EU GMP Annex 15 ("Qualification and Validation") is the text that governs qualification and validation at every European pharmaceutical site: from the Validation Master Plan to the qualification of equipment and utilities, from process validation to cleaning validation, through to maintaining the validated state. The version in force is the 2015 one, operational since 1 October 2015, but 2026 has changed the landscape: PIC/S published the revised recommendations PI 006-4, effective 1 October 2026, and the joint EMA-PIC/S drafting group has started the revision of the Annex itself. This guide covers the requirements of the text in force, the operational stages with their expected evidence, and what is worth preparing now.
EU GMP Annex 15: what the text in force requires
The 2015 Annex 15 replaced the event-based mindset (qualify, validate three batches, file the report) with a lifecycle approach aligned with ICH Q8, Q9, Q10 and Q11. Its three core principles are:
- Planning: all qualification and validation activities must be planned and documented in a Validation Master Plan (or equivalent document) defining policy, organisation, system inventory, acceptance criteria and the strategy for handling deviations and changes during validation.
- Quality Risk Management: the scope and depth of qualification and validation are decided through a documented, justified risk assessment, not through one-size-fits-all templates.
- Lifecycle: the validated state is not achieved once and for all; it is maintained through ongoing monitoring, periodic review and change control, from design to decommissioning.
The text also covers areas that are often underestimated: verification of transportation, validation of packaging, qualification of utilities and validation of test methods. One fixed point to remember in audits: retrospective validation is no longer an acceptable approach.
From the VMP to qualification: URS, DQ, IQ, OQ, PQ
For equipment, facilities, utilities and systems, Annex 15 describes a qualification sequence in which each stage produces specific evidence. The table summarises the stages with their objective and expected evidence:
| Stage | Objective | Expected evidence |
|---|---|---|
| URS | Define user requirements and essential GMP requirements | Approved URS document, requirements traceable through the later stages |
| DQ | Verify that the proposed design is suitable for the intended purpose | Documented design review against the URS |
| FAT / SAT | Test the system at the supplier and after installation on site | FAT/SAT reports; tests may reduce IQ/OQ effort where justified |
| IQ | Confirm installation in accordance with the design | Checks of components, instrumentation, calibrations, supplier documentation |
| OQ | Demonstrate operation across the operating ranges | Tests at operating limits ("worst case"), alarms, interlocks, SOPs and training in place |
| PQ | Demonstrate consistent performance under real conditions of use | Tests with production materials or qualified substitutes, justified acceptance criteria |
Stages may be combined (e.g. IQ/OQ) where justified. What the inspector looks for is not the acronym but the logical chain: every URS requirement must be traceable to the test that verifies it and to its evidence.
Qualification and validation are among the fastest-moving GMP areas: between PI 006-4 and the ongoing Annex 15 revision, staying current is half the job. Subscribe to The Pragmatic GMP, GuideGxP's free weekly newsletter: a practical, no-frills analysis of validation and compliance news every week.
Process validation: the three approaches and ongoing verification
For process validation, Annex 15 allows three routes, consistent with FDA's 2011 Process Validation guidance:
- Traditional approach: a defined number of validation batches manufactured under routine conditions. The number of batches must be justified by risk and process knowledge: "three batches" is a convention, not a written requirement.
- Continuous Process Verification: for processes developed under Quality by Design, continuous verification of process data can replace the validation batch campaign.
- Hybrid approach: a combination of the two, today the most common in industrial practice.
Whatever the initial approach, what follows is the same for everyone: Ongoing Process Verification throughout the lifecycle. The site must monitor critical process parameters (CPPs) and critical quality attributes (CQAs), trend them — typically with statistical tools and within the Product Quality Review — and catch drifts before they become out-of-specification results. This is where many companies are weak in inspections: the validation campaign is impeccable, but the evidence that the process has remained in control in the following years is missing.
Cleaning validation, transportation and the validated state
Three areas of Annex 15 deserve particular attention because they generate recurring findings:
- Cleaning validation: residue limits must be based on a toxicological evaluation (Health Based Exposure Limits, per the EMA guideline on PDEs), not on conventional thresholds such as "10 ppm" or "1/1000 of the dose". Recovery studies for the sampling methods and data-supported hold times (dirty and clean) are also required.
- Verification of transportation: shipping routes must be assessed for real and seasonal conditions, with monitoring of critical conditions; for temperature-controlled products, qualification of the shipping configurations is an integral part of the framework.
- Change control and requalification: every change to equipment, utilities and processes must be assessed for its impact on the validated state, and the need for periodic requalification must be defined on a risk basis, not with uniform fixed intervals.
What changed in 2026: PI 006-4 in force and the Annex 15 revision under way
2026 brought two concrete developments. First: on 30 July 2026 PIC/S published the revised "Recommendations on Qualification and Validation" (PI 006-4), effective 1 October 2026. The document consolidates the four historical recommendations — Validation Master Plan, Installation and Operational Qualification, non-sterile process validation and cleaning validation — into a single text, and it is the reference PIC/S inspectorates now use to read validation dossiers.
Second: EMA and PIC/S published a joint concept paper for the revision of Annex 15, with the public consultation closed on 9 April 2026 and a July 2026 corrigendum updating its timetable. The stated objectives include extending the scope to active substance manufacturers and aligning with ICH Q9(R1). Mind the regulatory status, though: until the new text is adopted, the binding reference remains the 2015 Annex 15 — the concept paper signals the direction, it does not yet impose requirements.
GuideGxP recommendation
Don't wait for the revision to fix the foundations. Three actions that pay off immediately: first, realign your VMP with PI 006-4 — updated system inventory, explicit risk-based strategy, justified requalification criteria — because it is the document every validation inspection starts from. Second, verify that cleaning validation limits are based on documented HBELs and that recovery studies cover the methods actually in use. Third, build (or reinforce) Ongoing Process Verification: an annual CPP/CQA trend review linked to the PQR is the evidence that the validated state is maintained, not merely declared.
To work on these points with a ready-made method, GuideGxP's Operational Guide to GMP Annexes 1, 15, 16 and 20 dedicates detailed checklists, best practices and ready-to-use operational tools to Annex 15, from the VMP to ongoing verification.
