Start with the failed interface
A bag meets its supplier specification, a pump passes its factory test, and both are delivered on time. During the first integrated run, closing a downstream valve exposes the disposable assembly to a pressure it was never intended to withstand. The procurement documents were individually correct; the system requirement was missing. A useful user requirements specification, or URS, describes the process that must work across such interfaces and the evidence needed to demonstrate that it does.
This article addresses engineering requirements for single-use components, assemblies and their supporting equipment in bioprocess manufacturing. A component is an individual item such as tubing or a connector. An assembly combines specified components into an identified fluid path. A system adds supports, pumps, instruments, controls, utilities, procedures and people. Their boundaries must be explicit before the team writes acceptance criteria. The detailed design of filling lines, reusable cleaning systems and facility utilities remains in the corresponding specialist areas.
Establish the authority of each requirement
[REGULATORY REQUIREMENT] Applicable GMP obligations govern suitability and control; regional scope depends on the product and manufacturing stage. For US finished pharmaceuticals, 21 CFR 211.65 addresses the effect of contact surfaces on drug quality. [GUIDANCE] EU GMP Annex 15 establishes the URS as a lifecycle reference. These sources do not supply a universal bag pressure or mixing time.
[QRM] ICH Q9(R1) supports science-based, proportionate decisions. The engineering tables and workflow below are [GUIDEGXP RECOMMENDATION], not copied regulatory checklists. [COMPENDIAL] Any specified pharmacopoeial chapter needs an applicability assessment, identified edition and defined acceptance evidence. [INDUSTRY STANDARD] A referenced standard becomes a controlled project input only after its scope is assessed. A vendor statement of compliance does not establish that assessment.
Define intended use before choosing hardware
Write a short process narrative: what enters, what changes, what leaves, and which quality attributes must be protected. Identify whether the operation handles medium, buffer, harvested culture, an intermediate or formulated product. Describe composition, concentration, viscosity, temperature history, exposure duration and sensitivity to adsorption, particles, shear or oxygen. When development data remain incomplete, record an assumption with an owner and a closure milestone; avoid quietly turning an estimate into an approved limit.
State minimum, routine and maximum working volumes. Separate nominal bag size from usable process capacity, mixing capacity and recoverable volume. Describe feed additions, sampling losses, drainability and required heel. The peak instantaneous transfer demand may govern pump sizing even when average batch throughput looks modest. Map the complete sequence, including installation, wetting, equilibration, processing, pauses, drainage, disconnection and disposal. Requirements must cover foreseeable abnormal states as well as the preferred recipe.
Draw the fluid path and the responsibility boundary
A controlled drawing should identify every product-contact item, branch, dead-end, vent, sample point, sensor, valve and connection to reusable equipment. Connect this drawing to a revision-controlled bill of materials. Include tubing length and diameter, material designation, connector identity, clamp compatibility and flow direction where these influence function. A generic family brochure is not sufficient to release a custom assembly whose geometry changes pressure drop or handling.
Create an interface register with upstream and downstream owners. It should cover mechanical fit, pressure compatibility, utility quality, control signals, batch identity and the sterile or microbiological boundary. State who supplies each mating connector and who demonstrates connection performance under site conditions. Define what “closed” means for every step. A closed assembly can become a functionally closed process only through an appropriately controlled sequence; an unassessed sample or powder addition can change the boundary.
Convert the operating envelope into technical requirements
Specify normal operating ranges, demonstrated equipment capability, alarms and protective actions separately. The weakest relevant item can determine the allowable assembly envelope. A pressure sensor near a pump does not necessarily represent pressure at a filter inlet or at a trapped branch. Include static head, transient pressure, blocked discharge, suction collapse, gas expansion and the consequence of opening a clamp in the wrong order. Obtain supplier-supported limits for the actual configuration, temperature and service duration.
| Engineering subject | What the URS should define | Evidence to request |
|---|---|---|
| Working volume | Minimum and maximum fill, additions, heel and recovery conditions | Bag/support drawing and representative recovery study |
| Pressure and flow | Operating envelope, measurement location and protective response | Component ratings plus integrated hydraulic assessment |
| Temperature | Process range, heating or cooling demand and exposure history | Compatibility evidence and loaded performance testing |
| Product contact | Exact materials, surfaces, joints and contact duration | Controlled BOM, material declarations and assessment links |
| Connections | Mating pair, installation sequence and boundary conditions | Drawings, instructions and representative connection verification |
| Automation | Recipe states, interlocks, records and recovery behavior | Functional specification and challenge-test records |
Material compatibility and extractables/leachables assessment answer different questions. Compatibility examines whether the assembly retains required function and whether the process damages materials or loses product. Extractables studies characterize substances released under specified extraction conditions; leachables evaluation considers actual process exposure and potential patient relevance. Require traceable supplier data, coverage of all wetted materials and a process-specific assessment. Avoid treating a generic extractables report as the final leachables conclusion.
Describe sterility and integrity as separate evidence chains
A sterile component does not prove that the connected fluid path remains sterile. Likewise, a sterilization certificate documents a supplier-controlled activity; user qualification establishes suitability for the intended application. Identify the supplied state, packaging barriers, transport assumptions, shelf-life evidence and conditions after unpacking. A stated irradiation dose alone does not establish the complete sterility assurance claim. Request the supplier's validated basis and define how the site verifies the relevant release documentation.
Bag integrity and filter integrity require distinct strategies because they concern different functions and test methods. State which assemblies are inspected or tested, at what lifecycle point, using which justified method, and how results affect use or batch disposition. Acceptance limits must come from method capability, supplier information and the intended use. A pressure-decay result should not be called proof of microbial barrier performance without an established relationship. Define responses to damaged packaging, missing certificates, failed installation checks and uncertain connection status.
Specify measurements and control behavior
For each process measurement, define the range, required accuracy, resolution where relevant, calibration approach and evidence across the intended operating duration. Include sensor location and how installation affects representativeness. A sensor may satisfy its accuracy specification while a control loop overshoots because of mixing delay, actuator sizing or an unsuitable cascade. Therefore, specify both measurement performance and process-control performance, with distinct verification methods.
Describe permissives for pump start, high-pressure response, low-volume protection and communication loss. State the safe response to power interruption and the conditions for resuming a batch. Disposable flow-path qualification does not qualify the reusable control platform. Assign ownership for software configuration, access roles, recipe versions, timestamps, alarms and retained records. In automated GMP applications, assess the applicable computerized-system requirements without expanding the URS into an unrelated enterprise digital-architecture project.
Build requirement-to-evidence traceability
Write one verifiable obligation per requirement, using an identifier and measurable outcome. Avoid “easy to use,” “GMP compliant” or “suitable for all products” unless the statement is decomposed into specific evidence. Acceptance criteria can reference a controlled development report when a numerical limit depends on process knowledge. They should be agreed before executing the test, with the configuration, method and uncertainty understood.
| Requirement | Rationale | Risk | Acceptance criterion | Verification | Evidence |
|---|---|---|---|---|---|
| Prevent excessive pressure | Protect the complete flow path | Leak and loss of containment | Protective action before the approved assembly envelope is exceeded | Integrated challenge at relevant states | Approved protocol, trace and deviation closure |
| Confirm correct assembly | Maintain the qualified contact path | Wrong material or connector | Installed revision matches released drawing and BOM | Receipt and pre-use checks | Lot record and installation checklist |
| Deliver representative sampling | Support valid process decisions | Misleading sample result | Defined sample location and procedure meet study criteria | Sampling evaluation | Study report and procedure |
| Preserve electronic batch context | Interpret process events correctly | Untraceable result or alarm | Required records retain identity, time and approved version | Functional and recovery tests | Reviewed records and test evidence |
This matrix is a design tool, not a substitute for judgment. A requirement with several independent failure mechanisms may need several tests. Conversely, an integrated test can support multiple requirements when the link is explicit. Record open deviations and residual risks rather than declaring a requirement complete because a document has been received.
Choose the verification stage deliberately
Factory acceptance testing evaluates agreed functions before delivery. Site acceptance testing addresses receipt, installation interfaces and site-dependent behavior. IQ, OQ and PQ establish the appropriate installation, operating and performance evidence within the approved qualification strategy. Supplier tests may be reused when justified and unaffected by transport or configuration changes; copying a FAT result into an IQ sheet is not that justification. System qualification also remains distinct from process validation, which concerns reproducible product outcomes.
| Decision condition | Preferred response | Release implication |
|---|---|---|
| Established component with relevant evidence | Assess supplier data against intended use | Close documented gaps before use |
| New assembly geometry using known components | Review interfaces and challenge assembly behavior | Do not inherit qualification solely from component history |
| New material or longer contact | Reassess compatibility and chemical exposure | Obtain the missing assessment before affected processing |
| New controller with unchanged disposable path | Assess controls, records and integration | Qualify affected functions independently of bag status |
| Unsupported critical claim | Resolve through evidence, redesign or alternative | Keep the relevant release gate open |
Operational example: a transfer that changed the URS
Consider an illustrative buffer-transfer project. The initial request names a bag, a peristaltic pump and a target transfer time. During design review, manufacturing identifies that the receiving system can pause while the pump continues. Engineering discovers that the pressure measurement is upstream of a restrictive filter and that the assembly rating depends on temperature. None of these observations establishes failure, but together they reveal an untested operating state.
The team revises the URS to define receiving-system readiness, measurement locations, protective actions and restart rules. It asks the supplier for configuration-specific evidence and verifies the proposed sequence using representative liquid and routing. Quality reviews the residual risks, while manufacturing rehearses installation and recovery. The outcome is an accepted system envelope and evidence trail, rather than an arbitrary universal pressure limit. If the evidence cannot support the required duty, the design changes before production.
Engineering checklist before approval
- Process development has identified intended use, quality sensitivities and unresolved assumptions.
- Engineering has reconciled volume, flow, pressure, temperature and material-contact conditions across every interface.
- Manufacturing has reviewed installation, access, lifting, connections, sampling, pauses and disposal using the actual assembly layout.
- Quality has reviewed supplier evidence, sterility boundaries, integrity strategy, chemical assessment and release responsibilities.
- Automation has defined control behavior, alarm response, records and recovery for the installed configuration.
- Procurement has secured drawing control, lot traceability, change notification and continuity requirements.
- Qualification has assigned each critical requirement to an appropriate verification method and retained evidence.
Keep the URS useful after purchase
The URS should remain connected to the released configuration. Lot traceability answers which material was used; change notification identifies what may differ in future supply. Both are needed. Specify which changes require assessment, who receives notifications and how transition stock is segregated. Include obsolete components, alternative suppliers, storage excursions and deviations revealed by actual use. Preventing reuse by procedure is different from demonstrating the validated single-use state of an assembly.
Common warning signs include unspecified contact materials, undocumented connector substitutions, unsupported “sterile” claims, sensor accuracy used as control-loop evidence and acceptance criteria written after testing. Resolve these at the relevant design or release gate. For wider context, return to Single-Use & Bioprocess Systems, address hybrid interfaces through Cleaning, CIP & SIP Systems, and align process-gas requirements with Critical Utilities Systems.
References and application note
The linked eCFR requirement, EU GMP Annex 15 and ICH Q9(R1) are the authoritative sources for the short regulatory context above. The NIIMBL single-use bioreactor URS provides an industry project example, with application-specific values that must not be imported as universal limits. The engineering workflow, matrices and illustrative case here are original GuideGxP recommendations. Review source applicability against the product, jurisdiction and current controlled documentation before adopting project requirements.
Related decisions
- Single-Use vs Stainless Steel in Bioprocessing: How to Build a Risk-Based Technology Strategy
- Qualification of Single-Use & Bioprocess Systems: DQ, FAT, SAT, IQ, OQ and PQ
Explore all decision areas — Single-Use & Bioprocess Systems.
