Checklist for Pharmaceutical GMP Audits
This checklist is designed for conducting systematic audits at pharmaceutical manufacturing facilities.
Use this template with flowdit
- Customize this template or build your own
- Complete inspections using the mobile app
- Get reports and analyze your data
Start inspecting smarter — free for one user.
How to Use This Checklist
- Prepare by reviewing the organisation's documented quality policy, the existence and authority of the quality assurance function, and the current procedure log.
- Examine production and testing records to confirm that written quality assurance procedures are current, approved, and actually followed, and that testing is properly documented.
- Verify that laboratory space, equipment, and qualified personnel are adequate, and, where testing is outsourced, that the contractor's facilities and procedures have been inspected.
- Review batch records and release test results before a batch is released, and confirm batch-by-batch quality control approval before sale.
- Check employee induction, GMP awareness, on-the-job training, retraining after significant SOP changes, and the associated training records and signatures.
- Verify controls for reprocessing and returned goods: written procedures, quality control and release requirements, and confirmation that reprocessed batches meet specifications.
- Check labelling and packaging controls, including visual inspection of a representative sample of packages after packaging for correct labelling.
- Confirm finished product storage conditions, quarantine until release, expiry and storage information on labels, sampling and testing procedures with acceptance criteria, retention sample quantities, and required sterility and pyrogen tests.
- Review stock rotation, documentation of deviations from the first-to-expire-first-out policy, recall procedures and their currency, and complaint handling records.
- Record the audit dates, inspection start and end dates, the person preparing the audit, the location, and the signature to close out the inspection.
Start inspecting smarter — free for one user.
What this process is
A pharmaceutical GMP audit is a systematic examination of a manufacturing operation to confirm that it operates under documented quality controls, follows its own written procedures, and can demonstrate compliance through records. It is not a one-off inspection of paperwork; it is a structured review of how quality is built into every stage from materials and production through testing, release, storage, and distribution. This checklist supports that work by organising the audit around four areas: general controls, responsibilities in organisation and management, the document control programme, and employee induction, quality awareness, and training. It contains 54 items, from confirming that a documented quality policy exists to checking that complaints are investigated and that retention samples are kept.
Why it matters
Pharmaceutical products carry direct patient risk. If a batch is released without proper testing, if labels do not show the correct expiry or storage conditions, or if a complaint is never investigated, the consequences can reach patients. Auditing against written procedures and records is how you confirm that the controls you rely on are real rather than assumed. A well-run audit also protects the organisation. It surfaces gaps in documentation, training, and release controls while they are still correctable, and it produces a record of what was checked, by whom, and when.
General controls
Start with the organisation's overall quality framework. Confirm that the organisation operates under a documented quality policy and that a dedicated quality assurance department exists. That department should have full authority and responsibility to approve or reject components, drug containers and closures, intermediates, packaging materials, labels, and medications. It should also routinely review production records to ensure compliance with procedures. Check that there is sufficient laboratory space, equipment, and qualified personnel to carry out the necessary testing. If any testing is outsourced, verify that quality assurance has inspected the contractor's facilities to confirm the adequacy of laboratory space, equipment, personnel, and procedures. Where you find deviations from the first-to-expire-first-out stock rotation policy, confirm that they are documented.
Responsibilities in organisation and management
Quality assurance responsibilities must be written down and assigned. Confirm that all procedures and responsibilities related to quality assurance are documented, that written procedures are current and approved, and that staff comply with them. Check records to confirm that testing is properly documented. Look at who performs the work. Supervisory personnel in quality assurance should be qualified through training and experience, and there should be sufficient additional staff such as chemists, analysts, and laboratory technicians who are likewise qualified. Identify whether a designated person or area is responsible for creating, reviewing, and approving production and testing procedures, forms, and records. Verify that batch records and release test results are checked for accuracy and completeness before a batch of final product is released.
Document control programme
Written procedures are the backbone of a GMP operation, and their control is what makes them reliable. For each protocol or form, there should be a written SOP detailing how to fill it out and who is responsible for signing and co-signing. Document control extends into production and packaging. Written procedures should state how and by whom it is verified that the correct containers and packaging are used for the end product during manufacturing. They should also require a representative sample of packages to be visually inspected after packaging to confirm correct labelling. Labels should show storage conditions and expiry dates, with durability data printed or embossed. Finished products should be held in quarantine until quality control has completed testing and released the product batch by batch for sale, and they should be stored under appropriate conditions of temperature, humidity, and light.
Reprocessing, returns, and release testing
Where batches are reprocessed, there should be written procedures for the reprocessing, and quality control review and release should be required for reprocessed material. Tests should confirm that reprocessed batches meet established specifications. For returned medicinal products, a written procedure should include the required steps for reprocessing, where it can be established that the products were not stored under improper conditions, and quality control should review and test such reprocessed returned goods for compliance with specifications before they are released for resale. Sampling and testing should be governed by written procedures with acceptance criteria for each product to ensure the finished product meets requirements. A quantity of samples at least twice the amount needed for product release testing should be retained. Required sterility and pyrogen tests should be performed, and specific tests for foreign matter or abrasives should be included for ophthalmic ointments. Products with controlled or delayed release should be tested to determine conformity with release specification.
Recalls and complaints
A written procedure should set out the required steps in the event of a product recall, and the recall policy should be current and appropriate. Complaints, whether received orally or in writing, should be documented in writing and kept in a designated file. Quality control should review complaints promptly, and the actions taken in response to each complaint should be documented. Even a decision not to investigate a complaint should be documented together with the name of the responsible person. Complaint investigations should be documented and include the investigation steps, the results, and any follow-up steps, with the date recorded for each entry.
Employee induction, quality awareness, and training
People are the point at which procedures either hold or fail. Orientation for each new employee should include materials such as a company brochure, documentation outlining GMP requirements and the significance of following instructions, and on-the-job training for each job function before employees may perform those tasks. Employees should receive retraining on a standard operating procedure when significant changes are made to it. Ongoing, regular GMP training should be conducted, and each training should be documented in writing with the date of training, the type of training, and the signatures of both the employee and the trainer. Training records should be accessible so you can review which training a particular employee has received and which employees have been trained on specific procedures or attended certain training programmes. GMP trainers themselves should be qualified through their experience and training.
How to use the checklist
Work through the sections in order, using the items as prompts for what to examine and where to look. Most questions are answered yes, no, or not applicable, and comments or notes should be added where clarification is needed. Record the administrative details at the start and finish: the date conducted, who prepared it, the location, the inspection start and end dates, and the signature. Tie each finding back to something you actually inspected, such as the procedure log or the testing records, so that the completed audit reads as evidence rather than opinion. Where a question does not apply to the operation, mark it not applicable rather than leaving it unanswered.
Frequently Asked Questions
Ready to simplify inspections and get your team moving faster?
Start free today and turn inspections into a clear, consistent digital workflow. Prefer a guided walkthrough? Book a demo and see how flowdit can fit your team.