CPVContinued Process Verification
Stage 3 of FDA's 2011 Process Validation lifecycle — the ongoing programme that monitors every commercial batch against the limits established at PPQ, trends out-of-trend signals and feeds the Annual Product Quality Review.
01What CPV actually is
Continued Process Verification is the third stage of FDA's 2011 Process Validation guidance — the ongoing programme that monitors the commercial process throughout the product's lifecycle, ensures it stays in the validated state, and feeds the Annual Product Quality Review (APR) under 21 CFR 211.180(e). It is not a one-time activity; it is the operating mode for every batch after PPQ closes.
EU GMP Annex 15 calls the same concept Ongoing Process Verification (OPV) and ICH Q10 §3.2.5 calls it 'process performance and product quality monitoring system'. The terminology differs; the practice is identical.
02The CPV protocol — what it must specify
- Critical process parameters (CPPs) and critical quality attributes (CQAs) monitored, with the rationale (typically a flow-down from the Stage 1 control strategy).
- Sampling plan — initial elevated sampling (typically first 10–30 commercial batches), step-down criteria, routine sampling.
- Control limits — typically ±3σ from PPQ mean, narrower than release spec, used as out-of-trend (OOT) signals.
- Statistical tools — control charts (X-bar/R, Individuals & Moving Range, EWMA), capability indices (Ppk on rolling windows), trend tests (Western Electric rules, Nelson rules).
- Action plan for each signal type — OOT investigation, CAPA, change-control trigger, when to escalate to a process revalidation.
- Review cadence — monthly trend review at minimum, quarterly at management review, annual at APR.
03Ppk on rolling windows — the modern CPV metric
Where PPQ reports short-term Cpk on the qualification batches, CPV reports long-term Ppk on a rolling 12-month (or quarterly) window. The shift from σ_within to σ_overall captures long-term variability — between-shift, between-operator, between-supplier-lot, seasonal — that PPQ deliberately controlled out. Ppk is therefore always ≤ Cpk; the gap is the long-term penalty.
Practically: every commercial batch's CQA results land in the same dataset, the rolling Ppk recomputes monthly, and the trend chart shows whether the process is stable, drifting, or improving. A Ppk that drifts from 1.50 to 1.20 over six months is a CAPA trigger long before any individual batch fails release.
04Trend rules — Western Electric and Nelson
Single-point excursion past a control limit is the obvious signal, but most process drift shows up earlier as a pattern within the limits. The Western Electric Rules (1956) and the expanded Nelson Rules (1984) define eight patterns that indicate a process is no longer in statistical control even when no single point is OOS:
- One point beyond 3σ — special-cause variation.
- Nine consecutive points on one side of the centreline — process mean has shifted.
- Six consecutive points trending up or down — directional drift.
- Fourteen consecutive points alternating up and down — non-randomness.
- Two of three consecutive points beyond 2σ on the same side.
- Four of five consecutive points beyond 1σ on the same side.
- Fifteen consecutive points within 1σ — over-control or measurement saturation.
- Eight consecutive points beyond 1σ in either direction — overdispersion or mixed populations.
Modern CPV systems apply these rules automatically across thousands of attribute streams; manual chart review on every product every month is impossible at scale.
05CPV feeds the Annual Product Quality Review
21 CFR 211.180(e) and EU GMP Chapter 1 §1.4(xv) require an annual review of every commercial product covering: batches produced, releases and rejections, complaints and recalls, deviations and CAPAs, stability data, change controls, OOS and OOT events, and a summary of process performance. The APR is not a separate exercise from CPV — it is the annual consolidation of the same data the CPV programme tracks monthly.
A well-designed CPV programme makes the APR a 30-day exercise instead of a 90-day spreadsheet ordeal. A poorly designed one means quality teams spend Q1 of every year scraping data out of disconnected systems.
06Common audit findings on CPV programmes
- CPV protocol not written — Stage 3 monitoring is ad hoc.
- Control limits set at the release spec — no signal until OOS, too late.
- Trend rules not applied — single-point OOS is the only flagged event.
- Rolling Ppk not computed — capability degradation invisible.
- OOT investigations closed without root cause — pattern repeats.
- Sampling step-down without statistical justification — reduced sampling has no defensible basis.
- APR assembled from Excel exports rather than live CPV data — risk of transcription error and stale data.
- Process change implemented without updating CPV control limits — old limits applied to new process produce false signals.
07How V5 Ultimate is built around CPV
- Every CQA from every commercial batch lands in the CPV dataset by construction — no manual export.
- Control limits flow from the PPQ closure into the CPV charts; a process change creates a new limit set under change control.
- Western Electric and Nelson rules run on every chart; OOT signals open investigation tickets with the rule and the chart attached.
- Rolling Ppk per CQA per product computes monthly; drift triggers a CAPA before an OOS.
- Sampling step-down rules are configurable per product; the step-down event is logged with the statistical justification.
- The Annual Product Quality Review template pulls every section (batches, complaints, deviations, OOS, OOT, change controls, stability, capability) from the same database — APR drafting is review-and-sign, not assemble-from-scratch.
Frequently asked questions
Q.Is CPV mandatory?+
FDA's 2011 PV guidance makes Stage 3 monitoring an expectation, and the underlying APR requirement in 211.180(e) has been mandatory since 1979. EU GMP Annex 15 Ongoing Process Verification is mandatory under the EU GMP. PIC/S and other GMP regimes adopt the same expectation. There is no jurisdiction where ongoing process monitoring is optional for a commercial product.
Q.Does CPV replace the APR?+
No — CPV feeds the APR. The APR is the annual consolidated review document (211.180(e)); CPV is the ongoing data collection and trending programme that supplies most of its content. A modern CPV programme makes the APR easy; the APR doesn't replace CPV.
Q.How often should CPV charts be reviewed?+
Real-time alerting on rule violations is the modern default. Beyond that: monthly trend review by the process owner, quarterly by management review, annually at the APR. Sites that only review at APR time are accumulating signals they're not acting on.
Q.What is the difference between CPV and SPC?+
SPC (Statistical Process Control) is the toolkit — control charts, capability indices, trend rules. CPV is the regulatory programme that uses SPC tools to monitor a validated commercial process. SPC predates the PV-lifecycle framework by 70 years; CPV is the 2011 codification of SPC obligations into the PV stage model.
Q.When do CPV signals trigger re-validation?+
Sustained capability degradation (Ppk drifting below the PPQ-established floor), repeated OOT events with the same root cause, or any change with significant process impact triggers re-PPQ or partial re-validation through change control. Single OOT events that investigate to root cause typically don't require re-validation.
Primary sources
Further reading
- PPQ — Process Performance QualificationStage 2 — establishes the control limits CPV monitors against.
- Cp / Cpk / PpkThe capability metrics CPV trends.
- SPC — Statistical process controlCharts that drive CPV signals.
- OOT — Out-of-trendThe most common CPV signal.
- CAPAWhere CPV trends become corrective actions.
Explore this topic
CPV sits inside 2 overlapping topic clusters in our glossary. Every neighbour is one click away.
Drug-product cGMP rules, ICH Q-series, and the regulators that enforce them.
URS-through-PQ lifecycle, GAMP 5 categorisation and CSA's modern alternative.
V5 Ultimate ships with the CPV controls already wired in — audit trail, e-signatures, validation evidence. Free trial, no credit card, onboard in days, not months.
