How to Select a Pharmaceutical Water System Supplier: RFP, Technical Evaluation, Service and TCO

Three bids for a new WFI system are on the table. The prices sit in a narrow band, the documentation is equally thick, all three declare GMP compliance and cite the same standards. The difference does not show at signature: it shows at FAT, when it emerges who included the protocols and who quotes them separately; in year three, when a spare part is needed and turns out to be proprietary; at the first end-of-life notice for the control platform, which nobody asked about during the tender.

Selecting a pharmaceutical water system supplier is not a purchasing act: it is the first lifecycle decision. Annex 1, clause 6.7, requires the water treatment and distribution plant to be designed, constructed, installed, commissioned, qualified, monitored and maintained so as to prevent microbiological contamination. Seven verbs: the first five are largely contractual, the last two remain with the site but become easy or difficult depending on how the first five were executed and documented. A tender that buys only hardware covers two verbs out of seven and leaves the rest without an owner.

What you are actually buying

The scope of supply has three layers, to be assessed separately: the physical system (generation, storage, distribution, instrumentation, panels, software), which absorbs almost all the attention during the tender; the path to the qualified state (design documentation, workshop and field verification, protocols, execution, as-built), which determines how much time passes between delivery and the first release for GMP use; and the support across the useful life (service, calibration, maintenance, spare parts, upgrades, obsolescence), the least comparable layer in a bid and the heaviest on total cost.

ICH Q10 (Step 4 of 4 June 2008) explicitly addresses outsourced activities and purchased materials: responsibility remains with the authorisation holder, and the quality system must provide for supplier assessment before the work is placed, documented mutual responsibilities, and performance monitoring over time. Translated into tender terms: supplier qualification precedes award rather than following it; the split of responsibilities lives in the contract and not in the correspondence; the supplier continues to be evaluated after handover, against indicators decided beforehand.

The URS is the tender specification

The tender does not define the requirements: it inherits them. If the water system URS is approved, traceable and written with verifiable requirements, bids become comparable line by line. If it is generic, every supplier fills the gaps with its own standard configuration, the comparison slides onto price, and every later clarification becomes a variation order with added value for whoever proposes it.

Three attributes make a URS usable as a tender basis. Every requirement is verifiable, meaning it states how satisfaction will be demonstrated. Every requirement carries a stable identifier that reappears in the response matrix, in the protocols and in the final traceability. Requirements are distinguished by nature: regulatory obligation, referenced standard, site practice, preference. A supplier is entitled to know what is negotiable; the buyer has an interest in knowing it before receiving bids.

One point belongs to the tender but cannot be delegated: the WFI production route. Guideline EMA/CHMP/CVMP/QWP/496873/2018, in force since 1 February 2021, refers to the revision of Ph. Eur. 0169 allowing production by a purification process equivalent to distillation, and requires prior notification to the supervisory GMP authority before introducing RO. That is a site obligation, to be planned before the order rather than discovered during qualification.

RFI and RFP: two documents, two purposes

The RFI qualifies the market and shortens the list: it verifies that the supplier can do that work, at that scale, with that technology, in that country. It does not ask for prices: a price given against incomplete requirements creates an anchor that never moves afterwards. Useful questions: references on systems comparable in technology and capacity, with year and contact permission; which part of the engineering is in-house; where fabrication takes place and at whose premises; who develops the control software; how service is organised in the country of installation and in which language it operates; in which languages documentation is available; which critical sub-suppliers recur.

The RFP produces comparable bids, and comparability is imposed through the response format. The tender package contains the URS with requirement identifiers, a mandatory response matrix, the index of expected documentation deliverables, the proposed split of responsibilities, service and spare part requirements, and the cost breakdown structure. The matrix is completed line by line with only four options — compliant, compliant with deviation, not compliant, alternative proposed — and each line requires a reference to the document that demonstrates it. A free-format bid is not richer: it is simply not assessable.

Supplier qualification

This is a process distinct from bid evaluation, and it closes before award. Its depth scales with risk following the logic of ICH Q9(R1) (Step 4 of 18 January 2023). Three levels: documentary assessment (questionnaire, system certifications, verified references, handling of internal non-conformances, design change control); on-site audit, which shows what the questionnaire hides — traceability of incoming materials, weld documentation, where non-conforming parts end up, who signs the calculations; and extension to critical sub-suppliers, because a supplier that does not name its subcontractors is asking to be assessed for a capability it does not directly hold.

Engineering capability. Who produces and signs P&IDs and layouts, who performs the hydraulic and thermal sizing, who defines the sanitisation logic, who manages the interface with site utilities. The decisive question is not whether an engineering department exists, but whether it has designed systems with the same risk profile, and whether those people will be in the design review.

Fabrication capability. Own workshop or subcontractor, with name and location; welder and welding procedure qualification; weld log and inspection plan; control of surface finish and surface treatment; material certificates and traceability down to the installed component; final cleaning and passivation with the technical reference stated — ASTM A967/A967M-25 and ASTM A380/A380M-25 are the documents a specification can invoke.

ASME BPE can be invoked in the specification for materials, joints, dimensions and tolerances, surface finishes, system design and process instrumentation, with two cautions. The applicable edition must be stated and fixed in the contract together with the relevant parts: "compliant with ASME BPE" without an edition and without parts is not a verifiable commitment. And the standard's numerical criteria are not reproduced in the specification: they are invoked by reference, and verification takes place against the original document held by both parties.

For membrane-based WFI generation there is ISO 22519:2023 (2nd edition, 4 April 2023). Two cautions that work as a tender filter: the 1st edition of 2019 has been withdrawn since 4 April 2023, so citing it in a 2026 bid signals an out-of-date specification; and the standard is developed under ISO/TC 282, a committee dedicated to water reuse rather than pharmaceutical manufacturing, which makes it a useful technical reference but not a substitute for GMP expectations. ISO/DIS 25413 on PW and WFI storage and distribution is still a draft under development, with the DIS ballot opened on 21 July 2026: it may inform a technical discussion, it cannot appear as a contractual requirement. The comparison of production routes is covered in membrane WFI generation versus distillation.

Technical bid evaluation

Evaluation works if it is sequential and if every step has a documented outcome.

1. Completeness. Are all required deliverables present, in the required format? Gaps are challenged before the content is read.
2. Compliance. The response matrix is read line by line: any "compliant" without a documentary reference is an answer not received; every deviation and every alternative becomes an open point.
3. Scope normalisation. Bids are brought back to the same boundary: who excluded pretreatment, insulation, points of use, field panels, commissioning, protocols. Without this step you are comparing different objects.
4. Clarifications. Written and traced only: a verbal clarification that changes the scope does not exist at handover.
5. Qualitative assessment. Scorecard applied to already normalised bids, with criteria and weights approved before opening.
6. Commercial comparison and TCO. Last, and only on technically acceptable bids.

The scorecard below is delivered with the weight and score columns empty: weights depend on the system's risk profile, on site maturity and on the maintenance strategy, and assigning them is part of the work. The same methodological structure, applied to an environmental monitoring system, is described in selecting an EMS supplier.

The supplier inside the qualification path

Annex 15, 2015 revision operational since 1 October 2015, is the qualification framework the supplier must be able to support. A concept paper on the EU-PIC/S revision was published on 9 February 2026, with a corrigendum of 16 July 2026 and consultation closed on 9 April 2026: Annex 15 has not been revised, and a supplier citing the concept paper as an applicable requirement is declaring an inaccurate regulatory reading.

The distinction to be contracted is sharp: the supplier does not qualify on the site's behalf. It provides design, fabrication evidence, execution of tests under approved protocols and as-built documentation; the site approves the protocols, evaluates the results and owns the qualified state. ASTM E2500-25 (approved 1 April 2025) describes a science- and risk-based approach to specification, design and verification, in which supplier documentation may be used as verification evidence provided the site assesses and documents its adequacy and reliability. It is a case-by-case decision, and it has to be taken during the tender because it determines what is asked of the supplier and in what format.

To be fixed before the order: who drafts and who approves each protocol; which tests are executed in the workshop and which in the field; how deviations found during testing are handled; under what conditions a handover closes with open actions, who closes them and within what timescale; which documents form the as-built package; and ownership of the documentation, with the right to reuse it in a future intervention without depending on the original supplier. The full sequence is covered in FAT, SAT, IQ, OQ and PQ of water systems.

Automation: what must enter the contract

The control system is where the continuous monitoring required by Annex 1 clause 6.15 for WFI systems becomes a retained record, and where the turbulent flow of clause 6.9 and the predetermined sanitisation schedule of clause 6.12 become managed parameters. A few points must be defined, all verifiable: who develops the software and to which site standards; what is delivered beyond the executable, that is configuration, development documentation and administrative credentials; who may modify the logic without voiding the warranty; how audit trail, user accounts, backup and restore are handled; what lifecycle is declared for control hardware and software platform.

One point almost never contracted: supplier remote access, to be defined as access granted on request, traced and revocable, not as a permanent connection included in the service. The applicable version of Annex 11 remains the January 2011 one: the draft revision consulted on until 7 October 2025 has not been adopted and must not be accepted as a compliance basis in a bid. The topic is developed in automation, SCADA and data integrity.

Service, calibration, maintenance, spare parts

This is where bids look most alike and differ most. The criterion is not how fast the declared service is — a time without measurement and without consequence is not a commitment — but how defined it is.

• SLA. To be defined: the scope covered and excluded; severity levels, with an operational definition of downtime that recognises that a stopped utility can stop production; the call channel and the escalation path with roles; the competence of the resource assigned to each level; the working language; remote versus on-site intervention; the performance measurement method and the contractual consequence of failure to meet it. The values are proposed by the supplier and negotiated by the site: no regulatory reference times exist.
• Calibration. Instruments covered, distinction between GMP-critical and process instruments, who performs the work, traceability to reference standards, retention of certificates, handling of out-of-tolerance results and the related impact assessment. For TOC and conductivity the governing documents remain USP <643> and <645>: no ISO, ASME, ASTM or CEN standard dedicated to the qualification of that instrumentation has been identified.
• Maintenance. Preventive plan supplied with the system rather than on request, distinction between preventive and corrective, ownership of the intervention history, record format. Annex 1 clause 6.7 includes "maintained" among the verbs describing a compliant system: maintenance is part of the demonstration, not an accessory service.
• Spare parts. Critical spares list delivered with the bid, distinguishing proprietary from commercial items, lead time declared by the supplier, availability commitment over time, and the right to source commercial parts directly from the component manufacturer. A proprietary spare is not a defect; an undeclared proprietary spare is.
• Warranty. The start date must be fixed — delivery, SAT acceptance or qualification release can be months apart — and what voids it must be listed in writing: third-party interventions, software modifications, non-original spares, operation outside declared parameters. If it lapses on any third-party intervention, the site has just accepted a service exclusivity for the whole period.
• Upgrades and obsolescence. End-of-life notification policy, proposed migration path, impact on the validated state and on who manages it. The topic connects to periodic review and retrofit: a component declared obsolete without a replacement path becomes an unplanned change control.

For WFI produced by means other than distillation, WHO TRS 1025, Annex 3 (2020) requires validated thermal and/or chemical sanitisation at specified intervals, the intervals being set by the manufacturer: in a tender this translates into asking for the intended cycles and the supporting data, and into planning their validation as part of the path.

TCO: a structure, not a number

TCO is not the price plus maintenance: it is the cost of owning that system over the chosen horizon, at constant scope. The table is a structure of cost items; the values are populated with your own site data and the quotations received. Anyone offering generic percentage splits is selling a model, not an estimate.

Three rules make the comparison honest: the same time horizon for all bids, stated; the same scope, after technical normalisation; explicit assumptions kept separate from data, so that the decision remains readable when someone asks two years from now why it was made that way.

Worked example: Site Delta

Site Delta is an illustrative example, not a real case. It has to replace its WFI system and receives three bids, A, B and C: on first reading A is cheapest, B is the most documented, C sits in between.

The completeness check erodes A's advantage: the protocol index and the deliverables list are missing, the response matrix is completed only in the process sections, eight "compliant" answers on documentation requirements carry no reference, and points of use and insulation are excluded from scope; normalisation brings A back to the same boundary as the others and changes its position. B is complete, but invokes ASME BPE with neither parts nor edition and cites ISO 22519:2019: two written clarifications close the first point and correct the second. C declares the control platform lifecycle and attaches the critical spares list, but defines neither severity levels nor escalation in service: the request for completion produces an SLA structure that did not exist in the bid.

The useful outcome is not the ranking, which depends on the weights Site Delta will assign. It is that after normalisation the three bids describe the same object for the first time, and that three relevant elements surfaced before the order rather than during qualification.

Red flags observable in a bid

• Response matrix not completed line by line, or "compliant" without a reference to the document that demonstrates it.
• "Compliant with ASME BPE" without applicable parts and without an edition fixed in the contract.
• Reference to ISO 22519:2019, withdrawn since 4 April 2023, or citation of the standard without an edition; ISO/DIS 25413 presented as an applicable standard rather than a draft under DIS ballot since 21 July 2026.
• The Annex 15 revision concept paper, or the Annex 11 draft revision, cited as current requirements; "validated system" or "Part 11 compliant" presented as product attributes, without a requirements traceability matrix.
• No documentation deliverables list with format, language and delivery time; as-built not mentioned; FAT and SAT protocols neither attached nor indexed, with acceptance criteria and drafting responsibilities undeclared.
• Engineering and fabrication not attributed: what is in-house and who the critical subcontractors are does not appear; welder qualification, weld log and inspection plan not mentioned for a stainless steel system.
• No statement on the lifecycle of control hardware and software platform; permanent supplier remote access presented as an included benefit.
• Service described with adjectives — fast, dedicated, priority — without severity, channel, escalation, measurement and consequence.
• Spares list absent or deferred "on request", with no distinction between proprietary and commercial; warranty with no declared start date and no written list of what voids it.
• Recurring costs absent from the bid — consumables, membranes, resins, analysis — and therefore excluded from the commercial comparison.
• A markedly lower price without the excluded scope being declared.
• No commitment on ownership and reusability of as-built documentation and software configuration.
• A technical alternative proposed without an impact analysis on URS, qualification and monitoring.

Common mistakes on the buyer's side

• Tender launched before the URS is approved: the bids capture requirements that will change.
• Criteria and weights defined after receiving the bids; technical and commercial envelopes opened together.
• Quality involved only after award, when qualification responsibilities have already been allocated.
• Clarifications handled by phone, neither traced nor shared with all bidders; an evaluation panel whose composition changes between phases.
• Supplier qualification started after the order, when its outcome can no longer change the decision, and no provision for how supplier performance will be measured after handover.

The full picture, from requirements to lifecycle, is collected in the Pharmaceutical Water & WFI Systems hub. If this kind of analysis is useful in your daily work, The Pragmatic GMP collects technical insights and regulatory updates with the same approach.

Key takeaways

• The seven verbs of Annex 1 clause 6.7 are the list of contractual deliverables: a tender covering two of them leaves the rest without an owner.
• RFI and RFP have different purposes; bid comparability is imposed through the response format, not hoped for. Supplier qualification precedes award and, in the logic of ICH Q10, continues as performance monitoring after handover.
• ASME BPE is invoked by fixing parts and edition in the contract; ISO 22519:2023 replaced the withdrawn 2019 first edition; ISO/DIS 25413 remains a draft and is not a requirement; the Annex 15 in force is the 2015 revision, and the 2026 concept paper is not cited as a requirement.
• ASTM E2500-25 allows supplier documentation to be used as verification evidence if the site assesses and documents its adequacy: that is a decision to take during the tender.
• An SLA is worth as much as it is defined and measurable; a warranty is worth its start date and its written list of voiding causes.
• TCO is built as a structure of cost items at constant scope and horizon, populated with your own site data; useful red flags are verifiable absences in the bid, not judgements about the supplier.

The circle closes where it began

Response matrix, scorecard, scope normalisation, allocation of qualification responsibilities, TCO structure: none of these tools works unless it rests on requirements written in a verifiable way. A tender does not create requirements, it tests them. A specification built on an approved URS with declared acceptance criteria produces comparable bids and a contract that holds until the system's end of life; a generic URS produces three apparently equivalent bids and years of retrospective negotiation. That is why this cluster starts from the water system URS and not from technology: a tender is worth exactly as much as the URS that founds it.

References

• EudraLex Volume 4, Annex 1 (C(2022) 5938 final), in operation since 25 August 2023 — clauses 6.7, 6.9, 6.12, 6.15. Annex 15 Qualification and Validation, 2015 revision, since 1 October 2015; EU-PIC/S revision concept paper of 9 February 2026, corrigendum of 16 July 2026, consultation closed 9 April 2026, text not revised. Annex 11 Computerised Systems, January 2011 version. health.ec.europa.eu
• EMA, Guideline on the quality of water for pharmaceutical use EMA/CHMP/CVMP/QWP/496873/2018, in force since 1 February 2021 — prior notification to the supervisory GMP authority before introducing RO. ema.europa.eu
• ICH Q10 Pharmaceutical Quality System, Step 4 of 4 June 2008 — outsourced activities; ICH Q9(R1), Step 4 of 18 January 2023. ich.org
• ASTM E2500-25, approved 1 April 2025; ASTM A967/A967M-25 and ASTM A380/A380M-25. ASME BPE Bioprocessing Equipment, applicable edition and parts to be fixed contractually.
• ISO 22519:2023 (2nd ed., 4 April 2023), under ISO/TC 282; the 2019 first edition is withdrawn. ISO/DIS 25413, draft under development, DIS ballot since 21 July 2026. iso.org
• WHO TRS 1025, Annex 3 (2020); WHO TRS 1033, Annex 3 (2021). who.int
• PIC/S PE 009-17 and Aide-Memoire PI 009-4 Inspection of Utilities, rev. 4, since 1 January 2021. picscheme.org
• USP <643> and <645>; ISPE Baseline Guide Vol. 4 Water and Steam Systems, 3rd ed., September 2019; ISPE Good Practice Guide Membrane-Based WFI Systems, May 2022.