ICH Q7 Guideline: API GMP Requirements

A practical guide to the GMP framework for active pharmaceutical ingredient manufacturing, quality systems, testing, validation, and supply-chain control.

Introduction

The ICH Q7 guideline is the internationally harmonized good manufacturing practice guide for active pharmaceutical ingredients (APIs) used in human medicines. It explains how manufacturers can build quality into API operations through defined responsibilities, controlled processes, suitable facilities and equipment, reliable laboratory testing, complete records, and documented batch release decisions. Its scope is broader than chemical production: it also addresses APIs made by extraction, cell culture or fermentation, recovery from natural sources, and combinations of these methods.

ICH Q7 follows the manufacturing process from the point at which the company has defined the API starting material, or the appropriate starting point for a non-synthetic process, through production, packaging, release, storage, and distribution. The guide describes a risk-based progression: controls generally become more stringent as the process approaches the final API. It also gives specific guidance for topics such as computerized systems, cleaning validation, contractors, distributors, and APIs for clinical trials.

This article summarizes the attached Step 4 guideline, dated 10 November 2000, in practical terms. ICH Q7 is guidance whose implementation depends on applicable regional regulations, regulatory commitments, and product-specific requirements. Manufacturers should check the current requirements in each market where an API is made or supplied.

What Is the ICH Q7 Guideline?

ICH Q7 is titled Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients. It provides a quality framework for manufacturing APIs so that they meet the quality and purity they are represented to possess. In the guide, manufacturing includes receipt of materials, production, packaging and relabelling, quality control, release, storage, distribution, and related controls.

The guide treats quality as the responsibility of everyone involved in manufacturing, supported by an effective quality system and an independent quality unit. Its recommendations are commonly used to plan API GMP systems, prepare for inspections, assess suppliers and contractors, and review manufacturing records. For a broader overview of cGMP and the wider set of ICH Quality Guidelines, see the related guides.

ICH Q7 is not a substitute for a marketing authorization, registration dossier, pharmacopoeial monograph, or applicable local law. The manufacturer is expected to meet commitments made in regulatory submissions as well as relevant regional requirements. The FDA’s Q7 Questions and Answers also advises using Q7 together with relevant ICH guidance on development, quality risk management, and pharmaceutical quality systems, including ICH Q11, Q9, and Q10.

ICH Q7 Guideline Scope: APIs and Manufacturing Stages

Manufacturing activities covered

ICH Q7 applies to APIs intended for human medicinal products. It covers APIs manufactured through chemical synthesis, extraction, cell culture or fermentation, recovery from natural sources, and combinations of these processes. It also applies to physical processing of APIs, including milling, micronization, granulation, coating, and other particle-size or physical manipulations.

The guide covers sterile APIs only up to the point immediately before the API is rendered sterile. Sterilization and aseptic processing of sterile APIs are outside the scope of Q7 and should follow the applicable drug-product GMP requirements. Q7 excludes vaccines, whole cells, whole blood and plasma, plasma derivatives made by plasma fractionation, and gene-therapy APIs. It does include APIs produced using blood or plasma as raw materials.

Where does ICH Q7 begin?

For synthetic processes, the company should identify and justify the point at which the API starting material enters the manufacturing process. The API starting material is incorporated as a significant structural fragment into the API and has defined chemical properties and structure. For extraction, fermentation, purification, and other processes, the starting point should be justified case by case.

From the defined starting point onward, the appropriate GMP controls in Q7 should be applied. The guide describes increasing GMP expectations as manufacturing moves toward final processing, purification, and packaging. This does not mean that every possible process step must be performed; it means that the level of control should reflect the stage and quality risk of each operation. The starting-material rationale should be scientifically sound and consistent with the development and manufacturing information in the filing.

ICH Q7 scope at a glance
Area	Q7 coverage	Practical implication
API manufacture	Chemical synthesis, extraction, fermentation or cell culture, natural-source recovery, and combinations	Define the process boundary and apply controls to the relevant stages
Physical processing	Includes operations such as milling, micronization, granulation, and coating	Control contamination, equipment status, and API quality attributes affected by processing
Sterile APIs	Applies up to the point immediately before sterilization	Use applicable drug-product GMP for sterilization and aseptic processing
Excluded products	Includes specified exclusions such as vaccines and gene-therapy APIs	Confirm which product-specific and regional guidance applies

Quality Management Under ICH Q7

The quality system should define the organization, procedures, processes, resources, and records needed to provide confidence that the API will meet its intended quality and purity specifications. Management and manufacturing personnel should participate actively, while the independent quality unit should have authority over key quality decisions.

Quality unit responsibilities

Depending on the company’s size and structure, quality assurance and quality control may be separate groups or functions performed by one unit. The quality unit should review and approve relevant procedures and records; establish systems for material release or rejection; approve specifications and master production instructions; oversee critical deviation investigations; review validation protocols and reports; approve changes that could affect API quality; and release or reject APIs.

Production remains responsible for conducting operations according to approved instructions, maintaining facilities and equipment, recording process data, and reporting deviations. The division of responsibilities should be written down so that release authority and escalation routes are clear.

Self-inspection and product quality review

ICH Q7 calls for regular internal audits against API GMP, with findings and corrective actions documented and reported to responsible management. It also recommends a documented product quality review, normally conducted annually. The review should consider critical in-process and API test results, rejected batches, significant deviations, process or method changes, stability results, complaints, returns, recalls, and the adequacy of corrective actions. The outcome should determine whether corrective action or revalidation is needed.

When an audit or review identifies a systemic problem, link the investigation to an effective CAPA system, assign owners and due dates, and check that the action resolved the underlying cause.

Personnel, Facilities, Equipment, and Computerized Systems

Qualified and trained personnel

Manufacturers should have enough personnel with appropriate education, training, and experience. Job responsibilities should be defined in writing. Training should cover the employee’s actual tasks and relevant GMP requirements, be performed by qualified people, and be recorded and periodically assessed. Hygiene, suitable clothing, illness reporting, and restrictions on eating or drinking in manufacturing areas help protect materials from contamination.

Premises, utilities, and water

Facilities should be designed and maintained to support cleaning, maintenance, orderly material and personnel flow, and prevention of mix-ups or cross-contamination. Defined areas or equivalent controls should support receipt and quarantine, sampling, production, packaging, laboratories, released stock, and rejected material. Utilities that can affect quality, including HVAC, gases, steam, and compressed air, should be qualified and monitored as appropriate. Water quality should be suitable for its intended use; when potable water is insufficient, tighter chemical or microbiological specifications may be needed.

Dedicated areas should be used for highly sensitizing materials such as penicillins and cephalosporins. They should also be considered for infectious, highly potent, or toxic materials unless validated inactivation or cleaning controls adequately manage the risk.

Process equipment and cleaning

Equipment should be suitable for its intended use, appropriately sized and located, and designed so that product-contact surfaces do not adversely affect API quality. Equipment should be operated within its qualified range, identified with its contents and status, maintained under a preventive-maintenance program, and calibrated where measurements are critical to quality.

Written cleaning procedures should describe responsibility, methods, cleaning agents, disassembly where needed, protection of clean equipment, and equipment release. Acceptance criteria for residues should be defined and justified. Shared equipment should be cleaned between different products to prevent cross-contamination. These practices should align with a controlled SOP system.

Computerized systems and data controls

GMP-related computerized systems should be validated at a depth appropriate to their complexity and criticality. Controls should restrict unauthorized access or changes, prevent data omissions, preserve a record of changes and prior entries, identify who made a change and when, and protect records from loss. Critical manually entered data should receive an additional accuracy check. System incidents and changes should be documented, investigated, authorized, and tested.

These controls support trustworthy records and are closely related to ALCOA+ data-integrity practices. Electronic records and signatures should also be assessed against applicable regulations, including relevant 21 CFR requirements when they apply.

Documentation and Records in API Manufacturing

Documents should be prepared, reviewed, approved, issued, revised, and withdrawn through controlled procedures. Revision histories should be maintained. Records should be completed when the activity occurs, identify the person making the entry, and preserve the original information when a correction is made. If electronic signatures are used, they should be authenticated and secure.

Master instructions and batch records

Master production instructions provide the approved recipe and process controls for each intermediate or API. They should identify materials, quantities or calculation methods, production location and equipment, processing sequence, parameter ranges, sampling and in-process acceptance criteria, time limits where appropriate, expected yield ranges, precautions, and storage conditions.

A batch production record should document what actually happened for that batch. It typically captures material and equipment identities, dates and times, critical process results, samples, in-process and laboratory results, yields, operator and reviewer signatures, packaging and label details, deviations, investigations, and release-test results. Batch records and laboratory records should be reviewed according to written procedures before release or distribution. Critical-step records, deviations, investigations, and out-of-specification reports require appropriate quality review.

Laboratory records and retention

Laboratory records should preserve sample identity, test methods, raw data, spectra or instrument output, calculations, results, acceptance criteria, analysts, dates, and evidence of review. This makes results traceable from the original observation to the release decision.

Under the attached Q7 text, production, control, and distribution records are retained for at least one year after a batch’s expiry date. For APIs with retest dates, the stated minimum is three years after the batch is completely distributed. Applicable local requirements or commitments may require longer retention. See the related guides on URS and data governance when designing systems that create or retain GMP records.

Materials Management and Production Controls

Supplier qualification, receipt, and quarantine

Written procedures should cover receipt, identification, quarantine, storage, handling, sampling, testing, and release or rejection. Critical-material suppliers should be evaluated and approved by the quality unit. On receipt, containers should be checked for identity, damage, broken seals, tampering, and contamination. Materials should remain under quarantine until appropriate examination or testing is complete and the material is released.

At least one identity test should normally be performed on each batch of incoming material. A supplier’s certificate of analysis may support reduced testing for other attributes when the supplier has been qualified and the reliability of its results is checked periodically. The guideline describes conducting full analyses on at least three batches before reducing in-house testing, followed by periodic full analyses compared with supplier certificates. The sampling plan should reflect material criticality, variability, supplier history, and the quantity needed for testing.

In-process control and contamination prevention

Manufacturing instructions should define critical process parameters, in-process checks, and acceptance criteria based on development knowledge or historical data. Controls may be less stringent in early steps and tighter in later isolation or purification steps as the process approaches the final API. Actual yields should be compared with expected ranges at appropriate stages, with critical yield deviations investigated for their potential quality impact.

All deviations should be recorded and explained; critical deviations require investigation. Time limits should be followed when they are needed to protect quality, and intermediates awaiting further processing should be stored under appropriate conditions. Controls should prevent contamination from personnel, equipment, other materials, or carryover from earlier batches.

Blending, reprocessing, and reworking

Q7 distinguishes acceptable blending from using a blend to conceal failure. Batches combined to form a homogeneous intermediate or API should already meet their applicable specifications before blending; an out-of-specification batch should not be blended with passing material to make the result appear acceptable. The blend must be controlled, documented, tested as appropriate, and traceable to each contributing batch. When physical attributes such as particle-size distribution or density are critical, the blending operation may need validation.

Reprocessing repeats an established process step, such as crystallization or filtration, under controlled conditions. Reworking uses a different or additional operation to bring a nonconforming batch into conformity and requires investigation, evaluation, suitable testing, and documentation showing acceptable quality. The terms should not be treated as interchangeable. Recovered materials and solvents may be reused only under approved, controlled procedures and after their suitability is established.

Laboratory Controls, Certificates of Analysis, and Stability

Each batch of intermediate and API should receive appropriate testing against established specifications. Specifications, sampling plans, and test methods should be scientifically sound and consistent with the regulatory filing. API specifications should address relevant impurities, such as organic and inorganic impurities and residual solvents; microbiological or endotoxin controls should be established where applicable.

An impurity profile normally describes identified and unidentified impurities observed in a typical batch from a controlled process. Comparing the profile with historical or filing data can help detect changes linked to raw materials, equipment settings, or manufacturing processes. A Certificate of Analysis should identify the material and batch, list tests and acceptance limits, report numerical results where relevant, and be signed by authorized quality personnel.

Analytical methods should be validated unless they are included in a recognized compendium or standard reference; even then, suitability under the actual conditions of use should be verified and documented. Refer to the applicable recognized pharmacopoeia and market requirements, including the USP, European Pharmacopoeia, or Japanese Pharmacopoeia (JP), as appropriate.

Out-of-specification results require a documented investigation. Resampling or retesting should follow an approved procedure and should not be used to dismiss an original result without a scientifically justified investigation. An ongoing stability program should support storage conditions and assigned retest or expiry dates. Reserve samples are retained for possible future quality evaluation and are distinct from samples used for stability studies.

Qualification and Process Validation Under ICH Q7

Validation policy should identify the systems and processes requiring validation, responsibilities, protocols, acceptance criteria, and documentation. Critical quality attributes and process parameters should be identified from development data or experience, and validation should focus on operations that can affect API quality and purity.

Equipment qualification: DQ, IQ, OQ, and PQ

Before process validation, critical equipment and supporting systems should be appropriately qualified. In Q7, the sequence is commonly described through:

DQ (Design Qualification): documented evidence that the proposed design is suitable for its intended purpose.
IQ (Installation Qualification): documented evidence that the installed equipment or system matches the approved design and requirements.
OQ (Operational Qualification): documented evidence that the installed system performs as intended across anticipated operating ranges.
PQ (Performance Qualification): documented evidence that the connected equipment and systems perform effectively and reproducibly under the approved process.

Qualification begins with clear needs and intended use. The related URS, DQ, IQ, OQ, and PQ guides provide more detail on these activities.

Process validation approaches

ICH Q7 defines process validation as documented evidence that a process, operated within established parameters, can reproducibly produce material meeting predetermined specifications and quality attributes. The guideline describes prospective validation as the normal preferred approach. It allows concurrent validation in justified situations, such as infrequent production or limited batches, with thorough monitoring and testing. Retrospective validation is described as an exception for well-established processes with suitable historical evidence and no significant relevant changes.

Q7 says three consecutive successful production batches should be used as a guide for prospective or concurrent validation, while the number of runs depends on process complexity and the magnitude of change. This is not a universal rule that every process can satisfy with exactly three batches; the rationale and applicable regional expectations matter. Protocols should define critical steps, acceptance criteria, runs, sampling, and reporting. Systems should be periodically reviewed to decide whether continued control is demonstrated or revalidation is warranted.

Cleaning and analytical method validation

Cleaning validation should focus on situations where carryover presents meaningful quality risk. Protocols should specify equipment, cleaning procedures, sampling, analytical methods, monitored parameters, and justified residue limits. Methods should be sensitive enough to detect residues at the established acceptance level. Analytical methods should be validated for their intended purpose, with qualification of the instruments and verification that modifications continue to produce reliable results.

Change Control, Contractors, and API Distribution

Change control and nonconforming material

A formal change-control system should assess changes to raw materials, specifications, methods, facilities, utilities, equipment, software, process steps, labels, and packaging. The assessment should consider potential effects on API quality and determine the testing, validation, documentation, and regulatory evaluation needed. After implementation, the first batches made or tested under the change should be evaluated; stability and retest-date impacts should also be considered where relevant.

Rejected material should be identified and controlled to prevent unintended use. Decisions to reprocess, rework, recover, return, or destroy material should be documented and supported by quality evaluation. Complaints should be recorded and investigated, and a written recall procedure should identify decision-makers, communication routes, and the handling of recalled material.

Contract manufacturing and laboratories

Contract manufacturers and laboratories should be evaluated for the specific work they perform. An approved written agreement should define each party’s GMP and quality responsibilities, allow appropriate audits, and control subcontracting. Process, equipment, test-method, or specification changes covered by the agreement should not be made without the required communication and approval.

Agents, brokers, distributors, repackers, and relabellers

ICH Q7 extends quality expectations to parties that take possession of, store, distribute, repack, or relabel APIs. They should maintain traceability to the original manufacturer and batch, retain distribution and transport records, preserve authentic Certificates of Analysis, transfer quality information, and support complaint and recall handling. Repackaging and relabelling should prevent mix-ups and contamination; changing to a different container type may require stability data to support the assigned retest or expiry date.

These provisions make the API supply chain part of the quality system. A distributor should be able to identify which customers received each batch and provide original-manufacturer and batch information when required.

Specific Guidance for Fermentation and Clinical-Trial APIs

Cell culture and fermentation

Section 18 supplements the general Q7 controls for APIs made using cell culture or fermentation. It addresses cell-bank access and records, suitable storage, process monitoring, contamination controls, harvesting, isolation, purification, and viral removal or inactivation where applicable. The depth of control should reflect the nature of the process and the API. For biotechnology-derived proteins and polypeptides, control needs may differ from those for classical fermentation products such as certain antibiotics or amino acids.

Manufacturers should monitor relevant operating parameters and, where appropriate, cell growth, viability, productivity, bioburden, endotoxins, and viral safety. Contamination events need documented assessment and disposition. Viral clearance steps that are critical to a process should operate within validated parameters, with measures to prevent cross-contamination between pre- and post-clearance operations.

APIs for clinical trials

For investigational APIs, controls should be appropriate to the stage of development while maintaining suitable facilities, equipment, raw-material control, batch approval, laboratory testing, and documentation. Processes and methods may evolve as knowledge grows, so changes should be recorded. Q7 notes that full process validation may not be appropriate for a single development batch or a process that is changing; when production is for commercial use, the relevant validation expectations apply.

Practical ICH Q7 Implementation Checklist

Use this checklist as a starting point for a gap assessment. It does not replace a product-specific risk assessment or regulatory review.

Define the API starting material or justified starting point, process boundary, and applicable regulatory requirements.
Document the quality system, organization chart, responsibilities, and independent quality-unit authority.
Qualify critical suppliers and define receipt, identity testing, quarantine, release, and re-evaluation controls.
Confirm that premises, utilities, water, equipment, cleaning, maintenance, and calibration controls are appropriate to the process.
Establish approved master instructions, batch records, laboratory records, specifications, sampling plans, and controlled retention periods.
Identify critical process parameters, in-process controls, yields, contamination risks, and impurity-profile monitoring.
Ensure analytical methods, computerized systems, process steps, and cleaning procedures are qualified or validated as appropriate.
Operate documented deviation, OOS, change-control, CAPA, complaint, return, and recall processes.
Review contractor agreements, distributor traceability, storage conditions, transport requirements, and batch-release status.
Conduct periodic internal audits and product quality reviews, then complete and verify assigned actions.

Key Takeaways

ICH Q7 provides a comprehensive GMP framework for APIs used in human medicines, from a defined starting point through release and distribution.
The starting point and rationale should be documented; the level of control generally increases as manufacturing approaches the final API.
Quality is a shared responsibility, supported by an independent quality unit with defined authority over release and quality decisions.
Reliable batch and laboratory records connect materials, process history, test data, deviations, and release decisions.
Validation, qualification, cleaning, computerized-system controls, and change control should be proportionate to quality risk and supported by evidence.
API GMP responsibilities also extend to contractors and supply-chain organizations involved in storage, distribution, repackaging, or relabelling.
The attached Q7 text is a harmonized guide; implementation must be checked against current regional requirements and regulatory commitments.

Conclusion

The ICH Q7 guideline turns API GMP into a connected system: qualified people perform controlled operations using suitable facilities and equipment; records preserve what happened; laboratories establish whether materials meet specifications; and the quality unit makes evidence-based decisions about release, change, and continued control. Its value lies in applying these controls across the full API lifecycle, including contractors and distributors, while scaling the controls to the process and the risks to quality. A sound implementation begins with a justified process boundary, clear responsibilities, and reliable records, then uses audits and product quality reviews to keep the system effective. Always apply the guide alongside current local regulations, filing commitments, and product-specific requirements.

Frequently Asked Questions About ICH Q7

1. What is the ICH Q7 guideline?

ICH Q7 is the GMP guide for active pharmaceutical ingredients used in human medicines. It covers quality systems, facilities, equipment, documentation, materials, production, testing, validation, release, storage, and distribution.

2. Who should follow ICH Q7?

It is intended for organizations involved in manufacturing APIs where the material is classified as an API in the country or region of manufacture or use. Manufacturers should also assess the applicable local laws and regulatory commitments.

3. Which manufacturing processes are within ICH Q7 scope?

The guide covers chemical synthesis, extraction, cell culture or fermentation, recovery from natural sources, combinations of these processes, and physical processing such as milling or micronization.

4. Where does ICH Q7 apply in an API process?

For synthetic manufacture, the company should define and document when the API starting material enters the process. For other manufacturing routes, the appropriate starting point is justified case by case. Q7 controls apply from that defined point onward.

5. Does ICH Q7 cover sterilization of sterile APIs?

No. Q7 applies to sterile API manufacture only up to the point immediately before the API is rendered sterile. Sterilization and aseptic processing should follow applicable drug-product GMP requirements.

6. What are the main requirements of ICH Q7?

Core requirements include an effective quality system, an independent quality unit, trained personnel, suitable facilities and equipment, controlled documents and records, supplier and material controls, validated processes where appropriate, laboratory testing, batch review, change control, and traceable distribution.

7. Does ICH Q7 require exactly three validation batches?

No. The guide says three consecutive successful batches should be used as a guide for prospective or concurrent validation. The appropriate number depends on process complexity and other evidence, and current regional requirements must also be considered.

8. Can a supplier’s Certificate of Analysis replace incoming testing?

A Certificate of Analysis may support reduced testing for some attributes after supplier qualification and ongoing reliability checks. Q7 normally expects at least an identity test for each material batch, subject to the specified exceptions and justified controls.

9. How long should API GMP records be retained under Q7?

The attached Q7 text specifies at least one year after the batch expiry date for production, control, and distribution records. For APIs with retest dates, it specifies at least three years after complete distribution. Local requirements may call for longer periods.

10. What is the difference between reprocessing and reworking?

Reprocessing repeats an established process step, such as crystallization or filtration. Reworking uses a different or additional operation to bring a nonconforming batch into compliance and requires investigation, evaluation, suitable testing, and documentation.

Primary References

Editorial note: This article is an educational summary of ICH Q7 and does not replace the full guideline, regulatory advice, or site-specific quality-system procedures.