Compliance · The complete guide

WHO Prequalification

TL;DR

WHO Prequalification (PQ) — the World Health Organization programme that assesses the quality, safety + efficacy of priority medicines, vaccines, in-vitro diagnostics (IVDs), vector-control products + active pharmaceutical ingredients (APIs) against a single harmonised international standard so that UN procurement agencies (UNICEF, UNFPA, UNDP, PAHO, the Global Fund, Gavi) + governments of low- + middle-income countries (LMICs) can purchase with confidence. Operated by the Department of Regulation and Prequalification at WHO Geneva, the PQ programme is the operational backbone of the global public-health supply for HIV, TB, malaria, neglected tropical diseases, maternal + child health, reproductive health + the Expanded Programme on Immunization (EPI). Four product streams: PQ Medicines, PQ Vaccines, PQ IVDs + PQ Vector Control. Each operates on a published Expression of Interest (EOI) priority list, a structured submission dossier, an assessment by international experts, a site inspection (or reliance on a Stringent Regulatory Authority / SRA / WHO-Listed Authority inspection), and listing in the WHO Prequalified Products List. PQ has driven a massive expansion of LMIC manufacturer capability, generic ARV + paediatric formulation availability, vaccine-vendor diversification + IVD-quality uplift over the past two decades. Closely linked to the new WHO-Listed Authority (WLA) framework that classifies national regulators by maturity for reliance.

Reviewed · By V5 Ultimate compliance team· 3,935 words · ~18 min read

01What WHO Prequalification actually is

WHO Prequalification (PQ) is the World Health Organization programme that evaluates priority medicines, vaccines, IVDs, vector-control products + APIs against a single harmonised international standard, so that UN procurement agencies + LMIC governments can purchase with confidence. PQ is not itself a marketing authorisation — a manufacturer still needs national marketing authorisations in countries of supply — but in practical procurement reality, PQ listing is the de-facto gateway for the multi-billion-dollar UN + Global Fund + Gavi + GDF (Global Drug Facility) + UNITAID-financed public-health pipeline.

PQ is operated by the Department of Regulation and Prequalification at WHO Geneva. The four product streams are:

  • PQ Medicines — finished pharmaceutical products (FPPs) for priority disease areas (HIV, TB, malaria, neglected tropical diseases, reproductive health, hepatitis, COVID-19, paediatric formulations + others).
  • PQ Vaccines — vaccines on the EPI schedule + other priority vaccines (oral polio, rotavirus, HPV, meningococcal, pneumococcal, influenza, COVID-19 + others).
  • PQ IVDs — in-vitro diagnostics for HIV, hepatitis, malaria, syphilis, TB, COVID-19, HPV + others; assessed against WHO Technical Specifications Series (TSS) per assay type.
  • PQ Vector Control Products — long-lasting insecticidal nets (LLINs), indoor residual sprays (IRS), larvicides, space sprays + other vector-control tools.
  • PQ APIs — active pharmaceutical ingredients used in PQ FPPs; manufacturers can independently submit an API for PQ, accelerating FPP submissions that reference the PQed API.

Each stream operates on the same broad procedural pattern: WHO publishes an Expression of Interest (EOI) priority list, manufacturers submit a structured dossier, expert assessors review the dossier (often jointly with national regulators), WHO + national regulators inspect the manufacturing site (or rely on a recent inspection by a Stringent Regulatory Authority / WHO-Listed Authority), and on satisfactory completion the product is listed in the WHO Prequalified Products List.

02SRA + the new WHO-Listed Authority (WLA) framework

Reliance is central to PQ. WHO has historically used the concept of the Stringent Regulatory Authority (SRA) — regulators of countries that are ICH members + observers + associated members under the pre-ICH-membership-restructure framework, plus EU regulatory architecture — to recognise marketing authorisations + inspections + post-market actions as acceptable equivalents to PQ-led assessment + inspection.

  • Historical SRA list — EMA + EU Member State authorities, FDA, MHRA (UK), Health Canada, TGA (Australia), PMDA (Japan), Swissmedic, plus regulators in Iceland, Liechtenstein + Norway.
  • PQ Collaborative Procedure — WHO PQ + SRA collaboration whereby an SRA-approved product (e.g. EMA Article 58 / EU-M4all + collaborative review with WHO) can be PQed faster, leveraging the SRA assessment.
  • EMA Article 58 + EU-M4all — EMA scientific opinion mechanism for medicines for use exclusively outside the EU, primarily for LMIC public-health priorities; the assessment is performed by CHMP with WHO observer participation + can directly support WHO PQ + LMIC national approvals.
  • WHO-Listed Authority (WLA) framework — replacing SRA conceptually + operationally; WHO publishes lists of WLAs at three transitional levels (Transitional WLA-3, Transitional WLA-4 + WLA full) based on the WHO Global Benchmarking Tool (GBT) maturity assessment.
  • GBT Maturity Levels — ML1 (some elements present), ML2 (evolving), ML3 (stable, well-functioning, integrated), ML4 (operating at advanced level + continuous improvement). WLA designation typically requires ML3 / ML4 in the relevant function.
  • Reliance scope — WHO PQ progressively maps WLA scope to specific functions (marketing authorisation, GMP inspection, pharmacovigilance, lot release for vaccines, clinical-trial oversight, market control) — not blanket recognition but function-by-function.
  • Implications for manufacturers — submissions can leverage SRA / WLA approval + inspection outcomes to reduce duplicate work, accelerate PQ listing + de-risk procurement.

03PQ Medicines — the assessment process

StepWhat happensDuration / clock
EOI alignmentConfirm the product is in scope of a current WHO PQ Medicines EOI (the priority disease + dosage-form list).Continuous — published annually + updated.
Pre-submission engagementPre-submission meeting with WHO PQ team; clarify dossier expectations, reliance options + inspection planning.1-3 months.
Dossier submissionQuality (Module 3, full CTD-aligned), bioequivalence (for generics, conducted at WHO-recognised BE centres), safety + efficacy (often by reference to originator + literature for generics).Submission triggers the WHO PQ clock.
AssessmentWHO PQ assessors + national regulators (often jointly through the Collaborative Registration Procedure / CRP) perform the technical review; deficiency letters + responses.First assessment ~3-6 months; multiple rounds typical.
GMP inspectionWHO PQ inspection of the manufacturing site(s) — APIs + FPP + BE site; or reliance on a recent SRA / WLA inspection.Inspection scheduling 6-12 months from submission; reliance can avoid this.
Outstanding responseManufacturer responds to assessment + inspection findings; CAPA + remediation evidence; reinspection if required.Iterative — variable duration.
PQ listingProduct added to the WHO Prequalified Products List + Public Inspection Report (PIR) + Public Assessment Report (WHOPAR) published.1-3 months after final satisfactory response.
Collaborative Registration Procedure (CRP)Participating LMIC national regulators accelerate their national registration based on the WHO PQ assessment + inspection outcome — significantly faster than independent national review.~3 months in participating CRP countries vs 12-24+ months independent.
Post-PQVariations, periodic safety updates, re-inspection (typically every 3 years), post-market quality monitoring, lot complaints + recalls handled with WHO PQ continuing oversight.Lifecycle ongoing.
DelistingFailure to maintain compliance, withdraw from market, sustained quality failures, fraud, or repeat critical findings can trigger PQ delisting + procurement implications.Procedural — usually preceded by warnings + remediation opportunity.

04PQ Vaccines, IVDs + Vector Control specifics

  • PQ Vaccines — assessment includes National Regulatory Authority (NRA) functionality in the manufacturer's country (the NRA must have demonstrable maturity in vaccine regulation, typically ML3 / ML4 in the WHO GBT for vaccines) + WHO assessment of the manufacturer + manufacturing site + product specification + lot release + post-market.
  • Lot release — WHO PQ vaccines typically require lot release by the manufacturer's NRA + WHO sample testing in early years of PQ.
  • Vaccine variations + post-PQ — strict change-control + post-PQ surveillance because vaccine procurement (UNICEF + Gavi) operates on long-term forecasts + tendering cycles.
  • PQ IVDs — assessment includes a product dossier review against the relevant WHO Technical Specifications Series (TSS) per assay type (e.g. HIV, hepatitis, malaria, syphilis, TB, COVID-19, HPV, NAT) + a WHO performance evaluation at WHO-collaborating laboratories + a QMS audit (or reliance on ISO 13485 from a WHO-recognised certification body) + Site Visit Inspection.
  • PQ IVD performance evaluation — independent laboratory testing against WHO panels + sensitivity / specificity / lot-to-lot reproducibility metrics; passage is a gating criterion.
  • PQ Vector Control — assessment includes Efficacy (against WHO-published test methods + target species), Safety (toxicology + occupational), Quality (manufacturing + GMP-like principles per WHO Vector Control GMP), Durability + the relevant Pesticide Evaluation Scheme (WHOPES legacy + the current PQ Vector Control architecture under the Pesticide Evaluation Scheme).
  • PQ APIs — independent API submission; PQed APIs accelerate FPP submissions that reference the PQed API via API Master File or CEP-equivalent linkage.

05WHO GMP + inspection programme

  • WHO GMP — WHO publishes the Good Manufacturing Practices for Pharmaceutical Products (Main Principles) — Annex 2 of the WHO Technical Report Series, the foundational global GMP text + the spine for PIC/S GMP, EU GMP + most national GMP texts.
  • WHO GMP for APIs — substantively equivalent to ICH Q7.
  • WHO GMP for Biological Products + Vaccines — separate Annexes covering vaccine-specific + biological-product-specific elements.
  • WHO GMP for HVAC + Water + Specific Dosage Forms — published Annexes addressing specific facility + utility + dosage-form considerations.
  • WHO PQ Inspectorate — WHO-engaged inspectors (current + former NRA inspectors + WHO-recruited inspectors) conduct PQ inspections, often jointly with national regulators (NRA of the manufacturer + sometimes interested LMIC NRAs).
  • Inspection categories — Pre-PQ inspection (first inspection prior to listing), Re-inspection (typically every 3 years), Triggered inspection (in response to quality signals, complaints, recalls, deficiencies), For-cause inspection (specific complaint or signal investigation).
  • Public Inspection Report (PIR) — WHO publishes a redacted PIR for every PQ inspection — globally visible + read by every NRA, procurement body + competitor; PIR findings drive significant operational + reputational consequences.
  • Reliance — WHO PQ can rely on SRA / WLA inspections (especially EMA + FDA + Health Canada + TGA + PMDA + MHRA + Swissmedic) — reducing the need for a separate PQ inspection on sites with recent satisfactory SRA / WLA inspection.
  • Joint inspections — WHO PQ + multiple NRAs frequently conduct joint inspections, reducing duplicate audit burden for the manufacturer + harmonising findings.

06Post-PQ lifecycle + post-market surveillance

  • Variations — Change-control submissions to WHO PQ for any change that could affect quality, safety or efficacy; variation classification (Minor / Major) with appropriate review + approval routes.
  • Periodic Safety Update Reports (PSURs) — PQ products submit PSURs to WHO PQ on a defined cycle aligned with ICH E2C(R2) substantively.
  • Quality Complaints + Recalls — PQ Quality Defects + Recall procedure; recalls coordinated with affected LMIC NRAs + UN procurement agencies; quality-defect signals analysed by WHO PQ for systemic + product-specific implications.
  • Post-market quality monitoring — WHO PQ commissions independent quality-monitoring studies (sampling + testing) of products in actual LMIC distribution channels for key disease areas (e.g. anti-malarials, ARVs, paediatric formulations) — findings can drive re-inspection, variation requirements + delisting.
  • Re-inspection — typically every 3 years for PQed sites; gap closure is gating for continued PQ status.
  • WHOPAR + PIR updates — Public Assessment Reports + Public Inspection Reports are updated as PQ status, variations + inspection outcomes change.
  • Pharmacovigilance + adverse-event signals — WHO Programme for International Drug Monitoring (Uppsala Monitoring Centre + WHO VigiBase) operates the global ADR signal-detection infrastructure that interfaces with PQ; safety signals can trigger PQ regulatory action.
  • Delisting + Removal — Delisting can be voluntary (manufacturer withdrawal) or involuntary (PQ-initiated for non-compliance); has immediate procurement implications.

07Common WHO PQ findings + missteps

  • EOI mis-alignment — submission for a product / disease area / dosage form outside the current WHO PQ EOI; submission deprioritised.
  • BE study quality issues — bioequivalence studies conducted at non-WHO-recognised BE centres or with documented data-integrity findings.
  • API + FPP linkage gaps — finished-product dossier references an API source without an established WHO PQ API or proper linkage documentation.
  • Stability data thin — long-term stability data insufficient for the WHO-Zone IVa / IVb climatic conditions typical of LMIC supply.
  • QMS gaps revealed at inspection — gaps in deviation, CAPA, change control, complaint handling, batch-record review or data integrity (ALCOA+); PIR publication has global reputational impact.
  • Manufacturing-site cleanliness + sterile-products Annex 1 (2022 revision) gaps — particularly sterile-product manufacturers struggling with the revised contamination control strategy + EM expectations.
  • API source diversification not documented — single-API source without WHO PQ-acceptable contingency.
  • Variation submissions late — change implemented at the manufacturing site without prior WHO PQ approval or post-implementation notification per the variation classification.
  • Re-inspection findings unresolved — gaps from previous PQ inspection still open at re-inspection.
  • PQ Vaccines — manufacturer NRA functionality gap (the NRA in the manufacturing country has gaps that prevent or delay vaccine PQ).
  • PQ IVDs — performance-evaluation failure on WHO panels (sensitivity / specificity / lot-to-lot) — gating failure.
  • PQ Vector Control — efficacy data insufficient against target species + insecticide-resistance considerations; durability data thin.
  • Post-market quality-monitoring failure — a sampled product fails WHO post-market testing → re-inspection + variation + possible delisting.
  • Recall execution inadequate — affected LMIC distribution channels not fully addressed; PQ + national NRA follow-up required.
  • WHOPAR / PIR inaccuracies discovered → corrections + reputational implications for the manufacturer.

08Metrics worth tracking

  • Pre-submission meeting count + commitment-incorporation rate before PQ submission.
  • PQ submission cycle time (submission → listing) per product.
  • Collaborative Registration Procedure (CRP) uptake in LMIC countries of interest.
  • Reliance utilisation rate (SRA / WLA approval + inspection leveraged in submission).
  • PQ inspection outcome trend (Pre-PQ / Re-inspection / Triggered) + PIR finding count + severity.
  • PQ variations on-time submission + approval rate.
  • PSUR on-time submission rate.
  • Post-market quality-monitoring pass rate per product.
  • Recall classification + execution + verification timeline per recall.
  • API + BE centre + finished-product site WHO PQ certificate continuity.
  • Stability-data adequacy for Zone IVa / IVb climatic conditions.
  • Delisting risk indicators (open critical findings, sustained quality signals, NRA functionality gaps).

09How V5 Ultimate supports WHO PQ readiness

V5 Ultimate runs the WHO GMP + QMS + pharmacovigilance evidence layer underneath every WHO PQ-regulated activity. Specifically:

  • WHO GMP + Annex 11-equivalent control framework — computerised-systems lifecycle, electronic-record + electronic-signature controls, ALCOA+ data-integrity expectations aligned with WHO PQ + SRA / WLA inspector expectations.
  • PQ inspection readiness — full document control, training, deviation, CAPA, change control, complaint, recall + post-market surveillance evidence pre-staged for WHO PQ + joint NRA inspector requests, with PIR-publication-grade record traceability.
  • PQ dossier packaging — CTD Module 1-5 structure, quality content, BE study packaging, API + excipient master-file linkage + finished-product dossier assembly.
  • Reliance + SRA / WLA leverage — cross-walk between EMA / FDA / Health Canada / TGA / PMDA / MHRA approval + inspection outcomes and WHO PQ submission content + inspection-reliance arguments.
  • Variation management — Minor / Major variation classification + WHO PQ-specific routing + submission preparation.
  • PSUR + post-market — periodic safety update preparation + post-market quality-monitoring response workflows.
  • Recall execution — quality-defect + recall classification + LMIC distribution-channel tracking + WHO PQ + national NRA + procurement-agency notification.
  • Stability programme — Zone IVa / IVb stability study design + data capture + WHO PQ stability dossier packaging.
  • Manufacturing-network management — multi-site PQ status tracking + site-specific PIR + variation tracking + reliance management per site.
  • PQ + CRP coordination — Collaborative Registration Procedure participation tracking per LMIC country of interest.
  • Audit trail + e-signature — 21 CFR Part 11-equivalent + WHO GMP + PIC/S-aligned record-keeping for WHO + joint NRA inspection use.
  • Vaccines + IVDs + Vector Control specifics — stream-specific evidence layers including lot-release, performance evaluation, efficacy + durability data structures aligned with the respective PQ assessment frameworks.

Frequently asked questions

Q.Is WHO PQ a marketing authorisation?+

No. WHO PQ is a quality / safety / efficacy assessment that does not itself authorise sale in any country. National marketing authorisations are still required from the regulator of each country of supply. In operational reality, however, PQ listing is the de-facto gateway for UN + Global Fund + Gavi + UNITAID-financed public-health procurement, and many LMIC NRAs accelerate national registration of PQ products via the Collaborative Registration Procedure (CRP).

Q.What is the difference between SRA and WLA?+

Stringent Regulatory Authority (SRA) was the historical WHO concept — broadly ICH members + observers + the EU regulatory architecture — used to identify regulators whose decisions WHO PQ could rely on. The WHO-Listed Authority (WLA) framework is replacing SRA, with WHO publishing function-by-function maturity assessments (based on the Global Benchmarking Tool / GBT, ML1-ML4) and explicit WLA designations at transitional + full levels. The shift moves from a closed-list concept to a transparent, criteria-based, function-specific reliance framework that can include emerging-economy regulators.

Q.Can we leverage our EMA Article 58 / EU-M4all approval for WHO PQ?+

Yes — EMA Article 58 (now EU-M4all) is specifically a scientific-opinion mechanism for medicines for use exclusively outside the EU, primarily for LMIC public-health priorities. The assessment is performed by CHMP with WHO observer participation + can directly support WHO PQ + LMIC national approvals via the Collaborative Registration Procedure. It is a strong reliance lever for innovative + biologic products targeting LMIC public-health priorities.

Q.How often is a PQ site re-inspected and what triggers a triggered inspection?+

Re-inspection cycle is typically every 3 years, although risk-based scheduling means high-risk sites + sterile-product manufacturers may be inspected more frequently. Triggered inspections occur in response to quality signals (complaints, recalls, post-market quality-monitoring failures), variation submissions involving significant manufacturing changes, NRA inspection findings communicated to WHO, or specific complaints / whistle-blower reports. Every PQ inspection produces a Public Inspection Report (PIR), so findings are globally visible.

Q.Why does the Public Inspection Report (PIR) matter so much?+

Because it is public, redacted but substantive, and read by every NRA, procurement body + competitor globally. A PIR with critical / major findings has direct consequences: LMIC NRAs may pause procurement of that site's products, joint inspections at other facilities may be triggered, customer questionnaires escalate, and reputational impact on the manufacturer can be significant + multi-year. PQ-inspected sites accordingly treat PIR-grade record traceability + data integrity as a strategic capability, not just a compliance activity.

Primary sources

Further reading

See WHO Prequalification working on a real shop floor

V5 Ultimate ships with the WHO Prequalification controls already wired in — audit trail, e-signatures, validation evidence. Free trial, no credit card, onboard in days, not months.