What API GMP Audits Cover
Active pharmaceutical ingredients are the substances that produce the intended pharmacological effect in a drug product. Their quality directly affects the safety and efficacy of the finished product. GMP for APIs is set out in ICH Q7, which is mirrored in PIC/S Part II and adopted by many regulatory authorities.
An API GMP audit assesses whether the manufacturing operation meets ICH Q7 requirements across quality management, personnel, facilities, equipment, documentation, materials management, production, packaging, laboratory controls, and stability. It also covers the oversight of suppliers and contract manufacturers, which is a common weak point.
The Regulatory Context
ICH Q7
ICH Q7 sets GMP requirements for API manufacturing. It covers quality management, personnel, buildings and facilities, process equipment, documentation and records, materials management, production and in process controls, packaging and identification labeling, laboratory controls, stability testing, and contract manufacturing.
PIC/S Part II
PIC/S Guide PE 009 Part II is equivalent to ICH Q7 and is used by many authorities as their standard for API manufacturing.
FDA and API Inspections
The FDA inspects API manufacturing sites and applies ICH Q7 expectations. Data integrity findings in API inspections have been significant, including shared passwords, unlocked timestamps, and audit trails not reviewed before batch release.
EU GMP Part II
EudraLex Volume 4 Part II covers basic requirements for active substances and aligns with ICH Q7.
WHO GMP for APIs
WHO GMP guidelines cover API manufacturing and are used in prequalification programs.
What Audits Focus On
Quality Management
Quality policy, responsibilities, internal audits, and product quality review. The audit should check that quality management is effective, not just documented.
Personnel
Training, qualification, and hygiene. The audit should check that personnel are competent for the tasks they perform.
Buildings and Facilities
Design, construction, and maintenance. The audit should check that facilities are suitable for the operations and that contamination and cross contamination are controlled.
Process Equipment
Design, installation, qualification, and maintenance. The audit should check that equipment is suitable and that cleaning is validated.
Documentation and Records
Batch records, SOPs, and logbooks. The audit should check that documentation is complete, contemporaneous, and accurate.
Materials Management
Receipt, quarantine, sampling, testing, and release. The audit should check that materials are controlled and traceable.
Production and In Process Controls
Process validation, in process controls, and deviation handling. The audit should check that processes are controlled and that deviations are investigated.
Laboratory Controls
Methods, equipment, and data integrity. The audit should check that laboratory data is reliable and that data integrity controls are in place.
Stability Testing
Program design, storage, and testing. The audit should check that stability data supports the retest period or shelf life.
Contract Manufacturing and Suppliers
Quality agreements, audits, and oversight. The audit should check that critical suppliers and contractors are controlled.
Common Findings in API Audits
Data Integrity Gaps
Shared passwords, unlocked timestamps, audit trails not reviewed, and manual integration privileges.
Incomplete Deviation Investigations
Investigations that stop at the immediate cause without reaching root cause.
Supplier Oversight Weaknesses
Oversight that relies only on questionnaires and certificates.
Cleaning Validation Gaps
Cleaning validation that does not reflect worst case conditions or does not include toxicological basis for limits.
Documentation Gaps
Batch records that are incomplete or not contemporaneous.
Stability Program Weaknesses
Stability programs that do not support the assigned retest period or shelf life.
Introducing GxP Cellators for API Audits
GxP Cellators provides GMP audits for API manufacturing aligned with ICH Q7 and PIC/S Part II. Our audits cover quality management, personnel, facilities, equipment, documentation, materials management, production, laboratory controls, stability, and contract manufacturing and supplier oversight.
We work across FDA, EMA, Health Canada, MHRA, WHO, and PIC/S frameworks, and we adapt the audit scope to the API type and the regulatory requirements that apply. Our auditors bring regulatory inspection and industry quality experience, and we deliver clear, prioritized reports with practical remediation guidance.
We also provide supplier and vendor audits for API suppliers and contract manufacturers, and mock inspections for sites preparing for regulatory inspection.
Strengthen API Compliance
Visit https://www.gxpcellators.com/gmp-auditing/ for service details. Email or use https://www.gxpcellators.com/contact/ to discuss your API audit.
Frequently Asked Questions About API GMP Audits
What is ICH Q7?
ICH Q7 is the international guidance for GMP for active pharmaceutical ingredients. It covers quality management, facilities, equipment, documentation, production, laboratory controls, and more.
Is PIC/S Part II the same as ICH Q7?
PIC/S Guide PE 009 Part II is equivalent to ICH Q7 and is used by many authorities as their standard for API manufacturing.
What are the most common API audit findings?
Data integrity gaps, incomplete deviation investigations, supplier oversight weaknesses, cleaning validation gaps, documentation gaps, and stability program weaknesses.
Do you audit API suppliers?
Yes. We audit API suppliers and contract manufacturers as part of supplier qualification and ongoing oversight.
How do you assess data integrity in API audits?
We review audit trails, access controls, shared accounts, standalone equipment, and review practices, aligned with FDA and MHRA expectations.
Can you help us prepare for an API inspection?
Yes. We conduct readiness reviews and mock inspections that simulate the questions an inspector would ask about your API operation.
How do I request an API audit?
Email or use https://www.gxpcellators.com/contact/. Service details are at https://www.gxpcellators.com/gmp-auditing/.
