Commissioning & Qualification
Commissioning and qualification is where the physical manufacturing capability is created and proven: facilities designed and built, cleanrooms classified, utilities installed, equipment set to work, and the whole assembly demonstrated fit for its intended use. The modern framing — ASTM E2500 and the ISPE C&Q Baseline Guide — is risk-based verification: begin from the product's requirements, identify the critical aspects of each system that can affect product quality, and concentrate verification effort there, leveraging good engineering practice and supplier documentation for everything else instead of re-executing it under a GMP letterhead. EU GMP Annex 15 supplies the regulatory spine: a qualification sequence from user requirements through design review, installation, operation, and performance, run under a validation master plan.
What this page does not claim
Phases are an organising device, not a regulatory mandate — real programmes overlap them, and a medical device, a food product and a small-molecule drug traverse them differently. Each page says where the differences bite.
What happens in this phase
Commissioning and qualification is where the physical manufacturing capability is created and proven: facilities designed and built, cleanrooms classified, utilities installed, equipment set to work, and the whole assembly demonstrated fit for its intended use. The modern framing — ASTM E2500 and the ISPE C&Q Baseline Guide — is risk-based verification: begin from the product's requirements, identify the critical aspects of each system that can affect product quality, and concentrate verification effort there, leveraging good engineering practice and supplier documentation for everything else instead of re-executing it under a GMP letterhead. EU GMP Annex 15 supplies the regulatory spine: a qualification sequence from user requirements through design review, installation, operation, and performance, run under a validation master plan.
The craft is in the seams. User requirements must trace from the control strategy — a requirement no one can trace to a product need is cost without protection. Engineering turnover must be genuinely usable: commissioning evidence that qualification can lean on, rather than repeat, requires the engineering work to have been documented to a leverageable standard from the start, which is the practical meaning of good engineering practice. Cleanrooms are classified and monitored per ISO 14644-1 and -2; hygienic fabrication follows ASME BPE for bioprocess equipment; laboratory instruments follow the analytical instrument qualification framework of USP <1058>. Automation cuts across all of it: the control systems, historians, and instrument data systems installed here are qualified alongside the iron they control.
The phase ends at a deliberately formal boundary: systems released for use in validation and manufacture, with acceptance criteria met, punch-list items dispositioned, and any open engineering work risk-assessed rather than quietly carried. Quality's role is not to witness every torque check — that is the over-involvement E2500 was written against — but to own the risk decisions: approving what is critical and what is not, judging whether supplier and commissioning evidence is robust enough to lean on, and holding the release gate. A facility qualified by volume of paper rather than by verified critical aspects is the classic failure mode: thousands of signatures, and the one parameter that mattered untested.
- User requirements traceable to the product control strategy and process design, approved before detailed design verification begins.
- A commissioning and qualification plan — under the validation master plan — defining strategy, risk approach, and acceptance criteria.
- System-level risk assessments identifying critical aspects and the intended level of leverage of engineering and supplier documentation.
- Suppliers and engineering contractors assessed, with documentation standards agreed so their evidence is leverageable.
- Installation and operational verification complete for each system, with critical aspects verified against acceptance criteria.
- Cleanroom classification achieved and initial environmental performance demonstrated per ISO 14644-1/-2.
- Punch lists and open items dispositioned with risk assessment — nothing critical carried silently into validation.
- Formal release of systems for validation and GMP use, approved by quality.
- Qualification summary reports approved, with traceability from user requirement to verification evidence.
SPEQ synthesis. Phase boundaries and gate criteria are an organising device for planning and review, not a regulatory mandate. Real programmes overlap phases and re-enter them; treat these as the questions worth answering, not a compliance checklist.
- Approve user requirements, risk assessments, and acceptance criteria for critical aspects — the decisions, not every execution signature.
- Judge the leverageability of engineering and supplier documentation, and reject it where it cannot carry the weight.
- Hold the release gate: no system enters validation or GMP use with undispositioned critical open items.
- Own the change management that begins the moment a design is approved — the facility's configuration is a controlled record from here on.
- Assure the qualification of the automation layer in step with the equipment it controls.
- User requirement specifications traced to the control strategy
- System risk assessments and criticality determinations
- Commissioning documentation and engineering turnover packages
- Installation / operational / performance verification protocols and reports
- Cleanroom classification and initial monitoring data
- System release certificates and the qualification summary report
- Requirements written from the equipment brochure rather than the process, so verification proves the machine matches its own manual.
- Commissioning documented casually, so qualification cannot leverage it and repeats the work at triple cost — or worse, leans on it anyway.
- Criticality inflation: everything marked critical, effort diffused evenly, and the genuinely critical aspects tested no harder than the trivial.
- Punch-list items carried into validation "to protect the schedule", surfacing later as deviations with a paper trail proving they were known.
- The automation layer qualified as an afterthought, leaving the historian and alarms — the future evidence base — outside the verified scope.
Derived from the 8 standards SPEQ maps to this phase, across 7 regulatory bodies: EMA, ICH, USP, ISO, ASTM, ISPE, ASME.
FREQUENTLY ASKED
What is the difference between commissioning and qualification?
Commissioning is the engineering discipline of setting a system to work — installing, adjusting, testing, and documenting that it operates as designed. Qualification is the regulated demonstration that the system is fit for its intended use in GxP manufacture, with approved protocols, acceptance criteria, and quality oversight. The modern insight, embodied in ASTM E2500 and the ISPE Baseline Guide, is that these should not be two sequential piles of duplicate paper: well-documented commissioning evidence can be leveraged as verification evidence for non-critical aspects, reserving formal qualification rigour for the aspects risk assessment says can affect product quality.
What does "good engineering practice" actually require?
That engineering work be done to a standard whose outputs can be trusted and reused — documented design decisions, controlled drawings and specifications, calibrated instruments during testing, and commissioning records complete enough that a later reader can establish what was verified and how. GEP is not a lighter version of GMP; it is the engineering profession's own discipline, and the C&Q framework depends on it: leverage is only defensible if the engineering evidence was generated under demonstrable control. A firm that cannot show its engineering documentation standards cannot justify leaning on the documents.
How does risk assessment decide what gets qualified?
By tracing each system's functions to their potential effect on product quality. The assessment starts from the control strategy and asks, per system and function: can a failure here affect a critical quality attribute or a critical process parameter? Functions that can are critical aspects and receive formal, documented verification against acceptance criteria. Functions that cannot are verified through good engineering practice without the ceremonial layer. The output must be defensible in both directions — an inspector may probe why something was excluded, and an auditor of cost may fairly ask why something was included.