Validation planning guide
A syringe filling line is not purchased “validated.” The pharmaceutical manufacturer defines the intended use, risk controls and acceptance criteria; the equipment supplier provides design evidence, test records and qualification support that can be assessed within the site quality system.
Start with ownership, not protocol templates
Most validation gaps begin as a commercial-scope gap. The customer and supplier should agree who authors, reviews, executes and approves each record before design work starts.
FDA process-validation guidance presents validation as a lifecycle that depends on process understanding and continued assurance. EU GMP Annex 1 places sterile manufacture within a pharmaceutical quality system and contamination control strategy. In practice, the regulated manufacturer retains responsibility for its product, facility, procedures, qualification decisions and release. A machine builder can supply evidence and technical support, but cannot approve the customer’s validated state.
| Activity or record | Pharmaceutical manufacturer | Equipment supplier |
|---|---|---|
| URS and intended use | Authors, approves and controls changes | Reviews feasibility, states assumptions and exceptions |
| Risk assessment and CCS interface | Owns the site assessment and residual-risk decision | Provides design details needed to assess machine-related risks |
| Functional/design specification | Reviews and approves against the URS | Authors the agreed equipment description and control philosophy |
| DQ | Defines approach, executes review and approves conclusion | Supplies drawings, specifications and traceable design evidence |
| FAT | Approves protocol, witnesses where appropriate and accepts deviations | Prepares the machine, executes agreed tests and records results |
| SAT / IQ / OQ | Owns site protocols, execution, deviations and approval | Supports installation, troubleshooting and agreed template content |
| PQ, APS and cleaning validation | Owns design, execution and approval using site product and procedures | Provides technical inputs only when contracted |
| Routine operation and continued verification | Owns monitoring, review, maintenance, change control and release | Provides service records, updates and technical support as ordered |
Map the document scope before quotation
Send the syringe format, product characteristics, target operating range, facility interface and document expectations. HIJ can return an equipment-side document matrix for review; your QA team decides how it fits the site validation plan.
Request a document-scope reviewDefine the supplier document package before the purchase order
A long file list is not automatically a good package. Each controlled document should have an agreed purpose, owner, revision status and relationship to a URS requirement or risk control.
Requirements and specifications
- Supplier response to every applicable URS line
- Functional and design specifications
- Process description and operating sequence
- Control philosophy, interlocks and alarm list
- Approved exception and assumption register
Drawings and interfaces
- General arrangement and access envelope
- Utilities schedule and connection points
- Product-path or piping drawings where applicable
- Electrical documentation and I/O information
- Component, instrument and spare-parts lists
Materials and components
- Product-contact material declarations or certificates as specified
- Elastomer and lubricant information where relevant
- Instrument calibration records for agreed devices
- Surface-finish evidence only where specified and measurable
- Purchased-component manuals and data sheets
Use, cleaning and maintenance
- Operating, changeover and troubleshooting instructions
- Cleaning/disassembly guidance for equipment surfaces and paths
- Preventive-maintenance schedule and wear-part list
- Backup, restore and recipe-management instructions if included
- Training agenda and attendance records when contracted
FAT and SAT evidence
- Approved test protocol and traceability matrix
- Instrument list and calibration status
- Raw observations, recorded values and result summary
- Deviation log, impact assessment and closure evidence
- Configuration and software version at the time of test
IQ/OQ inputs
- Project-specific template content if ordered
- Installation checks and utility prerequisites
- Operating-range, alarm and interlock test suggestions
- Recommended critical parameter list
- Technical support boundary for site execution
Do not assume that a standard package covers computerized-system validation, electronic signatures, environmental monitoring, cleanroom qualification, aseptic process simulation, cleaning validation or container-closure integrity. Those activities may require separate site protocols, specialist systems and customer data.
Trace the lifecycle from URS to continued verification
The familiar URS–DQ–FAT–SAT–IQ–OQ–PQ sequence is useful only when requirements, risks, tests, deviations and changes remain connected.
URS — define intended use and acceptance
State syringe formats, product characteristics, dose range, target output, accuracy basis, reject strategy, environmental boundary, cleaning approach, utilities, records and documentation. Separate “must” requirements from preferences.
DQ — prove the proposed design answers the URS
Review the supplier specifications, drawings, component choices and software functions. Record gaps and design decisions. Approval should be based on evidence, not on a brochure description.
FAT — challenge the built configuration before shipment
Verify the agreed build, operating sequence, alarms, interlocks, format parts, recipes and performance tests. Use representative components and product or a justified surrogate. Record unresolved items with owners and due dates.
SAT — confirm transport and site integration
Check the delivered configuration, installation condition, utilities, communication boundaries and agreed repeat tests. SAT is a site-acceptance activity; its exact content should not be assumed to equal IQ or OQ.
IQ — verify the installed state
Confirm identity, drawings, components, utility connections, calibration status, manuals, software/configuration identifiers and installation prerequisites against approved records.
OQ — test functions and operating ranges
Challenge controls, alarms, interlocks, recipes, access roles and defined upper/lower operating conditions. Tests should trace to the URS and risk assessment, with deviations assessed before approval.
PQ — demonstrate routine performance at the customer site
Use the customer’s approved formulation, components, trained operators, SOPs and environment. The customer defines the protocol, sampling, acceptance criteria and conclusion.
Continued verification — maintain the state of control
Trend relevant performance, deviations, alarms, interventions, calibration, maintenance and changes. Reassess impact after software, format, product, component or process changes.
For a broader explanation of qualification terms, see the IQ/OQ/PQ pharmaceutical equipment guide. Use it as a framework, then apply site procedures and the applicable regulatory expectations for the actual product and market.
Convert machine functions into testable evidence
Validation becomes practical when each function has a defined input, expected response, measurable acceptance criterion and retained record.
| Function | Questions to settle in the URS | Possible FAT/OQ evidence |
|---|---|---|
| Loading and denesting | Approved nest/tub or syringe presentation, format range, orientation, damage limits, empty/low-level response | Format identification, sensor challenge, controlled stop/restart, misfeed observation, intervention record |
| Filling | Dose range, accuracy expression, product properties, temperature, air management, product-path boundary | Agreed sample plan, recorded weights/volumes, parameter set, start/stop response, alarm challenge |
| Stoppering or capping | Closure type, placement criteria, vacuum or mechanical method, missing-closure response | Placement checks, absence/misplacement challenge, sensor and reject verification, parameter record |
| Inspection and rejection | Defect classes, detection boundary, reject confirmation, reject-bin access and reconciliation | Known challenge samples, detection/reject results, counter reconciliation, access alarm test |
| Recipe and format control | Authorized parameter ranges, role permissions, recipe naming/versioning, changeover checks | Role challenge, recipe selection, parameter-limit test, format checklist and version record |
| Utilities and environment | Power, compressed air, vacuum, gases, exhaust, heat load, cleanroom or barrier interface | Utility identity/status checks, loss-and-recovery response, interface verification and alarm records |
Write acceptance criteria before observing the run
“Machine runs normally” is not an acceptance criterion. Define sample quantity, run condition, calculation, allowable result, data source and responsible reviewer. If a criterion changes during the test, document why, assess the impact and obtain approval through the agreed deviation process.
- Trace each test to a URS or risk-control item
- Identify the exact machine configuration tested
- Record actual values, not only pass/fail ticks
- Keep challenge samples identifiable and controlled
- Separate observation from acceptance decision
- Close or formally defer deviations before shipment approval
Place the filling machine inside the contamination control strategy
Aseptic performance is a system outcome. Equipment design must be evaluated together with the facility, barrier concept, utilities, materials, personnel, cleaning, disinfection, sterilization strategy, monitoring and interventions.
EU GMP Annex 1 expects a facility-wide contamination control strategy and applies quality-risk-management principles across sterile manufacture. For the filling line, the CCS assessment should identify where sterile or cleaned product-contact surfaces are exposed, how components enter, which interventions are planned, what happens after a stop, and how the equipment interfaces with the surrounding environment.
Product and component path
Define the boundary from product supply through dosing and closure. Record how syringes, stoppers or caps are introduced, transferred and protected, and which steps occur outside or inside the critical area.
Interventions
List routine, corrective and maintenance interventions. Assess reach-in paths, tool use, line clearance, recovery actions and the conditions required before production resumes.
Cleaning and disassembly
Describe removable parts, access points, cleaning agents, inspection, drying, storage and reassembly. Equipment guidance supports the site procedure; it does not constitute cleaning validation.
Environmental and utility interfaces
Document airflow, barrier, gas, vacuum, compressed-air and exhaust boundaries as applicable. Confirm that site systems and monitoring remain within the customer’s validated strategy.
Filling method also changes the risk and test plan. Compare vacuum versus standard syringe filling before freezing the URS, especially when air management, stopper placement or product sensitivity affects the process.
Specify records, access and change control as functions
“Part 11 ready” or “data integrity compliant” is too vague to test. Specify the records and controls required for the intended workflow, then verify the delivered configuration.
| Topic | Requirement questions | Evidence to retain |
|---|---|---|
| User access | Which roles exist? Which actions can each role perform? How are accounts created, disabled and reviewed? | Role matrix, configured accounts, challenge results and administration procedure |
| Recipes and parameters | Which values are controlled? Are limits enforced? Are changes attributable and reviewable? | Approved recipes, range tests, change records and version/configuration identification |
| Alarms and events | Which events are recorded? Are timestamps synchronized? What is the review and retention approach? | Alarm list, simulated events, exported or screen records and review procedure |
| Audit trail | Is the feature included in the ordered system? What actions are captured, searchable, exportable and periodically reviewed? | Functional specification, test cases, sample output and review responsibility |
| Backup and restore | What is backed up, where, by whom and how often? Can a controlled restore be demonstrated? | Backup architecture, successful restore test, version record and recovery procedure |
| Software/configuration change | Who authorizes changes? How are versions, impact, testing and release documented? | Change request, impact assessment, test evidence and approved release record |
A machine can provide technical capabilities, but compliance depends on the customer’s procedures, administration, training, review, record retention and quality oversight. Confirm the exact controls included in the quotation; do not assume every HMI or PLC includes audit trails, electronic signatures or export functions.
Build FAT around risk-based challenges
A useful FAT is a rehearsal of critical functions and foreseeable failures—not a sales demonstration at nominal speed.
Normal operation
- Representative components and agreed product/surrogate
- Defined run duration and sample points
- Start-up, steady-state, planned stop and restart
- Recorded parameters and calculated results
Challenge conditions
- Missing, misoriented or jammed component
- Low supply, loss of utility or guard opening
- Out-of-range setting and unauthorized action
- Reject confirmation and counter reconciliation
Changeover and recovery
- Format/recipe identification
- Line clearance and part accountability
- Recovery after alarm or emergency stop
- Cleaning/disassembly demonstration
Evidence package
- Approved protocol and traceability
- Calibrated test instruments
- Raw observations and attachments
- Deviation assessment and closure plan
Turn the URS into an FAT question set
HIJ can review the equipment-related URS lines and identify the proposed machine evidence, test location and open assumptions. The customer retains protocol approval and acceptance decisions.
Discuss the FAT evidence planEvaluate the supplier by evidence, not compliance slogans
A qualified supplier should state what is standard, what is optional, what is project-specific and what remains the customer’s responsibility.
| Warning sign | Why it matters | Better question |
|---|---|---|
| “The machine arrives validated” | Site qualification and process performance depend on the customer’s facility, product, procedures and approved criteria. | Which controlled documents and test records will support our qualification? |
| “GMP certified machine” without a defined basis | The phrase hides the actual construction, documentation and test scope. | Show how each relevant URS requirement is answered and evidenced. |
| IQ/OQ mentioned without deliverable detail | A generic blank template may not match the ordered configuration or site SOPs. | Is the package generic or project-specific, and who executes and approves it? |
| FAT protocol issued on the test day | The customer cannot assess coverage, samples, instruments or acceptance criteria in advance. | When will the draft protocol and traceability matrix be available for review? |
| Electronic-record claims without function list | Required roles, records, audit trails or exports may not be included. | Which exact functions are configured, licensed, testable and documented? |
| No controlled exception register | URS gaps can disappear into emails and reappear during site qualification. | Where are assumptions, exclusions and unresolved design decisions approved? |
When comparing equipment, review both the process method and the document boundary. The prefilled syringe vacuum filling machine, plastic syringe filling and capping machine, double-head vacuum model and double-head plastic syringe model serve different application boundaries. Model selection should follow the approved URS and representative samples.
Frequently asked questions
Can a syringe filling machine be supplied already validated?
No. A supplier can provide a defined equipment configuration, design documents, FAT evidence and qualification-support materials. The pharmaceutical manufacturer must qualify the installed equipment and validate the process within its own facility, product, procedures and quality system.
Who should write the URS?
The pharmaceutical manufacturer should own and approve the URS with input from QA, users, engineering, validation, automation and other relevant functions. The supplier reviews feasibility, responds to requirements and identifies exceptions, but should not replace the customer’s intended-use decision.
Does a successful FAT replace IQ, OQ or PQ?
No. FAT provides pre-shipment evidence for an agreed factory configuration. IQ verifies the installed state, OQ challenges operation at the site, and PQ demonstrates routine performance with the customer’s product, operators, procedures and environment.
What should be included in an IQ/OQ package?
The scope should be written into the contract. It may include project-specific installation checks, operating-range tests, alarm and interlock challenges, traceability references, forms and supporting equipment records. The customer adapts, executes and approves protocols under its own procedures.
Must FAT use the actual formulation?
Use representative product and components where feasible and safe. If the actual formulation cannot be supplied, agree a justified surrogate that challenges the relevant properties. Record the limitation and identify what must be confirmed during site qualification.
Is the machine itself 21 CFR Part 11 compliant?
A machine alone does not create a compliant electronic-record workflow. Specify and test the required technical features—such as roles, audit trails, recipes, alarms, backup and restore—then control them through site procedures, administration, training, review and retention.
Who owns PQ and aseptic process simulation?
The pharmaceutical manufacturer owns the protocols, execution, acceptance and approval because these activities depend on the site process, product, personnel, environment and quality system. The equipment supplier may provide technical support when that scope is agreed.
When should requalification or additional testing be considered?
Use the site change-control and risk-assessment process after changes to software, controls, format parts, product, closure, utilities, location, maintenance strategy or operating range. The manufacturer decides the required impact assessment, testing and approval.
Review the evidence boundary before you freeze the design
Send your intended syringe format, product behavior, target range, facility interface and validation-document expectations. HIJ can map the equipment-side response, identify assumptions and propose FAT evidence for your QA review.
Open the project inquiry form
