# Process validation and qualification (CRO) CRO-delivered three-stage process validation and IQ/OQ/PQ qualification of biopharma equipment — media fills, cleaning validation, CSV and viral clearance under FDA/EudraLex Annex 1 cGMP. Source: https://en.bioecon.ru/technology/process-validation-qualification-cro/ Updated: 2026-08-18 ## Overview and value chain Markers: [EC: FDA Process Validation Guidance & EudraLex Annex 1 (CCS) | OECD: Bio-pharmaceuticals | Regulator: FDA (USA), EMA (EU), NMPA (China)] Process validation and qualification CROs prove a biopharma process is reproducible, contaminant-free and data-intact across the FDA three-stage model (process design, qualification, continued verification). The work turns on four gates: equipment IQ/OQ/PQ qualification, media fills of 5,000 to 10,000 vials incubated 14 days with under 0.1% contamination, cleaning validation with TOC under 500 ppb and carryover under 10 ppm, and CSV under 21 CFR Part 11 with F0 lethality above 15 minutes at 121°C. Paperless validation platforms (Kneat, ValGenesis) now compress facility qualification timelines by around 40%. Key directions of process validation CRO: 1. **IQ/OQ/PQ qualification (IQ/OQ/PQ):** installation, operational and performance qualification of bioreactors and fill-lines against P&ID and ISPE baselines. 2. **Cleaning and viral clearance (Cleaning/Viral):** CIP swab + TOC carryover under 10 ppm; viral LRF above 6 to 8 log on chromatography and nanofilter steps. 3. **Media fill / aseptic validation (Media Fills):** 5,000 to 10,000 TSB vials, 14-day incubation, under 0.1% contamination per Annex 1. 4. **CSV and continued verification (CSV/CPV):** 21 CFR Part 11 audit trail plus Shewhart control charts on CPPs in LIMS CPV modules. ### Sectoral value chain ``` [process audit] ──> [IQ/OQ/PQ] ──> [cleaning + aseptic] ──> [CSV] │ (F0 ≥ 15 min, TOC < 500 ppb) │ ▼ [CPV release] <─── [validation report] <─────┘ ``` ### Value chain levels | Level | Description | Key inputs/outputs | |:---|:---|:---| | **Process Audit** | CPP/CQA definition, validation design | **In:** process data. **Out:** validation plan. | | **IQ/OQ/PQ** | equipment qualification vs P&ID/ISPE | **In:** P&ID, sensors. **Out:** qualified asset. | | **Cleaning + Aseptic** | CIP swabs, media fills, thermal mapping | **In:** TSB, Kaye validators. **Out:** sterility evidence. | | **CSV** | 21 CFR Part 11 audit trail, GAMP 5 | **In:** SCADA/PLC logs. **Out:** data-integrity proof. | | **Validation Report** | Stage 2 dossier assembly | **In:** all protocols. **Out:** signed report. | | **CPV Release** | continued verification in LIMS | **In:** batch CPP trends. **Out:** regulator release. | Cross-cutting technologies of the sector: - **Paperless validation platforms (Paperless Validation):** Kneat / ValGenesis digitising IQ/OQ/PQ protocols. - **Kaye thermal mapping (Kaye Validators):** multipoint thermocouple F0 lethality confirmation. - **Viral clearance nanofiltration (Viral Clearance):** BSL-3 LRF studies above 6 to 8 log. --- ## US The US process-validation CRO market is the most mature, driven by strict FDA three-stage process validation inspections and the shift to paperless digital-twin qualification. ### three-stage FDA model, paperless shift, SUS E&L - **FDA Process Validation Guidance:** Stage 1 design, Stage 2 qualification, Stage 3 CPV enforcement. - **Kneat / ValGenesis platforms:** paperless validation cutting facility qualification by ~40%. - **Charles River, CAI, ValSource:** US CROs delivering viral clearance, IQ/OQ/PQ and CCS strategy respectively. --- ## CN China is aligning its massive CDMO capacity to FDA/EU GMP through integrated validation subsidiaries, with mandatory CSV and viral clearance for export biologics. ### WuXi-grade validation, viral clearance, mandatory CSV - **WuXi AppTec / Pharmaron:** integrated CRO/CDMO validation arms qualifying cleanrooms to FDA cGMP. - **Viral clearance studies:** BSL-3 nanofilter and chromatography LRF testing for exported vaccines. - **NMPA mandatory CSV:** bioreactor computer-system validation now required for licensure. --- ## EU The EU tightened validation under the revised EudraLex Annex 1, mandating a Contamination Control Strategy and full media-fill / CIP-SIP evidence for sterile manufacture. ### Annex 1 CCS, media fills, CIP/SIP sterilisation - **EudraLex Annex 1 (revised):** mandatory Contamination Control Strategy (CCS) for sterile lines. - **Eurofins, Sartorius:** EU CROs delivering cleaning validation, E&L and SUS filter-integrity testing. - **Media fills and CIP/SIP:** 14-day incubation and pressurised-steam cycles under HEPA-filtered air. --- ## Leading companies and research institutes | Company / Institute | Country | Key products / platforms | Tech features | Status 2026 | |:---|:---|:---|:---|:---| | **Charles River Laboratories** | 🇺🇸 USA | *Viral clearance + microbiology* | AKTA chromatography, LAL, GLP/GMP | Commercial | | **Eurofins BioPharma Product Testing** | 🇱🇺 Luxembourg | *Cleaning validation + E&L* | LC-MS/MS, ICP-MS, ISO 17025 | Commercial | | **CAI** | 🇺🇸 USA | *Commissioning Agents — IQ/OQ/PQ + CSV* | Kaye Validator, Kneat, ISPE | Commercial | | **WuXi AppTec** | 🇨🇳 China | *Integrated CDMO/CRO validation* | 10 L to 20,000 L bioreactors, FDA/EMA/NMPA | Commercial | | **Sartorius Stedim Biotech** | 🇩🇪 Germany | *SUS validation + filter integrity* | Sartocheck, thermal mapping, RED III | Commercial | | **ValSource** | 🇺🇸 USA | *CCS strategy + paperless validation* | LIMS integration, ICH Q9 QRM | Commercial | --- ## Tech stack and innovations The stack is built on metrology, aseptic biology and data-integrity engineering. 1. **IQ/OQ/PQ qualification (IQ/OQ/PQ):** - installation qualification against P&ID and 316L steel passports, weld radiography and passivation. - OQ measures oxygen mass transfer kLa above 150 per hour at maximum impeller speed; PQ runs three consecutive TSB fermentations. 2. **Cleaning validation TOC (Cleaning Validation):** - CIP final rinse analysed for total organic carbon under 500 ppb and carryover under 10 ppm (MACO). - EPDM swabs from hardest-to-clean zones (impeller blades, samplers, shaft seals) extracted and HPLC-analysed. 3. **CSV 21 CFR Part 11 (CSV):** - SCADA/PLC audit trails cannot be manually edited; operator role "Operator" cannot disable CPP logging or change system time. - GAMP 5 penetration testing and power-fail recovery on the SCADA database. 4. **Media fill validation (Media Fills):** - 5,000 to 10,000 TSB vials filled on the aseptic line, incubated 14 days (7 days at 20 to 25°C for fungi, 7 days at 30 to 35°C for bacteria). - validated at under 0.1% contamination, ideally zero turbid vials. --- ## Value chains and production pipelines ### Industrial pipeline of bioreactor qualification and validation (FDA cGMP / ISPE) ``` ┌───────────────────────────┐ ┌───────────────────────────┐ │ 1. IQ installation │ ───> │ 2. OQ operational │ └───────────────────────────┘ └───────────────────────────┘ │ ▼ ┌───────────────────────────┐ ┌───────────────────────────┐ │ 4. Cleaning validation │ <─── │ 3. PQ performance │ └───────────────────────────┘ └───────────────────────────┘ │ ▼ ┌───────────────────────────┐ ┌───────────────────────────┐ │ 5. CSV audit trail │ ───> │ 6. Report + CPV handover │ └───────────────────────────┘ └───────────────────────────┘ ``` #### Stage 1: IQ installation qualification The 10,000 L bioreactor is checked against P&ID drawings, 316L steel passports audited, welds radiographed and passivated, and all temperature/pH/pressure/DO sensors calibrated against NIST with Pt100 tolerance of plus/minus 0.1°C. #### Stage 2: OQ operational qualification Heating/cooling loops and CIP/SIP automation are tested; oxygen mass transfer kLa is measured by dynamic degassing and must exceed 150 per hour at maximum impeller speed, and pressure interlocks trip on overrange. #### Stage 3: PQ performance qualification Three consecutive TSB fermentation cycles are run with thermal mapping by Kaye loggers confirming 121°C sterilisation; SIP sensor spread stays under 0.5°C and F0 lethality reaches at least 15 minutes, inactivating Geobacillus stearothermophilus spores. #### Stage 4: Cleaning validation A commercial batch is released and drained; the CIP system runs acid and caustic washes, and final-rinse samples are analysed for TOC under 500 ppb and by HPLC, while EPDM swabs from impeller blades and seals confirm no residual active protein. #### Stage 5: CSV audit trail Operator passwords and role segregation are verified, SCADA database integrity is checked under simulated power failures, and electronic-log immutability is audited against 21 CFR Part 11 — an "Operator" cannot disable CPP logging or change system time. #### Stage 6: Report and CPV handover Three successful batches are analysed by multivariate statistics, the Stage 2 validation report is signed by all CRO engineers, and the process is handed to Stage 3 continued verification where LIMS CPV modules plot Shewhart control charts on growth rate, titre and base consumption to flag OOT trends before batch loss.