Pharma Engineering Insights

How to Select an Aseptic Fill-Finish, RABS or Isolator Supplier: RFP, Technical Evaluation and TCO

When the filling line and the barrier come from different suppliers, the interface ends up with no owner. How to build a comparable tender from URS to RFP, evaluate the technical bid and model TCO across the lifecycle.

G GuideGxP 9 min read
✓ Official sources and references ✓ Practical approach ✓ For pharmaceutical professionals
GUIDEGXP · PRACTICAL GMP INSIGHTS
Sezione di una linea di fill-finish asettico in barriera che evidenzia il punto in cui il trasporto attraversa la parete dell'involucro

Two bids for the same vial line with a barrier. The first quotes line and isolator within a single scope. The second quotes the line only, with a two-line note: "barrier supplied by others, mechanical and electrical interface to the client's account". It costs materially less, and that is the one the investment committee leans towards. Nobody, during the tender, asked who designs the enclosure penetration for vial transit, who is answerable for its tightness, who qualifies the airflow above the filling point when the machine table is one supplier's and the plenum unit another's.

Selecting the supplier of an Aseptic Fill-Finish line, a RABS or an isolator is a technical exercise, not a commercial one, and it is a lifecycle decision: it is made in a few weeks of tendering and produces effects across twenty years of qualification, service, spare parts, control obsolescence and the ability to intervene without compromising Grade A.

Where the problem starts: the interface nobody bought

An aseptic line with a barrier is a system of three subsystems — filling and closing, the barrier enclosure with its air handling, and automation — plus the interfaces between them. With different suppliers the interfaces still exist, but they appear in neither scope of supply. The site inherits them by subtraction.

The chain of consequences is predictable. An ambiguous URS produces bids that cannot be compared, because each supplier fills the gap with its own standard configuration. Bids that cannot be compared force a decision on price, the only homogeneous quantity left. That decision produces a contract in which undeclared exclusions become mid-project variations: a DQ that no longer traces to the URS, and a qualification whose first field test uncovers requirements never assigned.

The regulatory frame applicable to selection

SourceStatus and dateWhat it actually binds
EU GMP Annex 152015 revision, effective 1 October 2015; under revision, consultation closed 9 April 2026, no adopted textURS → DQ → FAT/SAT → IQ/OQ/PQ chain and change control; requirements traced across the lifecycle. The 2015 text remains the only one in force and does not use the word commissioning
EU GMP Annex 1, C(2022) 5938 finalApplicable since 25 August 2023; only 8.123 deferred to 25 August 2024Barrier design (4.18, 4.19), authorised and qualified interventions (8.16, 9.34), CCS as the frame for engineering choices (2.3)
ICH Q9(R1)Step 4 on 18 January 2023QRM and proportionate formality: how much evidence to demand, and on which requirements
EU GMP Annex 112011 text still the only one in force; draft consultation closed 7 October 2025Computerised systems, supplier responsibilities, access management. The draft is not a requirement
ISPE GAMP 5 Second Edition2022, currentRisk-based software lifecycle and supplier assessment. Non-regulatory industry guidance

From URS to RFP

The URS is the tender document

If the URS leaves glove port positions, intervention strategy, automation scope or responsibility for bio-decontamination open, every bid will answer its own URS. Each requirement needs a stated verification method and a traceable identifier: the traceability Annex 15 expects across the lifecycle [REQUIREMENT], built during the tender or not at all. Structure and examples are in URS for Aseptic Fill-Finish & Barrier Systems.

RFI and RFP answer different questions

The RFI establishes who is admissible: real aseptic capability, engineering capacity, service in the site's geography, experience on the container format. The RFP obtains comparable answers from those already admissible. Confusing the two yields ten bidders and no technical evaluation within project timelines.

The four conditions of comparability

Two bids compare only if they share: the same documentary basis, meaning the same URS and layout revision; the same scope, with interfaces listed and assigned one by one; the same response structure, a site form in which each requirement is answered compliant, compliant with deviation, or non-compliant with a technical comment; and declared exclusions. A free-format bid shifts normalisation onto the site [GEP].

Technical bid evaluation

Technical bid evaluation assesses demonstrated capability, not claims. The decisive distinction is between aseptic experience and machine experience: a builder may have decades of filling machines and no Grade A experience. A supplier who cannot describe how its own equipment is intervened upon — which interventions, from which glove port, with which sterile tools — is a red flag: someone will have to write the list of authorised and qualified interventions required by Annex 1 8.16 [REQUIREMENT].

CriterionWhat to ask in the RFPEvidenceRed flag
Real aseptic experienceInstallations with the same barrier and formatContactable references; a visit in productionReferences used as logos, plants that cannot be visited
Engineering capacityWhich disciplines are in-house and which subcontractedNamed project org chart and subcontracting matrixOne project manager in front of undeclared subcontractors
Grade A intervention strategyInterventions per critical operation, ergonomics, toolsMock-up, reach proven at FAT, airflow visualisation"You get in through the glove", with no intervention map
Filling capabilityDosing principle, product path, changeover, IPCTrials on product or surrogate under stated conditionsPerformance quoted only on other formats
Barrier capabilityWho designs the air handling, who runs bio-decontamination, who proves it worksTemplate protocols for cycle development and qualificationCycle development stated as included but not described
Automation and roboticsControl architecture, recipes, alarms, audit trailSample functional specification and traceability matrixSoftware described only as HMI screens
Software lifecycleVersioning, support duration, patchesSupport plan consistent with GAMP 5No declared end-of-support date
Service and sparesResponse times, technicians' base, spares over timeDraft SLA and spare parts listSLA deferred to the post-contract phase

Supply models and ownership of the interface

There is no superior model: there is the one consistent with the integration capacity the site has actually budgeted in engineering hours, not in good intentions.

ModelWhat it simplifiesWhat it complicatesWhere the interface ends up
Integrated supplierOne system owner, one FAT, coherent automation and documentationNarrows component choice: you accept the barrier or filling technology that supplier knows how to build; more service lock-inWith the supplier, answerable at FAT and in qualification
Separate line and barrierMaximises technical choice and competition on each subsystemThe site becomes integrator: mechanical, air, electrical and signal interfaces, FAT coordination, crossed non-conformitiesWith the site, unless an interface contract assigns it to one of the two
General contractorTransfers integration to a third party with dedicated resourcesAdds a layer between site and builders, lengthens the decision chain, dilutes detailed knowledgeWith the general contractor, but only for the interfaces listed in its scope

In every model the interface must be a contractual object: a named owner, a list of physical and logical contact points, someone responsible for qualifying each, and an escalation rule. It is the only defence against two suppliers both correctly demonstrating that the problem is not theirs.

Contracted execution and lifecycle

FAT, commissioning, CQV, turnover

FAT, SAT, commissioning and qualification are four distinct things: the contract must say which the supplier executes, which it supports and which it undergoes. Annex 15 governs the URS → DQ → FAT/SAT → IQ/OQ/PQ chain but does not name commissioning, which must be defined contractually [GEP]. Contract the FAT content and pass criteria, the tests repeated at SAT, the turnover package, documentation and training with a completion criterion. The wider strategy is in Qualification of Aseptic Fill-Finish lines, RABS and isolators.

Service, obsolescence, remote access

The lifecycle is negotiated before signature, while leverage exists: response and restoration times, critical spares with a stated last time buy policy, control and software obsolescence with end-of-support dates, upgrade conditions and responsibility for the requalification they trigger. Remote access deserves its own clause: who connects, with which named credentials, under which prior approval, with which logging and GMP impact assessment, consistent with Annex 11 in its 2011 text [REQUIREMENT] and GAMP 5 [STANDARD].

TCO as a method

TCO is not a number to request from the supplier: it is a site model applied identically to all bids. The items are CAPEX, installation, qualification, spares, consumables — gloves and filters first — service, planned downtime for bio-decontamination and changeover, software upgrades and associated requalification, training, obsolescence and end of life. The rule is single: two bids are compared over the declared expected lifecycle, on identical utilisation assumptions, not on purchase price [GUIDEGXP]. The quantities come from site data, manufacturer data and production assumptions, and must be stated. The cost of not being able to intervene is often the item that reverses the comparison: see troubleshooting and retrofit.

QRM: how much evidence, and on what

ICH Q9(R1) asks for formality proportionate to risk: in a tender, not every criterion deserves the same verification effort [QRM]. A risk assessment on the URS identifies the requirements whose failure affects sterility assurance — barrier integrity, first air over the critical point, bio-decontamination effectiveness, intervention management, data integrity — and for those you demand documentary evidence, proof at FAT and verification on an existing installation; for the rest a contractual statement suffices. The selected choices then become technical controls to be described in the CCS under Annex 1 2.3 [REQUIREMENT].

Worked example: Site Antlia

"Site Antlia" is a realistic but entirely fictional example. The site is replacing a vial line and selects an isolator. It receives two bids: one integrated, one made of a line plus an isolator from another supplier, cheaper and with a more convincing dosing unit. It picks the second, on a technically sound argument about the machine.

The error is not the machine: it is having evaluated two subsystems and no interface. The RFP listed filling requirements and barrier requirements, none for the point where the line crosses the enclosure. Design review reveals that the line builder assumes its own machine table while the isolator supplier has quoted one of its own; that the interlocks between line stop and pressure alarm have no agreed protocol; and that the airflow visualisation study on the assembled configuration is in neither bid.

The correction was contractual before technical: one of the two named interface owner under a dedicated order, an interface control document listing physical, air and signal contact points, a joint FAT on the assembled configuration, the DQ redone against the interface requirements. The initial saving was largely absorbed: the differential between an integrated and a split model is not a saving until integration has been budgeted.

Levels of prescriptiveness

StatementLevelSource
User requirements are traced through qualification and change control[REQUIREMENT]EU GMP Annex 15 (2015)
A list of authorised and qualified interventions must exist[REQUIREMENT]EU GMP Annex 1, 8.16 and 9.34
Supplier verification is proportionate to the risk of the requirement[QRM]ICH Q9(R1)
The control system software lifecycle is assessed risk-based[STANDARD]ISPE GAMP 5 Second Edition (2022)
Commissioning must be defined contractually: Annex 15 does not name it[GEP]Engineering practice
Compare the declared expected lifecycle, not the price[GUIDEGXP]GuideGxP editorial recommendation

Tender checklist

  • Freeze the URS revision that forms the tender basis.
  • Declare the supply model and its rationale before issuing the RFP.
  • List the mechanical, air, electrical and signal interface points, with an owner each.
  • Impose a single response format, with explicit exclusions.
  • Verify references with those who run the plant, not those who bought it.
  • Request the Grade A intervention map before looking at price.
  • Distinguish FAT, SAT, commissioning and qualification in the contract.
  • Define the turnover package with acceptance criteria.
  • Negotiate SLA, spares, software end of support and remote access before signature.
  • Apply one TCO model to all bids and transfer the selected controls and residual risks into the CCS.

Recurring errors and red flags

The first warning sign is a free-format bid against a structured URS: not flexibility, but the impossibility of comparison. The second is the exclusion inferred rather than declared. The third is the supplier who describes the machine superbly and the intervention strategy vaguely: if it cannot say how Grade A is entered, the site writes the intervention list after installation. The fourth is the reference given as a name, not a contact. The fifth is automation presented only as screens, with no versioning or end of support. The sixth is an SLA deferred to the post-contract phase, when leverage is gone. The seventh, the costliest, is comparing an integrated and a split bid without estimating integration hours, extra FATs and crossed non-conformities.

Selecting an aseptic supplier is documentary clarity before negotiation: you buy what you managed to describe and inherit what you failed to assign. The same approach runs through The Pragmatic GMP.

Key points

  • If the line-to-barrier interface is not contractually assigned, it belongs to the site.
  • An integrated supplier solves the interface but narrows component choice; two suppliers do the opposite.
  • On an ambiguous URS, bids are not comparable: only price remains.
  • Aseptic experience and machine experience are not the same: the difference shows in intervention strategy.
  • FAT, SAT, commissioning and qualification must be distinguished in the contract.
  • Service, spares, end of support and remote access are negotiated before signature.
  • TCO is one method applied to all bids, not a number supplied by the vendor.
  • Choices made during the tender become technical controls and residual risks in the CCS.

References

THE PRAGMATIC GMP · EVERY MONDAY

The GMP topics that matter, in 7 minutes.

One GMP topic, one real-world example and one practical action, based on official sources and inspection trends.
Discover The Pragmatic GMP