Validation

Dr. Emily Davis

Senior Validation and Quality Assurance Consultant

Charlotte, North Carolina

Introduction

When a patient takes a medicine, they rely on an unspoken promise: this tablet or injection is the same as the one that was tested, studied, and approved. Keeping that promise across thousands of batches, years of production, and changes in people, materials, and equipment is one of the central challenges of pharmaceutical manufacturing.

Process validation is the discipline that meets this challenge. It provides documented evidence, supported by scientific data, that a process consistently produces a product meeting its predetermined specifications and quality attributes. It is both a regulatory requirement and a practical tool for preventing failures, reducing waste, and understanding how a process really behaves.

This article explains what process validation is, how the lifecycle approach works, how to plan and execute validation, and how to avoid common pitfalls.

1. What Is Process Validation?

The US FDA defines process validation as the collection and evaluation of data, from the process design stage through commercial production, which establishes scientific evidence that a process is capable of consistently delivering quality product. The EU definition is similar: documented evidence that the process, operated within established parameters, can perform effectively and reproducibly to produce a medicinal product meeting its predetermined specifications and quality attributes.

Three ideas are central to these definitions:

• Documented evidence. Claims of quality must be supported by records and data.
• Consistency. One good batch proves little. Validation must show that success is repeatable.
• Scientific basis. Decisions should rest on process understanding, not on tradition or a fixed number of batches.

Validation is not a paperwork exercise performed once before launch. It is a continuing demonstration that the process remains in a state of control.

2. Why Process Validation Matters

Protecting Patients

Finished product testing samples only a small fraction of a batch and cannot guarantee that every unit meets requirements. If a process is poorly understood or uncontrolled, defects can exist in untested units. Validation shifts the focus from testing quality in to building quality in.

Meeting Regulatory Expectations

Regulators require validated processes. Failure to validate, or inadequate validation, is a common inspection finding and can lead to warning letters, import alerts, delayed approvals, and recalls. Under US regulations, drug products are considered adulterated if the manufacturing processes do not conform to current good manufacturing practice.

Reducing Cost and Risk

Well-validated processes have fewer failed batches, less rework, fewer investigations, and more predictable yields. The investment in understanding a process early pays back through stable operations later.

Supporting Continuous Improvement

The data generated through validation reveals variability and opportunities for improvement, which feeds into better process control over a product’s life.

3. The Evolution: From Three Batches to Lifecycle Thinking

For many years, the industry treated validation as a one-time event, typically three consecutive successful batches at commercial scale. This “three-batch” approach became a habit but was never a scientific requirement. It gave no assurance that the process was well understood, and it encouraged a mindset of passing the test rather than learning about the process.

The FDA’s 2011 guidance, Process Validation: General Principles and Practices, changed this by describing a lifecycle approach linked to product and process development. The EU adopted a comparable approach in Annex 15, and ICH guidelines Q8, Q9, Q10, and Q11 provide supporting concepts. The lifecycle model has three stages:

1. Stage 1: Process Design
2. Stage 2: Process Qualification
3. Stage 3: Continued Process Verification

Each stage builds on the one before it, and together they create a continuous chain of evidence from development to the end of a product’s commercial life.

4. Stage 1: Process Design

The goal of Stage 1 is to define the commercial manufacturing process based on knowledge gained through development and scale-up.

Building Process Understanding

Developers study how material attributes and process parameters affect product quality. Central concepts from Quality by Design (ICH Q8) include:

• Quality Target Product Profile (QTPP): the intended characteristics of the product, including dosage form, strength, release profile, and quality criteria.
• Critical Quality Attributes (CQAs): physical, chemical, biological, or microbiological properties that must be within limits to ensure product quality, such as assay, dissolution, content uniformity, impurities, and sterility.
• Critical Material Attributes (CMAs): properties of inputs, such as API particle size or excipient moisture, that affect CQAs.
• Critical Process Parameters (CPPs): process variables, such as mixing time, compression force, or sterilization temperature, whose variability affects CQAs and therefore must be monitored or controlled.

Using Risk Assessment and Experimentation

Quality risk management (ICH Q9) tools such as FMEA, fishbone diagrams, and risk ranking help identify which attributes and parameters are most likely to affect quality. Design of Experiments (DoE) then tests multiple factors and their interactions efficiently, revealing which variables matter and establishing acceptable operating ranges. The result may be a design space, a multidimensional region within which quality is assured.

Establishing a Control Strategy

The control strategy describes the planned set of controls, derived from product and process understanding, that ensures process performance and product quality. It can include controls on material attributes, process parameters, in-process checks, equipment and facility conditions, finished product specifications, and the frequency of monitoring.

Outputs of Stage 1

By the end of this stage, the manufacturer should have a documented process description, identified CQAs, CMAs, and CPPs, a risk assessment, a preliminary control strategy, and the data to justify them. A weak Stage 1 makes later stages difficult and expensive.

5. Stage 2: Process Qualification

Stage 2 confirms that the process design is capable of reproducible commercial manufacturing. It has two elements.

Design and Qualification of Facilities, Utilities, and Equipment

Before process performance can be evaluated, the supporting infrastructure must be qualified:

• Design Qualification (DQ): confirms the design meets requirements.
• Installation Qualification (IQ): verifies correct installation.
• Operational Qualification (OQ): confirms equipment operates as intended across its operating ranges.
• Performance Qualification (PQ) of equipment and utilities: shows stable performance under realistic conditions.

Utilities such as purified water, compressed air, steam, and HVAC systems must be qualified, along with calibrated instruments and validated computerized systems.

Process Performance Qualification (PPQ)

PPQ is the stage that most people mean when they say “process validation.” It combines the qualified facilities, trained personnel, and commercial manufacturing process, using commercial raw materials and commercial-scale equipment, to demonstrate that the process performs as expected.

Protocol. A written, pre-approved PPQ protocol defines:

• The manufacturing conditions, parameters, and material specifications.
• The number of batches and the scientific rationale for that number.
• Sampling plans, including locations, frequency, and sample sizes.
• Tests to be performed and acceptance criteria.
• Statistical methods used to evaluate results.
• Criteria for what constitutes success and what happens if the criteria are not met.

Number of batches. Current guidance does not specify a fixed number. The number should be justified by the level of process understanding, the variability observed, product complexity, and risk. Many companies still run three PPQ batches, but the decision should rest on scientific rationale and statistical confidence, not habit.

Enhanced sampling and monitoring. PPQ typically involves more extensive sampling than routine production, including sampling to demonstrate intra-batch and inter-batch consistency. For example, a blend uniformity study might sample multiple locations in a blender, and a tablet compression run may be sampled at the beginning, middle, and end.

Execution and report. Batches are executed per the protocol, deviations are documented and investigated, and a final report summarizes data, evaluates results against acceptance criteria, and concludes whether the process is validated. Quality unit approval is required before commercial distribution, although in some cases distribution may occur once the manufacturer has high confidence based on earlier data and regulators’ expectations are met.

Outputs of Stage 2

A successful PPQ shows that the process is reproducible, that the control strategy is effective, and that the commercial process is ready for routine production with ongoing monitoring.

6. Stage 3: Continued Process Verification (CPV)

Validation does not end with PPQ. Processes drift over time because of changes in raw material lots, equipment wear, seasonal variation, operator changes, and minor modifications. Continued Process Verification provides ongoing assurance that the process remains in a state of control during routine manufacturing.

Elements of an Effective CPV Program

• Data collection. Process parameters, in-process results, finished product test results, and material attributes are collected systematically.
• Statistical analysis. Control charts, capability indices (Cp, Cpk, Ppk), trend analysis, and other statistical process control (SPC) tools detect shifts, trends, and unusual variation.
• Defined triggers. Rules for out-of-trend results, control limit violations, and shifts prompt investigation.
• Review frequency. Data is reviewed at defined intervals by cross-functional teams, and results feed into the annual product quality review.
• Action and feedback. Findings lead to investigations, corrective actions, or process improvements, and significant changes are handled through change control.

Process Capability

Capability indices quantify how well a process fits within its specification limits. A process with a high Cpk has room to absorb normal variation, while a low Cpk signals that defects become likely. Tracking capability over time shows whether the process is improving, stable, or degrading.

Value of CPV

CPV detects problems before they lead to batch failures, provides data for justifying process changes, and supports regulatory confidence. For well-controlled processes, it can justify reduced testing or real-time release approaches.

7. Validation Approaches

Different situations call for different validation strategies.

Prospective Validation

Validation conducted before commercial distribution of a product. This is the preferred and most common approach for new products and processes.

Concurrent Validation

Validation carried out during routine production, with batches released based on ongoing data. It is used only in exceptional circumstances, such as a product with a critical medical need or very low-volume production, and requires strong justification and documentation.

Retrospective Validation

Based on the analysis of historical data for processes already in commercial use. Regulators view it as no longer acceptable for new products, and it is largely replaced by CPV for legacy products, although historical data still supports lifecycle assessments.

Revalidation

Repeating validation activities when changes occur or when monitoring shows the process is no longer in control. Triggers include changes in equipment, site, batch size, critical materials, or process parameters, as well as adverse trends.

8. Related Validation Activities

Process validation depends on several supporting validation and qualification activities.

Cleaning Validation

Cleaning validation shows that cleaning procedures consistently remove product residues, cleaning agents, and microbial contamination to acceptable levels, preventing cross-contamination between batches and products. Acceptance limits are increasingly derived from health-based exposure limits, such as permitted daily exposure (PDE), rather than arbitrary limits. Worst-case product selection, swab and rinse sampling, and validated analytical methods are standard components.

Analytical Method Validation

Test methods must be accurate, precise, specific, linear, and robust. ICH Q2 describes the validation characteristics, and ICH Q14 adds guidance on analytical procedure development. Without reliable methods, process validation data is meaningless.

Computerized System Validation

Systems that control processes or generate GMP data, such as manufacturing execution systems and laboratory software, must be validated to ensure correct functioning and data integrity.

Aseptic Process Validation

For sterile products, media fills (process simulations) demonstrate that aseptic processing can maintain sterility. Sterilization processes such as steam sterilization and filtration are validated separately, including filter integrity and bacterial retention studies.

Shipping and Transport Validation

For temperature-sensitive products, validation confirms that packaging and distribution conditions preserve product quality.

9. Statistical Tools in Validation

Statistics give validation its rigor. Key tools include:

• Descriptive statistics: mean, standard deviation, and relative standard deviation to summarize data.
• Control charts: plots showing variation over time against control limits, helping distinguish normal variation from special causes.
• Process capability analysis: Cp, Cpk, Pp, and Ppk, which compare process spread to specification limits.
• Confidence intervals and tolerance intervals: quantify uncertainty and support sampling plan decisions.
• Acceptance sampling and sampling plans: ensure that sample sizes provide adequate confidence in batch quality.
• ANOVA and regression analysis: identify significant sources of variation, such as differences between batches or within a batch.
• Design of Experiments: supports process characterization and determination of robust operating ranges.

Applying statistics well requires understanding the data’s distribution, independence, and measurement variability. Using statistics incorrectly can create false confidence, so input from trained statisticians is valuable.

10. Planning and Documenting a Validation Program

A structured, well-documented approach makes validation efficient and inspection-ready.

Validation Master Plan (VMP)

The VMP is a high-level document describing the company’s validation philosophy, scope, organization, responsibilities, documentation formats, and approach to qualification and validation. It gives inspectors and staff a clear view of how validation is managed.

Key Documents

• Validation protocols: pre-approved plans stating objectives, methods, acceptance criteria, and responsibilities.
• Raw data and batch records: complete, contemporaneous, and attributable.
• Deviation and investigation records: showing how unexpected events were handled.
• Validation reports: summarizing results, discussing deviations, and concluding on the validated state.
• Traceability matrices: linking requirements to tests and results.

Roles and Responsibilities

Successful validation is cross-functional. Development provides process knowledge, manufacturing executes the batches, quality control performs testing, engineering supports equipment and utilities, statisticians assist with analysis, and quality assurance reviews and approves documents and ensures compliance.

11. Change Control and Maintaining the Validated State

A process that was validated once can lose that status through uncontrolled change. A robust change control system is essential to maintaining the validated state.

Effective change control involves:

• Formal proposal and evaluation of every change to materials, equipment, methods, process parameters, facilities, or software.
• Risk assessment to determine impact on product quality and whether revalidation or additional studies are needed.
• Regulatory assessment to determine whether regulators must be notified or approve the change before implementation.
• Quality approval before implementation.
• Post-implementation verification to confirm the change achieved its purpose without unintended effects.

Periodic review of the validation status, combined with CPV, provides assurance that the process remains suitable.

12. Data Integrity in Validation

Validation results are only as reliable as the data behind them. Regulators expect validation data to comply with ALCOA+ principles: Attributable, Legible, Contemporaneous, Original, and Accurate, plus Complete, Consistent, Enduring, and Available.

Good practices include:

• Using validated systems with audit trails and access controls.
• Recording data at the time of activity.
• Avoiding selective reporting, repeated testing without justification, or exclusion of inconvenient data.
• Reviewing raw data and audit trails as part of validation report approval.
• Investigating all deviations and unexpected results thoroughly.

Falsified or manipulated validation data has been the basis for many serious enforcement actions.

13. Common Challenges and Pitfalls

Even experienced organizations can struggle with process validation. Frequent problems include:

• Treating validation as a one-time event. Skipping CPV or ignoring change control erodes the validated state.
• Weak process understanding. Rushing through Stage 1 leads to surprises in Stage 2 or commercial production.
• Poorly defined acceptance criteria. Vague or overly loose criteria make validation meaningless, while unrealistic criteria cause unnecessary failures.
• Inadequate sampling plans. Sampling that does not represent the batch may hide variability.
• Ignoring variability. Focusing on averages instead of variation can mask risk.
• Failing to justify batch numbers. Choosing a number without rationale is a common inspection finding.
• Incomplete deviation handling. Failed PPQ batches must be investigated, not ignored or repeated until they pass.
• Weak technology transfer. Incomplete knowledge transfer from development to manufacturing leads to scale-up issues.
• Documentation gaps. Missing signatures, unapproved protocols, or changes made without documentation undermine credibility.
• Over-reliance on paper. Reports that look complete but are not supported by real process understanding fail in practice.

Addressing these issues requires leadership support, cross-functional collaboration, and a culture that values learning from data rather than merely achieving a passing result.

14. Emerging Trends

Continuous Manufacturing

Continuous processes change how validation is approached. Rather than discrete batches, validation focuses on demonstrating control over extended runs, including start-up, steady state, and shutdown, with real-time monitoring and control.

Process Analytical Technology (PAT)

In-line and at-line sensors allow real-time measurement of critical attributes. This supports real-time release testing and more dynamic process control, and it provides rich data for validation and CPV.

Digital Validation and Data Analytics

Electronic validation management systems, digital twins, and machine learning tools are increasingly used to manage validation documents, monitor trends, and predict process behavior. They improve efficiency but must themselves be validated and compliant with data integrity expectations.

Advanced Therapies

Cell and gene therapies challenge traditional validation concepts because of small batch sizes, variable starting materials, and short shelf lives. Validation strategies in this area emphasize comparability, robust control strategies, and process understanding.

Risk-Based and Knowledge-Driven Approaches

Regulators continue to encourage reliance on scientific knowledge, risk management, and data rather than fixed rules, rewarding organizations that can justify their approach with evidence.

15. Practical Tips for Success

1. Start early. Build validation thinking into development, not after it.
2. Understand your process. Invest in risk assessments, DoE, and characterization studies.
3. Write clear protocols. Define objectives, acceptance criteria, and sampling plans before execution.
4. Justify decisions. Explain why you chose a particular batch number, sampling plan, or acceptance limit.
5. Involve the right people. Include manufacturing, QC, engineering, statistics, and QA from the start.
6. Investigate everything. Treat deviations as information about the process, not obstacles to close.
7. Keep monitoring. Make CPV a living program with actionable metrics.
8. Control change. Assess and document every change, however small it seems.
9. Protect data integrity. Ensure data is trustworthy, traceable, and complete.
10. Stay current. Regulatory expectations evolve, so monitor updates to guidelines and industry practice.

Conclusion

Process validation is fundamentally about confidence: confidence that every batch of medicine will be as safe and effective as the last one. The lifecycle approach, which links process design, process qualification, and continued process verification, turns validation from a one-time hurdle into an ongoing source of knowledge and control.

Organizations that approach validation as an opportunity to understand their processes, rather than simply to satisfy an inspector, gain tangible benefits: fewer failures, more predictable operations, faster problem-solving, and stronger regulatory relationships. As manufacturing technology advances with continuous processing, real-time monitoring, and digital tools, the core principles remain constant: understand the process, control it, verify it continually, and use data honestly.

Ultimately, validation serves the patient. When it is done well, it ensures that consistency is not an accident but a designed, demonstrated, and maintained property of the process.

Guideline References

1. US FDA (2011) – Guidance for Industry: Process Validation: General Principles and Practices.
2. European Commission, EudraLex Volume 4, Annex 15 – Qualification and Validation.
3. EMA (2016) – Guideline on Process Validation for Finished Products: Information and Data to be Provided in Regulatory Submissions.
4. ICH Q8 (R2) – Pharmaceutical Development.
5. ICH Q9 (R1) – Quality Risk Management.
6. ICH Q10 – Pharmaceutical Quality System.
7. ICH Q11 – Development and Manufacture of Drug Substances.
8. ICH Q2 (R2) and Q14 – Validation of Analytical Procedures and Analytical Procedure Development.
9. ICH Q7 – Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients.
10. US FDA, 21 CFR Part 211 – Current Good Manufacturing Practice for Finished Pharmaceuticals.
11. US FDA, 21 CFR Part 210 – Current Good Manufacturing Practice in Manufacturing, Processing, Packing, or Holding of Drugs: General.
12. WHO Technical Report Series No. 992, Annex 3 – WHO Good Manufacturing Practices: Validation.
13. PIC/S PI 006 – Recommendation on Validation Master Plan, Installation and Operational Qualification, Non-Sterile Process Validation, Cleaning Validation.
14. PIC/S PI 041 – Good Practices for Data Management and Data Integrity in Regulated GMP/GDP Environments.
15. ISPE GAMP 5 (Second Edition) – A Risk-Based Approach to Compliant GxP Computerized Systems.
16. ISPE Baseline Guide, Volume 5 – Commissioning and Qualification.