Annex 1EU GMP Annex 1 — Manufacture of Sterile Medicinal Products

Annex 1 supplements the EU GMP Guide for sterile products made by terminal sterilisation or aseptic processing. The revision published in August 2022 became applicable in August 2023, with a later date for one lyophiliser provision.

Its principles can also be useful for some non-sterile products where microbial and particulate control matters, but its scope statement and the applicable authority decide how it is applied.

The contamination control strategy (CCS) is a planned set of controls, derived from process and product understanding, that together assure product quality. It spans design, procedures, technology, monitoring, people and continual improvement.

A CCS is not a single document written once. It should connect existing controls, show how they interact, and be reviewed as data and changes accumulate.

Annex 1 classifies cleanrooms and clean zones as Grades A to D, with Grade A for high-risk operations such as aseptic filling. Classification is a qualification activity; routine environmental monitoring is a separate, ongoing activity.

Limits for airborne particles and microbial contamination are specified for each grade and state. Use the current text for numbers rather than secondary summaries.

The guideline expects consideration of restricted access barrier systems (RABS) or isolators to reduce direct human intervention. Closed systems and single-use technology can also reduce contamination risk when designed and qualified appropriately.

Where barrier technology is not used, the rationale should be justified in the CCS.

People are a major contamination source. Annex 1 covers training, gowning qualification, behaviour, health and access, and the number of people in clean areas.

Operators should be qualified for aseptic work, including participation in aseptic process simulations.

Water systems, steam, gases and vacuum must be designed, qualified and monitored. Sterilisation processes, including moist heat, dry heat, irradiation and filtration, need validation and routine control.

Sterilising filtration includes filter integrity testing, with pre-use post-sterilisation integrity testing (PUPSIT) expected unless justified otherwise.

Aseptic process simulation, often called media fill, uses growth medium in place of product to challenge the aseptic process, people and interventions. Annex 1 sets expectations for initial and periodic simulations.

The target is zero contaminated units, and any growth is investigated as a failure.

Monitoring programmes combine viable and non-viable particle monitoring, surfaces, personnel and process parameters, with alert and action levels and trending.

Results feed back into the CCS so controls are adjusted when trends appear.

Common gaps include a CCS that only lists procedures, unjustified interventions, weak gowning qualification, incomplete trending and change control that ignores contamination impact.

Another gap is treating the revision as a one-off project instead of a living programme.

V5 can keep batch records, training and qualification records, equipment calibration and maintenance, deviations, CAPA, change control and document control connected, which helps teams show how controls in a contamination control strategy are executed and reviewed.

V5 does not write a site's CCS, classify cleanrooms or release sterile product. Regulated, validated use of V5 is offered on Enterprise private cloud with IQ/OQ support; the customer remains responsible for validation, PQ and quality decisions.

List the contamination risks for one aseptic line, then map each to the control and the record that proves it operates. Gaps in that map are where the CCS needs work.

Review the last year's deviations and monitoring excursions against the map to test it.

The revision repeatedly asks manufacturers to use quality risk management, consistent with ICH Q9, to design controls, justify choices and decide monitoring locations and frequencies. Risk management supports decisions; it is not a way to lower expectations without evidence.

Record the risk question, data used, assumptions and conclusion, and revisit assessments when deviations, trends or changes challenge them.

Annex 1 expects terminal sterilisation where the product can tolerate it, because it provides greater assurance than aseptic processing. Where aseptic processing is used, the reasons should be documented.

Products that are terminally sterilised still need controlled bioburden and environmental conditions before sterilisation.

A site reviewing its filling line finds operators perform an intervention to clear stopper jams that is not covered in the media fill programme. The CCS review links the intervention to a contamination risk with no simulation evidence.

The team modifies the stopper bowl to reduce jams, adds the residual intervention to the next aseptic process simulation, retrains operators and records the change under change control.

1. Confirm the applicable requirement, product scope and decision owner.
2. Map the current method and the records already available.
3. Define terms, responsibilities, evidence and exception handling in the approved procedure.
4. Pilot the method on one representative process and challenge a difficult exception.
5. Train affected roles, approve the change and monitor whether the method works as intended.
6. Review after significant change and retain a transparent history of decisions.

Scale the formality to risk and complexity. A small operation still needs clear responsibilities and reconstructable evidence, while a multi-site operation also needs harmonised definitions, governance and comparison rules.

• Can a reviewer identify the source, owner, method and current approved version?
• Do summaries reconcile to original records and include unfavourable or missing evidence?
• Are exceptions visible, assessed and linked to the affected material, product or process?
• Are actions assigned, overdue items escalated and effectiveness reviewed?
• Have changes in product, supplier, equipment, method or regulation triggered reassessment?
• Does the record distinguish system support from the decision an authorised person made?

• Approved scope, definitions and responsibilities for EU GMP Annex 1.
• Source records and identifiers that let a reviewer reconstruct the work.
• Methods, assumptions, calculations, exclusions and any data-quality limitations.
• Exceptions, investigations, decisions, approvals and resulting actions.
• Version history showing when the approach changed and why.

Records should be proportionate to the decision and usable by someone who was not present. Preserve original evidence and corrections rather than replacing it with an unexplained summary.

• Can users trace every summary value back to its source record and version?
• How are roles, permissions, signatures and corrections recorded?
• Can the workflow reflect our approved procedure without inventing a universal rule?
• What happens during an outage, and how are later entries distinguished?
• Can we test the highest-risk exception with realistic data before committing?
• Which decisions remain explicitly assigned to an authorised person?