Media Fill (Aseptic Process Simulation)
A practical guide to designing, executing and reviewing aseptic process simulations for sterile drug manufacturing.

On this page · 11 sections
- 1What an APS is — and what it is not
- 2Regulatory scope: US law, FDA guidance and EU GMP
- 3Design the APS around justified process challenges
- 4Build an intervention list that can be executed and reviewed
- 5Run size and duration answer different design questions
- 6Reconcile, incubate and inspect the simulation units
- 7Acceptance criteria and interpretation of observed growth
- 8Qualification schedules and reasons to repeat an APS
- 9Investigate loss of control and assess product impact
- 10Connect APS evidence and recover record exceptions
- 11Common failure modes and a practical review checklist
How does Media Fill Aseptic Process Simulation apply to your shop floor?
Pick your industry and scale — Ask V5 rewrites the definition in your context, gives a worked example, and shows what V5 does on day one.
01What an APS is — and what it is not
Media Fill (Aseptic Process Simulation) is a study that substitutes a microbiological growth medium for product to simulate aseptic manufacturing exposures and detect microbial contamination after incubation.
In FDA section IX.A, the simulation normally exposes the medium to product-contact equipment surfaces, container closure systems, critical environments and process manipulations. Sealed, medium-filled containers are then incubated. The exposure model therefore extends beyond the filling step on an aseptic fill line: it follows the conditions under which sterile elements come together and could become contaminated.
These activities examine different materials and answer different questions:
| Activity | Material or observations examined | Principal question |
|---|---|---|
| Manufacturing APS | Growth medium exposed to the aseptic process, sealed and incubated | What do simulation results indicate about contamination potential during actual operations? |
| Product-batch sterility testing | Product-batch samples representative of the whole batch, as recommended by Annex 1 paragraph 10.6, rather than simulation units | Is microbial contamination detected in the tested product samples? |
| Environmental monitoring during APS | Environmental monitoring data collected during the simulation | What supporting information helps evaluate the processing line? |
| Sterile-compounding media-fill testing | Media-filled test units used in compounding qualification | What does the test demonstrate within the applicable compounding qualification framework? |
Environmental monitoring supports line evaluation; it is not the simulation itself. Likewise, media fill execution concerns performing the simulated process, not testing samples from a commercial product batch.
This article concerns manufacturing APS for sterile drugs. Sterile-compounding media-fill tests follow a separate standards framework; their numeric rules are outside this article.
02Regulatory scope: US law, FDA guidance and EU GMP
Use this map to identify the applicable manufacturing framework—not to treat US and EU instruments as interchangeable.
| Jurisdiction or setting | Product/process scope | Instrument | Status |
|---|---|---|---|
| United States | Drug manufacturing; check current provision for scope | 21 CFR 211.113 | US regulation |
| United States | Sterile drug and biological products manufactured using aseptic processing | FDA aseptic-processing guidance (2004) | Guidance; recommendations rather than independently enforceable obligations |
| European Union | Sterile medicinal-product manufacture | EudraLex Volume 4, Annex 1 (2022) | EU GMP guidance |
For the binding US provision, consult 21 CFR 211.113(b): check the current text for the scope of the binding requirement.
FDA section IX.A connects process validation with § 211.113, stating that sterilization, aseptic filling and closing operations must be adequately validated. Its study-design recommendations remain guidance; citing a regulation does not convert every recommendation into law.
For manufacturing APS, navigate to section 9 of EU GMP Annex 1, including its paragraph 9.39 discussion of manual operations.
This is a scope map, not an equivalence table for schedules, numerical interpretation rules or legal obligations. Do not generalise this sterile-medicinal-product manufacturing framework to every food, supplement, device or chemical process.
03Design the APS around justified process challenges
FDA section IX.A.1 recommends that media fills closely simulate aseptic manufacturing operations, incorporating appropriate worst-case activities and conditions that challenge those operations. An uneventful fill is therefore not, by itself, a convincing demonstration of challenge coverage: the protocol needs to explain which manufacturing conditions it represents and why they were selected.
Annex 1 paragraph 9.36(i) calls for identifying worst-case conditions across relevant variables, including container size and line speed, assessing their process impact, and justifying the selected variables. As a practical approach, assess each variable against the actual aseptic fill line, rather than labelling one speed–container combination universally worst. Different selections may challenge different aspects of the operation.
Annex 1 paragraph 9.36(iii) also identifies maximum permitted holding times for sterile product and equipment exposed during the aseptic process as APS planning considerations. Translate those limits into identifiable exposure periods, not merely a statement that the run was “long enough.”
Make each selected challenge observable
The following matrix is a suggested protocol structure, not a prescribed regulatory table. Its examples assume an established manufacturing operating range and documented holding limits; selections remain process-specific.
| Routine condition | Selected APS challenge | Rationale | Execution evidence |
|---|---|---|---|
| Line operates across an approved speed range | Run an identified segment at the assessed challenging speed | Connect speed selection to the process impact being challenged | Actual speed, units/minute; segment start and finish |
| Container sizes change line setup | Use the selected size with its corresponding setup | Explain why that size and setup challenge this operation | Container identification, setup record and observed operating condition |
| Exposed sterile product or equipment has a permitted hold | Simulate the selected maximum permitted exposure period | Connect the hold limit to a defined exposure condition | Exposure start and end, elapsed minutes and equipment state |
| Equipment is assembled in a defined manufacturing configuration | Execute the selected assembly and configuration sequence | Make the configuration-specific challenge explicit | Configuration identification and timestamped assembly event |
Keep intent separate from proof
For practical record organisation, give each challenge an identifier carried from the protocol into media fill execution. Keep four elements distinguishable: the planned condition and rationale; the actual condition and supporting record; any deviation from the plan; and the reviewer’s conclusion about challenge coverage.
For example, a planned speed entry should not double as the actual-speed record. If execution differs, retain both values and document the reviewer’s assessment of whether the intended challenge was achieved. This structure lets a reviewer trace the design argument to an observable event without treating protocol approval as proof of execution.
- Set scopeIdentify the process, line and protocol version.
- Design ChallengesJustify variables, interventions and unit handling.
- ExecuteRecord actual conditions and intervention events.
- ReconcileAccount for filled, removed and incubated units.
- IncubateLink actual conditions to identifiable unit groups.
- InspectRecord observations against those unit groups.
- ReviewResolve investigations; authorised people decide next steps.
04Build an intervention list that can be executed and reviewed
An intervention list should function as an execution plan, not merely a catalogue of names. As a practical approach, connect each planned challenge to its sequence, actual execution and affected units.
FDA section IX.A.1 recommends addressing the representative number, type and complexity of normal interventions occurring with each run, alongside nonroutine interventions and events such as maintenance, stoppages and equipment adjustments. Recording only an intervention name does not show how often it occurred or whether its execution represented the intended complexity.
FDA section IX.A.3 distinguishes frequency of coverage: commonly occurring interventions should be routinely simulated, while rare interventions can be simulated periodically. Annex 1 paragraph 9.36(x) also calls for considering normal aseptic manufacturing interruptions when the process is idle, including shift changeovers, vessel recharging and introduction of additional equipment.
The following are suggested record fields, not mandated field names. They can structure a process event log for comparison against the approved plan.
| Suggested fields | Review purpose |
|---|---|
| intervention_id, intervention_type | Identify the challenge and distinguish individual occurrences. |
| planned_sequence | Locate the intended challenge within the execution sequence. |
| actual_start_at, actual_end_at | Establish actual timing, duration and overlap with other events. |
| operator_id, line_location | Connect execution to the person and location involved. |
| affected_unit_group_id | Associate the event with identifiable simulation units. |
| deviation_id | Link a departure to its assessment and disposition. |
If a challenge is omitted, substituted or interrupted, preserve what actually happened through contemporaneous recording. Document the difference from the plan and route the adequacy decision to authorised reviewers. Keep planned and actual entries distinguishable; never silently replace an actual event with the planned event. Reviewers can then assess whether the intended challenge was achieved and document any further action, rather than treating a completed checklist as proof of coverage.
05Run size and duration answer different design questions
Justify three things separately: how many units the APS fills, how long it represents aseptic processing, and which manipulations and interventions it accommodates. A matching unit count alone does not demonstrate matching time coverage. Keep these justifications together in the protocol so reviewers can assess the simulation as an operation, not simply a quantity.
Choose the count for the process
FDA guidance section IX.A.4 gives 5,000–10,000 units as a generally acceptable starting point—not a universal batch size. For operations with production sizes under 5,000, it recommends that media-filled units at least equal the maximum batch size made on the processing line.
Annex 1 paragraph 9.40 frames the count around representativeness: the number of filled units "should be sufficient to effectively simulate all activities that are representative of the aseptic manufacturing process", and the justification "should be clearly captured in the CCS" (contamination control strategy). It adds that "typically, a minimum of 5000 to 10000 units are filled" and that, for small batches under 5,000 units, the APS container count "should at least equal the size of the production batch". FDA calls its range a starting point; Annex 1 calls it a typical minimum and ties the justification to the CCS. For manual operations, paragraph 9.39 separately says the APS batch size should mimic routine aseptic manufacturing. See the EU GMP Annex 1 overview for broader context.
Justify elapsed time independently
FDA section IX.A.3 recommends determining run duration by the time needed to incorporate manipulations and interventions, with appropriate consideration of the actual aseptic operation’s duration. Where processing uses manual filling or closing, or extensive manual manipulations, FDA recommends that simulation duration generally be no less than actual manufacturing duration to best simulate operator-related contamination risks.
Worked comparison: manual filling
Assume a manual operation normally fills 120 units over 6 hours. These are illustrative assumptions, not recommended run sizes.
- Routine operation: 120 ÷ 6 = 20 units/hour average output.
- Proposed simulation: 120 units in 2 hours; 120 ÷ 2 = 60 units/hour average output.
- Comparison: identical counts, but the simulation takes one-third of the routine duration.
Evaluate the shorter simulation against FDA’s manual-process recommendation rather than declaring equivalence from count alone. The average rates describe output; they do not show when exposure, pauses or interventions occurred. During media fill execution, preserve the timing evidence needed to compare the planned challenges with what actually happened. This makes the duration justification reviewable alongside the unit count.
06Reconcile, incubate and inspect the simulation units
Start with a reconciled population, not merely an incubator count. Annex 1 paragraph 9.47 calls for reconciliation of processed units, including filled, incubated and non-incubated units, with justification for filled units not incubated. Keep these dispositions connected in the APS batch record.
Under Annex 1 paragraph 9.41, agitate, swirl or invert filled APS units before incubation so the medium contacts all interior container surfaces. Incubate and evaluate every integral unit, including cosmetic-defect units. Discards without incubation should match routine-fill discards and have a production-SOP basis specifying the same circumstances. An intervention must not remove more units than production would clear.
Treat the following as separate protocol questions. FDA guidance section IX.A makes these recommendations for manufacturing media fills:
- Duration: incubation should not be less than 14 days.
- Temperature: select conditions suitable for recovery of bioburden and environmental isolates; remain within 20–35°C at all times and within +2.5°C of the target temperature.
- Two-temperature schedule: if two temperatures are used, incubate for at least seven days at each, starting with the lower temperature.
- Inspector qualification: examine each unit using personnel with appropriate education, training and experience in inspecting media-fill units for microbiological contamination. If QC personnel do not inspect, QC-unit oversight should continue throughout the examination. Bring all suspect units immediately to the QC microbiologist.
Annex 1 adds two population and detection points. Units discarded after aseptic set-up or mandatory line clearances "would typically be incubated separately, and would not necessarily be included in the acceptance criteria for the APS" (paragraph 9.41) — so the incubated population and the acceptance population can differ, and the protocol should say which units fall where. Paragraph 9.43 calls for incubation in clear containers (or clear containers of identical configuration where the product container is not clear) and for isolates to be "identified to the species level when practical". Do not treat the FDA temperature schedule as an EU rule.
APS inspection asks one question: did microorganisms grow in an incubated simulation unit? Routine 100% visual inspection of filled product containers is a separate production control looking for particles and container defects; passing one does not answer the other.
07Acceptance criteria and interpretation of observed growth
Keep three decisions separate: the applicable growth target, what a contaminated simulation unit means, and the investigation response.
- Select the acceptance framework. Under Annex 1 paragraph 9.46, "the target should be zero growth" and "any contaminated unit should result in a failed APS". FDA's section IX.A.9 recommendations, by contrast, vary by run size (table below). Keep the EU criterion and the FDA interpretation visibly separate; see EU GMP Annex 1 for jurisdictional context.
- Interpret growth as process evidence. FDA section IX.A uses results to assess the potential for a drug-product unit to become contaminated during actual operations—not to count contaminated commercial units. Annex 1 paragraph 9.36(vii) says the detection method should be scientifically justified to ensure reliable detection.
- Apply the investigation response separately. FDA IX.A.9 recommends treating any contaminated unit as objectionable and investigating it. Keep that response distinct from the arithmetic and the eventual batch-release decision.
| Units filled | FDA IX.A.9: one contaminated unit | FDA IX.A.9: two contaminated units |
|---|---|---|
| Fewer than 5,000 | No contaminated units should be detected; one is cause for revalidation, following an investigation | — |
| 5,000 to 10,000 | Investigation, including consideration of a repeat media fill | Cause for revalidation, following investigation |
| More than 10,000 | Investigation | Cause for revalidation, following investigation |
FDA adds that, for any run size, intermittent contamination "can be indicative of a persistent low-level contamination problem that should be investigated", and that recurring contaminated units on a line, regardless of acceptance criteria, signal an adverse trend that should lead to problem identification, correction and revalidation (IX.A.9).
Worked case: assume 2,000 units were filled and examined, and one shows growth. The observed fraction is 1 ÷ 2,000 × 100 = 0.05%. This describes the observation; it establishes neither an allowable contamination percentage nor an acceptance decision. Under FDA’s fewer-than-5,000-unit recommendation, no contaminated units should be detected; one contaminated unit is cause for revalidation following investigation.
08Qualification schedules and reasons to repeat an APS
Initial qualification establishes the baseline; periodic requalification evaluates continued control. Keep line/shift coverage separate from operator-specific coverage when planning studies.
FDA section IX.A.2 recommends at least three consecutive separate successful runs during initial line qualification. It describes subsequent routine semi-annual qualification for each processing line, with activities and interventions representative of each shift and shift changeover incorporated into the program. This is a program-design recommendation, not simply a recurring calendar entry.
Annex 1 paragraph 9.38 recommends at least three consecutive satisfactory initial simulation tests covering all working shifts in which the aseptic process may occur. Normally, periodic APS should be repeated twice a year—approximately every six months—for each aseptic process, each filling line and each shift.
For manual operations, Annex 1 paragraph 9.39 recommends initially validating each type of container, container closure and equipment train with each operator participating in at least three consecutive successful APS. It recommends revalidation with one APS approximately every six months for each operator. Keep this manual-operator scope distinct; do not turn it into a universal line/shift interval or an exact deadline.
Outside the periodic schedule, FDA section IX.A identifies system changes, extended shutdowns and end-product sterility testing showing contaminated products as possible causes for system revalidation—not automatic outcomes for every change.
As a practical scheduling aid, maintain a coverage register connecting the aseptic fill line, shift pattern, configuration, operator where applicable, last relevant study and reassessment rationale. Link operator entries to the operator skill matrix. The register supports scope review without creating additional intervals or automatic triggers.
09Investigate loss of control and assess product impact
FDA section IX.A.9 says any contaminated unit "should be considered objectionable and investigated", that "the microorganisms should be identified to species level", and that any failure investigation "should assess the impact on commercial drugs produced on the line since the last media fill". Its purpose is to establish the origin and scope of the problem, not simply to obtain a passing repeat run.
Reconstruct the sequence before selecting a cause
A practical investigation should connect the execution chronology to the manufacturing and laboratory evidence. Use the batch record to locate interventions and unit groups, then compare monitoring observations, incubation history and inspection findings. Keep three categories separate:
- Established observations: what happened, when it happened, which units were involved and which records support the finding.
- Competing explanations: possible manufacturing or laboratory causes, with supporting and contradictory evidence for each.
- Unresolved questions: missing chronology, uncertain unit identity or unexplained observations, together with the work needed to resolve them.
Treat a timing association as a lead, not proof of causation. For example, growth in units associated with an intervention warrants examination of that intervention and subsequent handling; it does not, by itself, establish where contamination entered.
Confirm correction and assess manufacturing impact
FDA recommends process simulation run(s) after corrections to confirm that deficiencies have been corrected and the process has returned to control. If the investigation fails to reach well-supported, substantive conclusions about the failure’s cause, three consecutive successful runs alongside increased scrutiny of production may be warranted. This is conditional language, not a universal FDA rule for every investigation.
Annex 1 sets out a fuller EU response in paragraph 9.46: an investigation of the most probable root cause(s); corrective measures; "a sufficient number of successful, consecutive repeat APS (normally a minimum of 3)"; a prompt review of aseptic production records since the last successful APS, including a risk assessment of potential sterile breaches; inclusion of all unreleased batches in the investigation scope; quarantine of products made on the line after the failure until resolution; limits on an implicated operator until retrained and requalified; and resumption of production "only after completion of successful revalidation". Record corrective changes through change control. Authorised people decide product disposition; a successful repeat simulation is evidence for that review and does not by itself release product.
10Connect APS evidence and recover record exceptions
A proposed APS evidence model uses stable identifiers to connect the protocol version, run execution, intervention events, unit reconciliation, incubation and inspection observations, and investigation or review decisions. This is a practical data-integrity design, not a regulator-mandated schema.
Possible interfaces link manufacturing execution records to run and intervention identifiers, laboratory records to observation identifiers, environmental-monitoring records to the relevant location and time, and temperature-log storage to the incubation interval. These are architecture choices, not claims about any named application's capabilities. MES–historian integration can be considered where time-series evidence needs linking.
- Duplicate import: retain import history and identify the duplicate without counting its observations twice.
- Interrupted transfer: identify missing records and reconcile the completed transfer against its source.
- Mismatched run identifier: hold the disputed association for review rather than guessing the intended run.
- Corrected observation: preserve the original, link the correction, and record its reason and reviewer.
For each exception, preserve original records, identify the reconciliation issue, and document the reviewed correction; never silently overwrite evidence. An audit-trail review workflow can organise that review.
Lifecycle diagrams and data models support evidence assembly. They do not automate APS acceptance or product release: evaluation, approval and product disposition remain decisions for authorised people.
Protocol
Study definition.
- protocol_id
- version
- line_id
- scope
Run
Execution context.
- run_id
- protocol_id
- shift_id
- started_at
Intervention
Actual challenge.
- intervention_id
- run_id
- intervention_type
- occurred_at
Unit Group
Count reconciliation.
- unit_group_id
- run_id
- filled_count
- incubated_count
Observation
Incubation and inspection.
- observation_id
- unit_group_id
- temperature_log_id
- inspection_result
Review
Investigation and decision.
- review_id
- run_id
- investigation_id
- reviewer_id
11Common failure modes and a practical review checklist
Use these practical review categories to test the APS evidence chain. They are not a ranked list of inspection findings; review actions refer back to the controls discussed above.
| Failure mode | Evidence gap | Review action |
|---|---|---|
| Unexplained challenge selection | No link to process risks | Revisit the design rationale. |
| Planned interventions without execution evidence | Plan substituted for actual events | Compare intervention coverage with the process event log. |
| Unresolved unit-count differences | Unit disposition remains unexplained | Return to the reconciliation section; account for differences. |
| Incubation or inspection observations linked to the wrong run | Run identity is inconsistent | Check production context tagging and correct links traceably. |
| An investigation conclusion unsupported by its evidence | Findings do not support the stated cause | Revisit the investigation section; resolve contradictory evidence. |
Final review checklist
- Confirm process scope, run identity and protocol version.
- Locate the rationale for selected challenges.
- Compare actual intervention coverage with the plan.
- Confirm unit reconciliation and documented dispositions.
- Check linked incubation and inspection records against run identity.
- Review deviations and their effect on interpretation.
- Trace result interpretation to observations and applicable criteria.
- Confirm investigation closure is supported by its evidence.
- Record authorised review and the basis for the final conclusion.
Can an authorised reviewer reconstruct what was challenged, what happened to the units and why the final conclusion follows from the evidence?
Frequently asked questions
Q.Can one container/closure configuration represent more than one product in an APS?+
Yes, where process equivalence is scientifically justified. [Annex 1, paragraph 9.36(ii)](https://health.ec.europa.eu/system/files/2022-08/20220825_gmp-an1_en_0.pdf) allows consideration of bracketing or a matrix approach for the same container/closure configuration used for different products. The justification therefore needs to address process equivalence, not merely a shared container description. Paragraph 9.36(i) also calls for justification of selected worst-case variables, including container size and line speed. Related [container closure system qualification](/glossary/container-closure-system-qualification) provides context for the configuration being represented.
Q.Should an APS retain the inert gas used during routine production?+
Normally, no. [Annex 1, paragraph 9.36(v)](https://health.ec.europa.eu/system/files/2022-08/20220825_gmp-an1_en_0.pdf) calls for replacing routine-process inert gas with air unless anaerobic simulation is intended. It also says that occasional anaerobic simulations should be considered as part of the overall validation strategy in these situations. The protocol should therefore distinguish an intentional anaerobic simulation from routine replication of the production gas arrangement. For media fill execution, the gas choice is part of simulation design, not simply a production setting to copy.
Q.What makes a nutrient medium suitable for a particular manufacturing site?+
Suitability includes the ability to grow relevant local microorganisms, not just reference organisms. [Annex 1, paragraph 9.36(vi)](https://health.ec.europa.eu/system/files/2022-08/20220825_gmp-an1_en_0.pdf) says the selected medium should grow the designated reference microorganisms described by the relevant pharmacopeia and suitably representative local isolates. Paragraph 9.36(vii) separately calls for scientific justification that the contamination-detection method reliably detects contamination. These address two connected questions: whether the medium supports the relevant organisms and whether the method can reliably reveal contamination.
Q.How much medium should each APS container hold?+
Use the functional criteria in [Annex 1, paragraph 9.36(iv)](https://health.ec.europa.eu/system/files/2022-08/20220825_gmp-an1_en_0.pdf), rather than assuming that the commercial fill volume is the answer. The volume should ensure that medium contacts all equipment and component surfaces that may directly contaminate sterile product. It should also leave sufficient headspace for potential microbial growth and allow turbidity to be detected during inspection. The decision therefore balances surface contact, headspace and inspectability; this paragraph does not prescribe a universal volume in millilitres.
Q.How can lyophilization be simulated without suppressing microbial growth?+
FDA recommends exposing unsealed containers to partial evacuation of the chamber in a manner that simulates the process. Its [2004 aseptic-processing guidance, section IX.A.3](https://www.fda.gov/media/71026/download), says vials should not be frozen and precautions should keep the medium aerobic to avoid potentially inhibiting microbial growth. This is a simulation of relevant process exposure, not an instruction to reproduce freezing. A [lyophilization cycle record](/glossary/lyophilization-cycle-record) can provide context when comparing production operations with the proposed simulation.
Q.Where should simulation begin when sterile bulk material is stored or transferred before filling?+
Consider the upstream aseptic exposures rather than treating the filler as the only operation to represent. [FDA section IX.A.1](https://www.fda.gov/media/71026/download) recommends representative aseptic additions or transfers in media-fill design. [Annex 1, paragraph 9.36(iii)](https://health.ec.europa.eu/system/files/2022-08/20220825_gmp-an1_en_0.pdf) also identifies maximum permitted holding times for exposed sterile product and equipment as planning considerations. Together, these support addressing relevant pre-filling transfers and holds in the protocol. Define their relationship to the aseptic fill line, rather than leaving them outside the assessment.
Q.How should an APS account for different or extended operator shifts?+
Capture the sterility risks specific to the shifts actually operated. [Annex 1, paragraph 9.36(ix)](https://health.ec.europa.eu/system/files/2022-08/20220825_gmp-an1_en_0.pdf) gives maximum operator time in the cleanroom as an example. Paragraph 9.36(viii) also says simulation duration should challenge the process, intervention-performing operators, shift changes and the processing environment’s capability. Paragraph 9.36(x) includes normal idle interruptions, such as shift changeovers. Use [shift pattern scheduling](/glossary/shift-pattern-scheduling) as context for identifying those conditions, not merely for selecting a convenient simulation time.
Primary sources
Want to see how Media Fill Aseptic Process Simulation could fit into your own records and workflows? Explore the related V5 pages or talk to our team about what applies to your operation.
