GMP & GDP Audits · 4 min read
Process Validation: EU GMP Annex 15 Explained
Process validation under EU GMP Annex 15 and the lifecycle approach: process design, PPQ and continued process verification, plus the common pitfalls.
By Balasubramanian Ramaiah · 19 June 2026 · Updated 2 October 2026
A process that worked on three batches two years ago is not the same as a process you can trust today. Process validation is how you show, with evidence, that your manufacturing process reliably makes product to its defined quality attributes, batch after batch. This guide explains the EU GMP Annex 15 expectations and the lifecycle approach that has replaced the old one-off validation mindset.
What is process validation?
Process validation is documented evidence that a manufacturing process, operated within defined parameters, consistently produces product meeting its predetermined quality attributes. It is not a single event but an ongoing demonstration of control, from first design through routine commercial production. The goal is assurance, both for you and the regulator, that quality is built into the process rather than tested into the product at the end.
What does EU GMP Annex 15 require?
EU GMP Annex 15, Qualification and Validation, sets the expectations for validating processes, equipment, utilities and systems. It calls for a Validation Master Plan that defines your approach, a risk-based rationale for what you validate and how, and qualified equipment and utilities before process validation begins. Annex 15 sits alongside ICH Q8 to Q11, which bring quality by design and quality risk management into the picture.
What are the three stages of the process validation lifecycle?
The modern approach treats validation as a lifecycle in three stages rather than a single qualification exercise.
| Stage | Name | What happens |
|---|---|---|
| Stage 1 | Process design | Define the process from development and risk knowledge, identify critical quality attributes and critical process parameters |
| Stage 2 | Process performance qualification (PPQ) | Confirm the designed process performs as expected at commercial scale |
| Stage 3 | Continued process verification (CPV) | Monitor the process in routine production to show it stays in control |
This lifecycle view, shared by EU and FDA guidance, replaces the idea that three good batches once meant a process was validated forever.
What is process performance qualification (PPQ)?
PPQ is the stage where you confirm, at commercial scale and with the commercial process, that everything designed in Stage 1 actually delivers. You run a defined number of batches under a pre-approved protocol, with heightened sampling and testing, and you assess the results against acceptance criteria before release for routine production. The number of PPQ batches is justified by risk and prior knowledge rather than fixed at three by default.
How does continued process verification (CPV) work?
CPV is the ongoing stage that many sites underestimate. You trend critical parameters and quality attributes across routine batches to confirm the process stays in a state of control, and you feed signals into your product quality review and change control. A drift that CPV catches early is a deviation avoided later. Weak CPV, where data is collected but never trended, is a common gap an auditor will probe.
What are the common process validation pitfalls?
Most validation problems trace back to a handful of recurring errors.
- Starting PPQ before equipment and utilities are properly qualified.
- Defaulting to three batches with no risk-based justification.
- Critical process parameters that were never genuinely linked to critical quality attributes.
- Treating validation as a one-off, with no real continued process verification.
- A Validation Master Plan that exists on paper but does not match practice.
An independent GMP audit or a readiness review before a licensing inspection is the surest way to find these gaps while you still have time to close them.
Key takeaways
- Process validation is ongoing proof your process reliably meets its quality attributes.
- Annex 15 sets the expectations, and the three-stage lifecycle is the current approach.
- PPQ confirms the design at commercial scale, and CPV proves the process stays in control.
- The batch count is justified by risk, not fixed at three by habit.
If you want your validation strategy reviewed before an inspection, book a discovery call with a senior Qualified Person and GMP auditor.
Frequently asked questions
What are the three stages of process validation?+
The lifecycle approach has three stages. Stage 1 is process design, where the process is defined from development and risk knowledge. Stage 2 is process performance qualification (PPQ), which confirms the design performs at commercial scale. Stage 3 is continued process verification (CPV), which monitors routine production to show the process stays in control over time.
How many batches are needed for process validation?+
There is no fixed number. The old default of three consecutive batches has been replaced by a risk-based justification, where the number of PPQ batches reflects process understanding, complexity and risk. Some processes justify more than three, and the rationale should be documented rather than assumed.
What is the difference between qualification and validation?+
Qualification applies to equipment, utilities and systems, proving they are installed and operate correctly through IQ, OQ and PQ. Validation applies to the process as a whole, proving it consistently produces product meeting its quality attributes. Equipment and utilities must be qualified before process validation can meaningfully begin.
What does EU GMP Annex 15 cover?+
Annex 15, Qualification and Validation, sets the GMP expectations for validating processes, equipment, utilities and systems. It calls for a Validation Master Plan, a risk-based approach to what is validated, qualified equipment before process validation, and a lifecycle view of maintaining the validated state, in line with ICH Q8 to Q11.
What is continued process verification?+
Continued process verification (CPV) is the third lifecycle stage, where critical parameters and quality attributes are trended across routine commercial batches to confirm the process remains in a state of control. It links to product quality review and change control, and it catches drift early. Collecting data without trending it is a common weakness inspectors look for.