EU GMP Annex 15: the qualification stages explained
Annex 15 sets URS, DQ, FAT/SAT, IQ, OQ and PQ as a sequence that builds evidence a system is fit for its intended use, with requalification after changes.
Annex 15 to the EU GMP guide sets out the qualification and validation expectations for facilities, equipment, utilities and systems. It frames qualification as a lifecycle: user requirements, design qualification, factory and site acceptance testing where appropriate, installation, operational and performance qualification, and ongoing requalification.
Stages
- URS: the essential requirements the equipment must meet, including quality-critical parameters.
- DQ: documented verification that the proposed design is suitable for the intended purpose.
- IQ: verification that the equipment is installed correctly — components, calibration of instruments, documentation.
- OQ: tests over the operating ranges, including upper and lower limits and worst-case conditions.
- PQ: demonstration of consistent performance under routine use with real or simulated product.
For a temperature-controlled storage space, temperature mapping is the core of OQ (empty) and PQ (loaded).
| Stage | The question | For a cold room |
|---|---|---|
| URS | What must it do? | 2.0–8.0 °C at all product locations, loaded, with defined door traffic; alarm and data requirements |
| DQ | Is the proposed design capable of it? | Heat-load calculation, airflow, sensor provision, alarm independence, dock arrangement |
| FAT | Does it work at the supplier's works? | Control and alarm function before it ships; cheapest place to reject it |
| SAT | Did it arrive and install intact? | No transport damage; site services correct |
| IQ | Is it installed as specified? | Identity, utilities, sensor positions against drawings, calibration certificates, software version |
| OQ | Does it operate across its ranges? | Set-point control, alarm challenge, door recovery, power failure, empty distribution |
| PQ | Does it perform in routine use? | Loaded mapping over the operating cycle, real door traffic, monitoring running |
FAT and SAT are the cheap stages
Factory and site acceptance testing get skipped more than anything else on that list, usually because the equipment is standard and the schedule is tight. The economics argue the other way: a control fault found at FAT is the supplier's problem and costs nothing but a delay, and the same fault found at OQ is yours, with a qualification half-executed and a storage area that cannot be used. Annex 15 explicitly encourages using FAT and SAT evidence to reduce later duplication, which is also a direct saving on IQ and OQ.
Overlapping stages, and doing it honestly
Annex 15 allows stages to be combined or to overlap where justified, and for small equipment a combined IQ/OQ is normal. What it does not allow is the justification being implicit. Write down which activities were merged and why, and confirm no test lost its prerequisite — a calibration certificate that IQ would have checked is still needed before an OQ test relies on that sensor.
For a temperature-controlled space, mapping is the substance
- Empty distribution is an OQ test: it characterises the equipment without the confounding effect of load, and it catches gross faults cheaply.
- Loaded mapping is the PQ. It is the performance evidence, and the duration has to cover the real operating cycle rather than a convenient weekend.
- The monitoring sensor positions come out of the mapping, so the monitoring system cannot be finally qualified until the mapping is analysed.
- Requalification is triggered by change as well as by the review interval: racking, HVAC, door usage, product range and loading pattern all reopen the question.
GDP wholesalers are not bound by Annex 15, which is a GMP document. They are expected to qualify premises and equipment systematically, and the Annex 15 sequence is the structure most sites adopt because it is the one inspectors recognise.
Frequently asked questions
- Can IQ and OQ be combined?
- Annex 15 allows IOQ where justified, provided the requirements of both are covered and documented.
- Is a risk assessment required?
- Yes. Annex 15 expects a quality risk-management approach (ICH Q9) to determine the scope and extent of qualification.
References
- [1]EudraLex Volume 4, Annex 15: Qualification and Validation (2015)
- [2]ICH Q9(R1): Quality Risk Management
General technical guidance written against the cited sources. It is not regulatory or legal advice and does not replace the applicable standard, guideline or a qualified reviewer's judgement.
Have a question on this topic?
Ask ValiTrac AI and see the evidence and calculation behind the answer.
Ask ValiTrac AIFree calculator: MKT & logger data check
Paste logger readings from storage or a cargo shipment: MKT per ICH Q1A(R2), time out of range, and which figure actually governs the excursion.
Open the calculatorRelated articles
IQ, OQ and PQ explained
Installation, operational and performance qualification ask three questions in order: is it installed as specified, does it operate, does it perform?
Requalification and periodic review
Qualified status is not permanent. Change control, periodic review and monitoring data together decide when a system must be requalified.