EU GMP • Qualification & Validation
EU GMP Annex 15 Equipment Qualification Guide
A practical guide to the European GMP approach for qualifying pharmaceutical equipment—from risk-based planning and user requirements through DQ, FAT/SAT, IQ, OQ, PQ, and continued control.
What Is EU GMP Annex 15?
EU GMP Annex 15, titled Qualification and Validation, describes principles for planning and documenting qualification and validation activities in pharmaceutical manufacturing. It applies to the lifecycle of facilities, equipment, utilities, and systems, and connects qualification to process and cleaning validation.
The European Commission’s current EudraLex Volume 4 index lists Annex 15 as “Qualification and validation,” in operation since 1 October 2015. Annex 15 is a GMP guidance document; it does not provide a single prewritten protocol or identical test set for every asset.
For an equipment project, Annex 15 helps the site answer three practical questions: What does the equipment need to do? What evidence shows that it is correctly designed and installed? What tests demonstrate that it operates and performs as intended?
Core Principles for Annex 15 Equipment Qualification
- Start with intended use. Define the equipment’s role, boundaries, products, process conditions, and GMP functions.
- Use quality risk management. Identify potential effects on product quality, patient safety, process control, contamination prevention, and records. Use the outcome to set the scope and depth of qualification.
- Plan across the lifecycle. Qualification begins with user requirements and continues through design, installation, operation, routine use, maintenance, change, and end of use.
- Set criteria before testing. Test methods and acceptance criteria belong in approved protocols before execution. Significant protocol changes and results outside criteria require documented handling.
- Make responsibilities clear. Engineering, equipment owners, users, validation, IT/automation, and Quality Assurance may all contribute; approval and release roles should be defined.
- Preserve objective evidence. The report should compare results with acceptance criteria, explain deviations, and state the qualification conclusion.
These principles support a robust cGMP system. A quality risk assessment is not a shortcut to omit necessary work; it is the documented basis for selecting meaningful controls and tests.
EU GMP Annex 15 Equipment Qualification Lifecycle
Annex 15 identifies several common stages. The project may tailor or combine activities where justified, but the evidence still needs to demonstrate each relevant objective.
| Stage | Main purpose | Typical output |
|---|---|---|
| User Requirements Specification (URS) | Define intended use, quality needs, and GMP-critical functions. | Approved, testable requirements used throughout the lifecycle. |
| Design Qualification (DQ) | Demonstrate that the proposed design can meet the URS and applicable GMP expectations. | Documented design review and requirement traceability. |
| FAT / SAT | Assess supplier-site and/or site-installed equipment functions when useful. | Reviewed supplier test evidence and site acceptance records. |
| Installation Qualification (IQ) | Confirm equipment and components are correctly installed and documented. | Installation checks, calibration status, materials and document records. |
| Operational Qualification (OQ) | Verify that equipment operates as designed across defined ranges and relevant challenges. | Functional, alarm, interlock, limit, and operating-range test results. |
| Performance Qualification (PQ) | Show that equipment performs effectively and reproducibly for its intended application. | Representative process results and an approved performance conclusion. |
| Ongoing control | Maintain the qualified state throughout routine use. | Maintenance, calibration, change control, periodic evaluation, and requalification as needed. |
1. User Requirements and Design Qualification
User Requirements Specification (URS)
The URS is a reference point throughout the equipment lifecycle. It should describe what users and the process need, including essential quality elements and relevant GMP risks. Keep each requirement clear enough to evaluate or test later.
Depending on the equipment, the URS may address capacity, operating ranges, product-contact materials, cleaning access, utilities, alarms, controls, data and records, interfaces, safety, maintenance access, and environmental conditions. Avoid vague statements such as “equipment must work reliably”; define what reliable performance means for the intended application. See the related URS guide.
Design Qualification (DQ)
DQ documents that the proposed design complies with GMP expectations and can meet the approved URS. The review may include drawings, process flow, equipment layout, construction materials, hygienic design, cleanability, maintainability, control strategy, and relevant supplier specifications.
DQ is most useful before design decisions become difficult or costly to change. A gap identified at this stage can be addressed before purchase, fabrication, or installation. See the dedicated article on Design Qualification (DQ).
2. Factory Acceptance Testing (FAT) and Site Acceptance Testing (SAT)
FAT and SAT are project activities that may support qualification, especially for complex, customized, or novel equipment. FAT is generally performed at the supplier’s site before shipment; SAT is performed after the equipment arrives at the manufacturing site.
Annex 15 allows suitable documentation review and some testing to be completed at FAT or another stage without repeating the same tests during site IQ/OQ, when that approach is appropriate and justified and the relevant function is not affected by transportation or installation. This is evidence leverage, not automatic acceptance of every vendor report.
Before relying on supplier tests, review whether the tested equipment configuration matches the delivered system, criteria were approved, instruments were suitable, data are complete, deviations were resolved, and results are traceable to URS requirements. Add or repeat testing for site-specific installation, utilities, environmental conditions, or any function that may have changed.
3. Installation Qualification (IQ)
IQ verifies and documents that equipment and associated components are installed in accordance with approved drawings, specifications, and predefined criteria. It should confirm that the installed asset is identifiable, complete, and ready for operational testing.
Typical IQ checks
- Verify manufacturer, model, serial number, asset ID, equipment boundaries, and location.
- Compare installed components, instrumentation, pipework, services, and connections with approved engineering drawings and specifications.
- Confirm utility connections and relevant site interfaces.
- Collect operating instructions, maintenance requirements, manuals, parts lists, and supplier documentation.
- Check calibration status of relevant instruments and record required calibration details.
- Verify materials of construction for specified components where product quality or cleanability depends on them.
- Record relevant firmware, software, recipes, or configuration baselines for automated equipment.
The exact checks depend on equipment design and risk. A simple asset may need a concise installation record; a complex process line may require component-by-component checks, utility records, and interface verification. Learn more in the IQ guide.
4. Operational Qualification (OQ)
OQ normally follows IQ and uses knowledge of the process, system, and equipment to confirm that the equipment operates as designed. The protocol should include relevant upper and lower operating limits or worst-case conditions where they matter to quality, safety, or control.
Typical OQ checks
- Start-up, shutdown, operating modes, sequences, and controls.
- Indication and response of critical sensors, timers, setpoints, or control loops.
- Operation at defined limits or challenge conditions, with technical rationale for test points.
- Alarms, interlocks, permissives, and expected protective actions.
- Relevant failure, restart, or recovery behavior.
- Automated recipes, access roles, data capture, or interfaces when these affect GMP functions.
Depending on equipment complexity, IOQ may combine installation and operational checks. If activities are combined, the protocol and report should still clearly distinguish which evidence supports installation and which demonstrates operation. Following successful OQ, procedures, operator training, cleaning instructions, and preventive maintenance requirements can be finalized. See Operational Qualification (OQ).
5. Performance Qualification (PQ)
PQ demonstrates that equipment performs effectively and reproducibly for the intended process under representative conditions. It normally follows successful IQ and OQ, although Annex 15 recognizes that PQ may, in suitable cases, be conducted alongside OQ or process validation.
Annex 15 describes using production materials, qualified substitutes, or simulated product demonstrated to behave equivalently for the study purpose. The study should consider normal operating conditions, relevant worst-case batch sizes, and the intended process range. Sampling frequency should be justified, and the operating range should be covered unless suitable development evidence supports the range.
Plan a meaningful PQ study
- Define the intended products or applications, equipment configuration, outputs, and process parameters.
- Choose representative operating conditions and justified challenge cases.
- Explain the selected materials, number of runs, sample locations, and measurements.
- Set acceptance criteria before executing the study.
- Assess results, variation, trends, and deviations against the predefined criteria.
There is no automatic batch count that applies to every equipment type. The study design should be justified by process knowledge, variability, risk, and the evidence needed to support the conclusion. PQ of equipment should also be distinguished from process validation, which evaluates whether the manufacturing process consistently produces product meeting requirements.
Read the separate guide to Performance Qualification (PQ) for additional qualification concepts.
Protocols, Acceptance Criteria, and Deviations
Qualification protocols should define the scope, responsibilities, prerequisites, test method, data to record, acceptance criteria, and deviation process. Acceptance criteria must be objective and scientifically justified. They may be linked to URS requirements, process needs, design specifications, or applicable technical standards.
| Protocol element | What it should clarify |
|---|---|
| Scope and rationale | Which equipment, functions, utilities, interfaces, and operating conditions are included, and why. |
| Prerequisites | Approved drawings, installation readiness, calibration, training, utilities, and safe test conditions. |
| Test method | Step-by-step actions, test instruments, expected result, and raw data fields. |
| Acceptance criteria | Specific limits or expected responses tied to requirements and risk. |
| Deviation handling | How failures, protocol changes, invalid tests, retests, and impact assessments are controlled. |
| Stage approval | Who reviews results and authorizes progression or release to intended use. |
Results that fail predefined criteria should be documented and investigated. Significant protocol changes during execution—such as changes to criteria or operating parameters—need a documented deviation and scientific justification. The report should summarize results against criteria and provide a clear final recommendation.
Annex 15 Documentation and Equipment Release
A qualification file should tell a complete story from need to release. The exact document set varies with scope and risk, but often includes:
- Validation or qualification plan and relevant risk assessments.
- Approved URS, design review/DQ, drawings, specifications, and traceability matrix.
- Supplier assessment and reviewed FAT/SAT or commissioning evidence where used.
- Approved and executed IQ, OQ, and PQ protocols with raw data and attachments.
- Calibration certificates, construction-material evidence, manuals, and configuration records.
- Deviation investigations, impact assessments, corrective actions, and retest records.
- Final report with results, unresolved items, stage conclusions, and approval to proceed or release.
- Operating, cleaning, maintenance, and calibration procedures plus training records.
Stage progression should be formally authorized. Annex 15 allows conditional progression in certain situations where remaining criteria or deviations are not fully closed and a documented assessment shows no significant impact on the next activity. That decision must be controlled and approved; it is not a way to ignore unresolved critical issues.
Keep qualification records aligned with ALCOA+ principles: records should be attributable, legible, contemporaneous, original or true copy, accurate, complete, consistent, enduring, and available. An approved SOP should explain document control and execution expectations.
Change Control, Maintenance, and Requalification
Qualification is a lifecycle activity, not a one-time project deliverable. After release, equipment should remain under appropriate calibration, cleaning, maintenance, monitoring, and change-control systems.
- Assess changes to location, intended use, major components, software, control settings, utilities, or process interfaces before implementation.
- Record repairs, maintenance, instrument replacements, and any required post-work testing.
- Review alarms, deviations, out-of-tolerance results, recurring failures, and equipment performance trends.
- Determine whether the change or trend affects qualified status and whether targeted testing or broader requalification is needed.
- Set periodic evaluation frequency based on risk and performance history. If a fixed requalification period is used, justify it and define evaluation criteria.
Annex 15 calls for equipment, facilities, utilities, and systems to be evaluated at an appropriate frequency to confirm they remain in a state of control. Requalification scope should respond to actual change and risk; repeating every original test without assessment may add effort without improving assurance.
Where equipment uses software or electronic records, assess the computerized functions separately or as part of an integrated plan, with clear traceability to applicable controls. See Computerized System Validation. For environmental systems supporting qualified areas, see HVAC Validation in Pharmaceuticals. Cleaning risks may connect to Cleaning Validation.
Practical Example: Qualifying a Pharmaceutical Mixer
Consider a mixer used for a powder blend. The example below illustrates how Annex 15 stages build on one another; it is not a substitute for a site-approved protocol.
| Stage | Illustrative activity | Question answered |
|---|---|---|
| URS/DQ | Define capacity, materials, cleaning access, speed range, interlocks, and required records; review whether the selected design meets these needs. | Is this design suitable for the intended GMP use? |
| FAT/SAT | Review supplier test coverage for controls and functions; after delivery, verify site interfaces and functions affected by installation. | Which supplier tests can be leveraged, and what must be confirmed on site? |
| IQ | Check identity, installation, utilities, critical components, construction materials, manuals, and relevant calibration. | Was the approved equipment installed correctly? |
| OQ | Test rotation, controls, operating limits, alarms, interlocks, and recovery behavior against approved criteria. | Does the installed mixer operate as designed? |
| PQ | Run representative loads using production material or an appropriately justified equivalent and use a predefined sampling plan. | Does it perform consistently for the intended process? |
If the mixer later receives a new control system, is relocated, or is used for a different product range, change control should assess which qualification evidence remains valid and which functions require additional testing.
EU GMP Annex 15 Equipment Qualification Checklist
- ☐ Intended use, equipment boundary, and GMP impact are defined.
- ☐ Risk assessment explains scope, critical functions, and worst-case selections.
- ☐ URS requirements are approved, testable, and traceable.
- ☐ DQ demonstrates that the selected design meets the URS and relevant GMP needs.
- ☐ FAT/SAT evidence is reviewed for configuration, test quality, data, and deviations before leverage.
- ☐ IQ verifies installation, components, services, instruments, calibration, materials, and documents.
- ☐ OQ challenges intended functions, operating limits, and relevant alarms or interlocks.
- ☐ PQ uses representative conditions and a justified material, run, and sampling strategy.
- ☐ Acceptance criteria were approved before execution and are scientifically justified.
- ☐ Deviations, retests, and protocol changes are investigated, assessed, and approved.
- ☐ The report documents results, limitations, conclusions, and formal release approval.
- ☐ Procedures, training, cleaning, maintenance, calibration, and change control are active.
- ☐ Requalification or periodic evaluation strategy is justified and documented.
Common Annex 15 Qualification Mistakes
- Using a generic protocol without adaptation: tests should reflect the equipment’s function and risk.
- Writing untestable requirements: vague URS language weakens traceability and acceptance decisions.
- Repeating every supplier test or accepting all supplier tests: assess each test for suitability and impact of transport or installation.
- Missing worst-case reasoning: explain why selected ranges, loads, products, or batch sizes challenge the intended use.
- Confusing PQ with process validation: explain the separate purpose and relationship of the studies.
- Changing acceptance criteria after seeing results: control and scientifically justify protocol changes.
- Leaving lifecycle control undefined: define change, maintenance, periodic review, requalification, and end-of-use responsibilities.
Qualification failures or significant discrepancies should be assessed under the quality system, with appropriate investigation and CAPA where indicated.
Frequently Asked Questions
1. What is EU GMP Annex 15 equipment qualification?
It is the lifecycle-based approach used to document that pharmaceutical equipment is appropriately specified, designed, installed, operated, and shown to perform for its intended use.
2. Is EU GMP Annex 15 currently in effect?
The European Commission’s EudraLex Volume 4 index lists Annex 15, Qualification and Validation, as in operation since 1 October 2015. Always check the current official index and applicable local requirements before finalizing a compliance position.
3. What are the main Annex 15 qualification stages for equipment?
Common stages include URS, DQ, FAT/SAT where appropriate, IQ, OQ, and PQ, followed by ongoing control and requalification decisions throughout use.
4. Does Annex 15 require a separate protocol for every stage?
It requires controlled, adequate evidence, not necessarily a separate document for every stage. Activities can be combined when justified and when the protocol and report clearly show that each objective was met.
5. Can FAT testing replace site qualification tests?
Some FAT testing may be leveraged when appropriate and justified, including evidence that transport and installation do not affect the tested functions. Site-specific installation and interfaces still need suitable verification.
6. What does IQ verify under Annex 15?
IQ typically verifies installation against drawings and specifications, correct installation against criteria, supplier operating and maintenance documents, instrument calibration, and materials of construction.
7. What should OQ include?
OQ should include tests based on process and equipment knowledge to show operation as designed, including relevant upper and lower operating limits or worst-case conditions.
8. What should PQ demonstrate?
PQ should demonstrate performance under intended process conditions using production materials, qualified substitutes, or simulated product shown to be equivalent for the study, with justified sampling and operating-range coverage.
9. Does Annex 15 prescribe a fixed number of PQ batches?
No universal run count applies to every equipment type. The number of runs and samples should be justified by intended use, process knowledge, variability, and risk.
10. How often should equipment be requalified?
Evaluate equipment at an appropriate frequency to confirm it remains controlled. If the site uses a fixed interval, Annex 15 expects the interval and evaluation criteria to be justified; changes or adverse trends may require earlier reassessment.
Conclusion
EU GMP Annex 15 frames equipment qualification as a planned lifecycle, not a collection of disconnected checklists. Clear user requirements, a documented design review, suitable supplier evidence, risk-based IQ/OQ/PQ tests, and ongoing control create a defensible record that equipment is fit for its intended GMP use.
This article is an educational guide, not a replacement for the official Annex, applicable regulations, or a site-approved qualification protocol. Confirm current requirements and obtain appropriate Quality and technical approval for the actual equipment and process.
.webp)
