The difference between qualification and validation is one of the most persistent sources of confusion in GMP, even among experienced professionals: the two terms are often used interchangeably, but they are not synonyms. In short: qualification demonstrates that something — a piece of equipment, a facility, a system or a room — is installed and works as intended; validation demonstrates that a process, operated within established parameters, effectively and reproducibly produces a result that meets predetermined specifications. Qualification is about objects, validation is about activities. In this article we cover the official definitions, the stages of each path, a comparison table and the most common mistakes to avoid in audits.
Difference between qualification and validation: the official definitions
The primary regulatory reference in Europe is Annex 15 of EudraLex Volume 4 ("Qualification and Validation", effective since 1 October 2015), which dedicates Section 3 to qualification stages and Section 5 to process validation. According to the Annex 15 definitions:
- Qualification is the documented verification that facilities, systems and equipment comply with the approved design (IQ) and perform as intended throughout the anticipated operating ranges (OQ), up to demonstrating effective and reproducible performance based on the approved process (PQ).
- Validation (in particular process validation) is the documented evidence that the process, operated within established parameters, can perform effectively and reproducibly to produce a medicinal product meeting its predetermined specifications and quality attributes.
The same framing appears in ICH Q7 for active pharmaceutical ingredients: Section 12 defines process validation as "documented evidence that the process... can perform effectively and reproducibly" and frames qualification as the DQ, IQ, OQ and PQ stages. PIC/S takes the same approach in its PI 006 recommendations on Validation Master Plans and qualification (recently revised): first you qualify what is static, then you validate what is dynamic.
The qualification stages: from URS to PQ
Qualification is not a single event but a sequence of documented verifications, each with its own protocol and report. Annex 15 (Section 3) lists the typical stages:
- URS (User Requirements Specification): the set of user requirements that anchors the whole exercise — the requirements that are essential for quality must remain traceable throughout the lifecycle.
- DQ (Design Qualification): documented verification that the proposed design is suitable for the intended purpose.
- FAT / SAT (Factory / Site Acceptance Testing): testing at the vendor site before shipment and checks upon receipt at the manufacturing site, where appropriate.
- IQ (Installation Qualification): verification that the installation complies with the approved design — components, connections, instrumentation, supplier documentation.
- OQ (Operational Qualification): verification that the system performs as intended throughout the anticipated operating ranges, including "worst case" conditions where applicable.
- PQ (Performance Qualification): verification that the system, connected to the other systems and used with real or simulated materials, performs effectively and reproducibly under routine conditions.
Each stage is formally closed before moving to the next (or combined with a documented justification), and any deviations must be managed and closed before release for use.
Topics like this one — definitions, stages and audit traps explained in operational terms — are the bread and butter of The Pragmatic GMP, GuideGxP's free weekly newsletter: one practical, no-fluff email per week for people working in quality, validation and manufacturing. Subscribe here.
Validation: proving that the process is reproducible
Validation comes into play when the object of the verification is no longer the equipment but the activity that uses it. The most common cases in a pharmaceutical plant are:
- Process validation: demonstrates that the manufacturing process, within established parameters, yields a compliant product. Annex 15 (Section 5) allows the traditional approach, continuous process verification (in line with ICH Q8) or a hybrid approach, always supported by risk assessment.
- Cleaning validation: demonstrates that cleaning procedures reduce residues within toxicologically justified limits.
- Analytical method validation: demonstrates that the method is fit for purpose (accuracy, precision, specificity...).
- Transport, packaging and computerised system validation: extends the same logic to distribution, packaging and GxP systems.
The key point: you do not validate a process on unqualified equipment. Qualification is the prerequisite; validation builds on top of it. That is why the logical order is always URS → DQ → IQ → OQ → PQ → process validation.
Qualification vs validation: comparison table
| Aspect | Qualification | Validation |
|---|---|---|
| Object | Equipment, facilities, systems, utilities, rooms | Processes and procedures (manufacturing, cleaning, methods, transport) |
| Question it answers | "Is it installed and does it work as intended?" | "Does the process always produce a compliant result?" |
| Main reference | Annex 15, Section 3 | Annex 15, Section 5; ICH Q7 Section 12 |
| Typical stages / tools | URS, DQ, FAT/SAT, IQ, OQ, PQ | Validation protocol, validation batches or continuous verification, report |
| When it is performed | Before use of the system and after significant changes | After qualification, before commercial release of the process |
| Maintenance over time | Risk-based periodic requalification | Ongoing process verification throughout the lifecycle |
The most common mistakes (and how to avoid them in audits)
- Using the terms interchangeably in documents: if your SOP says "autoclave validation" when it means qualification, the inspector will notice the terminological inconsistency. Align your company glossary with Annex 15.
- Validating on unqualified systems: a PQ or process validation run on equipment without closed IQ/OQ is a classic finding.
- Losing traceability to the URS: quality-critical requirements must remain verifiable throughout the qualification path.
- Forgetting maintenance: qualification and validation do not "expire" on their own, but they must be maintained through periodic requalification, ongoing verification and change control — every change must be assessed for its impact on the qualified/validated state.
- Treating the VMP as window dressing: the Validation Master Plan must genuinely reflect the system inventory, risk-based priorities and the real status of activities.
GuideGxP recommendation
The fastest way to make the distinction operational is to fix it in your governing documents: a company glossary aligned with Annex 15, a Validation Master Plan that lists the qualification status of every system and the validation status of every process, and a URS → test traceability matrix. In an audit, being able to show within minutes "this system is qualified, this process is validated, and here is the evidence" is worth more than any statement of principle.
If you want to start from a solid baseline, the GuideGxP guide Validation Master Plan (VMP) in GMP covers validation governance, Annex 15 and PI 006-4, with ready-to-use Excel and Word templates.
