Allergen Changeover Check

An allergen changeover check is a formal, documented activity embedded in the changeover workflow to verify that equipment, utensils, environmental surfaces, and materials pathways are free of prior-product allergens before beginning production of a different product or label. The check ties hazard analysis (focus on allergen cross-contact and mislabeling) to execution controls: validated cleaning, area and component line clearance, verification testing, and authorization to release the line. For food and dietary supplement plants, it operationalizes 21 CFR 117.135’s requirement to prevent allergen cross-contact and ensure correct labeling. For drug and cosmetic facilities, it aligns with equipment cleaning and contamination prevention under 21 CFR 211.67 and analogous quality system expectations.

In MES terms, it is a gated, interlocked operation step with explicit acceptance criteria and data capture: visual inspection results, photographic evidence where appropriate, allergen-specific swab or rinse test results, label/recipe verification, and e-signatures. Failure routes must trigger holds, corrective cleaning, targeted re-testing, and deviation/CAPA workflows. Because allergen risk is an enterprise hazard, the step also validates upstream dependencies (material segregation, sanitation lot release) and downstream readiness (labels, recipes, batch records) to prevent latent failures.

The U.S. preventive controls regulation for human food (21 CFR 117) requires a hazard analysis and, where relevant, preventive controls that include procedures, practices, and processes to minimize or prevent allergen cross-contact and ensure correct labeling (21 CFR 117.135). Verification activities for these controls, including sanitation verification and, as appropriate, product/environmental testing and corrective actions, are mandated under 21 CFR 117.165. Dietary supplement firms operating under 21 CFR 111 are expected to maintain sanitary conditions and equipment in a manner that supports identity, purity, and quality—often fulfilled through validated cleaning and documented changeovers when allergens are present. In pharmaceuticals, 21 CFR 211.67 requires equipment cleaning and maintenance to prevent contamination and mix-ups; while food allergens are not typically a drug hazard, the principle of validated cleaning carryover limits and documented line clearance applies wherever sensitizers or excipients may pose risk.

Electronic execution and recordkeeping must comply with 21 CFR Part 11 when electronic records and e-signatures are used. GAMP 5 (2nd ed.) provides a risk-based framework for specifying, verifying, and validating computerized systems such as MES to ensure fitness for intended use, including enforcement of allergen control workflows and audit trails. ISA‑95 defines roles, data exchanges, and integration boundaries so allergen changeover controls at Level 3 (Manufacturing Operations Management) can consume context from Level 4 (ERP recipes, production orders) and assert holds or release signals to Level 2 (supervisory control) in a controlled manner.

Where the check lives and what it exchanges

The allergen changeover check is a Level 3 (MOM/MES) function that orchestrates prerequisites, captures evidence, and records the release decision. It requires upstream and downstream data exchanges across ISA‑95 levels: product and allergen attributes from ERP/PLM (Level 4), material and label identities from WMS (L3/4 boundary), equipment state from Level 2, and laboratory methods/results from LIMS (L3). Clean-to-clean interlocks, recipe/label setpoint loads, and status releases are transacted via standardized interfaces to minimize human error and enforce sequencing.

A robust allergen changeover check is risk-based, product-specific, and documented in the master recipe/SOP, then instantiated in MES. It should define scope, roles, responsibilities, sampling plan, test methods, decision logic, and records. Acceptance criteria must be explicit and aligned with validated cleaning capabilities and method sensitivity. The sequence below is typical for open equipment and mixed-asset plants (adapt as needed for CIP or enclosed systems):

• Pre-check: Confirm prior product and upcoming product allergen profiles; if moving from ‘contains allergen’ to ‘non-allergen/other-allergen,’ the full allergen changeover procedure applies.
• Mechanical and dry clean: Remove gross residues; disassemble as specified; verify parts are present and accessible to clean (use pick lists and barcode scans for parts).
• Validated cleaning: Execute SOP (CIP/COP/manual); record parameters (time/temperature/chemistry/mechanical action) and lot numbers of detergents; capture critical cleaning data (e.g., final rinse conductivity).
• Line clearance: Verify removal of prior labels, components, instructions, and WIP; scan/confirm zero residual counts in pick faces; photograph difficult-to-inspect zones if required.
• Visual verification: Systematic inspection with defined lighting and angles; document pass/fail per zone; deficiency triggers re-clean and targeted inspection.
• Analytical verification: Risk-based swab/rinse test for implicated allergenic proteins (e.g., peanut, milk, soy) at worst-case sites; record method ID, kit lot, expiration, analyst, and results versus LOQ/acceptance.
• Label/recipe verification: Scan and confirm correct label version, allergens-statement text, and recipe/parameters for the next run.
• Release: Authorized sign-off (single or two-person as risk dictates) to transition equipment from ‘post-clean hold’ to ‘ready for setup/production.’

Acceptance criteria often include: no visible residues; negative allergen-specific swab/rinse results to the method LOQ at defined sites; verified removal of prior labels/components; correct new label and recipe loaded; and all deviations closed or under documented risk acceptance prior to release. Where analytical verification is not performed at every changeover (low risk or validated ‘visual clean only’ scenarios), the rationale and periodic verification program must be documented under 21 CFR 117.165’s verification expectations.

Method selection should be driven by the specific allergen proteins of concern, matrix effects, and surface characteristics. Lateral flow devices (LFDs) offer rapid, protein-specific detection at points of use; ELISAs provide higher sensitivity and semi-quantitative results in a laboratory setting. ATP assays can support hygiene verification but are not allergen-specific and should not be used alone to demonstrate the absence of allergenic proteins. The sampling plan should target worst-case locations defined during cleaning validation—hard-to-clean crevices, dead legs, transfer points, and surfaces with high residue adherence.

Acceptance limits are plant-specific and grounded in risk assessment, cleaning validation outcomes, and method limits of detection (LOD) and quantification (LOQ). Because regulatory allergen thresholds are not universally codified, many firms use ‘below method LOQ’ for critical changeovers, with a documented scientific rationale. Each sample must be traceable: equipment ID, site map, swab area, analyst, method ID, kit lot/expiry, environmental conditions, and results. Under 21 CFR 117.165, verification frequency and reanalysis schedules should be justified by historical performance, change history, and seasonal risks (e.g., allergen campaign shifts).

The most effective allergen control is architectural (segregation) and scheduling-based. Campaigning products from ‘non-allergen’ to ‘contains allergen’ and then performing validated deep cleans when returning to ‘non-allergen’ reduces verification burden and risk. Where operational constraints demand frequent alternation, Single-Minute Exchange of Die (SMED) concepts for mechanical changeover should be blended with quality gates for allergen changeovers: externalize cleaning kit prep, pre-stage validated parts, and standardize inspection sequences to protect verification integrity while compressing elapsed time.

• Define an allergen sequencing rule: Non-allergen → other low-risk profiles → high-risk allergen → deep clean and verify.
• Use WMS and MES to prevent issuing incompatible materials between stages; enforce pick-path blocks for allergen components during non-allergen campaigns.
• Model changeover times separately: mechanical (SMED) versus quality-verification (sampling, assay turnaround) to set realistic schedules and avoid pressure-induced shortcuts.
• When labs are the bottleneck, deploy validated LFD screening with defined triggers for confirmatory ELISA to keep changeover lead-times predictable without compromising sensitivity.

Digitizing the allergen changeover check in MES reduces human error and enforces sequencing. Critical controls include: mandatory photo capture for specified zones; barcode/RFID scans of equipment parts, labels, and cleaning chemicals; branching logic that requires targeted re-clean upon any fail; timers and parameter checks for cleaning steps; and status interlocks that block recipe downloads or material issues until the check is released. Device integrations (e.g., swab readers) can reduce transcription error. Where manual entry remains, enforce double-verification for critical fields.

Part 11 compliance requires unique user IDs, secure e-signatures linked to record meaning, and audit trails recording who, what, when, and why (including reason-for-change). GAMP 5 advocates a risk-based validation approach: qualify integrations that impact product quality (e.g., permissives, results imports), verify workflow logic against URS/test protocols, and implement periodic review of audit trails and exception reports. ALCOA+ principles strengthen record integrity: attributable analyst IDs, legible photographs, contemporaneous timestamps, original raw data from instruments where possible, and accurate, complete datasets including failed attempts and re-cleans.

Allergen changeover success depends on upstream material and label controls. WMS should manage status-controlled locations for allergen materials and packaging with GS1 identification to prevent inadvertent issues after a non-allergen changeover. Prior-product labels and inserts must be removed and accounted for during line clearance with scanned counts and destruction or return-to-stock records. Allergen-handling tools and dedicated utensils should be color-coded and tracked; if shared, they require the same validated cleaning and verification program as production equipment.

For labeling systems, enforce label-version control via scans and electronic proofs before arming the line, with a hard interlock to block printing/loading of the wrong allergen declaration. Material genealogy should link any post-changeover start-up scrap to the lot genealogy to simplify lookbacks if a verification later fails. When allergens are managed in campaigns, ensure pallet and container statuses transition automatically with the equipment status (e.g., ‘Allergen Clean Verified’) to minimize manual coordination errors.

V5 Ultimate implements allergen changeover as a controlled MES operation step with enforced prerequisites and integrated records. The workflow pulls product allergen attributes from ERP/PLM, blocks incompatible material issues in WMS until release, captures LIMS method/results natively, and writes a single execution/audit trail with Part 11-compliant signatures. Equipment state from SCADA/CIP is consumed to validate cleaning completion before verification sampling. Deviations and CAPAs are initiated from within the step and managed to closure without leaving the record.

Treat allergen changeover as a controlled process with KPIs. Useful measures include: first-pass verification yield (percent of changeovers passing all checks without re-clean), average changeover verification lead-time (start of verification to release), number of verification samples per changeover versus risk class, swab fail rate by equipment type and location, and near-miss count (e.g., wrong-label interceptions). Analyze seasonal or product-mix influences to optimize campaign planning and resource allocation (analysts, kits, parts).

• Trend swab fail locations to refine your validated ‘worst-case’ sampling map and cleaning SOP focus.
• Correlate verification fails with cleaning parameter drift (chemistry concentration, time, mechanical action) to detect latent process capability erosion.
• Use CAPA effectiveness checks to verify that corrective changes (tool redesign, gasket material, nozzle positioning) actually reduce fail recurrence.
• Implement periodic method suitability checks on representative surface coupons to confirm no matrix-driven sensitivity loss has occurred.

Common weaknesses include over-reliance on visual inspection for high-risk allergens without a scientific rationale; using non-specific hygiene tests as a surrogate for allergen absence; sporadic or undocumented verification sampling; unlabeled or expired test kits; and inadequate control of labels/components during line clearance. Inspectors often request the risk assessment that justifies verification frequency and methods, the cleaning validation report defining worst-case locations and acceptance limits, and evidence that failed checks triggered effective corrective actions and prevented startup. Electronic systems will be reviewed for audit trail completeness, user access control, and signature meaning per Part 11.