Guide
IQ / OQ / PQ: A Practical Process Validation Guide
Installation Qualification, Operational Qualification, and Performance Qualification — IQ, OQ, PQ — are the documented evidence chain that proves equipment, utilities, and processes consistently produce product that meets predetermined specifications. The current regulatory framework comes from FDA's 2011 Process Validation: General Principles and Practices guidance (Stage 1 design, Stage 2 PPQ, Stage 3 continued process verification), EU GMP Annex 15 (Qualification and Validation), and the ICH trilogy Q8/Q9/Q10 that grounds it all in quality-by-design and quality risk management. This guide is for validation engineers, QA leads, and manufacturing managers in pharmaceutical, medical device, and combination product manufacturing. It walks through what each qualification stage proves, where IQ/OQ/PQ fits inside the FDA three-stage lifecycle, the protocol structure auditors expect, the statistical sampling expectations under the ASTM E2500 risk-based approach, and a readiness path that produces a defensible validation package.
Start free trial Free trial, no credit card, onboard in days, not months.
What each stage actually proves
IQ — Installation Qualification — documents that equipment, utilities, and supporting systems are installed correctly per the manufacturer's specification and the design intent. Component lists, serial numbers, drawings, calibration certificates, materials of construction certificates, utility connections, and software/firmware versions. OQ — Operational Qualification — documents that the installed equipment operates as intended across the full operating range. Worst-case challenges, alarm tests, interlock tests, calibration verification, control system response, and operator training records. PQ — Performance Qualification — documents that the equipment, when operated by trained staff in the production environment with production materials, consistently produces product meeting predetermined specifications. Process Performance Qualification (PPQ) is the FDA-defined Stage 2 milestone that culminates in PQ.
Where IQ/OQ/PQ fits in the FDA three-stage lifecycle
FDA's 2011 guidance reframed validation as a product lifecycle, not a one-off event. Stage 1 — Process Design — develops the commercial process based on knowledge from development and scale-up; produces the master validation plan, the control strategy, the critical process parameters (CPPs) and critical quality attributes (CQAs). Stage 2 — Process Qualification — has two elements: facility/utility/equipment qualification (this is where IQ/OQ live) plus Process Performance Qualification (this is where PQ lives, typically three consecutive successful commercial-scale batches). Stage 3 — Continued Process Verification — ongoing monitoring during commercial production to detect drift, with statistical trending and periodic review. IQ/OQ/PQ is therefore a Stage 2 instrument, not the whole lifecycle.
Protocol structure auditors expect
Each qualification protocol must contain: purpose and scope; references to the URS, FDS, DQ, and risk assessment; pre-approval signatures (typically QA, engineering, validation, production); acceptance criteria stated as objective pass/fail (no 'satisfactory operation' wording); the test scripts with expected results, actual results columns, and pass/fail determination; deviation handling procedure; data attachments (printouts, screenshots, calibration certificates); a summary report with overall conclusion; and post-execution approval signatures. The most common audit finding is acceptance criteria that are not objectively testable — 'the agitator shall rotate smoothly' is not a criterion, 'the agitator shall maintain 100 ± 5 rpm under maximum load' is.
ASTM E2500 and risk-based qualification scope
ASTM E2500 — Standard Guide for Specification, Design, and Verification of Pharmaceutical and Biopharmaceutical Manufacturing Systems and Equipment — is the FDA-recognised risk-based approach that lets manufacturers scope qualification to system impact. Direct-impact systems (those that affect product quality) get full IQ/OQ/PQ; indirect-impact systems get reduced verification; no-impact systems get commissioning only. The system-impact assessment, the component-criticality assessment, and the function-risk assessment must be documented and pre-approved by QA before they justify any reduction. EU GMP Annex 15:2015 explicitly endorses the risk-based approach.
PPQ batch number, statistical sampling, and the three-batch myth
FDA's 2011 guidance explicitly retired the universal 'three consecutive batches' rule for PPQ. The number of PPQ batches must be statistically justified based on process variability, complexity, criticality of the CQAs, and the amount of Stage 1 knowledge. Three remains the most common in practice, but it must be justified, not assumed. PPQ sampling and testing typically exceeds routine commercial release testing — additional sampling points within batches, larger sample sizes, and tighter analysis (e.g. process capability indices Cpk against the CPP limits). The PPQ protocol must specify which CPPs and CQAs are being monitored, the sampling plan, and the statistical methods that will be used to evaluate the data.
Continued Process Verification (Stage 3) — the part most manufacturers skip
Stage 3 starts the moment Stage 2 PPQ ends and runs for the commercial life of the product. The CPV plan defines what data is collected (CPPs, CQAs, in-process controls), the trending methodology (control charts, capability indices, multivariate analysis), the review cadence (typically monthly tactical, quarterly trending, annual product review), and the action levels that trigger investigation or revalidation. FDA 483s and warning letters frequently cite missing or inadequate Stage 3 — manufacturers who qualified once and then never trended the production data. The Annual Product Review under 21 CFR 211.180(e) and the Product Quality Review under EU GMP Chapter 1 §1.10 are the documented output that proves Stage 3 is real.
A 120-day IQ/OQ/PQ readiness path
Days 1 to 15: validation master plan, URS, system-impact assessment, component-criticality assessment; QA pre-approval. Days 16 to 40: DQ against the design package; IQ protocols drafted and pre-approved; vendor FATs and SATs witnessed. Days 41 to 70: IQ execution; OQ protocols drafted and pre-approved; OQ execution including worst-case challenges. Days 71 to 100: PPQ protocol with statistical justification; engineering batches if needed; PPQ batch execution with enhanced sampling. Days 101 to 120: PPQ report with capability analysis; commercial release; Stage 3 CPV plan operational from batch 1.
Where this lives in V5 Ultimate
The clauses above aren't theoretical — every one maps to a shipped module and an industry profile. Jump to the parts of the product that turn this guide into evidence on a Monday morning.
Modules that do the work
Industries this hits hardest
Frequently asked
Is DQ part of IQ/OQ/PQ?
DQ — Design Qualification — sits before IQ in the qualification chain. It verifies that the proposed design of the equipment, facility, or system is fit for purpose against the URS. EU GMP Annex 15 names DQ as the first qualification stage; FDA's 2011 guidance bundles equivalent activity into Stage 1 Process Design. In practice most manufacturers run DQ as a documented activity even when working to the FDA framework.
Do we really need three PPQ batches?
No. FDA's 2011 guidance explicitly retired the universal three-batch rule. The batch count must be statistically justified based on process variability, complexity, and Stage 1 knowledge. Three batches is the most common landing point in practice because it gives enough data for basic capability analysis, but a complex process with high variability may need more and a well-characterised simple process may justify fewer.
When is revalidation required?
When a change is made that could affect product quality — equipment modification, process parameter change outside the proven acceptable range, raw material change, scale change, facility move. EU GMP Annex 15 also expects periodic review of validated state. Stage 3 CPV data is the primary tool for deciding whether a planned change needs full revalidation, partial revalidation, or no validation impact.
How does PQ differ from PPQ?
PPQ — Process Performance Qualification — is the FDA term for the Stage 2 milestone that demonstrates the commercial process produces conforming product at commercial scale. PQ — Performance Qualification — is the broader EU/Annex 15 term that includes PPQ but is sometimes used more narrowly for equipment performance against the operational range. Most validation packages use the terms interchangeably for the same body of evidence.
See it on your shop floor.
Free trial, no credit card, onboard in days, not months.
Related reading
Editorial·Reviewed against the V5 marketing knowledge base. Spot something off? .