What GMP Actually Demands of a Production Line

Good manufacturing practice for medical devices in the US is codified in 21 CFR Part 820, the Quality System Regulation. FDA is harmonizing it with ISO 13485, but the enforcement principle has not changed: you must demonstrate, from records, that every unit shipped was made by a controlled process proven capable before it ran.

That is a higher bar than inspecting finished product. Inspection samples; GMP requires the process itself to be under control with objective evidence that it stays there. Companies that treat manufacturing as something to sort out after design freeze discover this during an inspection, when an investigator asks for the validation report behind a sealing step and nobody can produce one.

The Quality System Has to Live on the Floor

A quality manual in a shared drive satisfies nobody. What an inspector looks for is whether the system is exercised by the people building product.

The foundation is a documented, approved, controlled set of procedures with a revision history and evidence that operators are trained on the current version. Every workstation runs from a released work instruction, not tribal knowledge, and superseded copies are removed so nobody builds to a stale revision.

Design and manufacturing connect through the device master record, the recipe for building the product, which flows out of the design outputs created under FDA design controls and is traceable back to the design history file. If your drawings and work instructions do not match what design control released, the system is broken regardless of how good the product is. Most of this overlaps with the ISO 13485 requirements you likely need anyway for export.

Process Validation: Proving the Process Is Capable

The regulation requires validation of any process whose output cannot be fully verified by later inspection. That captures most of the interesting steps: molding, sterilization, sealing, welding, adhesive bonding, cleaning, coating, and software-controlled equipment. You can measure a molded dimension, but you cannot measure whether an adhesive bond will hold for three years without destroying the part.

Validation runs in three named stages.

  • Installation qualification. The equipment is installed as specified, utilities are correct, calibration is current, and the documentation matches the machine on the floor.
  • Operational qualification. The process is exercised at the edges of its parameter window, deliberately at worst case, to establish where it still produces conforming output. This finds the real operating range rather than the one the vendor suggested.
  • Performance qualification. Typically three consecutive runs at nominal settings using production tooling, material, and trained operators, demonstrating consistent output and acceptable capability indices.

The output is a locked parameter set. After PQ, changing barrel temperature, weld energy, or cure time is a change subject to assessment and possible revalidation, not an operator adjustment. That discipline is what separates this from the verification and validation work done on the device design, and teams confuse the two in front of auditors.

Environment, Cleanliness, and Contamination Control

Not every device needs a cleanroom, and building one you do not need is an expensive way to look serious. What the regulation requires is that the environment be controlled to whatever level the product actually needs, with that level justified and monitored.

For a sterile or implantable device that generally means an ISO Class 7 or Class 8 environment with monitored particle counts, viable sampling, gowning procedures, and periodic requalification. Molded components bring in cleanroom injection molding, where the molding cell sits inside the controlled space and the resin, mold release, and packaging are all specified. For a non-sterile durable device, control may mean nothing more than temperature and humidity limits, an ESD program, and a housekeeping procedure. Either way, write the cleanliness limit as a specification with a test method and monitor against it.

Traceability: Knowing Exactly What Is in Each Unit

The device history record is the per-lot or per-unit evidence that the device master record was followed: dates of manufacture, quantity made and released, acceptance records, the operators or equipment used, the labeling used, and the specific lots of every controlled component that went in.

Design the traceability depth deliberately. Full unit-level serialization with component genealogy is expensive and appropriate for implants and life-supporting devices. Lot-level traceability on safety-critical components with serialization only on the finished device is adequate for most Class II products. What is never adequate is discovering during a field issue that you cannot tell which units received a suspect resin lot, because the only alternative is recalling everything. Unique Device Identification sits on top of this, requiring a UDI on the label, direct part marking for most reusable devices, and submission to the FDA database.

Inspection, Calibration, and Lot Release

Acceptance activities have to be defined, performed, and recorded, and product cannot ship until someone with authority signs the release. Three areas cause the most inspection findings.

Incoming inspection. Define what is checked on receipt for each component class and what is accepted on supplier certificate. A certificate of conformance is a valid acceptance method only if the supplier is qualified and the arrangement is documented.

Calibration. Every gauge, torque driver, thermometer, and test system used to make acceptance decisions must be calibrated on a schedule, traceable to a national standard, and labeled with its status. When a gauge is found out of tolerance, you owe an assessment of every lot it accepted since the last good calibration.

Nonconforming material. It must be identified, segregated, and dispositioned by an authorized person with the rationale recorded. Use-as-is dispositions need a justification, not a signature. The check that formalizes the transition from setup to production is the discipline described in first article inspection, applied under document control.

Supplier Control, Deviations, and CAPA

Your suppliers operate inside your quality system whether or not they know it. Qualify each against defined criteria, record the evaluation, and put a quality agreement in place for anyone touching a critical component or process. The clause that matters most is change notification: a molder switching resin suppliers or a plater changing bath chemistry without telling you is a common root cause of field failures that take months to diagnose.

Corrective and preventive action is the process FDA inspects first, because it reveals whether the system self-corrects. A functioning CAPA process has documented triggers, real root cause analysis, verified effectiveness checks after the fix, and closure timelines that are met. A CAPA log with twelve items open past their due date tells an investigator more than any manual.

Build the Line Before You Need It

The cheapest time to design manufacturability, traceability, and testability into a device is during design, not after. Choose processes that can be validated, design fixtures and test points into the product, and prove the whole system on a real pilot production run under document control before commercial launch. Retrofitting GMP onto a product designed without it routinely costs six to twelve months.

Get Your Manufacturing Ready for Inspection

Projects House helps device companies design for manufacture under the QSR: process selection and validation planning, traceability architecture, supplier qualification, and a pilot build that produces real records rather than a rehearsal. Send your product description and intended production volume through our contact form.