GMP- and FDA-compliant design of pharmaceutical mixing processes rests on the interplay of suitable plant technology, qualified systems, validated processes, effective cleaning, controlled documentation and a functioning quality management system. The aim is to demonstrably ensure that the medicinal product consistently meets the defined requirements for identity, strength, quality, purity and safety.

Additional requirements apply to electronic systems. 21 CFR Part 11 is relevant where electronic records or electronic signatures are maintained, retained or submitted to the FDA under other applicable FDA regulations. The regulation defines the conditions under which the FDA recognises electronic records and signatures as trustworthy, reliable and generally equivalent to paper records and handwritten signatures.

The specific implementation must always be product-, process- and risk-based. Responsibility lies with the pharmaceutical manufacturer. Machine and system suppliers can provide technical functions, documentation, tests and support, but do not assume the regulatory responsibility for product release, process validation or the operator's compliance with its GMP obligations.

Qualification and process validation

The plant and its subsystems should be qualified and controlled across their entire lifecycle. The starting point is a User Requirement Specification. It describes, among other things, the product, mixing task, fill quantities, mixing quality, temperature, pressure, vacuum, cleanability, material requirements, containment, interfaces, safety functions and requirements for data capture.

The Design Qualification documents that the planned design meets the defined requirements. The Installation Qualification confirms that the plant has been correctly delivered, installed, connected and documented. The Operational Qualification demonstrates that the plant functions safely and reproducibly within the specified operating range. The Performance Qualification demonstrates that the process reliably delivers specification-compliant results with the intended product under conditions close to production.

For mixing processes, critical process parameters must be identified on the basis of product and process knowledge. These can include mixing time, rotational speed, direction of rotation, fill level, order of addition, dosing accuracy, temperature, pressure, vacuum and the properties of the raw materials. Their permissible ranges and their influence on critical quality attributes such as homogeneity, active-ingredient content, moisture, particle size distribution or flowability should be assessed in a traceable manner.

Changes to the plant, recipe, software, measuring points, cleaning, materials or process parameters must be assessed through a documented change control procedure. The risk assessment determines whether a partial test, requalification, additional cleaning tests or a renewed Performance Qualification are required.

Hygienic design and materials

Product-contact areas should be designed so that they are cleanable, inspectable and suitable for the intended product. Designs should avoid unnecessary dead spaces, gaps, material build-up and areas with inadequate cleaning effectiveness. The required hygienic design depends on the product, dosage form, microbiological risk, cleaning strategy and regulatory assessment.

Austenitic stainless steels such as 316L are frequently used, but are not automatically suitable for every application. The actual choice of material must take into account corrosion, product contact, cleaning chemistry, temperature, pressure, surface requirements and the intended service life. Traceable material data and, where applicable, material certificates should be available for product-contact components.

Seals, elastomers, lubricants, hoses and other product-contact components must likewise be assessed with regard to material compatibility, extractables and leachables risk, cleaning, sterilisation and intended use. A general statement such as "FDA compliant" is not sufficient. What is required is evidence suitable for the specific application and a documented assessment.

Cleaning and contamination control

The cleaning strategy must show that residues of active ingredients, excipients, cleaning agents and, where applicable, microbiological contamination are effectively controlled. Cleaning validation is based on a risk analysis. It defines worst-case products, permissible residue limits, cleaning methods, sampling points, sampling methods, analytical methods and acceptance criteria.

Swab samples and rinse samples are typical methods for assessing product and cleaning-agent residues. Swab samples are particularly suitable for accessible and critical surfaces. Rinse samples can be useful for hard-to-reach or closed systems. The analytical methods must be suitable for the intended purpose and have an adequate detection limit.

Riboflavin tests can make the distribution of a cleaning liquid and possible spray shadows visible. They are useful for assessing the mechanical wetting of a CIP system, but do not replace product-specific cleaning validation. Cleaning sequences, parameters, limit values, sampling and release criteria must be defined in approved standard operating procedures.

Electronic records and signatures

For systems within the scope of 21 CFR Part 11, electronic records and signatures must be trustworthy, reliable and protected against unauthorised alteration. The required technical and organisational measures are defined on a risk basis.

A role-based permissions concept ensures that users can only use the functions required for their tasks. User accounts must be uniquely assigned to a person. Shared accounts should be avoided for GMP-relevant activities. The administration of user rights, passwords, lockouts and role changes must be controlled.

Audit trails should automatically record, for GMP-relevant changes and deletions, who made which change and when. The entries must be protected, comprehensible and available throughout the retention period. Changes to critical parameters, recipes, target values, user rights, batch releases and relevant process data should additionally be justified and reviewed regularly.

Electronic signatures must be uniquely assigned to a person. Their meaning, such as review, approval or release, must be traceable. The date and time of the signature must be recorded. The operator must also ensure that the signatures used meet the intended regulatory requirements and are properly managed.

GMP-relevant data must remain readable, retrievable and available in a comprehensible form throughout the defined retention period. This includes raw data, batch records, audit trails, configuration data, backups and, where applicable, archived data. Data backup, recoverability, protection against loss and controlled archiving must be governed in the data integrity concept.

Data integrity and batch management

Data integrity means that data are attributable, legible, contemporaneous, original and accurate. In practice, these principles are frequently supplemented by complete, consistent, enduring and available. For mixing processes, this concerns measured values, recipes, operator interventions, alarms, deviations, cleaning data, maintenance data and releases.

Raw data and audit trails must not be overwritten, deleted or altered unnoticed in an uncontrolled manner. Every change must be traceable. Regular review of audit trails should focus on risk-relevant data and events, and its scope and frequency should be defined.

Recipes must be managed with version control, approval and protection against unauthorised changes. An electronic batch record or a comparable batch documentation system can support the traceability of raw materials, batches, process parameters, operator interventions, deviations and releases. What matters is that electronic and, where applicable, paper-based documentation correspond unambiguously to one another and are maintained in a controlled manner.

Computerised systems

Control systems, operator interfaces, higher-level control and production systems, LIMS and interfaces should be validated on a risk basis. They must be suitable for their intended purpose and adequately protect product quality, patient safety and data integrity.

Typical validation documentation includes a User Requirement Specification, functional and design specifications, risk analyses, test protocols, a traceability matrix, deviation reports, approvals and a change control procedure. The validation must in particular address critical functions such as recipe management, user rights, audit trail, alarm management, batch logging, data interfaces, backup and recovery.

Software changes, updates, interface adjustments and changes to recipe logic must not be transferred into production operation in an uncontrolled manner. They must be assessed, tested, documented and released in accordance with their GMP relevance.

SOPs, training and audits

GMP-compliant mixing processes require clear, approved standard operating procedures. These govern, among other things, operation, recipe management, cleaning, sampling, maintenance, calibration, data review, backup, deviation management and change control.

Staff must be qualified for their tasks and trained with documented records. Training should in particular cover operation, hygiene, data integrity, handling of deviations, alarms and electronic signatures. Refresher training helps maintain competence in the event of staff changes or altered processes.

Regular internal audits, self-inspections and management reviews help identify weaknesses at an early stage. They should not only review documents, but also assess actual implementation in production, cleaning, maintenance, quality assurance and data management.

Practical minimum requirements

An inspection-ready pharmaceutical mixing process requires a qualified and documented plant, a validated and reproducible process, demonstrably effective cleaning and controlled recipe and batch management. It also requires risk-based validated electronic systems, protected audit trails and electronic signatures, complete data throughout the entire retention period, and documented training, deviations and changes.

The FDA understands GMP as requirements for methods, facilities and controls intended to ensure that medicinal products possess the required identity, strength, quality and purity. 21 CFR Part 11 additionally regulates when electronic records and signatures are considered equivalent to paper documents and handwritten signatures for applicable FDA regulations.