in which effort follows risk. RBQM is the operating philosophy behind risk-based monitoring, centralized statistical surveillance, and quality tolerance limits.

A quality tolerance limit is a pre-defined threshold on a parameter that reflects the reliability of trial results at the study level, set during protocol design so that a departure beyond it signals a potential systematic issue warranting evaluation. QTLs operate on aggregate, trial-wide parameters — not individual data points — and breaching one triggers investigation, not automatic corrective action. They are a core deliverable of a quality-by-design, risk-based approach.

A decentralized clinical trial conducts some or all trial activities at locations other than a traditional investigator site — the participant's home, a local provider, a pharmacy, or via telehealth and connected devices. DCT elements can be applied fully or in a hybrid model and are intended to reduce participant burden and broaden access, while preserving the same GCP obligations for consent, safety oversight, data integrity, and investigator responsibility. The shift changes logistics, not the standards.

An IRB (US term) or IEC (ICH/EU term) is an independent body that reviews, approves, and provides ongoing oversight of a clinical trial to protect the rights, safety, and well-being of human participants. It reviews the protocol, informed consent materials, investigator qualifications, and recruitment methods before the trial begins, and conducts continuing review at intervals appropriate to risk. No participant may be enrolled before favorable opinion is granted.

A protocol deviation is any departure from the approved clinical trial protocol — in eligibility, procedures, visit windows, dosing, or assessments — whether planned, accidental, or unavoidable. Deviations are documented, assessed for impact on participant safety and data integrity, and reported per the protocol and applicable requirements; a subset that affects safety or the reliability of results is escalated as important (or major) deviations. Persistent or serious departures can rise to a serious breach.

A serious breach is a breach of GCP or the trial protocol likely to affect to a significant degree the safety or rights of a trial participant, or the reliability and robustness of the data generated. Under the EU Clinical Trials Regulation it must be reported to the competent authorities within a defined short timeframe of the sponsor becoming aware of it. It is a high-severity escalation above an ordinary protocol deviation, defined by potential consequence rather than by category of error.

The trial master file is the collection of essential documents that individually and collectively permit the conduct of a clinical trial to be evaluated and the quality of the data produced to be judged. It evidences that the sponsor and investigator complied with GCP and applicable requirements, and must be kept complete, contemporaneous, and inspection-ready throughout the trial and for the required retention period. Sponsor and investigator each hold their portions (the sponsor TMF and the investigator/site file).

Clinical monitoring is the sponsor's oversight of trial conduct at sites to confirm that participant rights and safety are protected and that reported data are accurate, complete, and verifiable against source. It combines source data verification (SDV — checking recorded data against the original records) with source data review (SDR — assessing the quality and consistency of source processes and documentation), delivered through on-site, remote, and centralized methods. Under a risk-based model the mix is proportionate to risk rather than 100% SDV of every field.

MedDRA is the standardized international medical terminology used to code adverse events, medical history, indications, and other regulatory data across the product lifecycle. Its hierarchy — from lowest-level terms up through preferred terms, high-level terms, high-level group terms, and system organ classes — lets safety data be entered specifically yet analyzed and exchanged consistently between sponsors and regulators. It is developed under ICH and versioned on a fixed release cycle.

A PSUR (in EU terminology) — structured on the ICH E2C(R2) PBRER format — is a periodic, cumulative post-authorization report evaluating the benefit-risk balance of a medicinal product using worldwide safety and, where relevant, efficacy data over a defined interval. Its purpose is not merely to list cases but to present an integrated benefit-risk assessment and to identify whether any new information changes the product's established profile. Submission frequency is set by regulation and by the product's risk.

A DSUR is the harmonized annual report on the safety of an investigational drug during clinical development, presenting a comprehensive, thoughtful review of accumulated safety information over the reporting interval. It informs regulators and ethics committees that the sponsor is actively monitoring participant safety and describes whether the information obtained is consistent with the product's known profile. It is the development-phase counterpart to the post-marketing PBRER.

The QPPV is a named, appropriately qualified individual — required in the EU — with personal responsibility for the establishment and maintenance of the marketing authorization holder's pharmacovigilance system. The QPPV has oversight of the safety profiles of the company's products and of any emerging safety concerns, must be permanently and continuously available, and resides and operates in the EU/EEA. The role is the accountable human point of contact for the authorities on pharmacovigilance matters.

ICH Q9(R1) is the revised quality risk management guideline, providing principles and a toolkit for systematically assessing, controlling, communicating, and reviewing risks to product quality across the lifecycle. The (R1) revision sharpened four areas that industry consistently struggled with: high subjectivity in risk assessments, the relationship between product availability and quality/supply risk, formality of risk management, and risk-based decision-making. It underpins risk-based approaches throughout GMP and the wider quality system.

ICH Q10 describes a comprehensive model for an effective pharmaceutical quality system based on ISO concepts, GMP, and complemented by ICH Q8 and Q9, applied across the product lifecycle from development to discontinuation. It defines management responsibilities and four lifecycle-spanning elements — process performance and product quality monitoring, CAPA, change management, and management review — plus two enablers, knowledge management and quality risk management. Its aim is a system that achieves product realization, maintains a state of control, and facilitates continual improvement.

ICH Q12 provides a framework and tools for managing post-approval chemistry, manufacturing, and controls (CMC) changes in a more predictable and efficient way across the product lifecycle. Its central concepts are established conditions (the legally binding information a regulator needs to be notified of if changed) and the post-approval change management protocol (PACMP), together with a product lifecycle management document. The goal is to let low-risk changes be managed under a firm's pharmaceutical quality system rather than each requiring a prior-approval regulatory submission.

Established conditions are the legally binding elements of an approved application — descriptions of the product, manufacturing process, facilities, and controls — that assure product quality, and to which a change requires notification to the regulatory authority. Information in a dossier that is not an established condition can be updated under the firm's pharmaceutical quality system without a submission. Distinguishing the two is the core mechanic that ICH Q12 uses to make post-approval change management risk-based.

A PACMP is a regulatory tool in which a marketing authorization holder describes a specific future change, the tests and studies that will be performed to assess it, acceptance criteria, and the reporting category — and gets that plan reviewed and agreed by the authority in advance. When the change is later made and the pre-agreed criteria are met, it can be implemented and reported under a reduced/agreed category rather than a full prior-approval submission. It gives predictability and a lighter downstream reporting burden to well-characterized changes.

Change classification is the assessment that assigns a proposed change to a risk-based category which determines both the internal change-control rigor and the external regulatory reporting obligation. Internally it drives the level of evaluation, testing, and approval a change needs; externally it determines whether the change is a notification, a prior-approval requirement, or manageable without submission. Misclassification is a recurring inspection finding because it lets a significant change proceed with inadequate control or reporting.

In the EU regulatory system, changes to a marketing authorization are classified as variations by risk and processed accordingly: Type IA minor variations (including some "do and tell" changes notifiable within a set period after implementation), Type IB minor variations (notify and wait before implementing unless objected), and Type II major variations (requiring assessment and approval before implementation), with the most significant changes handled as extensions. The tier dictates the procedure, timing, and documentation, and mirrors the risk of the change to quality, safety, or efficacy.

A mutual recognition agreement is a government-to-government arrangement under which authorities agree to recognize each other's GMP inspections and, where covered, batch certification — so that an inspection conducted by one party can be relied upon by the other instead of duplicating it. MRAs reduce redundant inspections, ease supply, and let each authority focus resources on higher-risk sites. Their scope is defined product-by-product and capability-by-capability, and depends on each side assessing the other's regulatory system as equivalent.

PIC/S is a non-binding, informal co-operative arrangement between regulatory authorities in the field of GMP for medicinal products, aimed at harmonizing inspection procedures and GMP standards and networking between inspectorates. It maintains a widely referenced GMP guide (aligned closely with EU GMP) and issues guidance and training for inspectors. Membership is by inspectorate rather than by country, and provides a route to mutual confidence in GMP inspections without a formal treaty.

Regulatory GMP inspections fall into a few purpose-driven types: a pre-approval inspection (PAI) verifies that a facility named in a pending application can manufacture the product as described and that the application's data are reliable; a routine (surveillance) inspection periodically confirms ongoing compliance at an already-operating site; and a for-cause (directed) inspection responds to a specific trigger such as a complaint, recall, adverse-event signal, or prior findings. Post-approval and compliance follow-up inspections are further variants. The type sets the inspection's scope, intensity, and consequences.

A consent decree is a court-enforced settlement between a regulator and a company that has failed to correct significant, often repeated, GMP or other violations, in which the company agrees to a binding remediation plan under judicial oversight. It is among the most severe non-criminal enforcement outcomes: it can halt production, require independent third-party audits and certifications before resuming, impose disgorgement or penalties for non-compliance, and place operations under external supervision for years. It typically follows escalating actions — inspectional findings, a warning letter, and unresolved deficiencies.

The six-system model is FDA's framework for organizing a drug GMP inspection around six functional systems: the quality system plus five manufacturing systems — facilities and equipment, materials, production, packaging and labeling, and laboratory controls. An inspection may be conducted as a full inspection covering the quality system plus at least three others, or as an abbreviated inspection covering the quality system plus one other, depending on the site's history and purpose of the visit. Structuring inspections this way gives coverage of the whole operation while allowing a risk-based depth.

A Field Alert Report is a rapid post-marketing notification a drug applicant must submit to FDA about specific quality problems with a distributed product — including information that a distributed batch may be mislabeled or may not meet its specifications, and reports of bacteriological contamination or significant chemical/physical/other change or deterioration. The first alert is due within a short, defined timeframe of becoming aware of the information, and serves as an early-warning trigger for potential recalls and investigations. It is a quality-signal duty distinct from adverse-event (safety) reporting.

When a marketed product is removed or corrected because it violates the law or poses a risk, the action is classified by the severity of the health hazard: Class I where there is a reasonable probability that use will cause serious adverse health consequences or death; Class II where use may cause temporary or medically reversible harm, or where serious harm is remote; and Class III where use is unlikely to cause adverse health consequences. The class drives the urgency, depth (how far down the distribution chain), and public communication of the recall. Most recalls are voluntary actions by the firm, with the authority assigning the classification.

Management review is the structured, periodic evaluation by senior management of the performance and continuing suitability of the pharmaceutical quality system, using defined inputs to drive decisions and actions. Inputs typically include quality metrics and trends, CAPA status and effectiveness, deviations and complaints, change management, audit and inspection outcomes, product quality reviews, and follow-up on prior actions. It is the mechanism that makes senior management accountable for the quality system rather than merely nominally responsible.

A quality manual is the top-level document that describes the scope of the quality management system, its policy and objectives, and how its processes interrelate and are controlled — serving as the map to the rest of the documentation hierarchy. It sets out the organization's commitment to quality and points to the procedures, work instructions, and records that implement it, rather than containing the operational detail itself. It sits at the apex of the classic documentation pyramid above SOPs and records.

A CAPA effectiveness check is the planned, objective verification — performed after a corrective or preventive action has been implemented and given time to take hold — that the action actually eliminated the root cause and that the problem has not recurred. It requires pre-defined success criteria and a defined evaluation window, judged against evidence (data, trends, recurrence) rather than the fact that the action was completed. Closing a CAPA on "action done" without an effectiveness check is one of the most common quality-system weaknesses.

Quality metrics are quantitative measures of the performance and health of a manufacturing operation and its quality system — for example, batch and lot acceptance rates, right-first-time, invalidated out-of-specification rates, and on-time CAPA closure. Used well, they support objective, risk-based oversight: they reveal trends, prioritize inspection and management attention, and give leadership signals independent of anecdote. Their reliability depends on consistent definitions and on data integrity in how they are calculated and reported.

Right-first-time is a quality metric and operating philosophy measuring the proportion of work — batches, records, transactions — completed correctly without error, rework, or deviation on the first attempt. A high RFT rate indicates well-controlled, well-understood processes; a low or declining rate signals process, training, or documentation weaknesses that generate deviations, investigations, and cost of poor quality. It is a leading indicator: it degrades before the failures it predicts become recalls or inspection findings.

Supplier qualification is the risk-based process of evaluating and approving external suppliers of materials and services — assessing their capability, quality system, and reliability before use and monitoring their ongoing performance thereafter. It typically combines documentation review, questionnaires, on-site or remote audits proportionate to risk, and confirmation of the supplier's controls, formalized in a quality agreement that defines each party's responsibilities. The manufacturer retains responsibility for the quality of purchased materials regardless of the supplier's status.

Internal audit — called self-inspection in the GMP world — is the planned, independent examination of the organization's own activities and quality system to verify compliance with requirements and to identify weaknesses before an external inspector or a failure does. It is conducted to a program and schedule by suitably trained, independent personnel, documented with findings and corrective actions, and followed up to closure. It is a proactive assurance mechanism: the system checking itself.

Quality culture is the shared set of attitudes, behaviors, and norms that determine how an organization actually treats quality when no one is watching — how readily problems are raised, how honestly deviations are reported, and whether staff feel able to stop the line. It is distinct from the documented quality system: a strong system can be undermined by a weak culture in which errors are hidden, and it is increasingly a focus of regulatory maturity assessment because behavior, not paperwork, ultimately drives outcomes. It is observed through behaviors and signals, not measured by self-rating.

A product quality review is the regular, typically annual, evaluation of a product's manufacturing and quality data to verify the consistency of the existing process, the appropriateness of current specifications, and to identify trends and any need for improvement. It reviews inputs such as starting materials, in-process and finished-product results, deviations, OOS results, changes, stability, returns, complaints, and recalls over the period. In the EU GMP framework it is the Product Quality Review; the US GMP equivalent is the annual product review.

GxP is the collective abbreviation for the family of "good practice" quality guidelines and regulations across the regulated lifecycle — the "x" standing in for the discipline, as in GMP (manufacturing), GCP (clinical), GLP (non-clinical laboratory), GDP (distribution), and GVP (pharmacovigilance). Though each discipline has its own detailed rules, all GxP frameworks share a common intent: ensure that products are safe and effective and that the data supporting them are trustworthy, attributable, and reconstructable. The umbrella term captures that shared philosophy of documented, controlled, evidence-based work.

Good Machine Learning Practice is a set of guiding principles, issued jointly by FDA, Health Canada, and the UK MHRA, for the development of machine-learning-enabled medical devices — covering the full product lifecycle from data management and model training to evaluation, deployment, and monitoring. The principles emphasize representative and well-characterized data, robust independent evaluation, human factors, transparency to users, and monitoring of deployed performance. GMLP is high-level and principle-based, intended to guide practice rather than prescribe a single method.

Good Tissue Practice is the set of US requirements governing the manufacture of human cells, tissues, and cellular and tissue-based products (HCT/Ps) — covering donor eligibility, and the methods, facilities, and controls used in recovery, processing, storage, labeling, packaging, and distribution. Its overriding purpose is to prevent the introduction, transmission, and spread of communicable disease through these products. It is a distinct regulatory scheme for HCT/Ps, separate from — though sometimes overlapping with — drug and device GMP.

Good Review Practice refers to the documented policies, procedures, and standards a regulatory authority uses to conduct consistent, high-quality, and timely reviews of marketing applications and submissions. GRP documents describe how reviewers should evaluate evidence, structure their assessments, and apply standards uniformly so that decisions are predictable and defensible across reviewers and over time. It is the regulator-facing counterpart to industry's good practices: quality assurance applied to the review function itself.

The complete system of policies, procedures, organisational structures, roles, training, and system controls a company puts in place to ensure that GxP data remains complete, consistent, accurate, attributable, and available throughout its entire lifecycle, from the moment it is created to the moment it is finally disposed of.

A risk-based judgement of how much a given data point or record influences a product-quality or patient-safety decision, used to decide how tightly that data needs to be controlled — for example, how often its audit trail is reviewed, or how quickly an anomaly must be investigated — rather than applying one uniform control level everywhere.

A computerized system in which an electronic record is combined with a parallel paper process — for example, a printed chromatogram signed by hand, or an instrument printout pasted into a paper logbook — and the organisation must define, in advance, which of the two is the official record and how it is controlled so the two cannot diverge.

The original record — or a certified true copy of it — generated at the point an activity is performed, from which every reported or summarised result is ultimately derived; raw data must be preserved intact so the full activity can be reconstructed later, independent of any summary or conclusion drawn from it.

Blank templates — logbook pages, worksheets, work-order forms — that are formally issued under document control: numbered or otherwise uniquely tracked, reconciled after use, and never freely photocopied, so that every blank in circulation is accounted for and undocumented or duplicate recording of an activity cannot go undetected.

An independent, documented check by a second qualified individual, performed at or close to the time a critical step is carried out, confirming that what was actually done matches what has been recorded — for example, witnessing and initialling a critical weighing — distinct from a later review of the completed record by the quality unit.

A data-review approach in which reviewers rely on validated software logic to flag anomalies, out-of-expected-range values, or metadata and audit trail changes, and examine only those flagged exceptions rather than manually inspecting every individual data point — acceptable only where the underlying exception-detection logic has itself been validated and challenged.

The requirement that every individual who uses a GxP computerized system have their own unique login credential, and that generic, group, or shared accounts (such as a single “operator” password used by an entire shift) never be used, because a shared login makes it impossible to attribute an action in the audit trail to a specific person.

The ongoing process of granting, changing, and revoking a user’s access rights to a GxP computerized system in line with their current role, including periodic review of who has access to what, prompt removal of access on role change or departure, and restriction of administrator privileges to those who genuinely need them.

A documented diagram tracing how a specific piece of data moves — from creation, through every processing, transfer, and storage step, to its final reporting — across every system and manual step it passes through, used to identify where integrity risk, such as manual transcription or unreviewed exports, is introduced.

A maintained, organisation-wide list of every computerized system used for GxP purposes, recording each system’s intended use, GxP-impact classification, validation status, and data ownership — the baseline record inspectors typically request before assessing the validation and data integrity controls of any individual system.

The good documentation practice principle that a GxP activity be recorded at, or immediately after, the time it is actually performed — never reconstructed from memory hours or days later — so that the resulting record accurately and completely reflects what took place at the moment it occurred.

The first durable recording of an observation, result, or activity — whether on paper or electronic — as distinct from any later transcription, summary, or copy of it; the authenticity and completeness of a true copy is always judged against, and traceable back to, its original record.

Any combination of text, data, graphics, audio, or other information that is created, modified, maintained, archived, retrieved, or transmitted in digital form by a computer system, and which carries the same GxP obligations for accuracy, retention, and controlled access as its paper equivalent.

The regulatory obligation to keep a GxP record — together with its associated metadata and audit trail — accessible, legible, and readily retrievable for a minimum period defined by the type of record, for example batch records, complaint files, or clinical trial documentation, not merely to hold a copy somewhere in storage.

The validated transfer of electronic records and their associated metadata from one computerized system, file format, or storage medium to another — planned, executed, and verified so that no data is lost, altered, or rendered unreadable, and the migrated record remains a complete and accurate representation of the original.

The specific technical and procedural controls applied to laboratory chromatography software — audit trail enabled and reviewed, restricted ability to edit integration parameters or methods, no unauthorised reprocessing, renaming, or deletion of injections — an area regulators cite repeatedly because CDS software has historically made data manipulation easy and hard to detect.

The regulatory distinction between an honest, unintentional mistake in a GxP record — an error, correctable under good documentation practice — and a deliberate act to misrepresent, alter, omit, or fabricate data, known as falsification, which is treated as a data integrity breach with materially more serious regulatory and, in some jurisdictions, criminal consequences.

Measurable goals derived from an organization’s quality policy that translate strategic quality intent into specific, monitorable targets — for example right-first-time rates, deviation closure timeliness, or complaint recurrence limits. Quality objectives are set at relevant functions and levels, tracked through quality metrics, and reviewed periodically through management review to drive continual improvement.

The systematic process of defining the quality objectives, resources, procedures, and verification points needed for a specific product, project, or process before work begins — commonly documented in a quality plan that identifies which SOPs, specifications, and acceptance criteria apply and where the quality unit must be involved.

A formal statement issued by senior management describing an organization’s overall intentions and direction with respect to quality. It establishes the framework within which quality objectives are set, communicates management commitment, and is typically reviewed for continued suitability during management review.

The pharmaceutical quality system element governing the authoring, review, approval, distribution, revision, and withdrawal of controlled documents — SOPs, specifications, batch records, protocols — so personnel always work from the current authorized version, obsolete versions are removed from active use, and document history remains fully reconstructable.

The requirement to retain GxP records — batch records, raw data, validation documentation, complaint and training files — for a defined minimum period after batch release, product expiry, or study completion, ensuring records remain retrievable for inspection, investigation, or reconstruction of a product’s history.

Any product, material, process output, or system state that fails to meet a specified requirement or acceptance criterion. Distinct from a deviation, which describes an unplanned departure from an approved procedure, nonconformance describes the resulting output itself and drives a disposition decision — use-as-is, rework, or reject.

The documented system for receiving, logging, evaluating, investigating, and closing complaints from patients, customers, or healthcare professionals about a marketed product’s identity, quality, durability, reliability, safety, or performance — including triage steps that route potential adverse events to pharmacovigilance and potential quality defects toward a recall assessment.

The documented process for removing or correcting a distributed product found to be defective, mislabeled, or otherwise violative, covering recall classification, notification of health authorities and affected customers, effectiveness of the recall, reconciliation of quantities distributed versus recovered, and closure reporting.

The organizational discipline for identifying, assessing, and controlling the quality and compliance impact of personnel, organizational structure, facility, and business changes before they take effect — broader in scope than document-level change control, which governs changes to a specific procedure, specification, or system.

The defined pathway and severity criteria by which a quality issue, deviation, or adverse trend is raised from the operational level to appropriate management or the quality unit, ensuring timely decision-making, resourcing, and — where warranted — notification of senior management or health authorities.

A written agreement between a contract giver and contract acceptor — for example a sponsor and a contract manufacturer — that defines each party’s GMP responsibilities, quality expectations, communication pathways, and change-notification obligations for an outsourced manufacturing, testing, or packaging activity, separate from the commercial supply contract.

The EU GMP framework governing any GMP-related activity performed by a contract acceptor on behalf of a contract giver — manufacturing, packaging, testing, or ancillary services — requiring a written contract, defined responsibilities, and contract-giver oversight to ensure the contract acceptor’s facilities, personnel, and processes remain GMP-compliant.

A standard document prepared by a manufacturer describing the GMP-related activities carried out at a specific site — organization, personnel, facilities, equipment, and quality system — used by inspectors for pre-inspection planning and by regulatory authorities or business partners to obtain a factual overview of the site.

A high-level document defining the validation strategy, organizational responsibilities, scope, and schedule for qualifying and validating a site’s facilities, utilities, equipment, computerized systems, and manufacturing processes, providing the overarching plan that individual qualification and validation protocols execute against across the site or program.

A prospective summary of the quality characteristics a drug product should possess to ensure the desired safety and efficacy, considering the route of administration, dosage form, delivery system, container closure system, and strength — the foundational input from which critical quality attributes are derived in a Quality by Design approach.

The pharmaceutical quality system element and management principle of systematically enhancing process performance, product quality, and the quality system itself, using inputs such as quality metrics, trending data, CAPA outcomes, and management review, rather than treating the quality system as a static, once-built compliance baseline.

A structured, maintained log of identified quality or business risks, each with its assessed severity, probability, and detectability, the mitigation actions assigned, an accountable owner, and a current status — used to track and prioritize risk-management activity across a site, program, or product lifecycle.

The ongoing program of oversight, performance monitoring, and periodic requalification applied to approved suppliers and service providers after their initial qualification, encompassing audit scheduling, quality agreements, change notification, incoming-material trending, and scorecard-based performance review, with oversight intensity typically tiered to supplier risk.

The discipline governing the cultivation, wild collection, and primary processing of medicinal plants and other botanical starting materials, addressing seed/propagation material identity, growing conditions, harvest timing, drying, and initial processing to ensure consistent quality and minimize contamination before the material enters GMP-regulated manufacturing.

The discipline governing the proper receipt, storage, and stock-rotation of pharmaceutical products and materials — covering warehouse conditions, temperature and humidity control and monitoring, segregation of quarantined/rejected/recalled stock, pest control, and security — to preserve product quality between manufacture and use, including for retained and reference samples.

The discipline and published industry guideline covering the collection, cleaning, validation, and management of clinical trial data — database design, data entry and query resolution, discrepancy management, coding, and database lock — so that clinical trial data supporting a marketing application is complete, accurate, and consistent.

The discipline and harmonized guideline setting good manufacturing practice expectations specifically for active pharmaceutical ingredient manufacturing — from starting material through the final API isolation and packaging steps — recognizing that API synthesis differs structurally from finished dosage-form manufacturing and needs its own scope and controls.

The WHO discipline governing the trade, brokering, and distribution of pharmaceutical starting materials — active ingredients and excipients — between manufacturer and user, addressing traceability, storage and transport conditions, and prevention of substitution, adulteration, or diversion of materials that have not yet entered finished-product manufacturing.

The discipline defining the standards of professional practice expected of pharmacists and pharmacies at the point of dispensing — accurate dispensing, patient counseling, appropriate storage, and collaboration with prescribers — to ensure medicines reach and are used correctly by the patient after leaving the regulated supply chain.

The industry-authored discipline governing the ethical and transparent publication and communication of company-sponsored medical research — authorship criteria, disclosure of funding and conflicts of interest, timely reporting of results regardless of outcome, and avoidance of undue sponsor influence on interpretation, consistent with recognized authorship frameworks such as the ICMJE criteria.

A discipline specifically addressing data integrity and quality controls for computerized systems used in regulated laboratories — instrument interfacing, raw data capture, audit trail, and archival of electronically generated laboratory data — originally issued by the US EPA and widely referenced as a model for laboratory computerized-system control.

A scheduled reassessment of a qualified system, validated process, or facility to confirm it remains in a validated state, evaluating trend data — deviations, CAPA, change history, calibration and maintenance records — accumulated since the last review, and determining whether requalification or revalidation is warranted.

The re-execution of qualification activities — typically OQ and/or PQ elements — on equipment, a facility, or a utility that is already qualified, performed at a defined interval, after a significant change, following an extended shutdown, or when a periodic review indicates drift, to confirm the system still performs within its qualified state.

The documented comparison of a measuring instrument’s output against a traceable reference standard, and any adjustment needed to bring its readings within specified tolerance, performed at a defined interval so that instruments used to make GxP-critical measurements remain accurate, precise, and traceable to a recognized national or international standard.

A scheduled, documented program of inspection, servicing, and component replacement performed on equipment, utilities, and facility systems before failure occurs, intended to sustain a system’s qualified or validated state, minimize unplanned downtime, and prevent maintenance-driven deviations from GMP-critical performance during routine operation.

A documented, step-by-step procedure specifying the input, action, and predefined expected result for a single test within a qualification protocol or computerized system validation, executed and recorded — pass/fail, actual result, tester initials and date — as objective evidence that a requirement or specification was verified.

The predefined, documented, and quantifiable pass/fail limits against which the results of a qualification, validation, or test activity are judged, established and approved before execution begins so that success or failure is assessed objectively rather than after the results are already known.

A structured verification performed at the equipment manufacturer’s facility, before shipment, confirming that a piece of equipment or system meets its purchase specification and functions as intended prior to delivery to the regulated site — reducing the risk of discovering design or build defects only after installation.

A structured verification performed after equipment or a system has been installed at the regulated facility, confirming it functions correctly in its final location and operating environment before formal qualification proceeds — catching any damage, miscalibration, or interface issues introduced during transport and installation.

The qualification of critical facility utilities — such as purified water, water for injection, clean steam, compressed air and gases, and HVAC — that directly or indirectly contact product or affect product quality, demonstrating through IQ, OQ, and PQ that the utility consistently meets its defined quality attributes under normal operating conditions.

The documented process of demonstrating that an analytical procedure is suitable for its intended use, evaluating parameters such as accuracy, precision, specificity, linearity, range, and detection or quantitation limits, and robustness, before the method is used to release, characterize, or support the stability of a GxP product.

The documented process of demonstrating that a previously validated analytical method performs equivalently when moved from an originating (sending) laboratory to a receiving laboratory, using a predefined protocol and acceptance criteria — commonly comparative testing, co-validation, or a documented waiver justified by the method’s simplicity or history.

A study demonstrating that a product’s packaging and shipping configuration protects it against the temperature, humidity, vibration, and handling stresses encountered in its actual distribution lane(s), keeping the product within its labeled storage conditions and free of physical damage from dispatch through receipt.

The qualification of temperature-controlled storage, packaging, and transport systems used for cold-chain products — such as 2–8 °C or frozen-condition biologics — combining thermal mapping, worst-case seasonal challenge testing, and excursion-response procedures to demonstrate the chain consistently maintains labeled storage conditions from manufacture to point of use.

A study that places calibrated data loggers throughout a storage space, chamber, or transport unit under defined loading and door-opening conditions to characterize its spatial and temporal temperature — and often humidity — profile, identifying hot or cold spots and confirming the space consistently holds its specified range.

The retrospective qualification or validation of a computerized system, process, or facility that has been in GxP use without contemporaneous validation documentation, reconstructing evidence of fitness for use from historical operating, maintenance, and quality records, supplemented by current-state testing wherever those records prove insufficient.

Validation performed and completed before a new or modified process is released for routine commercial production or clinical use, with protocols approved and executed on a predetermined number of batches or runs prior to any distribution of product made under that process.

A validation approach in which product manufactured during the qualification runs is released for distribution based on real-time monitoring and testing of each individual batch against predefined acceptance criteria, used only in defined circumstances — such as limited supply or an orphan product — with documented quality-unit justification and heightened in-process control.

EU GMP Annex 15’s term for Stage 3 of the process validation lifecycle — the continued collection and evaluation of process and product data during routine commercial manufacture to confirm the process remains in a state of control — functionally aligned with FDA’s Continued Process Verification.

The multidimensional combination and interaction of input variables — such as material attributes and process parameters — demonstrated to provide assurance of quality, established under a Quality by Design approach and submitted for regulatory approval; movement within an approved design space is not considered a change that requires additional regulatory review.

The planned set of controls — derived from current product and process understanding — that assures process performance and product quality, comprising controls on material attributes, facility and equipment conditions, in-process controls, finished-product specifications, and their associated monitoring and control methods, spanning the full manufacturing lifecycle.

A characteristic of a facility, system, or piece of equipment — such as a specific parameter, function, or component — whose failure or deviation from its acceptance criterion has a direct, demonstrable impact on product quality, and which therefore requires formal qualification and ongoing control under the ASTM E2500 risk-based qualification approach.

A well-planned, documented, and managed engineering process of placing facilities, systems, and equipment into operation and verifying that they perform according to design intent — forming the science- and risk-based engineering foundation on which formal GMP qualification (IQ/OQ/PQ) is built under the ASTM E2500 approach.

The documented check, when equipment, components or materials arrive on site, that what was delivered is what was ordered and specified — the right item, undamaged, with the documentation the purchase order required — before it is accepted and installed.

Documented confirmation that a system is installed as designed — components, instruments, piping, services and materials of construction checked against the approved drawings and specifications — performed within a verification-based C&Q programme, where it does the job IQ does in a traditional one.

Documented confirmation that an installed system operates as designed across its intended operating range — functions, alarms, interlocks and control sequences, including upper and lower limits — performed within a verification-based C&Q programme, where it does the job OQ does in a traditional one.

Documented confirmation that a system, once installed and operating correctly, performs consistently in routine use — with production materials, qualified substitutes or simulated product, at the conditions it will actually run — performed within a verification-based C&Q programme, where it does the job PQ does in a traditional one.

Verification of a manufacturing system as a whole — its components acting together, and with the systems it depends on — against the requirements it must meet, rather than equipment item by item. In a verification-based C&Q programme it is the point at which a system is shown fit for intended use and accepted for release.

A science- and risk-based approach to facility, system, and equipment qualification, described in ASTM E2500, that scopes verification activities according to a documented assessment of impact on product quality and patient safety — leveraging good engineering practice, vendor documentation, and commissioning data rather than mandating a rigid, one-size-fits-all IQ/OQ/PQ protocol structure.

A compendial test that determines whether a drug product, biologic, or medical device labeled as sterile is free from viable microorganisms. Product units are exposed to microbiological growth media by membrane filtration or direct inoculation, incubated for a defined period under two conditions, and observed for turbidity. It is a mandatory release test for parenteral, ophthalmic, and other products claiming sterility.

A compendial assay that detects and quantifies bacterial endotoxin (lipopolysaccharide from Gram-negative bacterial cell walls) in parenteral drug products, water systems, and medical devices, using Limulus Amebocyte Lysate reagent derived from horseshoe crab blood. Gel-clot, turbidimetric, and chromogenic kinetic formats are all compendial; recombinant Factor C is an accepted non-animal-derived alternative.

An in-vivo test in which rabbits are injected with a test article and their body temperature monitored to detect pyrogenic contamination, used when the Bacterial Endotoxins Test is unsuitable — for example where the product interferes with the LAL reaction or where non-endotoxin pyrogens are a concern. Largely superseded by BET and the monocyte activation test.

Compendial tests applied to non-sterile pharmaceutical articles, raw materials, excipients, and components: <61> quantifies total aerobic microbial count and total combined yeasts/moulds count, while <62> tests for the absence of specified objectionable organisms such as E. coli, Salmonella, and Staphylococcus aureus, selected based on the product’s route of administration and patient population.

A terminal sterilization method using saturated steam under pressure — commonly 121°C for a validated hold time, or higher-temperature/shorter-time cycles — to achieve microbial lethality in aqueous solutions, glassware, hard goods, and heat-stable components. Cycle lethality is validated using biological and chemical indicators and physical parameter monitoring, and is expressed as an F0 value.

A terminal sterilization and, at higher temperatures, depyrogenation method using hot air — typically 160–190°C for defined hold times — for heat-stable materials unsuited to moist heat, such as glass vials, metal components, powders, and non-aqueous liquids such as oils. Depyrogenation cycles (commonly ≥250°C) additionally destroy heat-stable bacterial endotoxin.

A low-temperature gaseous sterilization process using ethylene oxide gas under controlled temperature, humidity, gas concentration, and exposure time to sterilize heat- and moisture-sensitive medical devices and components. Because EO and its reaction by-products (ethylene chlorohydrin, ethylene glycol) are toxic, sterilized product must undergo a validated post-cycle aeration period to reduce residuals to acceptable limits.

A terminal sterilization method using gamma rays, electron beam, or X-ray radiation to inactivate microorganisms in medical devices and pharmaceutical components at ambient temperature without a gaseous sterilant. The sterilization dose is established and periodically verified using dose-setting methods based on product bioburden, or applied as a validated fixed dose.

The removal of microorganisms from a liquid or gas by passage through a validated sterilizing-grade filter, most commonly nominally rated 0.22 µm, used as the sterilization step for heat-labile drug products, or in combination with terminal sterilization or aseptic processing for solutions, buffers, and gases in aseptic manufacture.

Non-destructive physical tests — bubble point, diffusive (forward) flow, and pressure hold — performed on a sterilizing-grade filter before and/or after use to verify that its pore structure has not been compromised, based on a correlation the filter manufacturer establishes between the physical test result and validated bacterial retention.

A documented, periodically requalified process verifying that an individual can don sterile cleanroom garments in the required sequence without compromising the garment’s barrier integrity or introducing contamination, assessed through direct observation and microbiological sampling (glove and gown contact plates) against predefined acceptance criteria before that person may work unsupervised in classified areas.

The graduated positive (or, for containment applications, negative) air pressure differential deliberately maintained between adjoining rooms of different air cleanliness classification, sustaining directional airflow from higher- to lower-classified space to prevent ingress of contamination. Pressure differentials are continuously monitored, alarmed, and periodically requalified as part of HVAC qualification.

The number of times per hour that a room’s total air volume is theoretically replaced by supply air, expressed in air changes per hour (ACH); a core HVAC design and qualification parameter for cleanrooms and controlled manufacturing areas, set high enough to support the room’s required particulate and microbial classification and to dilute or remove generated contamination.

Airflow delivered in parallel streamlines at a validated, uniform velocity through a HEPA or ULPA filter bank, continuously sweeping particles away from the critical zone in a single direction to maintain Grade A/ISO 5 conditions over exposed sterile product, open containers, and closures during aseptic processing.

Routine microbiological sampling of operators’ gowned gloves, sleeves, and other gown surfaces — via contact (RODAC) plates or fingertip plates — taken during and immediately after work in classified manufacturing areas, used to detect microbial contamination introduced by personnel, recognized as the largest single contamination source in aseptic processing.

Laboratory and in-situ studies demonstrating that a cleanroom disinfectant, applied at its validated in-use concentration and contact time, achieves the manufacturer’s claimed log-reduction against a defined panel of reference and facility-specific (“house”) microorganisms on the actual surface materials found in the cleanroom, including demonstrated sporicidal activity where a sporicidal agent is used.

The documented, risk-based program specifying which disinfectants — typically rotated with a sporicidal agent — are applied to which cleanroom surfaces, at what frequency, concentration, and contact time, to control microbial bioburden between and during production. Underpinned by disinfectant efficacy qualification, and its effectiveness is verified through the environmental monitoring program.

A documented verification performed before starting, changing over, or resuming a manufacturing or packaging line confirming that all materials, components, labels, documents, and product from the previous batch or a different product have been removed or accounted for, preventing mix-up, cross-contamination, or label mix-up between successive batches or products.

Checks, tests, and measurements performed on materials or intermediates during production — such as fill weight, pH, tablet hardness, or blend homogeneity — used to monitor and, where the process design permits, adjust the manufacturing process in real time to ensure the finished product will conform to specification, distinct from final release testing performed after manufacture is complete.

Testing performed on a powder or granule blend, before compression or encapsulation, that confirms the active pharmaceutical ingredient is homogeneously distributed throughout the blend at the target concentration, mitigating the risk that individual finished dosage units will fail content uniformity due to segregation, poor mixing, or an inadequate blending process.

A finished-product test verifying that individual dosage units of a batch — tablets, capsules, or other discrete units — contain an amount of active ingredient within a narrow range of the labelled claim, assessed under a two-stage acceptance value procedure that evaluates both the mean and the variability of individual unit assay results.

An in-vitro test measuring the rate and extent to which a drug substance is released from a solid oral (or other) dosage form into a specified aqueous medium under controlled agitation and temperature, used for routine quality control release testing, formulation development, and — where an in-vitro/in-vivo correlation is established — as a surrogate indicator of in-vivo bioavailability.

A documented calculation, performed at defined stages and at batch completion, comparing the actual quantity of material or finished units produced against the theoretical yield calculated from the input quantities, with any deviation outside a predefined acceptable range investigated before batch disposition to rule out product loss, mix-up, diversion, or an undetected process error.

The manufacturing stage in which a bulk sterile drug product is aseptically or terminally filled into its final primary container — vial, pre-filled syringe, cartridge, or bag — and closed, encompassing filling, stoppering, capping or crimping, and in-process inspection, immediately upstream of lyophilization (where applicable) and secondary packaging.

A 100% manual or automated inspection of every unit of a parenteral or other injectable product, against a defined light-and-dark background under specified illumination, to detect and reject units containing visible particulate matter, extraneous material, or container/closure defects such as cracks or missing components, performed before batch release.

Particulate contamination in injectable products below the threshold of reliable unaided visual detection — pharmacopoeially assessed at ≥10 µm and ≥25 µm size thresholds — quantified by light obscuration particle counting or, for products unsuited to light obscuration, microscopic particle count, against pharmacopoeial limits expressed per container based on nominal fill volume.

Physical or chemical methods — including vacuum decay, high-voltage leak detection, headspace gas analysis, tracer gas, and dye ingress — used to detect breaches in a sealed container closure system that could permit microbial ingress or loss of product integrity, commonly used as a rapid, deterministic, non-destructive alternative or complement to microbial container closure integrity testing.

Two distinct corrective paths for a batch that fails to conform to standards: reprocessing returns the batch to an earlier stage of the approved manufacturing process, such as re-drying or re-blending, and is generally considered part of the validated process, while rework applies a different or unplanned treatment to bring a non-conforming batch to an acceptable standard and is treated as a more significant deviation requiring greater justification.

A compiled summary of the clinical and nonclinical data on an investigational product that is relevant to its study in human subjects, given to investigators before a trial begins. It supports informed risk assessment, guides safety monitoring and dose selection, and is updated as new data emerge, forming the reference point for judging whether an adverse event is expected.

The document, paper or electronic, used to record all protocol-required information on each trial subject for transmission to the sponsor. The eCRF is the electronic version, typically captured directly into a validated clinical data management system, and is the primary source of subject-level data feeding statistical analysis and the clinical study report.

The individual, company, institution, or organization that takes responsibility for initiating, managing, and financing a clinical trial. The sponsor holds ultimate accountability for trial quality, data integrity, and subject safety, whether those duties are performed directly or delegated to a Contract Research Organization, while remaining legally responsible for oversight of any delegated function.

A person or organization contracted by the sponsor to perform one or more trial-related duties and functions that would otherwise be the sponsor’s responsibility, such as monitoring, data management, or safety case processing. Any transferred duty must be specified in writing, and the sponsor retains ultimate responsibility for the quality and integrity of the trial data.

The documents that individually and collectively permit evaluation of the conduct of a trial and the quality of the data produced, filed in the Trial Master File before, during, and after a study. They demonstrate compliance with GCP and applicable regulatory requirements, and their completeness is a standing focus of sponsor and regulatory inspection.

The process of assigning trial subjects to treatment or control groups by chance, to minimize selection bias and confounding so that observed differences in outcome can be attributed to the intervention rather than to systematic differences between groups. The randomization method and its concealment are pre-specified in the protocol and statistical analysis plan.

A procedure in which one or more parties to a trial — subjects, investigators, or outcome assessors — are kept unaware of treatment assignment, to reduce the risk of conscious or unconscious bias in trial conduct, data collection, and outcome assessment. Trials may be open-label, single-blind, or double-blind, chosen according to the endpoint and feasibility.

An inactive substance or intervention, indistinguishable in appearance and administration from the investigational product, used as a comparator to isolate the treatment’s pharmacological effect from expectation and natural disease fluctuation. Use of a placebo control raises ethical considerations that must be justified against the availability of established effective therapy.

A pre-specified variable measured in a clinical trial that reflects a clinically meaningful effect of the intervention, used to assess efficacy or safety. Endpoints are classified as primary, secondary, or exploratory, and each must be precisely defined, including timing, measurement method, and how intercurrent events are handled under the estimand framework.

A document that elaborates the statistical section of the protocol into detailed, unambiguous procedures for the analysis of trial data, finalized and signed before database lock and unblinding. It specifies the analysis populations, methods for primary and secondary endpoints, handling of missing data, and any planned interim or subgroup analyses.

An independent group of experts, external to the trial’s sponsor and investigators, that periodically reviews accumulating unblinded safety and, where applicable, efficacy data to recommend whether a trial should continue as planned, be modified, or be stopped. Its independence protects the trial’s scientific and ethical integrity from being influenced by interim results.

An adverse event that is serious, judged to have a reasonable possibility of a causal relationship to the investigational product, and not consistent with the reference safety information in the current Investigator’s Brochure or approved label. SUSARs trigger expedited regulatory reporting because they may signal a previously unrecognized safety risk.

The regulatory requirement to notify health authorities, investigators, and ethics committees of certain serious safety findings — chiefly SUSARs — within tightly defined timelines, separate from routine periodic safety reporting. Expedited reporting enables fast risk communication so investigators and regulators can act before the next scheduled safety update.

A periodic compilation and evaluation of all safety information accumulated for an investigational product over a defined interval, as distinct from single-case expedited reports. Aggregate reports examine the full safety dataset to detect patterns, evaluate the evolving benefit-risk profile, and are submitted to regulators on a recurring schedule throughout development and after approval.

The structured evaluation of a medicinal product’s favorable effects against its unfavorable effects, conducted throughout development and the product lifecycle to support decisions on trial continuation, marketing authorization, and post-approval risk management. It weighs the severity, frequency, and reversibility of harms against the clinical benefit and the availability of alternative therapies.

The regulatory submission a sponsor files with a national or regional competent authority to obtain authorization to conduct a clinical trial, distinct from a US Investigational New Drug application though serving the equivalent gatekeeping function. Content typically includes the protocol, Investigator’s Brochure, manufacturing and quality information, and ethics committee documentation.

A formal written description of a change to, or clarification of, an approved clinical trial protocol, distributed to and, where substantial, approved by regulators and ethics committees before implementation. Amendments may be substantial, affecting safety, scientific validity, or subject rights, or administrative, and each requires version control across all trial documents.

The pre-specified characteristics that qualify a subject for trial enrollment (inclusion) or disqualify them (exclusion), defining the study population to which the trial’s results can be generalized. Criteria balance scientific need — ensuring a population able to show the treatment effect safely — against feasibility of recruitment and generalizability of findings.

An adverse event, serious or non-serious, of scientific or medical importance specific to a sponsor’s product or program, for which ongoing monitoring and rapid communication to the sponsor is required, and which is tracked separately from routine adverse event collection. AESIs are pre-specified in the protocol and safety monitoring plan based on the product’s known or theoretical risks.

The structured judgment, made by the investigator and independently reviewed by the sponsor, of whether a reasonable possibility exists that an adverse event was caused by the investigational product, as opposed to the underlying disease, a concomitant medication, or chance. The outcome directly determines whether the event is an adverse reaction and whether it feeds expedited reporting.

The standardized format for reporting information about a single case of a suspected adverse reaction to a medicinal product, whether arising in a clinical trial, from spontaneous post-marketing reports, or from the literature. The ICSR structures patient, reaction, product, and reporter information for consistent, machine-processable electronic transmission between sponsors, regulators, and safety databases.

An integrated report of a clinical trial’s methods, results, and statistical analyses, structured in the ICH E3 format so it can be evaluated independently by regulators, ethics committees, and other readers without needing separate access to the raw dataset. The CSR is the primary document supporting marketing applications and post-trial regulatory decisions.

A precise description of the treatment effect a clinical trial is designed to estimate, defined by five components: the population, the treatment conditions being compared, the endpoint, how intercurrent events such as treatment discontinuation or rescue medication are handled, and the population-level summary measure. The estimand aligns the trial’s objective, design, and analysis around one clearly stated clinical question.

The periodic comparison of adverse event data held in the clinical database against the cases recorded in the pharmacovigilance safety database, to confirm that every reportable case was captured, correctly classified, and consistently represented in both systems. Discrepancies are investigated and resolved, and the process itself is documented as part of trial quality oversight.

The Design History File is the compiled body of records documenting a medical device’s design history and demonstrating that the finished design was developed in accordance with the approved design and development plan and applicable design control procedures. It aggregates design inputs, outputs, review minutes, verification and validation evidence, and change records generated across the device’s development lifecycle.

The Device Master Record is the compilation of records containing the procedures and specifications for a finished medical device — device specifications, production process specifications, quality assurance procedures, packaging and labeling specifications, and installation, maintenance, and servicing procedures. It is the manufacturing “recipe” a facility must hold and control for every device it produces.

The Device History Record is the compilation of records for a specific finished device unit, lot, or batch, showing it was manufactured in accordance with the Device Master Record. It typically includes the manufacturing dates, quantities produced and released, acceptance records, and the primary identification label and unique device identifier applied to that production run.

Design verification confirms, through objective evidence, that design outputs meet the specified design input requirements. It answers the question “did we build the device right?” by testing, inspecting, analyzing, or otherwise demonstrating that each output — a drawing, a specification, a piece of software — satisfies the requirement it was derived from, before design validation is attempted.

Design validation confirms that a device conforms to defined user needs and intended uses under actual or simulated use conditions. It answers the question “did we build the right device?” — distinct from design verification, which confirms outputs against inputs — and normally requires testing on initial production units, lots, or their equivalent.

Usability engineering is the structured process of analyzing, specifying, developing, and evaluating a medical device’s user interface for use-safety — identifying use errors that could cause harm and designing the interface to eliminate or reduce that risk. IEC 62366-1 defines the process; formative and summative usability studies with representative users are its primary evidence.

Postmarket surveillance is the proactive, systematic process a device manufacturer runs to collect and analyze real-world experience with a device already on the market — complaints, service data, literature, and registry information — to identify emerging safety signals and quality trends and to update the risk-benefit assessment before a serious incident forces a reactive response.

Vigilance reporting is the EU MDR system requiring manufacturers to report serious incidents and field safety corrective actions involving their devices to the competent authorities of affected member states, and to submit periodic trend reports for statistically significant increases in the frequency or severity of otherwise non-reportable incidents, so authorities can detect emerging device risks across the EU market.

A Notified Body is an organization designated by an EU member state and monitored by the European Commission and other member states to assess the conformity of medical devices against MDR requirements before they may carry the CE mark. For all but the lowest-risk device classes, a Notified Body’s conformity assessment — not a government agency’s premarket approval — is the gateway to the EU market.

CE marking is the conformity marking a manufacturer affixes to a product to declare that it meets all applicable EU legislation and may be placed on the EU market. For medical devices, CE marking follows a successful conformity assessment — self-assessment for the lowest-risk classes, or Notified Body assessment for all others — and is the visible sign a device may lawfully be sold across the EEA.

A Clinical Evaluation Report is the documented output of a device manufacturer’s clinical evaluation — the systematic, ongoing process of collecting, appraising, and analyzing clinical data to verify safety, performance, and clinical benefit, and to confirm the acceptability of the device’s risk-benefit ratio throughout its lifecycle. It underpins the technical documentation reviewed by the Notified Body under EU MDR.

A 510(k) is a premarket submission demonstrating that a new device is at least as safe and effective as — substantially equivalent to — a legally marketed predicate device, allowing it to reach the US market without the more extensive clinical evidence a PMA requires. It is the pathway used for the large majority of moderate-risk, Class II devices.

Premarket Approval is FDA’s most stringent device review pathway, required for Class III devices that support or sustain human life, are of substantial importance in preventing impairment of health, or present a potentially unreasonable risk of illness or injury. Unlike a 510(k), a PMA requires independent evidence of safety and effectiveness, typically including clinical investigation data, rather than comparison to a predicate.

The Quality System Regulation and its successor, the Quality Management System Regulation (QMSR), are FDA’s device quality-system requirements. QMSR replaces the legacy 21 CFR Part 820 framework effective February 2, 2026 by incorporating ISO 13485:2016 by reference, harmonizing FDA’s device quality expectations with the standard most other major device markets already require.

An Establishment Inspection Report is the FDA investigator’s formal internal report documenting what was observed during an inspection — the facility’s operations, any objectionable conditions found, and the investigator’s overall classification recommendation. It is the official record behind an inspection’s outcome and is distinct from the Form 483, which lists only the observations shared with the firm.

An Import Alert is an FDA notice to its field staff identifying a firm, product, or product category that may be refused entry into the United States without physical examination — a mechanism called Detention Without Physical Examination (DWPE) — based on a pattern of violations such as adulteration, misbranding, or repeated data-integrity or GMP failures.

A Pre-Approval Inspection is an FDA on-site inspection of a manufacturing facility conducted in connection with a pending drug application — NDA, ANDA, or BLA — to verify that the data submitted are accurate and that the facility is capable of manufacturing the product in compliance with cGMP before FDA will approve the application.

Establishment registration is the mandatory identification of a facility that manufactures, prepares, propagates, compounds, or processes a regulated drug or device to FDA, giving the agency a current inventory of sites subject to inspection. It is a listing obligation, not a quality or approval standard, and is typically paired with product listing for drugs or device listing for devices.

The eCTD is the standardized electronic format regulators require for organizing and submitting a marketing application — the electronic implementation of the ICH Common Technical Document structure’s five modules, with a backbone XML file that indexes every document and tracks each submission as a lifecycle of sequential updates rather than a one-time file drop.

CMC is the body of information in a marketing application describing how a drug substance and drug product are manufactured, controlled, and characterized — composition, manufacturing process, in-process and release testing, specifications, container closure, and stability. It is submitted as Module 3 of the CTD and is the technical foundation reviewers rely on to assess product quality.

A Complete Response Letter is FDA’s formal notice that an application — NDA, ANDA, or BLA — cannot be approved in its current form, describing the deficiencies that must be resolved. A CRL is not a rejection; the applicant may resubmit addressing the cited deficiencies, withdraw the application, or request a meeting to discuss the path forward.

Refuse-to-Accept and Refuse-to-File are FDA’s administrative screening decisions that an application is too incomplete for substantive review to even begin — distinct from a scientific review deficiency. FDA screens a new submission against a completeness checklist shortly after receipt, and an application failing that screen is returned to the applicant before the review clock starts.

Orphan Drug Designation is a status FDA grants to a drug intended to treat a rare disease or condition — in the US, generally affecting fewer than 200,000 people — providing incentives including tax credits for clinical trial costs, exemption from certain user fees, and seven years of market exclusivity upon approval, independent of any patent protection.

Breakthrough Therapy is an FDA expedited-program designation for a drug intended to treat a serious condition where preliminary clinical evidence indicates the drug may demonstrate substantial improvement over available therapies on a clinically significant endpoint. It brings intensive FDA guidance starting early in development, including organizational commitment and cross-disciplinary review team involvement.

Accelerated Approval lets FDA approve a drug for a serious condition based on an effect on a surrogate or intermediate clinical endpoint reasonably likely to predict clinical benefit, rather than waiting for confirmed clinical benefit itself, when the drug fills an unmet need. The applicant must then complete postmarketing confirmatory trials verifying the anticipated clinical benefit.

Priority Review is an FDA designation shortening the standard application review goal from ten months to six months for a drug that, if approved, would provide a significant improvement in safety or effectiveness for a serious condition. It changes the review timeline commitment under FDA’s user-fee performance goals, not the evidentiary standard the application must meet.

Type A, B, and C meetings are FDA’s formal, scheduled meeting categories with drug and biologic sponsors, distinguished by purpose and response timeline: Type A meetings resolve stalled development programs and are scheduled within 30 days; Type B meetings cover milestone discussions such as pre-IND or pre-NDA/BLA meetings, scheduled within 60 days; Type C meetings cover other product-development topics, scheduled within 75 days.

A Marketing Authorization is the EU approval required before a medicinal product may be placed on the market, granted through one of four routes: the centralised procedure — a single EMA-recommended authorization valid across the EU — or the national, mutual recognition, or decentralised procedures, which route approval through individual member-state authorities rather than a single EU-wide decision.

The conventional written abbreviation for commissioning, carried into pharmaceutical projects from building-services engineering. "Facility Cx" means facility commissioning; the same convention gives RCx for retro-commissioning of an existing facility and MCx for monitoring-based commissioning.

The full lifecycle from engineering handover to a validated process: commissioning proves engineering readiness, qualification proves equipment and utilities are fit for intended use, and validation proves the process itself consistently produces conforming product. CQV is broader than C&Q, which stops at qualification.

A specific design feature of a system — a material of construction, an instrument range, an alarm setpoint, a slope, an interlock — that must be present and correct in order to control an identified critical aspect. CDEs are identified during design review and are what qualification actually verifies.

The documented assessment that determines which aspects of a system are critical to product quality and patient safety, and therefore how much qualification effort each part of the system warrants. It is the mechanism that lets a risk-based C&Q programme test some things hard and others not at all.

The legacy classification of a system as direct-impact, indirect-impact or no-impact on product quality, used to decide whether it required formal qualification. Superseded in current guidance by the System Risk Assessment, but still embedded in many live SOPs and legacy validation master plans.

The legacy component-by-component review that followed a System Impact Assessment, classifying each instrument, valve and control loop within a direct-impact system as critical or non-critical. Superseded by the critical aspect / critical design element approach.

The documented, subject-matter-expert-led examination of a system design against its requirements, held while the design can still be changed. In a risk-based C&Q programme it is where critical design elements are identified and where design qualification obligations are discharged.

The individual with demonstrable expertise in a specific system, process or discipline who leads the technical judgement in a risk-based verification programme — defining requirements, identifying critical aspects, reviewing design, setting the verification strategy and approving acceptance criteria within their area of responsibility.

The table that maps every requirement in the URS forward to the design element that implements it and the test that verifies it, and back again. It is the artefact an inspector uses to ask "show me where this requirement was tested" and get an answer in one step.

The document that states what a system must do to satisfy the user requirements — functions, operating modes, alarms, interlocks, data handling — without yet specifying how it will be built. It sits between the URS and the design specification in the specification-and-verification hierarchy.

The document that states how a system will be built to deliver the specified functions — components, materials, instrument ranges, software architecture, network topology. Where the functional specification says what, the design specification says with what.

The compiled engineering record handed from the construction or installation contractor to the owner at mechanical completion — as-built drawings, material and weld certificates, instrument calibration certificates, supplier manuals, test records and the punch list. It is the evidence base qualification leverages instead of regenerating.

The tracked register of outstanding defects and incomplete work identified at mechanical completion or during commissioning, each item classified by whether it blocks the next phase. Category A items must be closed before qualification proceeds; lower categories may be carried with documented justification.

The point-to-point verification that an instrument signal travels correctly through the whole control loop — sensor, wiring, I/O card, controller, display and any alarm or interlock it drives — before the system is operated. It confirms the loop is wired and configured as designed, not that it performs to a process specification.

The collective term for the physical estate that manufacturing runs on — the building and its classified areas, the utilities that serve them (water, steam, gases, HVAC), and the process equipment itself. It is the scope boundary most commissioning and qualification programmes are written against.

The air-handling system that establishes and holds a cleanroom’s classification — supplying filtered air at a controlled rate, temperature and humidity, and maintaining the pressure cascade between rooms of different grades. In a sterile facility it is the primary engineering control over contamination.

The plant item that conditions and moves air for an HVAC system — fans, heating and cooling coils, humidification, and filter banks — typically serving a defined group of rooms. Which rooms share an AHU determines which areas can be segregated and which fail together.

The terminal filter that removes particulate from supply air to the efficiency a cleanroom grade requires. Its performance is proven in situ by installed-filter leak testing, not by the manufacturer’s certificate alone, because installation and gasket seating are where filters actually fail.

The control system that runs a facility’s HVAC and utilities — setpoints, sequences, alarms and trending for air handling, temperature, humidity and room pressure. It is a control system, distinct from the environmental monitoring system that independently records classified-area conditions.

The qualified system that continuously records classified-area conditions — non-viable particle counts, differential pressure, temperature and humidity — and raises alarms on excursion. It provides the GMP record of environmental control, independent of the system that does the controlling.

Automated cleaning of the interior surfaces of process equipment and pipework without dismantling it, by circulating cleaning solutions and rinses through the assembled system to defined time, temperature, flow and concentration parameters.

Sterilisation or sanitisation of assembled process equipment and pipework in situ using clean steam held at temperature for a defined time, without dismantling the system. Usually performed after CIP and immediately before aseptic use.

Steam generated from treated feedwater and free of boiler additives, whose condensate meets water-for-injection quality. It is used where steam contacts product, product-contact surfaces or is used for sterilisation — plant steam is not acceptable for those duties.

Compressed air treated to remove oil, water and particulate to a specified quality, used where air contacts product or product-contact surfaces. Its quality attributes are specified and monitored as a utility, not assumed from the compressor.

The pressure difference maintained between adjacent classified rooms, which establishes the direction of air flow and therefore the direction contamination cannot travel. The cascade — not the absolute pressure in any one room — is what protects the higher grade.

The industrial controller that executes the deterministic control logic for a piece of equipment or a process skid — reading inputs, running the sequence, and driving outputs and interlocks. In GAMP terms its configured application is what carries the GMP risk, not the hardware.

A plant-wide control system in which controllers are distributed across process units but managed under one integrated engineering, operating and historian environment. Typically chosen for continuous or large multi-unit processes where a single coordinated control philosophy matters.

The supervisory layer above controllers that visualises plant state, issues setpoints, records data and manages alarms across multiple systems. Because it is usually where GMP records are created and retained, it carries data-integrity obligations the controllers beneath it may not.

The operator-facing screen through which a person observes and commands an automated system. Its design is a GMP concern as well as an engineering one: what it displays, what it permits without a second check, and what it records are the practical boundary of operator error.

The controlled engineering drawing showing every pipe, valve, instrument and control loop in a system and how they interconnect. It is the reference document against which walkdowns, installation qualification and change assessments are performed, and its as-built accuracy is a GMP matter.

A structured, guideword-driven team review of a process design that examines each node for deviations — no flow, more pressure, reverse flow — and their causes, consequences and safeguards. Primarily a process-safety technique, it frequently surfaces product-quality risks that a quality-only assessment misses.

The system that schedules, dispatches and records maintenance and calibration work against an asset register. Because it holds the evidence that qualified equipment remained maintained and calibrated, it is a GMP-relevant computerised system in its own right.

The company that designed and built a piece of equipment, as distinct from a distributor or integrator. OEM documentation, factory testing and recommended maintenance intervals are the engineering evidence a risk-based qualification programme leverages rather than reproduces.

The pair of calibration readings recorded before any adjustment (as-found) and after it (as-left). The as-found value is the one with GMP consequence: if it is outside tolerance, every result the instrument produced since its last calibration is in question and an impact assessment is required.