Usage Examples
- The excipient supplier is qualified for two grades, not the one on this purchase order.
- We accept the supplier's CoA, so the identity test and the periodic revalidation are both mandatory.
- Supplier qualification lapsed when they moved the manufacturing site without notifying us.
What is Supplier Qualification?
Supplier qualification is the documented assessment that establishes a supplier's ability to consistently provide materials or services meeting specification, and the ongoing verification that keeps that conclusion current.
Supplier qualification exists because a manufacturer's control over its product stops at its own gate unless it deliberately extends beyond it. Most material entering a regulated process was made somewhere the manufacturer does not operate, under a quality system it does not run. Qualification is how that gap is closed with evidence rather than assumption.
Supplier qualification covers the initial assessment of a supplier's ability to meet specification and the ongoing verification that keeps the assessment valid. Its scope is the supplier's capability and the material's conformance, not the commercial terms of the contract. A signed quality agreement records who does what; it is not itself evidence that the supplier can perform.
Supplier qualification runs continuously in practice: assessment and audit before approval, incoming testing and release by the quality control unit for each lot, periodic revalidation of supplier data, and requalification when the supplier changes site, process, or subcontractor. The obligation does not lapse once a supplier is on the approved list.
Not to be confused with
- Quality agreement
- a quality agreement allocates responsibilities and defines communication between the parties. Qualification is the evidence the supplier can meet specification. ICH Q10 section 2.7 lists them as distinct requirements, and a signed agreement with an unqualified supplier satisfies neither.
- Certificate of Analysis
- a CoA is one supplier's test result for one lot. Qualification is the basis on which that result may be relied on at all. 21 CFR 211.84(d)(2) permits accepting a CoA only alongside an identity test and periodic validation of the supplier's analyses.
- Vendor approval
- approval is the procurement decision to buy. Qualification is the quality determination that the material may be used in a regulated product. A supplier can be commercially approved and not qualified for a given grade or use.
- Incoming inspection
- inspection tests the lot in front of you. Qualification is the judgement about the supplier over time. Passing inspection on every lot to date is not the same as having established the supplier's reliability.
US cGMP sets the enforceable component controls; ICH Q10 sets the surrounding quality system expectation.
What you must do
- 1Withhold each lot of components, containers, and closures from use until it has been sampled, tested or examined as appropriate, and released for use by the quality control unit21 CFR 211.84(a)
- 2Where a supplier's report of analysis is accepted in lieu of full testing, conduct at least one specific identity test on the component and establish the supplier's reliability by validating their test results at appropriate intervals21 CFR 211.84(d)(2)
- 3Maintain a quality control unit with the authority to approve or reject all components, containers, closures, in-process materials, packaging, labeling, and drug products21 CFR 211.22(a)
- 4Assess a supplier's suitability and competence before selecting them, using a defined supply chain approach such as audits, material evaluations, or qualificationICH Q10 Section 2.7
- 5Define the responsibilities and communication processes for quality-related activities between the partiesICH Q10 Section 2.7
Common mistakes
Accepting a CoA without the identity test
21 CFR 211.84(d)(2) allows reliance on the supplier's analysis only if the manufacturer still runs at least one specific identity test itself. Dropping that test is the single most common way a supplier-reliance programme becomes non-compliant, and it is visible in the batch record.
Qualifying once and never revalidating
the regulation requires validating the supplier's test results at appropriate intervals, not at onboarding. A supplier qualified three years ago, who has since changed manufacturing site or subcontractor, is carrying a conclusion that no current evidence supports.
Treating the quality agreement as the qualification
ICH Q10 makes the pharmaceutical company ultimately responsible for the quality of purchased materials regardless of what the agreement says. Contractual allocation of blame does not move regulatory responsibility, and an inspector reads the agreement as scope, not as evidence.
When This Matters
- The excipient supplier is qualified for two grades, not the one on this purchase order.
- We accept the supplier's CoA, so the identity test and the periodic revalidation are both mandatory.
- Supplier qualification lapsed when they moved the manufacturing site without notifying us.
Frequently Asked Questions
Only under conditions. 21 CFR 211.84(d)(2) permits accepting a supplier's report of analysis in lieu of full testing, but the manufacturer must still conduct at least one specific identity test on the component and must establish the supplier's reliability by validating their test results at appropriate intervals.
Related Use Cases
- Pharma Use Cases
Cut NDA and sNDA prep time by 60% with AI-assisted drafting and automated readiness checks
- Biotech Use Cases
Compress IND prep from 8-12 weeks to under 3 weeks with AI-assisted drafting and validation
- CMC Workflows
Track ICH quality guidelines automatically and get alerts when changes impact your products
- Quality/QA Workflows
Track GxP regulation changes and enforcement trends
