EU GMP Annex 1 – Sterile Manufacturing Requirements and Controls
- The revised EU GMP Annex 1 mandates a holistic, risk-based strategy for sterile manufacturing.
- The Contamination Control Strategy (CCS) is one clear plan that explains how the site prevents microbes, particles, and endotoxin from reaching the product.
- Aseptic Process Simulation (media fills) is treated as a verification tool. Aseptic process controls get more attention, especially for products made by filtration and aseptic filling. Filter integrity testing and strong control of aseptic connections become key proof points.
Facility Design and Cleanroom Requirements Under EU GMP Annex 1
Annex 1 ties cleanroom requirements to protection of the critical zone, and it defines Grade A as the critical zone for high-risk operations. That description contains e.g. aseptic processing line, filling zone, stopper bowl, open primary packaging, and aseptic connections under first air, with unidirectional airflow demonstrated and qualified across the whole Grade A area. In a CDMO setting, this dictates what operations are permitted where, and how interventions are classified.
Barrier technologies are treated as core design tools. EU GMP Annex 1 describes isolators as providing continuous isolation of the interior from the external environment and distinguishes closed and open isolator systems based on how materials are transferred and whether openings exist during operations. It also stating that RABS should ensure Grade A conditions with unidirectional airflow and first-air protection in the critical zone.
The annex also makes background classification a CCS-governed decision. It states that the background environment for open isolators should generally correspond to at least Grade C and for closed isolators at least Grade D, and that the decision should be based on risk assessment and justified in the CCS. The background for RABS used for aseptic processing should correspond to a minimum of Grade B.
| Cleanroom | Air sample CFU/m3 | Settle plates CFU/4 hours | Contact plates CFU/plate |
| Grade A | No growth | ||
| Grade B | 10 | 5 | 5 |
| Grade C | 100 | 50 | 25 |
| Grade D | 200 | 100 | 50 |
EU GMP Annex 1 also connects facility design to operational integrity through glove systems and interventions, requiring glove materials to have appropriate resistance and requiring glove replacement frequency to be defined within the CCS, while setting minimum expectations for glove integrity testing frequency for isolators and requiring sterilization or validated bio-decontamination of RABS gloves prior to each manufacturing campaign. For biologics sterile manufacturing, where campaigns and changeovers are common, these clauses should inform both capacity planning and contracts, because glove integrity testing cadence, campaign definitions, and intervention allowances affect throughput and batch risk simultaneously.
Contamination Control Strategy as the Core of EU GMP Annex 1
The contamination control strategy is Annex 1’s organizing principle and the single most important concept for biopharma companies. It turns sterile manufacturing requirements into an integrated, site-wide control architecture based on the collection of departmental SOPs. Annex 1 states that a CCS should be implemented across the facility to define critical control points and assess effectiveness of controls and monitoring measures used to manage risks to product quality and safety. It embeds this requirement alongside the statement that monitoring alone is insufficient. Crucially for outsourcing, Annex 1 specifies that the CCS scope should include vendor qualification:
- Critical service providers
- Key component suppliers
- Sterilization of components and single-use systems services
It also explicitly includes management of outsourced activities and the availability or transfer of critical information.
These provisions create a clear restriction for CDMOs serving biologics portfolios. The CCS must be contract-ready, meaning it must describe how supplier qualification, subcontracted sterilization, and multi-party data flows are controlled, since weak links often sit outside the four walls of the fill line. EU GMP Annex 1 reinforces this supply-chain sensitivity in its PUPSIT exception discussion. Document instructing that any alternative approach to pre-use integrity testing must be supported by in-depth control of the sterilization and supply chain, explicitly including contract sterilization facilities, defined transport mechanisms, and packaging that prevents damage during transportation and storage. In commercial terms, this is an implicit regulatory demand for quality agreements to specify which suppliers and subcontractors are in scope, how changes are handled, and how “critical information” is defined, transferred, and retained.
Process Controls and Aseptic Operations in Sterile Manufacturing
Aseptic process controls in Annex 1 lean heavily on filtration integrity, process simulation, and controlled connections because these are the dominant failure modes in aseptic manufacturing. EU GMP Annex 1 requires that if a product cannot be sterilized in its final container, it should be sterilized by filtration through a sterile sterilizing grade filter of nominal pore size no greater than 0.22 µm and subsequently aseptically filled into a previously sterilized container, and it explicitly links filter selection to compatibility and to what is described in the marketing authorization. It requires sterile filtration to be validated under worst-case conditions, expects bacterial retention testing to use the actual product where possible or a justified surrogate otherwise, and requires that filtration system component selection and configuration be justified and documented based on critical quality attributes, including evaluation of adsorption and extraction/leaching. For quality control of biologics, this is especially consequential because protein products can be sensitive to adsorption and leachables, meaning the sponsor must treat filter and SUS choices as quality-impacting parts of the registered control strategy, not as interchangeable consumables.
PUPSIT is a major operational “line in the sand” for EU GMP Annex 1. Annex 1 requires integrity testing before use of the sterilized filter assembly, the pre-use post-sterilization integrity test, and also requires a non-destructive post-use integrity test, with integrity test validation that correlates results to microbial retention capability established during validation. Where PUPSIT is not always possible due to process constraints, EU GMP Annex 1 permits an alternative approach only if a thorough risk assessment is performed and appropriate controls are implemented, and it explicitly points to control of the sterilization process and control of the supply chain, including contract sterilization facilities, transport, and packaging, as risk-assessment considerations. In biologics CDMO cooperation, this becomes a contract-critical control point because a sponsor’s tolerance for PUPSIT exceptions, the required mitigations, and the data needed for batch disposition must be defined upfront to avoid late-stage disputes during investigations or regulatory interactions.
Aseptic Process Simulation is positioned by Annex 1 as periodic verification of the effectiveness of controls for aseptic processing, and the annex requires APS to assess all aseptic operations performed after sterilization/decontamination cycles of materials until the container is sealed, with a lyophilized product simulation representing the whole chain including filling, transport, loading, representative chamber dwell, unloading, and sealing under worst-case conditions. Annex 1 specifies that initial APS should include at least three consecutive satisfactory simulations covering all working shifts and that periodic revalidation should normally be twice a year for each aseptic process, each filling line, and each shift, with each operator participating in at least one successful APS annually. These requirements impose practical restrictions on CDMO operating models because they constrain scheduling flexibility and define the minimum evidence a sponsor should expect to see demonstrating that the people and line that will touch the product are continuously qualified under realistic intervention patterns.
Single-use technologies, now ubiquitous in GMP sterile biologics manufacturing, are explicitly regulated as sterility-critical systems in Annex 1. EU GMP Annex 1 requires sterilization processes for single-use systems to be validated without adverse impact on system performance, emphasizes that supplier assessment including sterilization is critical and that sterility assurance verification forms part of supplier qualification with evidence of sterilization checked on receipt, and requires SUS integrity to be maintained under intended operational conditions including extremes such as freezing/thawing and transportation while ensuring intrinsic sterile connection devices remain integral. In outsourced models, this translates directly into quality agreement content for SUS change control, supplier notification, and definition of “worst-case” handling conditions that the CDMO must qualify for the sponsor’s specific logistics and process steps.
Environmental Monitoring and Data Trending Requirements
Environmental monitoring sterile manufacturing is treated in Annex 1 as a CCS-linked control system whose credibility depends on integration, trending, and response discipline. EU GMP Annex 1 states that the monitoring program typically comprises total particle monitoring, viable environmental and personnel monitoring, environmental characteristics such as temperature and humidity, and APS for aseptically manufactured product, and it explicitly notes that viable, non-viable, and APS elements are limited when considered in isolation but together help confirm reliability of design, validation, and operation.
Annex 1 requires alert levels and action limits for viable and total particle monitoring and states that alert levels should be set so adverse trends are detected and addressed, with monitoring procedures defining the approach to trending including patterns of alert/action excursions and changes in microbial flora, and it requires root cause investigation and product impact assessment when action limits are exceeded.
For Grade A aseptic manufacturing, it recommends continuous viable air monitoring for the full duration of critical processing, including aseptic set-up, which turns monitoring into continuous process evidence rather than periodic sampling. Operationally, this drives a data governance obligation: the CDMO must be able to show not just collected data, but interpreted data with timely alarm response, investigation quality, and trend management that demonstrates control of the aseptic environment over time.
For batch release, EU GMP Annex 1 states that the monitoring program typically comprises total particle monitoring makes an explicit linkage that should be contractually enforceable in outsourced relationships: environmental monitoring data and trend data generated for classified areas should be reviewed as part of product batch certification/release and a written procedure should define actions when data are out of trend or exceed limits.
This means the sponsor’s QP decision-making cannot be robust if the sponsor receives only high-level summaries after the fact; instead, quality agreements should require timely, pre-release access to relevant raw data, trend dashboards, and deviation narratives, aligned with the sponsor’s batch disposition timelines.
Implementing EU GMP Annex 1 in Routine GMP Manufacturing
Implementation is where Annex 1 becomes a business control system.
That document makes routine data review part of how batches are dispositioned, so the daily rhythm of manufacturing and QA review has to change. A realistic example is an aseptic filling campaign where viable counts are within limits but the Grade B background shows a slow upward trend over several weeks, or where Grade A particle monitoring shows repeated short spikes during a specific intervention. Under Annex 1 thinking, this is not “still acceptable, release as usual.” It triggers a structured out-of-trend assessment, a review of interventions, gowning and material transfers, and often an airflow visualization check or maintenance review to find the root cause.
Common real-world case is short shelf-life product where some microbiology results are not yet final at the time the batch must ship. EU GMP Annex 1 states that the monitoring program typically comprises total particle monitoring allows release decisions based on the most recent available data, but it expects a defined procedure, clear justification, and rapid follow-up actions if later results indicate a concern. In practice, companies handle this by building a release “data pack” that includes the latest EM trends, particle alarms, and any open investigations, and by using rapid microbiological methods where justified to shorten decision timelines.
Implementing Annex 1 in routine operations forces more discipline around people, time, and scheduling, especially in CDMO environments with multiple clients. Media fills (aseptic process simulations) are a good example: the requirement to run them regularly and to involve operators over time affects capacity planning, shift structures, and training plans. In a real facility, you may see a situation where a line adds a new format or a new stopper bowl setup for a client’s product. Annex 1 expectations push the site to treat this as a meaningful change in aseptic risk, triggering updated intervention lists, updated operator qualification on the specific configuration, and APS that reflects the new “worst-case” handling rather than a generic media fill.
Additionally, EU GMP Chapter 7 provides the governance architecture that turns sterile manufacturing requirements into enforceable responsibilities between sponsor and CDMO. Chapter 7 requires that any outsourced GMP activity be appropriately defined, agreed, and controlled. It mandates a written contract that clearly establishes duties, and requires the contract giver’s pharmaceutical quality system to control. It also requires the contract giver to assess legality, suitability, and competence of the contract acceptor before outsourcing.
FAQ
Prepared by:
Senior Registration Dossier Specialist
Marketing Specialist
References
- European Commission, Directorate-General for Health and Food Safety. EU Guidelines for Good Manufacturing Practice for Medicinal Products for Human and Veterinary Use, Annex 1: Manufacture of Sterile Medicinal Products. EudraLex Volume 4. 2022.
- Bissett N. How ready are you? Annex 1 and the impact of primary packaging. European Pharmaceutical Manufacturer. 2024.
