CDMOs & Contract Manufacturers

Contract development and manufacturing organizations — running GMP manufacturing, commissioning & qualification, and validation on behalf of sponsors.

What this page does not claim

A sector is an organization’s role in the value chain, not a legal category. SPEQ maps the disciplines and standards that role typically operates under; it does not determine which apply to your organization, and a count of decoded standards measures SPEQ’s coverage.

WHAT THIS SECTOR DOES

Contract development and manufacturing organizations (CDMOs) — and CMOs focused purely on manufacturing — make drug substance and drug product on behalf of the companies that own the marketing authorization. They run GMP manufacturing, commissioning & qualification, and validation for products they did not design, often across many clients and modalities in the same facility. A large and growing share of the world’s medicines is made this way.

REGULATORY LANDSCAPE

A CDMO operates the same GMP the sponsor would: FDA 21 CFR 210/211 for finished product and ICH Q7 for APIs, EU GMP (including Annex 1 for sterile), and ICH Q9/Q10 for risk and the quality system. The defining regulation is EU GMP Chapter 7 (Outsourced Activities), which governs the contract-giver / contract-acceptor relationship, and its FDA analogue — the agency’s guidance on contract manufacturing arrangements for drugs.

THE OVERSIGHT MODEL

Quality is shared but accountability is not transferable: under EU GMP Chapter 7 the sponsor (contract giver) remains ultimately responsible for the product and must audit and approve the CDMO, while the CDMO (contract acceptor) is responsible for the work it performs. A written Quality Agreement defines the split — who releases, who investigates, who owns change control — and is the first document an inspector asks for.

WHAT QUALITY MEANS HERE

01

Technology transfer

Receiving a process from the sponsor and proving it is understood, capable, and validated at the new site — the make-or-break activity for every new product a CDMO takes on.

02

Multi-client segregation & changeover

Cleaning validation, campaign changeover, and cross-contamination control (HBEL-based limits) that keep one client’s product from contaminating another’s in shared facilities.

03

Commissioning & qualification

Risk-based C&Q of facilities, utilities, and equipment (ASTM E2500 / ISPE Vol. 5), and the validated state that every client’s product depends on.

04

The Quality Agreement

A living contract that assigns every GMP responsibility between contract giver and acceptor — the backbone of a defensible outsourced-manufacturing relationship.

180
Standards decoded
4
GxP disciplines

STANDARDS SPEQ DECODES · 180

Open the full library →
21 CFR Part 211FDAHIGH INSPECTION RISK
Current Good Manufacturing Practice for Finished Pharmaceuticals
21 CFR Part 11FDAHIGH INSPECTION RISK
Electronic Records; Electronic Signatures
21 CFR Part 210FDA
Current Good Manufacturing Practice in Manufacturing, Processing, Packing, or Holding of Drugs — General
21 CFR Part 820FDAHIGH INSPECTION RISK
Quality Management System Regulation (QMSR) — 21 CFR Part 820
FDA Aseptic Processing GuidanceFDAHIGH INSPECTION RISK
Guidance for Industry — Sterile Drug Products Produced by Aseptic Processing
FDA Process Validation Guidance (2011)FDA
Guidance for Industry — Process Validation: General Principles and Practices
EU GMP Annex 1 (2022)EMAHIGH INSPECTION RISK
Manufacture of Sterile Medicinal Products
EU GMP Annex 11EMAHIGH INSPECTION RISK
Computerised Systems
EU GMP Annex 22EC
Artificial Intelligence
EU GMP Annex 15EMA
Qualification and Validation
EU GMP Annex 2EMA
Manufacture of Biological Active Substances and Medicinal Products for Human Use
ICH Q5A(R2)ICH
Viral Safety Evaluation of Biotechnology Products Derived from Cell Lines of Human or Animal Origin
ICH Q9(R1)ICH
Quality Risk Management
ICH Q10ICH
Pharmaceutical Quality System
ICH Q8(R2)ICH
Pharmaceutical Development
ICH Q11ICH
Development and Manufacture of Drug Substances (Chemical and Biotechnological/Biological Entities)
ICH Q12ICH
Technical and Regulatory Considerations for Pharmaceutical Product Lifecycle Management
ICH Q7ICH
Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients
USP <1116>USPHIGH INSPECTION RISK
Microbiological Control and Monitoring of Aseptic Processing Environments
USP <1117>USP
Microbiological Best Laboratory Practices
USP <1058>USP
Analytical Instrument Qualification
USP <61>/<62>USP
Microbiological Examination of Nonsterile Products
ISO 14644-1ISO
Cleanrooms and Associated Controlled Environments — Classification of Air Cleanliness by Particle Concentration
ISO 14644-2ISO
Cleanrooms and Associated Controlled Environments — Monitoring to Provide Evidence of Cleanroom Performance
ISO 9001:2015ISO
Quality Management Systems — Requirements
ISO 13485:2016ISO
Medical Devices — Quality Management Systems — Requirements for Regulatory Purposes
ISPE GAMP 5 (2022)ISPE
Good Practice Guide: Compliant GxP Computerised Systems
PIC/S PE 009-16PIC/S
Guide to Good Manufacturing Practice for Medicinal Products
MHLW Ordinance No. 179PMDA
Japan GMP for Drugs and Quasi-drugs
MHLW Ordinance No. 136MHLW
Japan GQP — Quality Management for Marketing Authorisation Holders
ANVISA RDC 658/2022ANVISA
Brazilian Good Manufacturing Practices for Medicines
NOM-059-SSA1-2015COFEPRIS
Mexican Good Manufacturing Practices for Medicines
ANMAT Disposición 4159/2023ANMAT
Argentine GMP Guide for Medicines
Resolución 1160 de 2016INVIMA
Colombian Good Manufacturing Practices for Medicines
DS 021-2018-SADIGEMID
Peruvian GMP Manual for Pharmaceutical Products
Norma Técnica N° 127ISP Chile
Chilean Good Manufacturing Practices
China GMP (2010 Revision)NMPA
Good Manufacturing Practice for Drugs (China)
Revised Schedule M (2023)CDSCO
India GMP — Schedule M, Drugs and Cosmetics Rules
C.R.C., c. 870, Part C, Div. 2Health CanadaHIGH INSPECTION RISK
Food and Drug Regulations — Part C, Division 2: Good Manufacturing Practices
Health Canada GUI-0001Health Canada
Good Manufacturing Practices Guide for Drug Products
TGA Manufacturing PrinciplesTGA
Australian GMP — Manufacturing Principles (PIC/S Guide)
PDA TR No. 22PDA
Process Simulation for Aseptically Filled Products
ICH Q3D(R2)ICH
Guideline for Elemental Impurities
ISO 14971:2019ISO
Medical Devices — Application of Risk Management to Medical Devices
ASTM E2500ASTM
Specification, Design, and Verification of Pharmaceutical and Biopharmaceutical Manufacturing Systems and Equipment
ISPE Baseline Guide Vol. 5 (2019)ISPE
Commissioning and Qualification (Second Edition)
ASME BPEASME
Bioprocessing Equipment
MHRA GxP DI (2018)MHRAHIGH INSPECTION RISK
MHRA 'GxP' Data Integrity Guidance and Definitions
PIC/S PI 006-4PIC/SHIGH INSPECTION RISK
Recommendations on Qualification and Validation
PIC/S PI 041-1PIC/SHIGH INSPECTION RISK
Good Practices for Data Management and Integrity in Regulated GMP/GDP Environments
WHO GCLP (2009)WHO
Good Clinical Laboratory Practice (GCLP)
21 CFR Part 117FDAHIGH INSPECTION RISK
Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventive Controls for Human Food
21 CFR Part 111FDAHIGH INSPECTION RISK
Current Good Manufacturing Practice for Dietary Supplements
Codex CXC 1-1969Codex
General Principles of Food Hygiene
ISO 22000:2018ISO
Food safety management systems — Requirements for any organization in the food chain
21 CFR Part 226FDA
Current Good Manufacturing Practice for Type A Medicated Articles
21 CFR Part 225FDA
Current Good Manufacturing Practice for Medicated Feeds
Regulation (EU) 2019/6EC
Veterinary Medicinal Products
ISO 22716:2007ISO
Cosmetics — Good Manufacturing Practices (GMP): Guidelines on Good Manufacturing Practices
21 CFR Part 1271FDA
Human Cells, Tissues, and Cellular and Tissue-Based Products (HCT/Ps)
21 CFR Part 606FDA
Current Good Manufacturing Practice for Blood and Blood Components
Regulation (EU) 2017/745ECHIGH INSPECTION RISK
Medical Device Regulation (MDR)
IEC 62304:2006+A1:2015IEC
Medical Device Software — Software Life Cycle Processes
IEC 60601-1IEC
Medical Electrical Equipment — General Requirements for Basic Safety and Essential Performance
21 CFR Part 121FDA
Mitigation Strategies to Protect Food Against Intentional Adulteration
21 CFR Part 507FDA
Current Good Manufacturing Practice and Preventive Controls for Food for Animals
VICH GL3(R)VICH
Stability Testing of New Veterinary Drug Substances and Medicinal Products
MoCRA (FD&C Act Ch. VI)FDA
Modernization of Cosmetics Regulation Act of 2022
Regulation (EC) No 1223/2009EC
EU Cosmetic Products Regulation
21 CFR Part 700FDA
Cosmetics — General
FD&C Act §503AFDAHIGH INSPECTION RISK
Pharmacy Compounding — Conditions for Exemption
FD&C Act §503BFDAHIGH INSPECTION RISK
Outsourcing Facilities — Registration and cGMP
USP <795>USPHIGH INSPECTION RISK
Pharmaceutical Compounding — Nonsterile Preparations
USP <797>USPHIGH INSPECTION RISK
Pharmaceutical Compounding — Sterile Preparations
USP <800>USPHIGH INSPECTION RISK
Hazardous Drugs — Handling in Healthcare Settings
State Pharmacy Practice ActsState Boards of PharmacyHIGH INSPECTION RISK
State Pharmacy Practice Acts and Compounding Regulations
21 CFR Part 1301DEA
Registration of Manufacturers, Distributors and Dispensers of Controlled Substances
21 CFR Part 1304DEA
Records and Reports of Registrants
Ph. Eur.EDQMHIGH INSPECTION RISK
European Pharmacopoeia
CEP (EDQM Certification)EDQM
Certificate of Suitability to the Monographs of the European Pharmacopoeia
IMDRF/SaMD WG/N10IMDRF
Software as a Medical Device (SaMD): Key Definitions
IMDRF/SaMD WG/N12IMDRF
SaMD: Possible Framework for Risk Categorization and Corresponding Considerations
IPEC-PQG GMP Guide (v5, 2022)IPECHIGH INSPECTION RISK
Joint IPEC-PQG Good Manufacturing Practices Guide for Pharmaceutical Excipients
ISO/IEC 17025:2017ISO
General requirements for the competence of testing and calibration laboratories
ILAC MRAILAC
ILAC Mutual Recognition Arrangement
DSCSA (FD&C Act §§581–585)FDAHIGH INSPECTION RISK
Drug Supply Chain Security Act
GS1 General SpecificationsGS1
GS1 General Specifications — identification keys, data attributes and barcodes
ICH Q13ICHHIGH INSPECTION RISK
Continuous Manufacturing of Drug Substances and Drug Products
ICH M7(R2)ICHHIGH INSPECTION RISK
Assessment and Control of DNA Reactive (Mutagenic) Impurities in Pharmaceuticals to Limit Potential Carcinogenic Risk
ICH M10ICHHIGH INSPECTION RISK
Bioanalytical Method Validation and Study Sample Analysis
ICH Q14ICH
Analytical Procedure Development
ICH Q2(R2)ICHHIGH INSPECTION RISK
Validation of Analytical Procedures
EU GMP Annex 17EMAHIGH INSPECTION RISK
Real Time Release Testing and Parametric Release
EU GMP Annex 21EMAHIGH INSPECTION RISK
Importation of Medicinal Products
USP <1223>USP
Validation of Alternative Microbiological Methods
USP <665>USP
Plastic Components and Systems Used to Manufacture Pharmaceutical Drug Products
USP <1207>USP
Package Integrity Evaluation — Sterile Products
21 CFR Part 4FDAHIGH INSPECTION RISK
Regulation of Combination Products (cGMP Requirements)
ICH Q1A(R2)ICHHIGH INSPECTION RISK
Stability Testing of New Drug Substances and Products
ICH Q3C(R9)ICHHIGH INSPECTION RISK
Impurities: Guideline for Residual Solvents
ICH Q6AICHHIGH INSPECTION RISK
Specifications: Test Procedures and Acceptance Criteria for New Drug Substances and New Drug Products (Chemical Substances)
USP <1220>USP
Analytical Procedure Life Cycle
USP <232>/<233>USPHIGH INSPECTION RISK
Elemental Impurities — Limits and Procedures
WHO TRS 986, Annex 2WHOHIGH INSPECTION RISK
WHO Good Manufacturing Practices for Pharmaceutical Products: Main Principles
ICH Q6BICHHIGH INSPECTION RISK
Specifications: Test Procedures and Acceptance Criteria for Biotechnological/Biological Products
EU GMP Annex 16EMAHIGH INSPECTION RISK
Certification by a Qualified Person and Batch Release
Reg. (EU) 2017/1569ECHIGH INSPECTION RISK
Good Manufacturing Practice for Investigational Medicinal Products
ISO 17665:2024ISOHIGH INSPECTION RISK
Sterilization of Health Care Products — Moist Heat — Requirements for the Development, Validation and Routine Control of a Sterilization Process for Medical Devices
ISO 11135:2014ISOHIGH INSPECTION RISK
Sterilization of Health-Care Products — Ethylene Oxide — Requirements for the Development, Validation and Routine Control of a Sterilization Process for Medical Devices
ISO 10993-1:2018ISOHIGH INSPECTION RISK
Biological Evaluation of Medical Devices — Part 1: Evaluation and Testing Within a Risk Management Process
FDA CSA Guidance (2026)FDAHIGH INSPECTION RISK
Computer Software Assurance for Production and Quality Management System Software
AMBV (SR 812.212.1)Swissmedic
Swiss GMP — Medicinal Products Licensing Ordinance
KGMPMFDS
Korean Good Manufacturing Practice
HSA GMP (PIC/S PE 009)HSA
Singapore GMP Standard
TFDA GMP (PIC/S)TFDA
Taiwan GMP Standard
Thai FDA GMDP / GMP ClearanceThai FDA
Thai Drug Facility Licensing and Good Manufacturing and Distribution Practice
CDCR 1984 / PIC/S GMPNPRA
Malaysia GMP Standard
SFDA GMP GuidelineSFDA
Saudi Good Manufacturing Practice Guideline
Act 101 of 1965 (GMP)SAHPRA
South African GMP — Medicines and Related Substances Act
WHO TRS 996, Annex 5WHOHIGH INSPECTION RISK
WHO Guidance on Good Data and Record Management Practices
FDA DI & CGMP Q&A (2018)FDAHIGH INSPECTION RISK
Data Integrity and Compliance With Drug CGMP: Questions and Answers
21 CFR 600.80FDAHIGH INSPECTION RISK
Postmarketing Reporting of Adverse Experiences (Biological Products)
Del. Reg. (EU) 2016/161ECHIGH INSPECTION RISK
Safety Features on the Packaging of Medicinal Products (Falsified Medicines Directive)
2015/C 95/01EC
EU Guidelines on Good Distribution Practice of Active Substances for Medicinal Products for Human Use
USP <1079>USP
Risks and Mitigation Strategies for the Storage and Transportation of Finished Drug Products
WHO TRS 961, Annex 9WHO
Model Guidance for the Storage and Transport of Time- and Temperature-Sensitive Pharmaceutical Products
Impl. Reg. (EU) 2021/1280EC
Good Distribution Practice for Active Substances Used as Starting Materials in Veterinary Medicinal Products
PDA TR No. 39PDA
Guidance for Temperature-Controlled Medicinal Products: Maintaining the Quality of Temperature-Sensitive Medicinal Products through the Transportation Environment
IEC 81001-5-1:2021IEC
Health Software and Health IT Systems Safety, Effectiveness and Security — Part 5-1: Security — Activities in the Product Life Cycle
FDA GPSV (2002)FDAHIGH INSPECTION RISK
General Principles of Software Validation
FDA Premarket Cybersecurity (2026)FDAHIGH INSPECTION RISK
Cybersecurity in Medical Devices: Quality Management System Considerations and Content of Premarket Submissions
FDA PCCP for AI-Enabled DSF (2024)FDA
Marketing Submission Recommendations for a Predetermined Change Control Plan for Artificial Intelligence-Enabled Device Software Functions
IEC 82304-1:2016IEC
Health Software — Part 1: General Requirements for Product Safety
Regulation (EU) 2017/746ECHIGH INSPECTION RISK
In Vitro Diagnostic Medical Devices Regulation (IVDR)
21 CFR Part 830FDA
Unique Device Identification
21 CFR Part 806FDAHIGH INSPECTION RISK
Medical Devices; Reports of Corrections and Removals
IEC 62366-1:2015+A1:2020IEC
Medical Devices — Part 1: Application of Usability Engineering to Medical Devices
Reg. (EC) 852/2004EC
Regulation on the Hygiene of Foodstuffs
21 CFR Part 123FDA
Fish and Fishery Products (Seafood HACCP)
21 CFR Part 112FDA
Standards for the Growing, Harvesting, Packing, and Holding of Produce for Human Consumption
21 CFR Part 106FDAHIGH INSPECTION RISK
Infant Formula Requirements: Current Good Manufacturing Practice, Quality Control Procedures, and Quality Factors
USP <2750>USP
Manufacturing Practices for Dietary Supplements
21 CFR Part 558FDA
New Animal Drugs for Use in Animal Feeds
CSAR (Order No. 727)NMPA
China Cosmetic Supervision and Administration Regulation
Reg. (EU) 2024/1938EC
Regulation on Standards of Quality and Safety for Substances of Human Origin (SoHO)
21 CFR Part 610FDAHIGH INSPECTION RISK
General Biological Products Standards
21 CFR Part 630FDAHIGH INSPECTION RISK
Requirements for Blood and Blood Components Intended for Transfusion or for Further Manufacturing Use
JP XVIIIMHLW
Japanese Pharmacopoeia, 18th Edition
BP 2026MHRA
British Pharmacopoeia 2026
Ph. Int. (12th ed.)WHO
The International Pharmacopoeia
ChP 2025NMPA
Chinese Pharmacopoeia, 2025 Edition
APIC "How to do" ICH Q7 (v17)APIC
APIC "How to do" Document: Interpretation of the ICH Q7 Guide
PIC/S PE 010-4PIC/S
Guide to Good Practices for the Preparation of Medicinal Products in Healthcare Establishments
USP <825>USP
Radiopharmaceuticals — Preparation, Compounding, Dispensing, and Repackaging
ISO 14644-4ISO
Cleanrooms and Associated Controlled Environments — Part 4: Design, Construction and Start-up
ISO 11607-1:2019ISO
Packaging for Terminally Sterilized Medical Devices — Part 1: Requirements for Materials, Sterile Barrier Systems and Packaging Systems
ISO 19011:2018ISO
Guidelines for Auditing Management Systems
ISO 11737-1:2018ISO
Sterilization of Health Care Products — Microbiological Methods — Part 1: Determination of a Population of Microorganisms on Products
ISPE Baseline Guide Vol. 3 (3rd ed.)ISPE
ISPE Baseline Guide Volume 3 — Sterile Product Manufacturing Facilities
IP 2026IPC
Indian Pharmacopoeia (IP 2026, 10th Edition)
ISO/IEC 27001:2022ISO
Information Security, Cybersecurity and Privacy Protection — Information Security Management Systems — Requirements
IEC 62443-2-1:2024IEC
Security for Industrial Automation and Control Systems — Part 2-1: Security Program Requirements for IACS Asset Owners
IEC 62443-3-3:2013IEC
Industrial Communication Networks — Network and System Security — Part 3-3: System Security Requirements and Security Levels
21 CFR Part 3FDA
Product Jurisdiction
21 CFR Part 201FDAHIGH INSPECTION RISK
Labeling
21 CFR Part 202FDA
Prescription Drug Advertising
21 CFR Part 207FDA
Requirements for Foreign and Domestic Establishment Registration and Listing for Human Drugs, Including Drugs That Are Regulated Under a Biologics License Application, and Animal Drugs
21 CFR Part 807FDA
Establishment Registration and Device Listing for Manufacturers and Initial Importers of Devices
ICH M4(R4)ICH
Organisation of the Common Technical Document for the Registration of Pharmaceuticals for Human Use
ICH M8 (eCTD v4.0)ICH
Electronic Common Technical Document (eCTD)
Directive 2001/83/ECEC
Community Code Relating to Medicinal Products for Human Use
Regulation (EU) 2016/679EC
General Data Protection Regulation (GDPR)
ISO 22301:2019ISO
Security and Resilience — Business Continuity Management Systems — Requirements
IEC 62682:2022IEC
Management of Alarm Systems for the Process Industries
IEC 61511-1:2016+A1:2017IEC
Functional Safety — Safety Instrumented Systems for the Process Industry Sector — Part 1: Framework, Definitions, System, Hardware and Application Programming Requirements
ISO 31000:2018ISO
Risk Management — Guidelines
EMA/CHMP/CVMP/SWP/169430/2012EMAHIGH INSPECTION RISK
Guideline on Setting Health Based Exposure Limits for Use in Risk Identification in the Manufacture of Different Medicinal Products in Shared Facilities
ISO 45001:2018ISO
Occupational Health and Safety Management Systems — Requirements with Guidance for Use
ISO 14001:2015ISO
Environmental Management Systems — Requirements with Guidance for Use
WHO LBM 4th ed. (2020)WHO
Laboratory Biosafety Manual, Fourth Edition

WHERE QUALITY FAILS

  • Quality Agreements that are missing, stale, or silent on who owns key decisions
  • Cross-contamination or mix-ups from weak changeover and segregation controls
  • Technology transfers that skip process understanding and fail at scale
  • Client change controls and deviations that fall between the two quality systems

CDMOs & Contract Manufacturers: frequently asked questions

Reference answers on what a cdmos & contract manufacturers does, what governs it, and who is accountable for quality.

What is a CDMO?

A contract development and manufacturing organization makes drug substance or drug product on behalf of the company that owns the marketing authorization. It runs GMP manufacturing, commissioning and qualification, and validation for products it did not design — often for many clients across shared facilities. A CMO does the manufacturing without the development services.

Which regulations govern a CDMO?

A CDMO runs the same GMP the sponsor would: FDA 21 CFR 210/211 for finished product, ICH Q7 for APIs, EU GMP (including Annex 1 for sterile), and ICH Q9/Q10 for risk and the quality system. The defining rule is EU GMP Chapter 7, Outsourced Activities, which governs the contract-giver / contract-acceptor relationship.

Who is accountable for quality in an outsourced-manufacturing arrangement?

Accountability is not transferable. Under EU GMP Chapter 7 the sponsor, as contract giver, remains ultimately responsible for the product and must audit and approve the CDMO; the CDMO, as contract acceptor, is responsible for the work it performs. A written Quality Agreement defines the split — who releases, who investigates, who owns change control.