A passive shipper can fail because its thermal storage components were prepared incorrectly. An active container can fail because nobody connected its power supply. Both can pass a laboratory test and still be unsuitable for the purchased service. Selection is not a declaration that one technology is superior. It is a demonstration that a defined configuration protects the load on the intended journey, using available resources and repeatable instructions.
This comparison covers containers, thermal packaging, vehicles and active systems used for pharmaceutical shipments. Stability chambers and process refrigeration remain outside its scope. The central question is which combination of performance and operational activities needs qualification. The component sold by the supplier should not be confused with the complete system actually operated by the shipper.
The framework to apply to the project
[REQUIREMENT] EU GDP 2013/C 343/01 is the relevant reference for European distribution of human medicines. [GUIDANCE] The WHO shipping-container qualification supplement, May 2015, addresses demonstration of suitability. It does not assign a duration valid for every product or route.
[GUIDEGXP] The comparison below is an original design method. [GEP] identifies engineering choices requiring verification; [QRM] identifies decisions based on risk and uncertainty. No brand, commercial certificate or standard profile replaces verification of intended use. When a paid standard is invoked, obtain its applicable text and verify its edition and scope before claiming conformity.
1. Understand how thermal protection is supplied
A passive system uses insulation and the thermal capacity of materials to slow heat exchange with the surroundings. It may contain phase-change materials, cooling elements or other dedicated configurations. Its behaviour depends on initial state, arrangement and payload. Having no compressor does not mean there is no process to control. Conditioning and assembly become critical contributors to performance.
An active system uses energy and control to maintain defined conditions. It may be integrated into a vehicle or a container. Its capability is not unlimited: available energy, ambient conditions, load, openings, maintenance and system state all matter. Establish what happens when the unit is unplugged, a battery becomes depleted or a relevant function fails.
A hybrid solution can combine different forms of protection. Evaluate it as a complete system, including interactions. A passive shipper inside an active environment does not necessarily experience the profile used in the supplier's tests. An excessively cold surrounding environment can also change performance and introduce risks for products sensitive to freezing. Examine both ends of the thermal challenge.
2. Define the actual payload first
Prepare a family of configurations specifying mass, volume, dimensions, orientation, minimum and maximum quantities, void-fill materials and product presentation. Explain whether the test load represents the real product in thermal capacity and geometry. A convenient simulator may behave differently from vials, syringes or bags. It should not be accepted merely because it fits easily into the available space.
Define the initial conditions of product, container and thermal elements. Testing with an equilibrated payload does not demonstrate the ability to cool product introduced warm. Shipment should not become an unplanned conditioning step. If the project requires a cooling function, declare that intended use, assess it and demonstrate it separately, including its effect on product and journey timing.
For product families, identify the factors that make a configuration limiting. The largest volume is not always the worst case. A small payload may have less thermal inertia, while a large payload can obstruct flow. The grouping rationale should explain the physical mechanism rather than merely list commercial codes. Revisit that rationale when the presentation or load arrangement changes.
3. Compare dependencies and failure modes
| Criterion | Passive system | Active system |
|---|---|---|
| Preparation | Conditioning and pack-out assembly | Technical condition, setpoint and available energy |
| Limiting resource | Remaining thermal capacity and insulation integrity | Energy, refrigeration capacity and control reliability |
| Typical human error | Wrong element or incorrect position | Missing power connection or incorrect setting |
| Intervention | Often requires an approved transfer plan | May require power, service or an alternative vehicle |
| After use | Inspection, recovery or disposal of components | Charging, cleaning, servicing and condition checks |
This matrix is not a universal scorecard. [QRM] Weight the criteria for the actual service: remote, urban, multi-stop, air transport or customs-dependent. Where reliable power is absent, assess active-system autonomy under real conditions. Where controlled conditioning space is unavailable, a passive system may be most vulnerable before departure. Include the people and premises that enable the selected technology to work.
4. Interpret supplier data correctly
Request the report supporting the claimed performance, rather than only a commercial datasheet. Check model, revision, materials, payload, sensor positions, initial temperature, external profile and the definition of test completion. Ask how missing data, failed results and variants were handled. A selected curve does not necessarily describe the variability observed across the full study.
Separate a declared property from the conditions needed to achieve it. A nominal duration has meaning only within a profile and configuration. Container autonomy may refer to a new battery, closed doors or a particular environment. Do not use these values as a service promise without connecting them to the distribution strategy and qualified lane.
Record which supplier tests are accepted, the documentary review supporting acceptance and any remaining gaps. Using external evidence does not remove responsibility for showing its relevance. Replaced materials, different geometry or updated software can change the basis of equivalence and require reassessment. Keep the approved configuration distinguishable from a later catalogue version bearing a similar name.
5. Design qualification around open questions
The protocol should challenge uncertainties that could change the decision. For passive systems, consider conditioning state, assembly tolerances, loads and representative profiles. For active systems, include loaded performance, transfers without power and behaviour during relevant faults. Accumulating identical tests is of little value if they do not reduce an uncertainty that matters to intended use.
Set criteria in advance, including the treatment of measurement uncertainty. A result close to a limit should not be interpreted through a rule invented after the test. Distinguish air, surface and simulator temperature: each answers a different question. Justify selected locations through geometry and preliminary studies, without assigning a universal number of sensors.
Define the start of the clock, end conditions, events to record and excluded configurations. When using a published climate profile, document why it is relevant to the journey. The profile name alone does not demonstrate lane coverage. Connect laboratory performance with operational verification of assembly and delivery. The final conclusion should describe what the combined evidence actually authorises.
6. Make pack-out a repeatable process
The bill of materials should distinguish components that look similar but are not interchangeable. Instructions should show orientation, assembly order, separators, load position and closure. Define how the conditioning state of thermal elements is recognised and how ready, conditioning and previously used materials are kept distinguishable. Storage location alone may not provide adequate evidence of readiness.
Observe operators executing the procedure. Repeated mistakes may indicate a weak design, rather than only a need for further training. Check whether the bench supports the required assembly, materials are accessible and records are completed at the right time. An independent check can help at a critical step, but it should have a defined purpose and detect a meaningful error.
For active systems, build the operational equivalent of pack-out: inspection, identification, configuration, energy verification, loading, connection, signal checks and handover. Link abnormalities to concrete decisions. An alarm present at departure does not become acceptable because the displayed setpoint looks correct. The instruction should explain who may resolve the issue and what evidence permits shipment to proceed.
7. Manage reuse and return
The return circuit affects availability and reliability. Establish inspection criteria for insulation, closures, thermal elements and surfaces, including control of damaged components. Define identity and history where needed to manage wear, maintenance or usage count. Do not impose a generic useful life without relevant evidence and defined operating conditions. Damage that is visually minor may still affect an important interface.
For active systems, assess batteries, connectors, seals, probes and service availability. Consider a late or unsuitable return: commercial pressure may otherwise lead to use of a unit that is not ready. Fleet planning should include technical reserve and exclusion criteria, as well as the expected shipment count. A replacement unit must match the approved configuration rather than simply offer similar capacity.
Hypothetical case: two suitable options, different constraints
A hypothetical distributor compares a reusable passive solution and an active container for the same refrigerated product. The lane includes an airport transfer and a recipient with restricted opening hours. Available tests indicate that both options can meet product conditions within defined configurations. Evidence does not yet cover every load combination proposed for the service.
The team finds that the dispatch depot can condition passive components under control, but lacks space for a very large fleet. The active container reduces some preparation work, yet the intermediate node cannot guarantee power during every stop. Selection is therefore split by service: passive for loads compatible with the return circuit, and active only where power and support are demonstrated.
The pilot includes a simulated preparation error and a controlled missing connection, without exposing commercial product. These challenges verify whether instructions recognise the problem and prevent departure. The case illustrates a decision method. It establishes no thermal limits, autonomy or study numbers that can be transferred directly to another project or product family.
Common mistakes and red flags
A solution described as prequalified is not automatically qualified for your intended use. An active system is not unlimited; a passive system is not exempt from maintenance or control. Treating thermal elements of the same colour as equivalent, changing separators to gain space or using unapproved void fill can alter system behaviour. Seemingly small substitutions should be assessed before implementation.
Other warning signs include reports without revisions, tests only with favourable loads, instructions lacking initial conditions and no process for returns. A low purchase price may conceal labour, space, consumables, reverse logistics and lost product. Compare the cost of the full process using the approach to supplier assessment and total cost of ownership.
Checklist before final selection
- Connect each configuration to the product and its relevant conditions.
- Identify covered loads, simulators and equivalence criteria.
- Define the lane profile, waiting periods and excluded conditions.
- Check dependencies on energy, preparation, connectivity and personnel.
- Review complete reports and gaps against actual intended use.
- Approve criteria and data handling before testing begins.
- Demonstrate repeatability with representative operators following the instructions.
- Prepare for faults, returns, wear and fleet availability.
A readable admission rule for each order
Qualification becomes operational when the person preparing an order can compare it with a clear rule. The matrix should connect system code, pack-out revision, covered payload range, initial conditions and permitted service. A shipment requiring incompatible configurations should not be resolved by choosing the most convenient option. It needs assessment before assembly begins.
Define which missing information blocks an order. Examples include an uncovered destination, unidentified component, inability to demonstrate conditioning or an unavailable planned alternative. The block should be understandable and resolvable through a competent function without bypassing the record. During early operation, collect reasons for blocks to distinguish data errors, ambiguous instructions and real system limits. This improves design without converting every commercial exception into a new technical tolerance.
Assess a variant before extending coverage
A request for a new format should start with a controlled comparison against the approved configuration. Identify changes in mass, geometry, contact with thermal elements and preparation. Membership of the same commercial family does not demonstrate equivalence. Describe the mechanism through which the change could affect performance, then choose evidence that resolves the uncertainty.
If existing data genuinely cover the variant, document that connection without repeating tests that add no value. If a relevant condition is missing, plan a targeted verification. Include operating instructions in the comparison. A thermally neutral change may increase assembly-error risk or make identification less clear. Update the authorised matrix and communicate its version to operators after approval. Extension remains a controlled decision rather than an assumed similarity between boxes, products or containers. Keep the earlier configuration identifiable as well, so that shipments prepared before the change can still be reconstructed using the instructions that actually applied.
Operational conclusions
The useful decision is not passive or active in the abstract. It is an authorised configuration with a defined load, route, initial state, evidence and resources. Preserve the rationale for exclusions and assess each change against demonstrated performance. A seemingly small substitution can alter a critical dependency or invalidate the grouping approach originally used to support qualification.
At operational release, provide instructions, configuration matrix and response plan together with the qualification report. The team must recognise when a shipment is within scope and when to stop. Integrate the decision into the Cold Chain & Controlled Temperature Systems programme, with review informed by data from the actual service.
