EU GMP Annex 1Sterile medicinal products

EU GMP Annex 1 compliance software for sterile and injectable sites.

The 2022 revision of Annex 1 made the contamination control strategy the centre of sterile manufacturing. Swat iQua Suite covers the Annex 1 controls your records depend on — the sterile step gate, media fills, sterilisation and filter integrity, environmental monitoring and gowning, utilities, CCIT, visual inspection and a versioned CCS.

  • Sterile steps blocked until gowning, room, EM and media fill are clear
  • Failed BI/CI cycles cannot be released
  • Excursions raise deviations and release blockers
  • Versioned, e-signed contamination control strategy
Operator in full gowning working in a sterile cleanroom production area

Real product footage

See Annex 1 controls in the product.

The regulation

What Annex 1 requires — the 2022 requirements in brief.

Annex 1, “Manufacture of Sterile Medicinal Products”, was revised in 2022 and came into operation on 25 August 2023. It was published jointly by the European Commission and PIC/S, with WHO involvement, so the same text now underpins sterile inspections in many regions.

The revised Annex 1 is longer and more prescriptive than the version it replaced, but its organising idea is one word: strategy. Every site making sterile products is expected to have a contamination control strategy (CCS) — a documented, site-wide set of controls, derived from current product and process understanding, that addresses every potential source of microbial, particulate and endotoxin or pyrogen contamination, and is reviewed for effectiveness. Quality risk management runs through the whole annex as the way decisions are justified.

The areas the annex covers

  • Pharmaceutical quality system and the contamination control strategy, kept current and periodically reviewed.
  • Premises and cleanroom grades A to D, with qualification, barrier technologies, airflow and disinfection.
  • Utilities — water systems including water for injection, steam used as a direct sterilant, gases and vacuum, with monitoring against alert and action limits.
  • Personnel — training and qualification, and a gowning qualification programme with periodic reassessment.
  • Production and specific technologies — terminal sterilisation, moist heat, dry heat and other sterilisation methods, sterile filtration with filter integrity testing, lyophilisation, closure integrity and finishing.
  • Environmental and process monitoring — viable and non-viable monitoring against alert and action limits, with trending and excursion investigation.
  • Aseptic process simulation — media fills that represent the routine process, with defined frequency, acceptance and response to failure.
  • Quality control — including the requirement for filled containers of parenterals to be inspected individually for extraneous contamination or defects.

For a sterile site, the practical consequence is evidence. An inspector following a batch will expect to see that every aseptic step happened in a qualified room, without an open excursion, by a qualified operator, on a line with a current media fill — and that every sterilisation cycle, filter test, integrity test and inspection result behind the release decision is recorded and reviewed.

The sterile gate

An aseptic step that cannot start until the conditions are proven.

In Swat iQua Suite, a sterile batch step checks its preconditions on the server before it starts — each applies when the room and line are captured on the step.

  1. PeopleGowning

    Operator qualified

    A current gowning qualification, recorded with an e-signature by a different assessor.

    Current
  2. RoomGrade A/B

    Cleanroom ready

    The cleanroom is qualified and ready for the operation.

    Ready
  3. EMExcursions

    No open excursion

    An action-limit breach opens an excursion that blocks the room until disposed.

    Clear
  4. LineMedia fill

    Line qualified

    The filling line has a current, passing aseptic process simulation.

    Valid

If any condition fails, the step is blocked — and the cleanroom and line are recorded on step start.

Requirement → control

The Annex 1 controls Swat iQua Suite covers.

Sterile modules sit behind a per-site sterile feature, so non-sterile sites never see them. Each card notes exactly what is recorded.

  • Aseptic process simulation

    Versioned media-fill protocols and runs. Any positive unit means fail; a pass sets a valid-until date, and a line without a current pass cannot fill.

    • Protocol and QA approval: SoD + e-sign
    • A failed run triggers the sterile-impact process
    Media fill
  • Sterilisation & filter integrity

    Moist heat, dry heat, depyrogenation, gas, radiation and filtration cycles with BI/CI results. A cycle with a failed indicator cannot be released.

    • Pre- and post-use filter integrity tests
    • Operator cannot release their own cycle
    Sterilisation
  • Environmental monitoring & gowning

    Cleanroom register with grades, monitoring points, versioned alert/action limits and results classified against the limit in force. Action breaches open excursions.

    • Excursion disposition raises a deviation
    • Open excursions block batch release
    Environmental monitoring
  • Contamination control strategy

    The site’s CCS as a versioned, e-signed document with a hazard → control → monitoring → effectiveness register, per site or per product.

    • A controlled register — it does not pull live EM or utility data
    CCS register
  • Utilities monitoring

    WFI, clean steam, compressed air, HVAC and other utility systems, with versioned alert/action limits. Each result freezes the limit in force; an action breach raises a deviation.

    Utilities monitoring
  • Container closure integrity

    CCIT method, sample size, acceptance criteria and result per batch or finished lot, verified with SoD and e-signature. A fail raises a deviation and a critical release blocker.

    • Method recorded as defined in your procedure
  • Visual inspection

    100% inspection or AQL sampling per batch or lot, with units inspected and rejected and per-category defects. The decider cannot be the inspector; a reject blocks release.

    • AQL level recorded — sample size comes from your procedure
  • Lyophilisation cycles

    Versioned freeze-drying recipes and per-phase shelf temperature, vacuum and time checked against limits. Out-of-limit raises a deviation; corrections never overwrite.

  • Release with sterile evidence

    The release checklist adds sterility, endotoxin and media-fill items for sterile batches, and sterile failures raise blockers that need documented, independently approved risk acceptance.

    Batch release

Shared responsibility

What Annex 1 still asks of your site.

Swat iQua Suite covers the Annex 1 controls for records, gates and evidence. The science and the decisions behind your contamination control remain your site’s.

  • The content of your CCS — identifying hazards, choosing controls and judging their effectiveness. Swat iQua Suite keeps the document and register versioned and signed.
  • Facility and equipment qualification — cleanroom classification, airflow visualisation, barrier systems and sterilisation process validation.
  • Media fill design — worst-case interventions, duration, frequency and the number of units, set in your protocol.
  • Filter integrity strategy — including your justification for pre-use post-sterilisation integrity testing.
  • Monitoring programme design — sampling locations, frequencies and limits, and the trending and investigation of results.
  • Inspection and sampling plans — your AQL plans, inspector qualification and defect libraries.
  • Validation of your installation of Swat iQua Suite — supported by requirements traceability and our team.

We say “covers the Annex 1 controls” deliberately: Annex 1 compliance is demonstrated by your site, with these records as evidence.

FAQ

Frequently asked questions

Can’t find your answer? Talk to our team — we reply within one business day.

Is Swat iQua Suite EU GMP Annex 1 compliant?

Swat iQua Suite covers the Annex 1 controls for sterile records: the sterile step gate, media fills, sterilisation and filter integrity, environmental monitoring and gowning, utilities, CCIT, visual inspection, lyophilisation and a versioned CCS. Annex 1 compliance is demonstrated by your site, using these records as evidence.

What stops an aseptic step from starting?

The server checks that the operator holds a current gowning qualification, the cleanroom is ready and qualified, there is no open EM excursion in the room, and the filling line has a current passing media fill. If any check fails, the step cannot start.

How is the contamination control strategy managed?

As a versioned document per site, optionally per product, with a hazard → control → monitoring → effectiveness register. Approval is e-signed by someone other than the author and supersedes the previous version. The register is a controlled record; it does not pull live monitoring data.

What happens after an EM action-limit breach?

An excursion opens automatically. Its disposition is e-signed, raises a deviation and creates a critical batch release blocker, and while it is open, sterile steps in that room are blocked.

Does it calculate AQL sample sizes?

No. Visual inspection records the mode (100% or AQL), the AQL level, units inspected and rejected and defects by category. Sample sizes and acceptance numbers come from your sampling procedure.

We are not a sterile site. Will we see these modules?

No. Sterile modules sit behind a per-site sterile feature, so non-sterile sites never see them. You can switch them on later if you add sterile operations.

Ready to see Swat iQua Suite in action?

Book a free, personalised demo and see how Swat iQua Suite takes your plants, labs and quality teams from paper to inspection-ready.

Download the brochure →