ICH Q7ICH Q7 — GMP for Active Pharmaceutical Ingredients

ICH Q7 — 'Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients' — is the harmonised tripartite ICH guideline that defines GMP for the manufacture of active pharmaceutical ingredients (APIs, also called drug substances) intended for use in human medicinal products. Adopted at ICH Step 4 in November 2000, Q7 is the single global standard for API GMP. FDA published it as Guidance for Industry Q7A in August 2001; the EU incorporated it as EudraLex Volume 4 Part II ('Basic Requirements for Active Substances used as Starting Materials'); PIC/S mirrors it as Part II of the PIC/S Guide to GMP; and most non-ICH regulators (Brazil, China, India, ASEAN) follow Q7 substantively.

Q7 contains 20 substantive sections covering quality management, personnel, buildings / facilities, process equipment, documentation / records, materials management, production / in-process controls, packaging / labelling, storage / distribution, laboratory controls, validation, change control, rejection / re-use, complaints / recalls, contract manufacturers, agents / brokers / repackers / relabellers, specifics for APIs manufactured by cell culture / fermentation, and specifics for APIs for use in clinical trials. The regulatory expectation across every ICH-aligned region is that an API manufacturer 'complies with Q7' — and inspection findings cite Q7 sections directly.

Q7 sits below ICH Q9 (Quality Risk Management, R1 2023), ICH Q10 (Pharmaceutical Quality System) and ICH Q11 (Development and Manufacture of Drug Substances) in the modern ICH quality framework. Q7 is the execution-layer GMP guide; Q9 / Q10 / Q11 provide the risk-management, quality-system and development-science overlays. The 2015 ICH Q7 Q&A document — produced by the Implementation Working Group — clarifies interpretation on points that recurred in inspection findings (starting-material designation, change-control depth, validation expectations, dedicated-facility decisions for highly potent / sensitising APIs).

Q7 applies to the manufacture of APIs intended for use in human medicinal products. It explicitly applies to APIs manufactured by chemical synthesis, extraction, cell culture / fermentation, recovery from natural sources, or any combination of these. Q7 does not apply to vaccines, whole cells, whole blood and plasma, blood and plasma derivatives, or gene therapy APIs (these fall under product-specific guidance) — though Q7 principles are often applied in addition to the product-specific framework.

The 'API starting material' concept is the most important single concept in Q7. Q7 §1.3 defines API starting material as 'a raw material, intermediate, or an API that is used in the production of an API and that is incorporated as a significant structural fragment into the structure of the API'. The starting material designation is the GMP boundary: full Q7 GMP applies from the introduction of the starting material into the process onwards. Steps prior to the starting material are subject to good documentation practices but not full Q7 GMP.

The starting-material designation is the manufacturer's responsibility, with regulator review during initial filing and any post-approval re-designation. ICH Q11 §5 + the Q11 Q&A document (2017) provide the detailed criteria for justifying starting-material selection; the Q7 Q&A document §3 cross-references this. Common designation errors: selecting too far upstream (excessive GMP burden on non-critical chemistry) or too far downstream (insufficient GMP control over impurity-generating chemistry) — both are inspection-relevant. The CEP / DMF dossier must justify the starting-material selection against ICH Q11 criteria.

Section 12 sets the validation framework. The validation master plan covers qualification of facilities / utilities / equipment and validation of processes / cleaning / analytical methods. Q7 §12.2 requires a validation policy, validation master plan, qualification protocols, validation protocols, qualification + validation reports, and continued monitoring.

Process validation per §12.4-12.6 is approached differently from finished-pharma:

• Prospective validation (§12.4) — the standard for new processes; minimum of three consecutive successful production batches at commercial scale before release of routine commercial product.
• Concurrent validation (§12.5) — acceptable when prospective is not feasible (e.g. infrequently manufactured APIs); release of validation batches must be justified.
• Retrospective validation (§12.6) — limited applicability under Q7; restricted to well-established processes with documented historical data; not generally acceptable for new APIs or significantly changed processes.

Cleaning validation per §12.7 is the most-cited validation finding for API facilities. Multi-product facilities must establish acceptance criteria for residue carryover based on the lowest pharmacological / toxicological response (with PDE / ADE calculations per EMA 2014 / 2018 guidance now standard), the most-difficult-to-clean equipment train, and visual cleanliness. For dedicated facilities the cleaning validation expectation is reduced but cross-contamination from cleaning agents must still be controlled. Highly potent / sensitising / cytotoxic / hormone APIs typically drive dedicated-facility decisions (Q7 §4.41 — '... where the toxicological characteristics ... necessitate the use of dedicated production areas').

Analytical method validation per §12.8 follows ICH Q2(R1) — specificity, accuracy, precision, linearity, range, limit of detection, limit of quantitation, robustness. Q7 §11.2 + §11.3 require that specifications + test procedures be appropriate to the API and that any changes follow §13.

Q7 §13 sets the change-control regime. Every change to materials, processes, equipment, computer systems, specifications, methods, or facility that could affect API quality must be evaluated, classified, approved by the quality unit, and (where regulatory-impacting) communicated to customers and reflected in regulatory filings. The change-control flow:

1. Change request — initiator describes proposed change, scientific / business justification, scope, affected systems / documents.
2. Impact assessment — cross-functional review (production, QA, regulatory, analytical, validation) against the change-classification matrix (typically minor / moderate / major).
3. Risk assessment per ICH Q9 — identification of quality risks introduced by the change, mitigations, residual-risk acceptability.
4. Regulatory impact assessment — does the change require prior approval, immediate notification, or annual reporting in any market? CEP / DMF / NDA / MAA dossier impact?
5. Implementation plan — including validation / re-qualification activities, additional testing of affected batches, change to BPR / SOP / specifications, training, customer notification (Q7 §13.16).
6. QA approval — quality unit signs off before implementation.
7. Implementation + verification — change executed per the implementation plan; effectiveness verified post-implementation; closure record retained.

Customer notification (§13.16) is a frequent inspection finding — changes that affect the API's quality, stability, or regulatory status must be communicated to customers before shipment of affected material. Failure to notify customers of changes is one of the leading triggers for FDA Warning Letters and EMA findings against API manufacturers.

Q7 §16 governs relationships with contract manufacturers (including contract laboratories). A written quality agreement is mandatory and must define GMP responsibilities — manufacturing, testing, release, deviation handling, change control, regulatory notification — explicitly. The contract giver remains responsible for assessing the GMP suitability of the contract acceptor and may not sub-contract any operation without the contract giver's explicit written approval. Audit rights must be defined.

Q7 §17 governs the downstream chain — agents, brokers, traders, distributors, repackers, relabellers — that handle the API between manufacture and the finished-product manufacturer. Key requirements:

• Traceability — every party in the chain must maintain records of the API's movement (full chain of custody from manufacturer to finished-product manufacturer).
• COA passthrough — the original manufacturer's COA must accompany the API; any reissued / consolidated COA must reference the original.
• No relabelling / repackaging without Quality Unit oversight — and any repacker / relabeller must operate under a GMP-aligned system.
• Notification of changes by the API manufacturer must flow through the agent / broker chain to the finished-product manufacturer.
• If the chain breaks (e.g. an agent loses documentation, an API arrives without complete COA chain), the finished-product manufacturer must treat the material as non-GMP and either reject or revalidate.

The EU Falsified Medicines Directive (Directive 2011/62/EU) added Article 46b to Directive 2001/83/EC: every active-substance manufacturer importing into the EU must hold a written confirmation from the competent authority of the country of manufacture that the API was made under GMP equivalent to EU GMP, or be on a list of countries (US, Japan, Switzerland, Australia, Brazil, Israel, Singapore, etc.) whose GMP regime has been recognised as equivalent. This 'written confirmation' is checked at EU import.

Q7 §19 covers APIs intended for use in clinical trials (investigational medicinal product APIs). GMP applies — but scaled to the clinical phase:

• Phase I — limited experience with the process; flexibility for process changes; controls focused on patient safety; batch records may be simpler; specifications may be wider (provisional).
• Phase II / III — tighter controls; specifications tightening; equipment + facility qualification; analytical-method validation progressing.
• Commercial — full Q7 expectations as per sections 1-18.

Process changes during development are expected; the QU must control them but the change-control rigour is scaled to the development phase. Records must be retained for at least 2 years after the IMP's marketing authorisation or termination of the IND, with regulator-specific retention often longer.

• Starting-material designation not justified per ICH Q11 criteria — too far downstream from the regulatory filing.
• Cleaning validation acceptance criteria not based on PDE / ADE; multi-product facility carryover risk not assessed.
• Cross-contamination control inadequate — common when adding highly potent / sensitising / cytotoxic compounds without revisiting dedicated-facility decision per §4.41.
• Change control — customer notification per §13.16 missing for quality-impacting changes; regulatory impact assessment thin.
• Process validation — three-batch prospective validation incomplete; concurrent validation used without justification.
• OOS investigations — Phase Ia / Ib (lab investigation) inadequate; root-cause not identified before invalidating the original result; production investigation absent for confirmed OOS.
• Stability — annual stability programme not maintained; out-of-specification stability results not investigated.
• Agent / broker chain — COA chain broken; repackager relabelled without QU oversight; FMD written-confirmation missing for EU-bound material.
• Contract manufacturer / laboratory — quality agreement absent or generic; sub-contracting occurred without explicit approval.
• Data integrity — laboratory computerised systems audit-trail off, batch records overwritten, paper records back-dated, ALCOA+ gaps per the 2018 MHRA / WHO / FDA guidance.
• Cell culture / fermentation — cell-bank documentation incomplete; viral-clearance validation gap; bioburden control trending up.
• Reprocessing vs reworking confusion — reworking (§14.3) implemented without formal investigation and quality-impact assessment.
• Recovery of solvents / mother liquors — recovery quality not characterised; carryover impurities not controlled.
• Annual Product Quality Review per §2.5 superficial — trend data not analysed, no commitments to action.
• Training records out of date; consultants (§3.3) used without competency evidence.

• Batch right-first-time rate per API per facility.
• OOS rate (lab + production) + investigation cycle time.
• Deviation rate + critical-deviation rate + closure cycle time.
• Change-control cycle time + customer-notification on-time rate.
• Cleaning validation acceptance-criteria PDE / ADE coverage % of product portfolio.
• Stability programme on-time pull rate; OOS-stability rate.
• APQR / Annual Product Quality Review on-time completion.
• Supplier qualification — % active starting-material suppliers with current qualification + audit.
• Agent / broker COA chain integrity audit pass rate.
• FMD written-confirmation currency for EU-bound API shipments.
• Self-inspection / internal audit on-time completion + finding closure rate.
• Data-integrity index — % of GxP-impacting computerised systems with audit trail review evidence.

V5 Ultimate treats Q7 as a first-class compliance overlay for the process-industry profile (pharma + intermediate / API + radiopharmaceutical operations). Each API record carries its starting-material designation with the ICH Q11 justification linked, the manufacturing flowchart with starting-material gate marked, and the section-by-section Q7 applicability profile. From the starting-material introduction onwards the system enforces full Q7 documentation expectations — batch numbering, BPR review by the quality unit per §6.7, in-process testing per §8, packaging-material reconciliation per §9, distribution control per §10.

Validation (§12) is structured per the validation master plan with qualification protocols (IQ / OQ / PQ), process-validation protocols (prospective / concurrent / retrospective with the rationale required for concurrent / retrospective routing), cleaning-validation protocols with PDE / ADE-based acceptance criteria, and analytical-method validation per ICH Q2(R1). Change control (§13) is routed through the cross-functional review with mandatory regulatory-impact + customer-notification steps; quality-impacting changes block shipment to affected customers until notification is recorded. OOS (§11.13) follows a structured Phase Ia / Ib / II / III investigation workflow with explicit invalidation criteria.

Contract manufacturers and laboratories (§16) are tracked with controlled quality agreements, audit-rights schedules and sub-contracting approval workflows; agent / broker / repacker / relabeller chains (§17) maintain COA passthrough integrity with auto-validation of the chain at each handoff. EU-bound shipments check the FMD Article 46b written confirmation expiry before release. Clinical-trial APIs (§19) operate in a parallel workspace with phase-scaled validation expectations and the production-system change-control coupled to IMPD / IND amendment readiness. Annual Product Quality Reviews per §2.5 are auto-assembled from the year's batch / deviation / change / stability / complaint data with the trend analysis surfaced for QU approval.