The cleaning validation master plan is the document that turns cleaning validation from a set of disconnected protocols into a governed program: it defines the scope, criteria, responsibilities and priorities of every cleaning validation activity on site. During inspections it is often the first document the auditor requests after the VMP, because it immediately reveals whether the site's approach is systematic or improvised. In this guide we look at how to structure it under EU GMP Annex 15 and PIC/S, which sections cannot be missing and which mistakes trigger the most frequent findings.
Cleaning validation master plan: what it is and why it matters
The cleaning validation master plan (CVMP) is the second-level plan that details the cleaning validation strategy: while the Validation Master Plan covers the site's entire qualification and validation system, the CVMP goes into products, equipment, cleaning agents, worst-case matrices, acceptance limits and the program of activities. Annex 15 (para. 1.5) requires the VMP to define, directly or by reference, the site's qualification and validation strategy: for multiproduct facilities the established practice is to dedicate a specific plan to cleaning, referenced by the VMP, that keeps risk assessment, rationales and planning together.
The CVMP is not a protocol: it does not describe how a single piece of equipment is sampled, but sets the rules by which all protocols are written, executed and maintained. It is also the tool for defending a grouping choice or a matrix approach in an audit: if the rationale is written in the plan and approved by Quality, the discussion with the inspector starts from a documented position.
What Annex 15 and PIC/S require
Section 10 of Annex 15 (in force since 1 October 2015) sets the principles the plan must translate into operating rules. The key points to cover in the CVMP are these:
- a visual check for cleanliness is an important part of the acceptance criteria, but it is generally not acceptable as the only criterion (para. 10.2);
- validation studies must be based on documented worst case situations (para. 10.5);
- limits for the carryover of product residues must be based on a toxicological evaluation (para. 10.6), with the option of alternative parameters such as TOC where direct assay is not feasible (para. 10.6.2);
- dirty hold time and clean hold time must be defined and verified (para. 10.8), as must the maximum length of production campaigns (para. 10.9);
- the number of validation runs must be justified by a risk assessment (para. 10.13).
On the PIC/S side, the historical reference for the plan was PI 006-3, covering validation master plan, IQ/OQ, non-sterile process validation and cleaning validation. The document has been revised: the new PIC/S Recommendations on Qualification and Validation (PI 006-4) enter into force on 1 October 2026 and supersede the previous version. Anyone writing or updating a CVMP today should already check alignment with the revision.
We cover topics like this every week, with a practical, source-based approach, in The Pragmatic GMP, GuideGxP's free weekly newsletter: subscribing today is worth more than a checklist found at the last minute before an audit.
The structure of the document: the essential sections
No regulation imposes a table of contents, but a CVMP that holds up in an audit recognizably covers these areas:
| Section | Expected content | Typical mistake |
|---|---|---|
| Purpose and scope | Sites, departments, equipment and cleaning types covered (manual, CIP, COP) | Vague scope: unclear what is excluded and why |
| Roles and responsibilities | Who writes, who approves, who executes; role of QA, production, laboratory | Responsibility left to QA alone, production absent |
| Risk assessment and worst case | Grouping criteria for products and equipment, worst-case matrix, rationales | Matrix not updated after new products are introduced |
| Acceptance limits | HBEL/PDE approach, MACO calculation, visual criterion, alternative parameters (TOC, conductivity) | "Historical" limits (10 ppm, 1/1000 of the dose) without toxicological evaluation |
| Sampling and analytical methods | Swab and rinse, recovery studies, method sensitivity | Recovery not performed on the actual surface materials |
| Hold times and campaigns | Dirty/clean hold times, maximum campaign length and their verification | Hold times declared but never challenged with data |
| Maintaining the validated state | Periodic monitoring, change control, revalidation, deviation management | No defined trigger for re-evaluation |
| Planning | List of activities, priorities, timelines and progress status | Static plan, never reissued when delays occur |
The table also works as a self-assessment: if one of these sections does not exist in your plan, or has not moved in three years, you have found your starting point.
Acceptance limits: HBEL and MACO inside the plan
The most technically sensitive part of the CVMP is the limits policy. Since 2015, Annex 15 requires carryover limits to derive from a toxicological evaluation: in the EU/PIC/S context the reference is the EMA guideline on Health-Based Exposure Limits (EMA/CHMP/CVMP/SWP/169430/2012) and its Q&A, which clarify how to use the PDE to identify risk in multiproduct sites. The plan must state who determines the HBELs (in-house or qualified external toxicologist), how the MACO is calculated for each product-equipment combination, and how the visual criterion is integrated. Traditional limits used as defaults without a toxicological rationale are now among the most common observations: they can remain as additional, more restrictive criteria, but not as the sole foundation.
The mistakes inspectors find most often
- A CVMP that formally exists but is disconnected from reality: activities closed in the plan with no trace in the protocols, or vice versa.
- Worst case not recalculated after the introduction of a new product with a stricter HBEL.
- Number of runs decided by habit ("three batches") without the risk assessment required by para. 10.13.
- Hold times and campaign length declared in the plan but with no supporting data.
- Maintenance of the validated state entrusted to periodic revalidation alone, with no monitoring and no link to change control.
GuideGxP recommendation
Treat the CVMP as a living document: reissue it at a defined frequency, link it to change control and actually use it for planning, not just to pass the audit. Before writing or rewriting your plan, line up three things: the updated inventory of shared products and equipment, the available HBELs (and the missing ones), and the worst-case matrix with signed rationales. Only then does it make sense to write the strategy. And set the re-evaluation triggers from the start: new product, new cleaning agent, engineering change, negative monitoring trend.
If you want an already structured path, our guide Cleaning Validation in GMP – Operational Guide to HBEL, MACO and Defensible Limits (second edition, with Excel and Word toolkit) walks step by step through exactly these chapters: from determining HBELs to calculating the MACO, down to plan and protocol templates ready to adapt.
