Process validationProcess Validation (FDA 2011 lifecycle + EU GMP Annex 15)
The end-to-end lifecycle — FDA's 2011 (revised 2024) Process Validation Guidance and EU GMP Annex 15 — that establishes, qualifies and continually monitors a commercial manufacturing process: Stage 1 Process Design, Stage 2 Process Performance Qualification (PPQ), and Stage 3 Continued Process Verification (CPV) — collectively the regulatory definition of 'a state of control'.
01What process validation is
Process validation (PV) is the documented evidence that a commercial manufacturing process is capable of consistently delivering product meeting its critical quality attributes (CQAs) — and will continue to do so over its commercial life. The 2011 FDA guidance reframed PV as a lifecycle (replacing the older 'three-batch prospective validation' shorthand): Stage 1 Process Design produces the knowledge base; Stage 2 Process Performance Qualification (PPQ) confirms commercial-scale capability on a defined number of qualifying batches; Stage 3 Continued Process Verification (CPV) trends every commercial batch to assure the process remains in control. EU GMP Annex 15 is harmonised in intent if not in wording; ICH Q8/Q9/Q10/Q12 are the supporting scientific framework.
02Stage 1 — Process Design
- QTPP and CQAs defined (ICH Q8) — what the product must deliver clinically and the attributes that prove it.
- CMA / CPP identification — multivariate DoE links input variability to output performance.
- Design Space (optional but powerful) — multivariate envelope inside which the process is known to deliver.
- Control Strategy (ICH Q10/Q11) — the planned controls on materials, process parameters, in-process tests, facility and finished spec that together assure CQAs.
- Risk assessment (ICH Q9) — FMEA / PHA / fishbone; drives the validation strategy and the sampling plan for Stage 2.
- Scale-up plan — laboratory → pilot → commercial; bracketing or matrixing rationale documented.
03Stage 2 — Process Performance Qualification (PPQ)
PPQ is the commercial-scale confirmation: the process, the facility, the equipment, the utilities and the trained personnel all come together on a defined number of qualifying batches (historically three; modern risk-based decisions can range from 3 to 10+ based on prior knowledge, process complexity and variability), with elevated sampling and analytical testing, against a pre-approved PPQ protocol. The PPQ report concludes whether the process is qualified and what the acceptable commercial operating envelope is.
EU GMP Annex 15 distinguishes Prospective, Concurrent and Retrospective validation — prospective (PPQ before commercial release) is the default; concurrent is rare and requires strong justification; retrospective is no longer accepted for new products. Modern Continuous Process Verification (CPV-style PV based on extensive in-process measurement) is also recognised under Annex 15 §5.
04Stage 3 — Continued Process Verification
Stage 3 is the ongoing assurance that every commercial batch confirms the process is still in a state of control. Each lot's critical attributes feed into a Stage-3 SPC / trending programme — rolling means, Cpk/Ppk, Western Electric / Nelson out-of-trend signals. Adverse trends trigger investigation; positive trends inform process improvement (tightening of specs, recipe optimisation, design-space expansion). Stage-3 data is the principal feed into the APR / PQR and the management review.
05EU GMP Annex 15 alignment
Annex 15 covers Qualification (DQ, IQ, OQ, PQ — the equipment / utility spine), Validation (process, cleaning, analytical method, computerised system), Change Control, Re-Qualification / Re-Validation cycles, and the Validation Master Plan (VMP) that governs all of it. Process validation in Annex 15 sits inside this wider qualification framework — equipment must be qualified before PPQ can start; cleaning validation runs alongside; analytical methods supporting release testing must themselves be validated under ICH Q2(R2).
06What gets validated — beyond the process itself
- Manufacturing process (this entry) — Stage 1/2/3.
- Cleaning process — separate cleaning validation with HBEL-derived MACO + recovery.
- Analytical methods — ICH Q2(R2) accuracy/precision/specificity/LoD/LoQ/linearity/range/robustness.
- Computerised systems — GAMP 5 + Annex 11 + Part 11 risk-based validation.
- Sterilisation / sterilisation cycles — ISO 11135 (EO) / ISO 17665 (steam) / ISO 11137 (radiation).
- Aseptic process — media fills (Annex 1 §9 / PIC/S PE 010).
- Container-closure integrity (CCIT) — USP <1207> + Annex 1.
- Packaging process — line clearance, label-count reconciliation, serialisation if applicable.
- Shipping / cold chain — ISTA 7E + WHO TRS 961.
07Common Form-483 / EMA PV findings
- PPQ executed on three batches without a documented rationale why three is sufficient (post-2011 rationale required — historical 'three batches because regulation' is not acceptable).
- Stage 1 design knowledge not summarised — process developed at the laboratory and pilot scale but the rationale connecting CMAs/CPPs to CQAs is in a dozen reports never tied together.
- PPQ run at one site / one campaign with no consideration of inter-campaign variability (raw-material lot, operator shift, season).
- Stage 3 CPV programme not implemented or implemented as a spreadsheet that hasn't been touched since launch.
- Re-validation triggers not defined — when does a change to a raw-material supplier, a piece of equipment or a control parameter require a re-PPQ?
- Acceptance criteria in the PPQ protocol set after the data is generated — the protocol must pre-define what 'pass' means.
- PPQ deviations not assessed for impact on the validation conclusion — deviation closed, PPQ released anyway.
08How V5 Ultimate supports the PV lifecycle
- Process master holds the QTPP, CQAs, CMAs, CPPs, design space (if filed), control strategy and the supporting Stage-1 development reports — one queryable record per product.
- PPQ workspace: protocol with pre-approved acceptance criteria, elevated-sampling plan, deviation tracking, raw and processed data attached, final PPQ report with QA sign-off via two-person e-signature. Cannot be backdated; cannot be released with open deviations un-assessed.
- Stage 3 CPV dashboards per product: rolling Cpk/Ppk per critical attribute, Western Electric / Nelson OOT signals, by-batch run charts with validated mean and ±3σ control limits, by-supplier / by-shift / by-season strata. Adverse trend opens a Stage-3 investigation.
- Re-validation triggers: every approved change in change control is assessed against the validated envelope; out-of-envelope changes auto-route to validation for a re-PPQ decision.
- VMP per site: the master plan holds every qualified piece of equipment, every validated method, every validated process — with the next re-qualification / re-validation due date. The validation programme cannot quietly fall behind.
- APR / PQR consumes the Stage-3 trends and the validation activity in the period — the annual review and the lifecycle data agree by construction.
Frequently asked questions
Q.Is three batches still the magic number for PPQ?+
No. The 2011 FDA guidance explicitly removed the three-batch rule and replaced it with a risk-based number justified by prior knowledge, process complexity, expected variability and the sampling intensity of the PPQ. Three is still common for well-understood processes; complex biologics, novel modalities and processes with limited prior knowledge typically use 5-10+.
Q.When does a change require re-validation?+
Per Annex 15 §6 and ICH Q12, change control assesses every change against the validated envelope. Changes outside the envelope (new equipment, new supplier of a critical input, scale change, formulation change, process-parameter change beyond the design space) require a re-validation decision — sometimes a confirmatory single batch, sometimes a full re-PPQ. Stage-3 CPV data informs the decision.
Q.How does Continuous Process Verification differ from CPV?+
Confusingly similar names. Continuous Process Verification is an Annex 15 §5 alternative to traditional PPQ — extensive in-process measurement (often via PAT) replaces the discrete three-batch qualification with continuous evidence of capability. CPV (Continued Process Verification) is the FDA 2011 Stage 3 — ongoing trending after PPQ. The acronym 'CPV' usually means the latter; in writing, spell it out the first time.
Q.Does process validation apply to legacy products?+
Yes. Legacy products validated under the old prospective-three-batch paradigm are still required to have a Stage-3 CPV programme today. Many companies brought legacy products into the 2011 lifecycle through a 'process performance qualification by retrospective analysis' — analysing historical batches under the current statistical framework — followed by a forward-looking CPV programme.
Q.What about contract manufacturing — who owns PV?+
The Marketing Authorisation Holder (MAH) owns process validation, even for contract-manufactured product. The CMO performs the work under a Quality Agreement; the MAH approves the protocol, reviews the report, owns the Stage-3 trending and signs the APR/PQR. A CMO running PPQ without MAH involvement is a top contract-management finding.
Primary sources
Further reading
V5 Ultimate ships with the Process validation controls already wired in — audit trail, e-signatures, validation evidence. Free trial, no credit card, onboard in days, not months.
