GMP Engineering • Qualification & Validation
HVAC Validation Checklist for Pharmaceutical Facilities
A well-designed HVAC system must be shown to perform consistently for its intended pharmaceutical use. This detailed HVAC validation checklist helps teams organize requirements, design review, installation checks, operational tests, cleanroom performance verification, records and final approval. Adapt the checklist to the facility, product, process, room classification and applicable regulations; it is a planning aid, not a substitute for approved protocols or site-specific acceptance criteria.
What Is HVAC Validation in a Pharmaceutical Facility?
HVAC validation is the documented lifecycle work used to establish and maintain confidence that a heating, ventilation and air-conditioning system is suitable for its intended use. In practice, pharmaceutical projects commonly organize evidence through commissioning, qualification and performance verification, including design qualification (DQ), installation qualification (IQ), operational qualification (OQ) and performance qualification (PQ), as appropriate to the system and quality strategy.
HVAC performance can affect room cleanliness, pressure relationships, airflow patterns, temperature, relative humidity, containment and environmental monitoring. The validation scope should therefore follow the intended function of each space. A non-sterile weighing room, a sterile processing suite and an HVAC zone for hazardous materials may have different critical parameters and test needs.
Regulatory and Technical Basis
WHO’s HVAC guidance for non-sterile pharmaceutical products recommends a comprehensive science- and risk-based approach across system design, qualification, operation and maintenance. EU GMP EudraLex Volume 4 provides the applicable GMP framework, including Annex 1 for sterile medicinal products and Annex 15 for qualification and validation. The exact requirements and acceptance criteria depend on the applicable jurisdiction, product and approved facility design.
Use your site’s cGMP procedures and quality system to govern protocol approval, deviations, change control, training and document retention. For computerized HVAC controls and electronic data, define validation and data integrity controls appropriate to intended use, including the site’s computerized system validation procedures.
Before Testing: Scope and Readiness Checklist
- Approved project scope identifies the HVAC system, rooms, intended use, products/processes and interfaces.
- System boundary and asset list identify AHUs, supply/return/exhaust paths, terminal units, filters, instruments, controls and relevant utilities.
- Current room data sheets, classification or cleanliness requirements, pressure cascade diagrams and HVAC schematics are available.
- Approved URS and design documents state intended conditions, operating ranges, alarms and critical functions.
- Risk assessment identifies critical parameters, high-risk failure modes, worst-case conditions and justified test coverage.
- Roles are assigned for Engineering, Quality, Validation, Production, Microbiology/Environmental Monitoring, EHS and Automation/IT.
- Equipment and instruments used for testing are identified, calibrated or verified, within due date, and suitable for range and accuracy.
- Test procedures define sampling locations, operating states, environmental conditions, calculations and data recording.
- Acceptance criteria are approved before execution and trace to requirements, design intent, standards or justified site limits.
- Prerequisites such as construction completion, utilities, balancing, filter installation, room finishes and personnel training are documented.
- Protocols, forms, drawings and test scripts have current document identifiers and approved versions.
- Contamination-control, gowning, access, product protection and production scheduling arrangements are established for testing.
HVAC Validation Lifecycle Checklist
1. Design Qualification (DQ)
DQ documents that the proposed design can meet the user and regulatory requirements for its intended purpose. Confirm the design was reviewed by appropriate disciplines and that important design choices have a documented rationale.
- Design basis defines facility use, products, process risks, room grades/classifications and operating modes.
- Room relationships, pressure cascade, airflow direction and contamination/containment strategy are documented.
- Airflow routes, supply and return/exhaust locations, filtration stages and terminal filter arrangements are reviewed.
- Heating, cooling, humidification/dehumidification capacity is justified for expected loads and operating conditions.
- System capacity considers room leakage, filter loading, duct leakage, occupancy, equipment heat loads and operating diversity.
- Critical instruments, control points, alarms, interlocks, set points and trending requirements are defined.
- Access for operation, inspection, cleaning, filter change, calibration and maintenance is practical and controlled.
- Materials and construction details are appropriate for the environment and do not create avoidable contamination risks.
- Drawings, sequences of operation, specifications and room data sheets are internally consistent.
- Risk assessment identifies single points of failure, redundancy needs, emergency response and impact of utility loss.
Link the design review to the approved DQ record and change-control process. Where commissioning evidence is reused for qualification, define the review and approval criteria in advance.
2. Installation Qualification (IQ)
IQ verifies and documents that the installed HVAC equipment and supporting components match approved design documents and are correctly identified, connected and ready for controlled operation.
- Installed AHUs, fans, coils, dampers, filters, terminal housings, diffusers and grilles match approved drawings and specifications.
- Asset tags, equipment IDs, room names and instrument identifiers are present, legible and consistent with the asset register.
- Supply, return and exhaust ductwork, access doors, seals, insulation and flow-direction labels are checked.
- Filter type, grade, dimensions, orientation and installation records are verified against approved specifications.
- Instruments, transmitters, control panels and actuators are installed in approved locations and accessible for calibration or service.
- Electrical, control, power, grounding and communication connections are inspected against approved documents.
- Utilities and services required for system operation are connected and identified.
- Approved as-built drawings, manuals, certificates, material records and software/configuration baselines are available.
- Calibration certificates and instrument status are reviewed for critical measurement devices.
- Construction deficiencies and punch-list items are assessed; critical open items are closed or formally justified before testing.
Record installation evidence in the approved IQ protocol and report. A list of installed equipment by itself is not enough; include objective evidence for requirements that affect performance.
3. Operational Qualification (OQ)
OQ challenges the HVAC system and its control functions across defined operating conditions. The test plan should verify system response and alarm behavior without assuming that a green status display proves adequate room performance.
- Startup, shutdown, normal operation, standby and approved recovery sequences are tested.
- Fan rotation, speed or operating status, damper response and control-loop response are checked.
- Room pressure monitoring and alarms are challenged at protocol-defined points; alarm routing and response are confirmed.
- Temperature and relative humidity controls, indicators and alarms are verified across intended operating ranges.
- Filter differential pressure indicators or monitoring points are checked for correct function and display.
- Control system interlocks, permissives, failure states and fallback behavior are tested where required by design.
- Loss and restoration of electrical power or other critical utilities are assessed according to the approved test strategy.
- BMS/EMS point mapping, units, set points, trends, timestamps, audit trails and user access are verified as applicable.
- Alarm limits, delays and notification pathways match approved specifications and operating procedures.
- Test results, exceptions, software/configuration versions and any temporary overrides are documented and reconciled.
OQ tests should follow approved procedures and safe challenge conditions. Do not intentionally expose product or personnel to uncontrolled conditions; use defined simulations or controlled test modes when appropriate.
4. Performance Qualification (PQ)
PQ demonstrates that HVAC performance is acceptable in the relevant room configuration and operating state. Where applicable, tests should represent routine operations, including expected personnel, equipment, door use and process conditions. The rationale for at-rest and operational testing should be recorded.
- Room pressure differentials and airflow direction are verified against approved room relationships and site criteria.
- Supply/return airflow volume and, where relevant, velocity are measured at defined locations using suitable calibrated instruments.
- Air changes per hour are calculated only where the design or qualification strategy requires it, using documented room volume and airflow data.
- HEPA filter integrity/leak testing is performed where required by room use, classification, design and applicable procedures.
- Airflow visualization/smoke studies evaluate critical airflow patterns, first-air protection or containment where relevant.
- Non-viable particle classification is completed for cleanrooms where classification applies, using the approved method and occupancy state.
- Temperature and relative humidity are measured at justified locations and over a period suitable for intended conditions.
- Recovery testing is performed when specified or justified by system design and room risk.
- Environmental or microbiological monitoring data are reviewed where relevant to the qualification strategy; these do not substitute for required physical HVAC tests.
- Room configuration, equipment placement, personnel setup and test state are documented so results can be interpreted and reproduced.
Use the approved PQ protocol to define methods, locations, number of measurements, calculations, acceptance criteria and treatment of invalid or anomalous results.
Core HVAC Performance Test Checklist
| Test / assessment | What to verify | Key protocol considerations |
|---|---|---|
| Airflow volume / balance | Supply, return and exhaust quantities; balance between rooms or zones. | Instrument calibration, terminal locations, operating mode, calculations, uncertainty and design comparison. |
| Air velocity | Velocity at specified locations, including unidirectional airflow work zones if applicable. | Probe type, measurement grid, distance, orientation and method defined for system design. |
| Room pressure differential | Pressure relationship and direction between adjacent rooms or room/outside. | Door state, stabilization time, sensor location, units, alarm limits and sequence of measurements. |
| HEPA filter integrity | Filter media and installed assembly for leaks or bypass, where required. | Approved aerosol challenge, upstream concentration, scan method, acceptance criteria and filter map. |
| Airflow visualization | Airflow direction, turbulence, stagnation or entrainment in critical areas. | Representative conditions, smoke source, video capture, interventions and documented interpretation. |
| Particle classification | Airborne particle concentration at defined locations and occupancy state. | Applicable classification standard, sample locations/volume, instrument status and room condition. |
| Temperature/RH | Control and distribution within approved ranges at representative points. | Probe accuracy, stabilization, mapping locations, operating load and duration. |
| Recovery | Ability of the room to return to specified particle condition after a defined challenge, when required. | Challenge method, particle measurement locations, start point, calculation and site-defined endpoint. |
| Alarm and monitoring | Detection, display, recording, notification and response for critical excursions. | Challenge value, alarm delay, recipients, time stamps, audit trail and response procedure. |
Documentation and Traceability Checklist
- Validation plan or strategy defines lifecycle stages, deliverables, responsibilities and approval gates.
- Each user and design requirement is traceable to a qualification test, inspection, document review or justified rationale.
- Test instruments are identified with calibration status, calibration range and due date recorded.
- Raw data are retained, attributable and complete; calculations are independently checked where required.
- Test conditions include room state, doors, occupancy, equipment setup, operating mode and environmental conditions.
- Deviations, failures, retests, invalid runs and protocol amendments are assessed and approved.
- As-built drawings, control narratives, configuration versions, filter maps and instrument lists are current.
- Training records show that protocol executors and reviewers are qualified for assigned tasks.
- Final report summarizes results, exceptions, requirement traceability, residual actions and qualification conclusion.
- Quality approval and formal system/room status are recorded before routine GMP use.
Protect the integrity of electronic readings and system records in accordance with site procedures and ALCOA+ principles. Where FDA electronic records or signatures are in scope, consider the site’s approach to 21 CFR requirements.
Deviations, Retesting and Final Release
When a test fails, do not simply repeat it until a passing result appears. Record the original result, preserve raw data and initiate the applicable deviation process. Investigate whether the cause is equipment, method, instrument, room setup, operator execution, environmental condition or an incorrect acceptance criterion. Assess product and process impact if the facility or system was used during the affected period.
Retesting should be justified by an identified assignable cause or approved investigation strategy. Define the retest scope, acceptance criteria and required approvals before repeating tests. Link corrective actions to the site’s CAPA process when systemic action is warranted, and use change control for modifications to hardware, software, set points, procedures or operating conditions.
Before release, confirm that required tests are complete, critical deviations are closed or controlled, reports are approved, temporary bypasses are removed, alarms and procedures are active, and room/system status is clear to users. The release decision should be made by designated authorized roles under the pharmaceutical quality system.
Common HVAC Validation Checklist Gaps
- Using one generic test list for all areas instead of a product- and room-specific risk rationale.
- Copying acceptance values from another site or article without traceability to facility requirements.
- Testing only at rest when the system must also protect product under operational conditions.
- Failing to record door state, room configuration, occupancy or equipment setup during tests.
- Relying on BMS screenshots without verifying sensor calibration, alarm function and data integrity.
- Treating HEPA filter installation records as proof of installed-filter integrity.
- Omitting airflow visualization where airflow protection or containment depends on flow patterns.
- Failing to investigate a failed result or excluding anomalous data without documented rationale.
- Releasing rooms while unresolved critical actions or temporary overrides remain.
- Leaving diagrams, point lists or maintenance instructions outdated after qualification changes.
Frequently Asked Questions
What should an HVAC validation checklist include?
It should cover scope and prerequisites, DQ, IQ, OQ and PQ evidence, risk-based test selection, critical environmental and airflow parameters, controls and alarms, documentation, deviations, traceability and release approval.
Are DQ, IQ, OQ and PQ all required for every HVAC project?
The lifecycle approach is commonly used, but the exact documentation and test depth depend on the project, system complexity, applicable GMP expectations and approved site strategy. Any combined or omitted activity should be justified and documented.
Which HVAC tests are performed during pharmaceutical qualification?
Possible tests include airflow volume and velocity, room pressure differences, HEPA integrity, particle classification, airflow visualization, temperature/RH, recovery and alarm challenge. The facility’s risk assessment and design determine which are applicable.
Are there universal HVAC acceptance criteria for pharmaceutical cleanrooms?
No single set of values applies to every pharmaceutical facility. Define criteria from the approved design, product and process needs, room classification, applicable standards and risk assessment.
Should HVAC tests be done at rest or in operation?
Choose test states based on intended use and applicable requirements. Some performance characteristics should be assessed in operational conditions because people, equipment and process activity can alter airflow and room behavior.
Does a HEPA filter require leak testing after installation?
Where HEPA integrity testing is required by the room use, design or applicable procedure, test the installed filter assembly using an approved method and acceptance criteria. Installation paperwork alone does not establish filter integrity.
Can commissioning tests be used as qualification evidence?
Commissioning results may support qualification when the protocol or strategy defines acceptance, traceability, instrument suitability, data review and Quality oversight. Review the evidence for GMP suitability rather than accepting it automatically.
What happens if an HVAC qualification test fails?
Document and investigate the failure, assess potential product/process impact, identify cause, implement justified corrective action, and define approved retesting or requalification before release where needed.
How often should HVAC systems be requalified?
Set review and requalification frequency using applicable requirements, system criticality, historical performance, changes, maintenance data and monitoring trends. Do not assume one interval applies to every system or test.
Who approves HVAC validation protocols and reports?
Approval roles are defined by the site quality system. Typically, Engineering/Facilities, Validation and Quality review the technical basis and results, with Production or other stakeholders involved where room use or product impact is relevant.
Conclusion
This HVAC validation checklist gives pharmaceutical teams a structured way to plan and review qualification evidence—from design intent through installation, operation and room performance. Use it as a starting framework, then tailor every test, location and acceptance criterion to the facility’s approved requirements and risk assessment. Complete traceability, sound deviation handling and a documented release decision turn test data into defensible evidence that the HVAC system is suitable for its intended GMP use.
References and Further Reading
- World Health Organization, TRS 1010, Annex 8: Guidelines on heating, ventilation and air-conditioning systems for non-sterile pharmaceutical products. Official WHO publication page.
- World Health Organization, TRS 1019, Annex 2: Interpretation of HVAC guidelines for non-sterile pharmaceutical products. Official WHO publication page.
- European Commission, EudraLex Volume 4: EU Guidelines for Good Manufacturing Practice. Official EudraLex page.
This article is an educational planning aid. Apply current regulations, approved site procedures, product-specific risk assessments and qualified engineering and Quality judgment to each facility.
