Process validation and qualification (CRO)

01Overview and value chain#

Markers EC: FDA Process Validation Guidance & EudraLex Annex 1 (CCS) | OECD: Bio-pharmaceuticals | Regulator: FDA (USA), EMA (EU), NMPA (China)

Process validation and qualification CROs prove a biopharma process is reproducible, contaminant-free and data-intact across the FDA three-stage model (process design, qualification, continued verification). The work turns on four gates: equipment IQ/OQ/PQ qualification, media fills of 5,000 to 10,000 vials incubated 14 days with under 0.1% contamination, cleaning validation with TOC under 500 ppb and carryover under 10 ppm, and CSV under 21 CFR Part 11 with F0 lethality above 15 minutes at 121°C. Paperless validation platforms (Kneat, ValGenesis) now compress facility qualification timelines by around 40%.

Key directions of process validation CRO:

1. IQ/OQ/PQ qualification (IQ/OQ/PQ): installation, operational and performance qualification of bioreactors and fill-lines against P&ID and ISPE baselines.
2. Cleaning and viral clearance (Cleaning/Viral): CIP swab + TOC carryover under 10 ppm; viral LRF above 6 to 8 log on chromatography and nanofilter steps.
3. Media fill / aseptic validation (Media Fills): 5,000 to 10,000 TSB vials, 14-day incubation, under 0.1% contamination per Annex 1.
4. CSV and continued verification (CSV/CPV): 21 CFR Part 11 audit trail plus Shewhart control charts on CPPs in LIMS CPV modules.

Sectoral value chain#

[process audit] ──> [IQ/OQ/PQ] ──> [cleaning + aseptic] ──> [CSV]
                          │
                  (F0 ≥ 15 min, TOC < 500 ppb)
                          │
                          ▼
[CPV release] <─── [validation report] <─────┘

Value chain levels#

Cross-cutting technologies of the sector:

• Paperless validation platforms (Paperless Validation): Kneat / ValGenesis digitising IQ/OQ/PQ protocols.
• Kaye thermal mapping (Kaye Validators): multipoint thermocouple F0 lethality confirmation.
• Viral clearance nanofiltration (Viral Clearance): BSL-3 LRF studies above 6 to 8 log.

02US#

The US process-validation CRO market is the most mature, driven by strict FDA three-stage process validation inspections and the shift to paperless digital-twin qualification.

three-stage FDA model, paperless shift, SUS E&L#

• FDA Process Validation Guidance: Stage 1 design, Stage 2 qualification, Stage 3 CPV enforcement.
• Kneat / ValGenesis platforms: paperless validation cutting facility qualification by ~40%.
• Charles River, CAI, ValSource: US CROs delivering viral clearance, IQ/OQ/PQ and CCS strategy respectively.

03CN#

China is aligning its massive CDMO capacity to FDA/EU GMP through integrated validation subsidiaries, with mandatory CSV and viral clearance for export biologics.

WuXi-grade validation, viral clearance, mandatory CSV#

• WuXi AppTec / Pharmaron: integrated CRO/CDMO validation arms qualifying cleanrooms to FDA cGMP.
• Viral clearance studies: BSL-3 nanofilter and chromatography LRF testing for exported vaccines.
• NMPA mandatory CSV: bioreactor computer-system validation now required for licensure.

04EU#

The EU tightened validation under the revised EudraLex Annex 1, mandating a Contamination Control Strategy and full media-fill / CIP-SIP evidence for sterile manufacture.

Annex 1 CCS, media fills, CIP/SIP sterilisation#

• EudraLex Annex 1 (revised): mandatory Contamination Control Strategy (CCS) for sterile lines.
• Eurofins, Sartorius: EU CROs delivering cleaning validation, E&L and SUS filter-integrity testing.
• Media fills and CIP/SIP: 14-day incubation and pressurised-steam cycles under HEPA-filtered air.

05Leading companies and research institutes#

06Tech stack and innovations#

The stack is built on metrology, aseptic biology and data-integrity engineering.

1. IQ/OQ/PQ qualification (IQ/OQ/PQ):
   • installation qualification against P&ID and 316L steel passports, weld radiography and passivation.
   • OQ measures oxygen mass transfer kLa above 150 per hour at maximum impeller speed; PQ runs three consecutive TSB fermentations.
2. Cleaning validation TOC (Cleaning Validation):
   • CIP final rinse analysed for total organic carbon under 500 ppb and carryover under 10 ppm (MACO).
   • EPDM swabs from hardest-to-clean zones (impeller blades, samplers, shaft seals) extracted and HPLC-analysed.
3. CSV 21 CFR Part 11 (CSV):
   • SCADA/PLC audit trails cannot be manually edited; operator role “Operator” cannot disable CPP logging or change system time.
   • GAMP 5 penetration testing and power-fail recovery on the SCADA database.
4. Media fill validation (Media Fills):
   • 5,000 to 10,000 TSB vials filled on the aseptic line, incubated 14 days (7 days at 20 to 25°C for fungi, 7 days at 30 to 35°C for bacteria).
   • validated at under 0.1% contamination, ideally zero turbid vials.

07Value chains and production pipelines#

Industrial pipeline of bioreactor qualification and validation (FDA cGMP / ISPE)#

┌───────────────────────────┐      ┌───────────────────────────┐
│ 1. IQ installation        │ ───> │ 2. OQ operational          │
└───────────────────────────┘      └───────────────────────────┘
                                                 │
                                                 ▼
┌───────────────────────────┐      ┌───────────────────────────┐
│ 4. Cleaning validation    │ <─── │ 3. PQ performance          │
└───────────────────────────┘      └───────────────────────────┘
              │
              ▼
┌───────────────────────────┐      ┌───────────────────────────┐
│ 5. CSV audit trail        │ ───> │ 6. Report + CPV handover   │
└───────────────────────────┘      └───────────────────────────┘

Stage 1: IQ installation qualification

The 10,000 L bioreactor is checked against P&ID drawings, 316L steel passports audited, welds radiographed and passivated, and all temperature/pH/pressure/DO sensors calibrated against NIST with Pt100 tolerance of plus/minus 0.1°C.

Stage 2: OQ operational qualification

Heating/cooling loops and CIP/SIP automation are tested; oxygen mass transfer kLa is measured by dynamic degassing and must exceed 150 per hour at maximum impeller speed, and pressure interlocks trip on overrange.

Stage 3: PQ performance qualification

Three consecutive TSB fermentation cycles are run with thermal mapping by Kaye loggers confirming 121°C sterilisation; SIP sensor spread stays under 0.5°C and F0 lethality reaches at least 15 minutes, inactivating Geobacillus stearothermophilus spores.

Stage 4: Cleaning validation

A commercial batch is released and drained; the CIP system runs acid and caustic washes, and final-rinse samples are analysed for TOC under 500 ppb and by HPLC, while EPDM swabs from impeller blades and seals confirm no residual active protein.

Stage 5: CSV audit trail

Operator passwords and role segregation are verified, SCADA database integrity is checked under simulated power failures, and electronic-log immutability is audited against 21 CFR Part 11 — an “Operator” cannot disable CPP logging or change system time.

Stage 6: Report and CPV handover

Three successful batches are analysed by multivariate statistics, the Stage 2 validation report is signed by all CRO engineers, and the process is handed to Stage 3 continued verification where LIMS CPV modules plot Shewhart control charts on growth rate, titre and base consumption to flag OOT trends before batch loss.