Usage Examples
- The vendor must be qualified under our GxP supplier programme before it touches submission data.
- That system is GxP-relevant, so it needs validation and an audit trail.
- Training records are a GxP requirement, not an HR nicety.
What is GxP (Good Practice Quality Guidelines)?
GxP is the collective term for the good-practice regulations and guidelines that govern how regulated companies generate, document, and retain data across laboratory, clinical, and manufacturing activities.
GxP exists because a regulator cannot re-run your study, re-make your batch, or re-observe your trial. It can only read what you recorded. The good-practice regulations therefore govern the conditions under which data is generated and preserved, so that a reviewer years later can reconstruct what happened and trust the answer.
GxP covers the disciplines where that reconstruction matters: nonclinical safety work under Good Laboratory Practice, human trials under Good Clinical Practice, production under Good Manufacturing Practice, and downstream distribution and safety surveillance. It is an umbrella label, not a rule in its own right. There is no "GxP regulation" to comply with and no inspector writes a finding against GxP itself; they cite the specific underlying part.
GxP is applied in practice through the concept of GxP relevance. A system, record, or process is in scope when it touches data supporting a regulatory decision about product quality or patient safety. That determination is what triggers validation, access control, audit trails, training records, and retention obligations, and it is the judgement most often made too narrowly.
Not to be confused with
- GMP
- GMP is one discipline inside GxP, covering manufacturing only. GxP is the collective term for all of them, so "GMP compliance" and "GxP compliance" are not interchangeable.
- 21 CFR Part 11
- Part 11 governs electronic records and signatures wherever a GxP regulation already requires the record. Part 11 is the how; the GxP part is the what.
- ISO 13485
- a voluntary international standard that the FDA incorporated by reference into the device QMSR. GxP describes a regulatory family; ISO 13485 is one specific standard now embedded in one member of it.
- Data integrity
- data integrity is an attribute that GxP records must have (often summarised as ALCOA+). It is a property of the data, not a separate regulatory regime.
There is no single GxP checklist. The obligations come from whichever discipline applies, and these are the anchors.
What you must do
- 1Conduct and report nonclinical safety studies to standards that assure the quality and integrity of safety data submitted to FDA21 CFR Part 58
- 2Manufacture drugs in conformance with CGMP; failure renders the product adulterated under the FD&C Act21 CFR Parts 210 and 211
- 3For finished medical devices, operate a quality management system meeting the QMSR, which incorporates ISO 13485:2016 by reference21 CFR Part 820
- 4Conduct clinical trials under a risk-proportionate quality approach, designing quality into the trial rather than inspecting it in afterwardsICH E6(R3)
- 5Determine and document which systems and records are GxP-relevant, because that classification is what triggers validation, access control, and audit-trail duties21 CFR 11.1
Common mistakes
Treating GxP as a single standard to certify against
There is no GxP certificate and no GxP audit in the regulatory sense. A vendor advertising "GxP certified" is describing a commercial assessment, not a regulatory status, and it discharges none of your obligations.
Scoping GxP relevance too narrowly
Teams classify the obvious systems and miss the spreadsheet that calculates a release decision or the tracker that holds the deviation log. Scope follows the data's influence on a quality or safety decision, not the system's price or prominence.
Assuming the rules are static
Two of the anchors moved recently. The device QMSR replaced the old Quality System Regulation framework on 2 February 2026, and FDA retired the QSIT inspection technique the same day. ICH E6(R3)'s principles and Annex 1 took effect on 23 July 2025, with Annex 2 following on 15 January 2027. A GxP programme written against the previous versions is out of date.
When This Matters
- The vendor must be qualified under our GxP supplier programme before it touches submission data.
- That system is GxP-relevant, so it needs validation and an audit trail.
- Training records are a GxP requirement, not an HR nicety.
Frequently Asked Questions
The x is a placeholder for the discipline: L for laboratory (GLP), C for clinical (GCP), M for manufacturing (GMP), D for distribution (GDP), and V for pharmacovigilance (GVP). GxP refers to all of them collectively rather than any single regulation.
Related Use Cases
- Pharma Use Cases
Cut NDA and sNDA prep time by 60% with AI-assisted drafting and automated readiness checks
- Biotech Use Cases
Compress IND prep from 8-12 weeks to under 3 weeks with AI-assisted drafting and validation
- Regulatory Affairs Workflows
Cut regulatory intelligence tracking from 10+ hours/week to automated, real-time alerts
- Quality/QA Workflows
Track GxP regulation changes and enforcement trends
