Pharma Engineering Insights

Qualification of Single-Use & Bioprocess Systems: DQ, FAT, SAT, IQ, OQ and PQ

Build a risk-based qualification strategy for single-use assemblies, equipment and controls, from URS to PQ and release for intended use.

G GuideGxP 8 min read
✓ Official sources and references ✓ Practical approach ✓ For pharmaceutical professionals
GUIDEGXP · PRACTICAL GMP INSIGHTS
Modern comic illustration of engineers qualifying a single-use bioprocess system

A mixer can pass its factory test and still be unsuitable for the installed process. The purchased bag may differ from the tested configuration, a site gas supply may change pressure behaviour, or the control platform may record a successful transfer while leaving an unacceptable heel. Qualification must resolve these interfaces before production relies on them.

This article addresses the qualification of the combined single-use assembly, reusable equipment and process controls. It provides an engineering route from requirements to release for use. It does not replace product-specific process validation, sterilization validation or the assessment of extractables and leachables.

Define what is being qualified

A component is an individual item, such as tubing or a sensor. An assembly is a configured combination with a controlled drawing and bill of materials. A system includes that assembly, its support, pumps, utilities, instruments, software and operating procedures. These three objects need different evidence. Approval of a tubing specification does not establish that an assembled transfer system meets the user requirements specification, or URS.

Define the system boundary on a process diagram. Mark product contact, gas contact, sterile boundaries, waste, sampling, upstream supply and downstream acceptance points. Identify who owns every interface. A pressure sensor supplied with the disposable path may send a signal to a reusable controller; the complete measurement chain belongs within the verification scope, even when separate suppliers provide its parts.

Supplier qualification evaluates the organisation and its ability to deliver controlled products. Component qualification evaluates suitability of particular items. Equipment and system qualification demonstrate performance for intended use. None of these activities can be substituted by a supplier sterilization certificate. The certificate supports the sterilization history of an identified lot, while the user must establish the suitability and handling of that lot in the installed process.

Use the current regulatory baseline

[REGULATORY REQUIREMENT] Identify the GMP framework applicable to the product, process stage and market. For human medicines in the EU, the Commission currently lists Annex 15 effective from October 2015, Annex 11 in its January 2011 revision, and Annex 1 fully applicable since August 2024. Annex 1 is relevant to sterile manufacture; selected principles can also support justified control of nonsterile biological intermediates. See the current EudraLex register.

[DRAFT / CONSULTATION — NOT A REQUIREMENT] The 2025 Annex 11 consultation and the 2026 Annex 15 revision concept paper do not replace those operative texts.

[GUIDANCE — PUBLISHED, FUTURE EFFECTIVE DATE] PIC/S PI 006-4 has been published with entry into force on 1 October 2026; at this article's review date, 22 September 2026, that date remains future. Maintain a controlled regulatory watch rather than silently treating proposals as requirements.

[GUIDANCE] FDA process validation guidance uses a lifecycle approach. Qualified equipment supports a capable manufacturing process, but satisfactory equipment tests alone do not demonstrate consistent product quality. [QRM] ICH Q9(R1) supports scientific risk decisions with effort proportionate to uncertainty and importance. The test strategy below is a [GUIDEGXP RECOMMENDATION], to be adapted and approved locally.

Build requirements that produce testable evidence

Convert statements such as “suitable for buffer transfer” into explicit conditions: composition, working volume, operating temperature, permitted pressure envelope, required delivery accuracy, acceptable residual volume, contact duration and connection sequence. Record where each limit originates. Supplier ratings establish a design boundary; development data establish process needs. The qualified operating range must satisfy both.

Separate normal operation from abnormal conditions. A transfer requirement should address blocked discharge, empty source, loss of power, unexpected disconnection, sensor failure and interrupted communication where credible. Define the safe response, required alarm, retained record and conditions for restart. Do not create a universal bag pressure or integrity limit: acceptance criteria must fit the actual assembly and validated method.

Example traceability structure; values must come from the project
RequirementRisk and rationaleAcceptance basisVerification and evidence
Protect the disposable path from excessive pressureBlocked flow can damage a weak interfaceApproved assembly envelope and process assessmentOQ challenge of sensor, alarm and protective action; recorded response
Deliver homogeneous prepared solutionLocal concentration can affect the next operationDevelopment-defined uniformity at relevant loadsMixing study with justified sampling locations and analytical method
Preserve material identityAn incorrect film or tubing changes suitabilityApproved drawing, BOM and material revisionIQ configuration review plus routine lot reconciliation
Retain transfer recordsLoss of context prevents batch assessmentDefined record content, access and retentionEnd-to-end record, interruption and restoration tests

DQ: challenge the proposed design before purchase

Design qualification asks whether the selected design can satisfy the URS. Review dimensions, access, bag installation, tubing routing, mechanical support, drainage, pump interaction, sensor range and connection compatibility. A drawing that cannot show the entire product-contact path is not ready for approval. Resolve discrepancies between the quotation, assembly drawing, software specification and process diagram.

Review the materials dossier against actual exposure. Extractables are substances released under defined study conditions; leachables enter the process or product under actual use. Supplier extractables data support, but do not complete, a process-specific leachables risk assessment. Chemical compatibility, mechanical endurance and product adsorption require attention alongside E&L. Neither an acceptable chemical profile nor a strong bag establishes the other property.

For a bioreactor, identify performance needs for mixing, oxygen transfer, carbon dioxide removal and control response. A larger working volume does not establish scale-up by geometric similarity. For a mixer, consider powder addition, low-volume operation and sampling representativeness. For a transfer skid, focus on pressure transients, flow measurement and recovery. Document unresolved development questions explicitly.

FAT and SAT: transfer evidence with its conditions

Factory acceptance testing is an opportunity to challenge critical functions before shipment. Agree protocols, configuration, calibrated instruments, test media, data access and deviation handling before execution. Witness tests where direct observation adds value. A demonstration video or an unchecked vendor summary may help understanding, but cannot replace attributable results with acceptance decisions.

Site acceptance testing focuses on the delivered installation and actual interfaces. Check transport effects, utility connections, electrical supply, network configuration, equipment identity and site-specific safety arrangements. A factory test may be accepted into qualification when its relevance and reliability are justified and the tested feature was not affected by transport or installation. Do not repeat everything automatically; do not carry everything forward automatically either.

Maintain a test adoption register stating the requirement, original evidence, configuration, differences, reviewer decision and remaining site test. If a pump drive version changed after FAT, reconsider associated speed control and alarm evidence. If the same control cabinet arrived unchanged, some internal wiring evidence may remain usable after installation checks.

IQ and OQ: establish the installed configuration and its behaviour

Installation qualification records what actually exists: equipment identifiers, software versions, disposable assembly codes, instrument ranges, calibration status, utility specifications, manuals and approved drawings. Include the means to distinguish released assemblies from development samples. Shelf life, packaging condition and storage history are relevant to consumables, but the acceptance rules must come from the approved specifications.

Operational qualification challenges functions over justified ranges and credible failure states. Test alarms and interlocks through the physical measurement chain where practicable. A simulated input can verify software logic while missing a reversed sensor connection or unsuitable response time. Explain what each simulation covers and what separate physical test closes the remaining gap.

Sensor accuracy is not control-loop performance. The loop also includes sampling rate, filtering, algorithm, actuator response and process dynamics. A calibrated temperature sensor can coexist with poor temperature control. Assess recovery from disturbances, overshoot and interaction between loops against process needs. Preserve time-related evidence so reviewers can understand sequences rather than seeing isolated pass statements.

For computerised functions, address access roles, recipe changes, audit trails where applicable, time synchronisation, backup and restoration, interfaces and incomplete records. Validate the disposable sensor's configuration together with its reader and control platform. Replacing the fluid path does not reset the lifecycle responsibilities of the reusable software.

PQ and the boundary with process validation

Performance qualification demonstrates suitability under intended operating conditions using justified loads and representative operation. Include operators, assembly installation, media properties, relevant working volumes, transfer endpoints and routine sampling. Determine whether water is representative; viscosity, density, foaming or conductivity may require a different surrogate or product-related evidence.

Equipment PQ and process performance qualification are not interchangeable labels. Define the term in the validation plan. The process validation programme addresses the combined manufacturing process and its ability to deliver specified quality consistently. Qualification contributes evidence, but does not establish biological yield, impurity clearance, viral safety or product stability merely because pumps, sensors and mixers perform correctly.

Select the number and distribution of studies from risk, variability, prior knowledge and the applicable regulatory strategy. There is no universal single-use rule requiring a fixed number of qualification runs. Where a family of assemblies is bracketed, justify the worst cases by relevant attributes such as contact area, connection complexity, load and operating stress.

Decision matrix for qualification evidence
SituationDecisionRelease condition
Existing platform; identical assembly; new siteReview transferable evidence and test local interfacesConfiguration equivalence and site risks resolved
New bag film on the existing mixerAssess chemical and mechanical impact separatelyE&L and performance gaps closed before use
New control software with unchanged mechanicsTarget affected functions, records and recoveryApproved impact assessment and successful regression checks
Unexplained qualification failureInvestigate before repeatingRoot cause, impact and effective correction documented

Practical case: a transfer endpoint that passed too easily

Consider a hypothetical buffer skid whose FAT verified pump speed and the high-pressure alarm. At the site, a longer tubing route and a different receiving elevation caused variable residual volume. The display still announced completion because the recipe used elapsed time. The defect was not a failed pump; it was an incomplete requirement for delivered quantity and endpoint detection.

The team revised the requirement using process development needs, confirmed compatibility of the proposed measurement method, and challenged transfer completion across relevant source and destination conditions. It also tested a blocked line and interrupted power. The revised qualification showed when completion could be declared and what evidence an operator must review. Process validation then used that controlled transfer as one input to the overall manufacturing assessment.

Release checklist and lifecycle handover

  • Approve the system boundary, URS and requirement-to-evidence traceability.
  • Reconcile installed hardware, software and assembly revisions with qualification records.
  • Close critical deviations and explain any accepted residual risk with accountable approval.
  • Confirm material, sterilization, integrity and process-suitability assessments are available.
  • Approve operating procedures, installation instructions and practical operator training.
  • Establish calibration, maintenance, backup, change control and consumable storage arrangements.
  • Define routine assembly verification, lot traceability and the response to damaged packaging.
  • Record the qualified operating envelope and triggers for reassessment in an accessible handover.

Common mistakes include attaching certificates without checking lot identity, accepting a “sterile component” as proof of an uninterrupted sterile fluid path, and using a bag leak test to claim filter integrity. Irradiation dose alone does not establish a sterility assurance claim. Preventing reuse also does not establish that the first use occurred in a qualified state.

Red flags include acceptance limits written after results are known, undocumented assembly substitutions, alarms tested only on a screen, missing original records, and release while a critical failure remains unexplained. Periodic review should connect deviations, supplier changes and performance trends to the qualified state; its frequency must be justified locally.

Continue through Single-Use & Bioprocess Systems. For reusable interfaces, coordinate with Cleaning, CIP & SIP Systems; for gas supply, use Critical Utilities Systems. The defensible qualification package shows what was tested, under which conditions, and why that evidence supports the released use.

References and status

Related decisions

Explore all decision areas — Single-Use & Bioprocess Systems.

THE PRAGMATIC GMP · EVERY MONDAY

The GMP topics that matter, in 7 minutes.

One GMP topic, one real-world example and one practical action, based on official sources and inspection trends.
Discover The Pragmatic GMP