What GMP Supplier Audit Services Cover

GMP supplier audit services evaluate whether the companies that supply your materials, components, and services meet the GMP requirements that apply to them. Suppliers come in many forms: API manufacturers, excipient suppliers, contract manufacturers, packagers, analytical laboratories, distributors, and storage providers. Each brings different risks, and each needs a level of oversight that matches that risk.

An audit is the most reliable way to confirm that a supplier’s systems are real. Questionnaires and certificates have their place, but they do not show you what actually happens on the floor. An audit does. It shows whether the supplier follows its own procedures, whether records are reliable, and whether problems are handled in a way that protects your product.

Supply chain oversight has become more important in recent years. Regulators have increased scrutiny of supplier qualification and ongoing monitoring. Companies that rely on paper qualifications without verification are increasingly exposed. A well planned supplier audit program reduces that exposure and gives you confidence in your supply chain.

The Regulatory Requirements Driving Supplier Audits

ICH Q7 and Supplier Oversight

ICH Q7 requires API manufacturers to audit critical suppliers and maintain documented qualification programs. Critical suppliers are those whose materials or services directly affect API quality. The audit program should be risk based and documented. PIC/S Part II is equivalent to ICH Q7 and is used by many authorities as their standard for API manufacturing.

EU GMP Chapter 7 on Outsourced Activities

Chapter 7 of EudraLex Volume 4 states that the contract giver remains responsible for outsourced activities under EU GMP. That responsibility includes confirming that the contract acceptor is competent and compliant. Audits are a key part of that confirmation. The quality agreement and the audit together form the backbone of oversight.

FDA 21 CFR 211.84 and Supplier Evaluation

Suppliers of components must be evaluated and approved. Audit evidence supports that approval and strengthens the file if regulators ask questions. FDA investigators often ask how suppliers were qualified and how ongoing performance is monitored.

ICH Q10 and External Provider Management

ICH Q10 treats external providers as part of the pharmaceutical quality system. Their performance must be monitored and managed. Audits are one part of that management, alongside performance metrics and issue tracking.

WHO GMP Supplier Qualification Guidance

The WHO guidelines, published in the Technical Report Series and compiled in the Quality Assurance of Pharmaceuticals compendium, reinforce the need for risk based supplier qualification, including audits where appropriate. The guidance is useful for companies operating in multiple markets and for WHO prequalification programs.

Health Canada and MHRA Expectations

Health Canada GUI-0001 requires API specifications drawn from a pharmacopoeia or equivalent, raw material specifications that conform to the marketing authorization, water that meets applicable standards including microbial limits, and identity tests on each container of API lot. The MHRA Orange Guide adds material transfer controls and sterility assurance controls to the list of hot topics for supplier oversight.

Our Supplier Audit Process

Supplier Risk Classification

We classify suppliers by the risk they pose to product quality and patient safety. High risk suppliers receive deeper scrutiny. Lower risk suppliers may be managed through questionnaires and performance monitoring. The classification is documented so it can be defended.

Audit Planning and Questionnaire Review

We review questionnaires and supplier documentation before the audit so that on site time is used efficiently. This preparation also helps us focus on the areas most likely to have issues.

On Site or Remote Supplier Audits

Where travel is impractical, remote audits can cover documentation and system reviews. Facility and production reviews are usually better done on site. We can combine formats when needed.

Finding Classification and CAPA Follow Up

Findings are classified by severity with clear descriptions. We can follow up to confirm corrective actions were implemented. A supplier that responds well to findings is often a better partner than one that has never been audited.

Supplier Categories We Audit

API and Raw Material Suppliers

API suppliers are audited against ICH Q7 and PIC/S Part II, along with the relevant regional requirements. Raw material suppliers may be audited depending on their role in the product and their risk profile.

Excipient Suppliers

Excipient suppliers are audited when risk justifies it. The WHO 2024 to 2027 work plan includes new guidelines for excipients, which signals increasing regulatory attention in this area.

Contract Manufacturers and Packagers

Contract manufacturers are audited against the GMP requirements for the products they make. The audit also checks whether they communicate changes to you as required.

Primary Packaging Manufacturers

Primary packaging materials come into direct contact with the product, so their quality matters. We audit these suppliers for material controls, change notification, and documentation.

Analytical and Testing Laboratories

Testing laboratories are audited for data integrity, method validation, and equipment qualification. These audits are often overlooked, which makes them valuable.

Distribution and Storage Providers

Distribution and storage providers are audited for GDP compliance where applicable, including temperature control, traceability, and handling.

Introducing GxP Cellators for Supplier Audits

GxP Cellators provides supplier and vendor GMP audits that verify your raw material, component, and service providers meet GMP requirements. We audit API manufacturers, excipient suppliers, primary packaging manufacturers, and contract service providers. Audits are conducted before qualification, periodically during the supplier relationship, and when significant changes occur.

Our supplier audits evaluate supplier quality systems, manufacturing controls, documentation practices, and data integrity. We bring coverage across FDA, EMA, Health Canada, MHRA, WHO, and PIC/S GMP frameworks, with global reach and regional expertise across North America, Europe, Asia Pacific, Africa, and Latin America. Our auditors have regulatory inspection and industry quality experience, and our reports are written in plain business language with practical remediation guidance your team can implement.

We also help companies build supplier audit programs from the ground up, including risk classification criteria, audit schedules, questionnaire templates, and performance monitoring. If you already have a program, we can strengthen it or run audits on your behalf.

Strengthen Your Supply Chain

Details are available at https://www.gxpcellators.com/gmp-auditing/. Reach us at or through https://www.gxpcellators.com/contact/ to discuss your supplier portfolio.

Frequently Asked Questions About GMP Supplier Audits

How often should suppliers be audited?

Critical suppliers are usually audited every two to three years. Lower risk suppliers may be audited less often or managed through questionnaires and performance monitoring. The schedule should be risk based and documented.

Can you audit suppliers in other countries?

Yes. We audit suppliers globally and handle logistics, language, and local requirements. Our presence spans Saskatchewan, Calgary, Toronto, North Carolina, Indiana, and Frankfurt, with partner support for other regions.

What is the difference between a supplier audit and a supplier questionnaire?

A questionnaire is a self assessment completed by the supplier. An audit involves an independent review of evidence, including documents, interviews, and observation. Audits are more reliable and carry more weight with regulators.

Do you audit excipient suppliers?

Yes. Excipient suppliers are audited when risk justifies it, often based on their role in the product and their compliance history. The WHO work plan for excipient guidelines makes this an area to watch.

What happens if a supplier fails the audit?

You receive a report with findings classified by severity. We can help you decide whether to require corrective action, increase monitoring, or look for an alternative supplier. The decision stays with you.

Can you help us build a supplier qualification program?

Yes. We can design the program, including risk classification, audit schedules, questionnaires, and performance monitoring. We can also train your team to run it.

How do you handle supplier confidentiality?

We sign confidentiality agreements with you and, where needed, with the supplier. Audit reports are shared only with the people you designate.

How do I request a supplier audit?

Email or use https://www.gxpcellators.com/contact/. Our services are described at https://www.gxpcellators.com/gmp-auditing/.