A utility qualified at the source can lose performance and quality in distribution. An undersized regulator, unused branch, wet filter or uncontrolled connection can make one user unsuitable while the main header pressure appears normal. Design must demonstrate that required conditions reach the actual point of use throughout relevant operating states.
This article covers clean steam, compressed air, process gases and vacuum distribution. Their mechanisms differ. Steam creates condensate, compressed gases experience pressure losses and contamination, and vacuum can carry vapour or liquid from the process towards pumps. Copying water-loop geometry without understanding these behaviours creates apparently rigorous rules with weak engineering justification.
Define the boundary through the final connection
[QRM] Draw the complete chain: generation or source, treatment, storage, header, branches, regulation, filtration, connection and process equipment. For each component identify fluid, function, operating conditions, possible contaminants and maintenance. Distinguish the supplier's contractual limit, the qualification boundary and the location of product exposure. These boundaries may be different and should not leave an unassigned connecting assembly.
A user matrix should describe normal flow, peak flow, simultaneous demand, acceptable minimum and maximum pressure, relevant temperature, quality and operating duration. Gas reference conditions are essential when comparing flow rates. Do not add quantities expressed at different pressures or temperatures without documented conversion. For vacuum, distinguish absolute pressure, gauge pressure and capacity at actual suction conditions.
Include future users as an explicit scenario rather than an undefined margin. An extension adds demand, volume, surfaces and possible failure modes. Capacity reserve includes piping, regulators, filters, drainage, measurement and the ability to isolate construction work. Spare compressor or pump capacity alone does not demonstrate readiness for expansion.
Regulatory context and engineering principles
[REGULATORY REQUIREMENT] EU GMP Annex 1, the 2022 revision, addresses utilities in sterile manufacture and backflow prevention where vacuum or pressure systems could risk product. Distribution must support quality appropriate to use. This does not prescribe universal geometry or one arrangement for steam, compressed air, gases and vacuum.
[GUIDANCE] ICH Q9(R1) supports risk assessment, while Annex 15 provides the GMP qualification and validation context. [TECHNICAL STANDARD] Piping codes and technical standards apply according to fluid, service, jurisdiction and design. A generic citation does not replace scope verification. Oxygen systems require particular attention to material compatibility and cleaning within relevant EIGA guidance boundaries.
[GEP] The layout decisions below require calculations, documentation and testing. [GUIDEGXP RECOMMENDATION] Approve a diagram showing boundaries, critical locations, sampling, isolation and maintenance modes before fixing routing and components. This gives operations and Quality an opportunity to identify interfaces that are difficult to correct after installation.
Headers, branches and topology
A ring can provide alternative paths and reduce some losses, but the benefit depends on sizing, demand and valve configuration. A branch can be easier to identify and isolate while being more sensitive to distance or local demand. Compare both under anticipated conditions, including partial closures for maintenance and the consequences of supplying users from only one direction.
Do not automatically transfer water-system circulation, velocity or branch-geometry requirements to dry gases. Instead assess contaminant retention, cleanability, water ingress, purging and sampling. An unused section can remain relevant if it retains construction residues or communicates with contaminated equipment. Absence of liquid in normal operation does not make the section irrelevant.
Routing should accommodate thermal expansion, support, access and identification. Penetrations into controlled areas should preserve external cleanability and segregation. Coordinate these interfaces with Cleanrooms & HVAC Systems, keeping room environmental control distinct from the utility's own quality and performance requirements.
Pressure loss and local regulation
Calculate performance from source to equipment using justified simultaneous demand, lengths, fittings, valves, regulators and filters under relevant conditions. Consider loaded filters, reduced supply pressure and users starting together. The central measurement may remain steady while one branch falls below its requirement during a short transition. A static pressure test will not necessarily reveal this behaviour.
Regulator selection includes capacity, stability, low-flow behaviour, response to changing inlet pressure and materials. Two-stage regulation may help particular applications but is not a general prescription. Define overpressure protection, measurement locations and failure consequences. A setpoint does not document the value actually available at the equipment.
Balance pressure-loss reduction with control performance. Increasing the entire network pressure to compensate for a local restriction can increase consumption, leakage and component loading without removing the cause. Check the filter, valve, connection and demand profile first. Retain comparison between calculations and measurements as evidence supporting the design and as a baseline for future changes.
Materials, connections and internal cleanliness
Materials must suit contact, impurities, pressure, temperature, cleaning, sterilisation where intended and gas compatibility. Stainless steel alone is not a complete specification. Define relevant characteristics of tubing, joints, seals and components. For oxygen, assessment of combustion risk and dedicated cleanliness cannot be replaced by the metal designation alone.
Define end protection, storage, fabrication, joint inspection and final cleaning. Mechanical test methods should preserve cleanliness and avoid leaving unmanaged water. Following intervention, return to service includes removal of residues, relevant verification and updated documents. External visual inspection does not establish acceptance of the internal surface or prove that temporary test connections were removed correctly.
Dedicated connections, readable identification and adapter control reduce misconnection risk. Hoses require identity, compatibility, routing, protected ends and management after use. A tightly controlled permanent network can lose protection when terminal accessories are freely replaced by unassessed components. The operating procedure should make the approved configuration easy to recognise and maintain.
Clean steam: deliver steam and manage condensate
Clean steam should reach the user in conditions appropriate to its function. Slope, low points, drainage, traps, separation and insulation require assessment during startup and steady operation. Suitable steam at generation can become unsuitable after condensate accumulation or heat loss along the route. Distribution assessment therefore needs evidence at the interface, not merely the generator's performance certificate.
Select traps for service, available differential pressure and expected loads, with installation and maintenance access that allow performance checks. Failed-open and failed-closed states have different consequences. Condensate discharge or return arrangements must avoid backpressure and contamination inconsistent with system function. Include the effect of simultaneous discharge from connected users.
Pressure and temperature do not establish all steam-quality attributes. Physical quality and condensate chemistry require distinct evidence. This article controls the utility to its interface; acceptance of the SIP sequence and its process effect belongs with Cleaning, CIP & SIP Systems. Feed-water requirements connect to Pharmaceutical Water & WFI Systems.
Filtration and point-of-use design
Define every filter's function: particles, coalescence, adsorption or microbial barrier. Sizing, orientation, drainage and access depend on that function. Differential pressure can indicate restriction, but does not demonstrate microbial integrity or remaining adsorption capacity. Verification should address the mechanism being controlled rather than the mere presence of a component.
The point of use should permit regulation, isolation and sampling without creating uncontrolled pathways. For aseptic processes, assess the sterilising barrier and subsequent segment under applicable requirements. The distance from filter to process matters because the remaining path must maintain the required state. Do not add a sample fitting that introduces an unmanaged surface or compromises the protected boundary.
Design sampling with the people performing the analysis. Access, connections, safe gas discharge, pressure and instrument space affect method practicality. A point that looks suitable on a drawing but cannot be reached during production will not support a reliable programme. Specify whether the sample represents the network before filtration or gas actually delivered after the terminal assembly.
Vacuum: also design for what comes from the process
Normal vacuum flow carries material from process towards pump. Vapour, aerosol, liquid and particles may therefore contaminate a shared network and reach separators or exhaust systems. Selection between central vacuum and dedicated pumps depends on load, compatibility, segregation and consequences of user interaction, alongside efficiency and maintenance needs.
Separators, traps and liquid collection should prevent carryover and handle contents under controlled conditions. Define levels, alarms, draining, cleaning and safe access. A full separator is not an effective barrier. Assess substances capable of reaching the pump and their operating conditions, including specific requirements for solvents or hazardous materials where present. The pump supplier needs this information to assess suitability.
Backflow can occur during pump shutdown, loss of power, isolation or pressure changes at users. Select appropriate non-return and isolation mechanisms and verify them in actual sequences. A valve shown on a diagram does not demonstrate adequate tightness or response. Consider migration of lubricants or service fluids where relevant to the selected technology.
Assess pump exhaust for contaminants, location, treatment and possible return towards air intakes or occupied areas. Standby pumps require checks after inactivity and verification of takeover. Two pumps connected to one separator or exhaust line may share a single failure point. Define maintenance arrangements that preserve segregation, including how contaminated collected material and replaced components are handled.
A design challenge matrix
| Event | Possible consequence | Verification to plan |
|---|---|---|
| Simultaneous demand peak | Insufficient branch pressure | Dynamic measurement under justified conditions |
| Loaded terminal filter | Reduced useful flow | Performance at relevant pressure loss |
| Steam startup | Condensate and unstable conditions | Drainage and stabilisation at the user |
| Vacuum pump stop | Reverse flow towards process | Isolation sequence and actual behaviour |
| Header maintenance | Interruption or contamination | Segregation, restoration and checks |
| Network extension | New losses and surfaces | Calculation review and targeted sampling |
Commission the arrangements operators will actually use
Installation verification should reconcile drawings, labels, valve orientation, supports, material records and test boundaries with the physical system. Confirm that temporary spools, flushing hoses and bypasses are either removed or deliberately controlled. An accurate drawing is operational evidence only when it corresponds to the installed configuration.
Functional testing should include isolation and reinstatement, not just normal delivery. Confirm that maintenance can be performed without connecting incompatible services or exposing a protected segment. For critical measurements, verify the physical location as well as the tag displayed in the control system. A correct signal assigned to the wrong branch can produce a convincing but misleading commissioning record.
The handover should identify the minimum evidence for returning an opened segment to use. Scope depends on the intervention and contamination risk. Replacing a gauge, extending a header and opening a vacuum separator need different assessments. A single instruction to restart after maintenance does not define those differences or establish who authorises process use.
Example: extending an existing gas network
A project adds a remote user based on nominal spare capacity at the source. Static testing appears satisfactory. When two machines start together, the local regulator and filter create pressure loss that alters flow. The team measures actual demand, updates the model, changes the relevant components and repeats the dynamic challenge.
It also checks that the extension was cleaned, identified and connected along the approved route. Point-of-use analysis confirms relevant quality attributes. This avoids treating a pressure test without load as qualification of distribution. Acceptance covers both delivery performance and preservation of quality, with recorded conditions that can be reproduced during later troubleshooting.
Checklist before approving the layout
- Supply and qualification boundaries include the relevant final connection.
- Demand, simultaneous use and reference conditions are documented.
- Loss calculations include components and realistic operating states.
- Materials and cleanliness suit the particular service.
- Steam drainage and vacuum contamination have dedicated strategies.
- Sampling and maintenance are physically practical.
- Backup, isolation and return to service can be verified.
- Changes update affected drawings, assessments and tests.
A useful network is one whose behaviour can be explained, whose components can be accessed and whose quality can be demonstrated at the user. The wider architecture and related articles are available in Critical Utilities Systems.
References
- EudraLex Volume 4: Annex 1, 2022, and Annex 15, effective since 2015.
- ICH Q9(R1): quality risk assessment.
- EIGA Doc 13/20: gaseous oxygen distribution within its stated scope.
- EIGA Doc 33/18: cleaning and preservation for oxygen service.
