WorkflowManufacturing & Quality

The complete guide · November 2026

QP release and batch disposition, explained.

A finished batch of medicine sits locked in quarantine until one named person says it may go. In Europe that person is the Qualified Person, or QP, who certifies the batch. In the United States the quality unit approves or rejects it. This guide explains what that person must be sure of, where the evidence lives, and what holds a batch back.

It is for anyone who signs, prepares or waits on batch release in drug and biotech companies: Qualified Persons, quality assurance (QA) release managers, quality control (QC) and QA operations leads, supply planners and the heads of quality deciding whether to automate the preparation. No background needed.

See one case, screen by screen →
Watch with transcript →
A quick example · fictional

Imagine you are the Qualified Person at a biotech's fill-finish plant, where finished medicine goes into syringes. It is Wednesday, October 7, 2026, and the lab has just released its last result for batch VL26-0418: 48,210 prefilled syringes of Veltrimab, due at the European warehouse in two days. All 17 tests pass. By law, nothing moves until you sign.

So you open the file, and the passing results turn out to be one part of it.

What the lab report says
Tests in specification
17 of 17
Sterility
No growth
Markets on the order
Five in the EU
Stock waiting
€11.6 million
What the other records add
Wait before filling, limit 24 h
26 h 40 min
Quality's approval of that
Pending
Clean-room plate, limit 5
6 colonies
New stopper in Canada
Not approved
One open approval, one result to read, and one market the batch cannot carryThree records, three systemsand the lab report shows none of them.

None of this has to stop the batch for good. A study of how long the solution keeps while it waits may cover the delay. The investigation into the plate, a dish that catches microbes in the clean-room air, may be closed. Someone has to find each record, get each answer and put it in front of you before you sign.

Good release work catches what a passing lab report cannot show, in time to act, and gives the person signing every record behind each line.

Batch disposition and QP release guide
Part A · Understand it

QP batch certification and quality unit disposition: what the rules ask, what the evidence is and where it goes wrong

What the work is, the rules as they stand on November 3, 2026, the records behind a signature, the tests worked through with numbers, what inspectors find and how teams do it today, explained without selling anything. If you have never worked near a release desk, start here.

01 · In plain words

Why 48,210 finished syringes wait in a locked part of the warehouse until one person signs

A batch of medicine can take weeks to make and test. When the last syringe is filled, it goes into quarantine, a status in the warehouse system and often a caged area on the floor. The stock is complete and worth millions, and nobody may ship it. It stays there until a named person has confirmed that this batch, this exact one, was made and tested the way its license says.

In the European Union and the United Kingdom that person is the Qualified Person, or QP. EU law says every manufacturer must have at least one "permanently and continuously" at its disposal, and that the QP "must certify in a register or equivalent document" that each production batch meets the rules.1 US regulation names no such individual. The quality control unit, usually called the quality unit, has "the responsibility and authority to approve or reject" drug products, and it reviews the production records first.2,3

The hard part comes before the signature. The evidence for one batch sits in many places: the electronic batch record, the laboratory system, the quality system with its deviations (recorded departures from an approved instruction) and changes, the clean-room monitoring data, the warehouse system, the regulatory database and the serial-number hub. A release team gathers it by email and spreadsheet. Often the person who owns a missing approval has no idea a batch is waiting for it.

So the question each morning is simple to ask and slow to answer: what still stops this batch, and who can clear it? Batch disposition is the decision that ends the wait: release, hold or reject. Everything in this guide is about getting that decision made well, and getting it made before the market runs out.

From the last filled syringe to stock a warehouse may pick

  1. The batch is madeEvery step is recorded. The stock goes straight into quarantine.
  2. The lab tests itSterility alone takes 14 days in the fictional case here. Results are approved one by one.
  3. The evidence is checkedRecords, investigations, changes, clean-room data and market approvals are gathered, and open items are closed.
  4. A person decidesThe QP certifies, or the US quality unit approves, or the batch is held or rejected.
  5. The stock movesThe warehouse status changes for the markets covered, and the record stays open to inspectors.

Steps 3 and 4 are the subject of this guide.

A QP cannot hand over the duty, and three more surprises about batch release

The tasks can be shared; the responsibility barely can

EU GMP Annex 16, the European good manufacturing practice (GMP) annex on QP certification, lets 21 points be delegated as tasks "to appropriately trained personnel or third parties".4 EU GMP Chapter 2 says the QP's responsibilities "may be delegated, but only to other Qualified Person(s)".5

Passing every test does not finish the job

The US Food and Drug Administration (FDA) told one sterile drug maker in 2026 that it "inappropriately concluded there was no product impact based on overreliance on passing finished drug product test results".6 A lab result answers one question out of many.

A batch can be fine for France and unlicensed for Canada

Each market approves changes on its own clock. If a new stopper is approved in one place and pending in another, the same syringes may go to the first and stay out of the second.

The minimum record period is five years in the EU, and it runs differently in the US

The EU register stays at the disposal of the authorities for "at least five years".1 US batch records are kept "at least 1 year after the expiration date of the batch".7

Qualified Person, certification, disposition, quarantine

Qualified Person (QP)

The named, specially qualified person a licensed EU or UK manufacturer or importer must have. The QP certifies each batch.

Certification

The QP's signed entry saying a batch meets GMP and its license. Annex 16 calls it "the quality release of the batch". Only a QP can do it.

Disposition

The decision on what happens to a batch: released, held or rejected. It is the usual US word, and the wider one.

Quarantine

The status of stock that exists but may not be sold or shipped, kept apart physically or by a validated system.

Fourteen terms are defined in the one-page summary.

02 · What Annex 16 calls release

Batch release has three acts in EU GMP: checking the batch, certifying it and moving it to saleable stock

In shortPeople use "release" for three different things. EU GMP Annex 16 separates them: the checking, the QP's certification, and the transfer to saleable stock. Keeping them apart tells you who is responsible for what, and what software may and may not do.

EU GMP Annex 16 divides batch release into three acts, and only the second belongs to the QP alone

Wording from Annex 16's general principles. The register comes from section 1.10

  1. 1Checking

    "The checking of the manufacture and testing of the batch in accordance with defined release procedures."

    QA, QC and others, for the QPMay be delegated
  2. 2Certification

    The QP certifies the batch complies with GMP and its marketing authorization. "This represents the quality release of the batch."

    Qualified PersonBefore any supply
  3. 3Register

    Recorded by the QP in a register or equivalent, kept up to date and open to the authority for at least five years.

    Qualified PersonAs operations are carried out
  4. 4Transfer to saleable stock

    Stock moves or is exported, which "should take into account the certification performed by the QP".

    Warehouse, with a written agreement if at another siteAfter certification

Source 4

Show the numbers
StepWhat happensWhoTime
Checking"The checking of the manufacture and testing of the batch in accordance with defined release procedures."QA, QC and others, for the QPMay be delegated
CertificationThe QP certifies the batch complies with GMP and its marketing authorization. "This represents the quality release of the batch."Qualified PersonBefore any supply
RegisterRecorded by the QP in a register or equivalent, kept up to date and open to the authority for at least five years.Qualified PersonAs operations are carried out
Transfer to saleable stockStock moves or is exported, which "should take into account the certification performed by the QP".Warehouse, with a written agreement if at another siteAfter certification

The purpose is written into the annex: to ensure the batch was made and checked as its marketing authorization (the license for a market) and GMP require, that other legal requirements are met, and that if a batch has to be recalled, the QPs and records involved "are readily identifiable".4 The last point explains why the register matters so much. It answers, years later, who said this batch could go, and on what basis.

Who may be a Qualified Person

Directive 2001/83/EC sets the bar. A QP holds a university qualification, normally of at least four years, in pharmacy, medicine, veterinary medicine, chemistry, pharmaceutical chemistry and technology, or biology, with a defined list of subjects. A QP also has "practical experience over at least two years", which a longer course can shorten, in authorized manufacturers, in qualitative and quantitative analysis and the checks needed for quality.1 Member states enforce the duties through administrative measures or a professional code, and may suspend a QP when proceedings begin.1

A QP must also know the work personally. Annex 16 asks for "detailed knowledge of the steps for which they are taking responsibility" and proof of continuous training on the product type, processes, technical advances and GMP changes.4 Where several sites are involved, one QP can confirm a stage and another certify the finished batch, and a written agreement says who carries what. The QP performing final certification "holds overall responsibility", in the words of the European Medicines Agency (EMA) in its questions and answers.8

The words buyers search for, and what each means

TermWhat it meansWhere you meet it
QP certificationThe QP's signed entry under Article 51 and Annex 16EU, EEA, UK
QP confirmationA QP's signed statement about a stage made or tested at another site. It supports certification and is a different actMulti-site supply chains (Annex 16, Appendix I)
Batch dispositionThe decision to release, hold or rejectUS plants, and global quality systems
Lot releaseUsually the same as batch release. For US biologics, FDA can also require that a lot not be distributed until FDA itself releases it9US, and in vaccines
Official control authority batch releaseA public laboratory's own testing of certain blood and immunological products. Annex 16 does not address it, but the QP still certifies those batches4EU
Authorized personThe term used by PIC/S, the international network of GMP inspectorates, in its own Annex 16, in force since February 1, 202210PIC/S members outside the EU that adopt it
Review by exceptionReviewing the items a system flags, under rules agreed in advance, instead of reading every line of a batch recordBatch record review in plants with electronic records
03 · The rules and their dates

The rules on QP certification and US quality unit approval, with their status on November 3, 2026

In shortThe core texts are stable: Directive 2001/83/EC Article 51, Annex 16 in its 2015 revision and, as of the 2025 edition of the US Code of Federal Regulations (CFR), 21 CFR 211.22 and 211.192. What has moved is around them: Annex 1 for sterile products, the Windsor Framework (the UK-EU agreement covering Northern Ireland), a December 2025 EMA answer on batches outside the EU, and a draft EU annex on AI. The EU pharma package is still not law.

The signature's legal basis is decades old, and the rules around it keep moving

Dates as the sources state them

  1. 2001Directive 2001/83/EC

    Articles 48 to 52 set the QP's role and the register.

  2. Apr 15, 2016Annex 16 revision in operation

    Dated October 12, 2015: 21 points, supply chain, sampling, unexpected deviations.

  3. Feb 9, 2019EU safety features apply

    Unique identifiers uploaded before release.

  4. Feb 1, 2022PIC/S adds its Annex 16

    Authorized person; import elements voluntary.

  5. Aug 25, 2023Annex 1 in operation

    Excursions investigated before certification. One point followed on August 25, 2024.

  6. Jan 1, 2025UK Windsor Framework

    UK-wide licensing arrangements begin.

  7. Jul 7 to Oct 7, 2025Draft Annex 22 consultation

    Draft says large language models should not be used in critical GMP uses.

  8. Dec 2025EMA on non-EU batches

    Such "certification" is outside EU law.

  9. Sep 28, 2026EU package, Council position

    Awaiting Parliament's second reading. Not law.

Source 1 11 4 10 12 13 14 8 15 16

Show the numbers
WhenWhat
2001Directive 2001/83/EC
Apr 15, 2016Annex 16 revision in operation
Feb 9, 2019EU safety features apply
Feb 1, 2022PIC/S adds its Annex 16
Aug 25, 2023Annex 1 in operation
Jan 1, 2025UK Windsor Framework
Jul 7 to Oct 7, 2025Draft Annex 22 consultation
Dec 2025EMA on non-EU batches
Sep 28, 2026EU package, Council position
TextWhat it does hereStatus
Directive 2001/83/EC, Articles 48 to 52The QP's existence, qualifications, duty to certify and the registerIn force. Consolidated text of January 1, 2025 read1
EU GMP Annex 16How certification works: the 21 points, third-party audits, unexpected deviations, the release safeguardsIn operation since April 15, 2016. Still the current revision4,17
EMA GMP questions and answersScope of "registered specifications", supply chain records, non-EU batches, remote certificationLiving page. Question 5 dated December 2025; remote certification July 20238
EU GMP Chapters 1 and 2No sale before certification; delegation of responsibilities only to other QPsIn operation since January 31, 2013 and February 16, 20145,18
EU GMP Annex 1Sterile products. Monitoring data reviewed as part of certificationIn operation August 25, 2023; point 8.123 on August 25, 202412
Delegated Regulation (EU) 2016/161Serial numbers uploaded "before the medicinal product is released"Applies from February 9, 201911
21 CFR 211.22, 211.165, 211.192Quality unit approves or rejects; lab conformance before release; records reviewed before releaseIn force as of the 2025 edition of the CFR, revised as of April 1, 2025. The Federal Register's monthly list of affected sections shows no change to them from April 1, 2025 through September 30, 20262,3,7,19
21 CFR 11.50A signed electronic record shows the printed name, the date and time, and the meaningIn force as of the 2025 edition of the CFR, with no change listed through September 30, 202620,19
UKQP certification continues. QPs named on a manufacturing authorization from MHRA, the UK regulator, must be UK resident, and MHRA's position on remote certification is unchangedWindsor Framework arrangements from January 1, 202513,21
PIC/S GMP Guide, Annex 16An adapted annex for authorized persons, for inspectorates outside the EUIn force since February 1, 2022. Import elements are voluntary, depending on national law10
EU pharma packageWould carry the QP into new Articles 155 to 157, add that the QP "resides and operates in the Union", and add duties for decentralized sitesNot law. Council position September 28, 2026; Parliament's file reads "Awaiting Parliament 2nd reading"16
Draft EU GMP Annex 22, draft Annex 11AI and computerized systems in GMP. See section 12Drafts. Volume 4, the EU's published GMP rules, still lists Annex 11 at January 2011 and no Annex 2217,14
A December 2025 answer to watch if you certify for other regions. EMA now says that "certification" by a QP of batches not made in the EU or European Economic Area (EU/EEA), not intended for it and not physically imported into it "is not covered by EU legislation", and that references to EU legislation "shall not be included" in their release documents.8 A global company that used EU QPs as a convenient reviewer for rest-of-world batches should read that answer closely.
04 · Annex 16's 21 points

What a QP must have secured before certifying: EU GMP Annex 16's 21 points in plain words

In shortAnnex 16 lists three duties the QP "must personally ensure" and 21 points the QP must have secured, any of which may be delegated as a task. The list reaches well beyond the batch record: audits, supply chain diagrams, active substance rules, self-inspection and shipping all count.

Section 1.6 lists the personal duties: certification is permitted under the manufacturing authorization, national requirements are met, and certification is recorded in a register.4 Section 1.7 then says the QP "has responsibility for ensuring points 1.7.1 to 1.7.21 are secured", that these tasks may be delegated, and that the QP relies on the pharmaceutical quality system and "should have on-going assurance that this reliance is well founded".4 We read that last clause as a duty to keep checking the system, as well as the batch.

Only two of Annex 16's 21 points are about lab results and stability

Our grouping of points 1.7.1 to 1.7.21 by theme. The annex itself has no groups

Supply chain, sites and audits5 points
Materials and active substances5 points
Manufacture, records, validated state4 points
Changes, investigations, complaints3 points
Distribution and safety features2 points
Finished product results and stability2 points

Our reading of the sources 4

Show the numbers
ThemePoints
Supply chain, sites and audits5 points
Materials and active substances5 points
Manufacture, records, validated state4 points
Changes, investigations, complaints3 points
Distribution and safety features2 points
Finished product results and stability2 points
ThemePoints, in plain wordsEvidence you would open
Supply chain, sites and auditsThe whole chain is documented, preferably as a diagram (1.7.2). Audits of manufacturing, testing and active substance sites are done and the reports available (1.7.3). Sites match the license for the territory (1.7.4). Technical agreements are in place (1.7.18). Self-inspection is active and current (1.7.19)Supply chain diagram, audit reports, agreements, self-inspection schedule
Materials and active substancesSource and specifications of materials match the license, under supplier quality systems (1.7.6). Active substance made under GMP (1.7.7) and imported legally (1.7.8). Excipients under ascertained GMP (1.7.9). Status of materials for transmissible spongiform encephalopathy (TSE), a disease risk from animal-derived materials, when relevant (1.7.10)Bill of materials with release status, supplier status, written confirmations, risk assessments
Manufacture, records, validated stateAll activities follow GMP (1.7.1) and match the license (1.7.5). Records are complete and endorsed, and in-process checks are made (1.7.11). Processes stay validated; people are trained (1.7.12)Batch record review, validation status, training records, monitoring data
Finished product results and stabilityQC data meet the license's finished product specification, or a real-time release program (1.7.13). Commitments on manufacture or testing are addressed, and ongoing stability data "continues to support certification" (1.7.14)Certificate of analysis, stability summary, commitments list
Changes, investigations, complaintsImpact of changes evaluated, extra tests complete (1.7.15). Investigations, including out of specification and out of trend, "completed to a sufficient level to support certification" (1.7.16). Ongoing product quality complaints, investigations or recalls do not negate certification (1.7.17)Change records, deviation reports, the out-of-specification register, complaint and recall lists
Distribution and safety featuresShipping arrangements in place (1.7.20). Safety features on the packs for the Union market (1.7.21)Qualified shipping route, serial-number and tamper-evidence report

The paraphrases are ours, shortened for reading. Use the annex's own wording in your procedures.4

What may be handed to someone else, and what stays with the QP

LevelWhat the text saysWhat it means on a release desk
TasksPoints 1.7.1 to 1.7.21 "may be delegated to appropriately trained personnel or third parties"4QA can run the checklist. A tool can gather and compare, if your procedures and validation say so
Personal duties"The QP must personally ensure" the authorization, national rules and register entry4The QP cannot hand these to a colleague outside the QP group, or to a system
Responsibility"May be delegated, but only to other Qualified Person(s)"5The name on the register belongs to a person with the legal standing to sign
Reliance"On-going assurance that this reliance is well founded"4Sampling, spot checks and audits of whatever the QP relies on, including any software
05 · QP against quality unit

How EU QP certification and US quality unit batch approval differ in law and on the desk

In shortBoth protect the same moment. The EU names a qualified individual who answers for the batch and signs a register. The US gives authority to a unit within the firm, and asks it to review records and investigate discrepancies before release. Global plants usually run one evidence file and two signatures.

EU and UKUnited States
Who decidesA named Qualified Person who meets legal qualification rules1The quality control unit. No personal qualification is set out in 211.222
Core wording"The qualified person must certify in a register or equivalent document" that each batch satisfies the Article1Authority "to approve or reject all components, drug product containers, closures, in-process materials, packaging material, labeling, and drug products"2
Record reviewPart of the points the QP must have secured (1.7.11)4All production and control records reviewed and approved "before a batch is released or distributed"3
Unexplained problemsInvestigations "completed to a sufficient level to support certification"; a route for unexpected deviations (section 3)4Any unexplained discrepancy "shall be thoroughly investigated, whether or not the batch has already been distributed", extending to other batches3
Failing a specificationOutside section 3: "the QP would not be able to certify the affected batches" on that route8Products failing standards "shall be rejected". Reprocessing may be performed7
Record kept forThe period in national law, "in any event for at least five years"1"At least 1 year after the expiration date of the batch" for batch records7
Electronic signatureEU GMP Annex 11, January 2011 revision17Part 11: printed name, date and time, meaning, shown in any human readable form20
Serial numbersUploaded to the repositories before release11. "UK Only" wording on UK packs where applicable from 202513Drug Supply Chain Security Act: FDA's exemption for manufacturers and repackagers was set to expire May 27, 2025. Cited from a law firm's note of October 2024; we did not read FDA's exemption itself22

A batch for the EU and a batch for the US from the same plant can share nearly all their evidence and still need different lines: an EU license against a US biologics license application (BLA) or new drug application (NDA), a hub upload against trading-partner data, and a different person and meaning on the signature.

06 · Where the evidence lives

The seven systems behind one batch release file and the three documents that come out of it

In shortA release file is assembled from at least seven kinds of system, each with a different owner. Three documents leave at the end: the entry in the certification register, the batch certificate, and for shared steps a QP confirmation. The content of the last two is set out in Annex 16's appendices.

No single system holds the evidence for any one release question

Our reading of where each kind of evidence usually sits in a plant. ERP is the business system for stock and orders. Your systems will differ, so draw your own

NoneSomeMain source
Batch recordLabQuality systemClean roomERPRegulatorySerial hubBatch record and materialsMain sourceNoneSomeNoneMain sourceNoneNoneDeviations and investigationsSomeMain sourceMain sourceSomeNoneNoneNoneResults and certificate of analysisNoneMain sourceSomeNoneNoneSomeNoneEnvironmental monitoringNoneSomeSomeMain sourceNoneNoneNoneChanges and marketsNoneNoneMain sourceNoneSomeMain sourceSomeStabilityNoneMain sourceSomeNoneNoneSomeNone

Our reading of the sources 4 23

Show the numbers
Batch recordLabQuality systemClean roomERPRegulatorySerial hub
Batch record and materialsMain sourceNoneSomeNoneMain sourceNoneNone
Deviations and investigationsSomeMain sourceMain sourceSomeNoneNoneNone
Results and certificate of analysisNoneMain sourceSomeNoneNoneSomeNone
Environmental monitoringNoneSomeSomeMain sourceNoneNoneNone
Changes and marketsNoneNoneMain sourceNoneSomeMain sourceSome
StabilityNoneMain sourceSomeNoneNoneSomeNone

Batch certificate (Appendix II)

Name, strength, form and pack size; batch number; destination countries, at least within the EU; the statement; the QP's name, signature and date. The statement begins "I hereby certify that all the manufacturing stages of this batch of finished product have been carried out in full compliance with the GMP requirements of the EU".4

QP confirmation (Appendix I)

For a stage made elsewhere: the product and stage, batch number, site, technical agreement reference, a confirmation statement, and the confirming QP's name, signature and date. The confirming QP "takes responsibility for those activities being confirmed".4

Register (section 1.10)

The record that each batch satisfies Article 51, "kept up to date as operations are carried out", at the disposal of the authority.4

In a 2020 survey on remote certification, one QP in three used email with attachments or scans to communicate batch certification
1 in 3

QPs in a survey of more than 300, March 2020, said they use email with attachments or scans to communicate batch certification, on a question about safeguards when certifying away from site

Source 23 · One association's members, during the pandemic's first weeks. About 30% of respondents had done remote certification. We found no newer or larger public figure.

Show the numbers
MeasureValue
QPs in a survey of more than 300, March 2020, said they use email with attachments or scans to communicate batch certification, on a question about safeguards when certifying away from site33 of 100

The same survey found four elements seen as essential by over 90% of QPs when working away from site: batch records, QC results, relevant deviations and out-of-specification reports. Fewer than 80% said the same for the relevant parts of the marketing authorization and related changes.23 Yet market and license questions are where a batch can end up in the wrong place.

07 · Certifying after a deviation

When a QP may certify after an unexpected deviation: the Annex 16 section 3 test worked through on a late bulk hold

In shortA batch can still be certified after something unexpected happens, on conditions. All registered specifications must be met, the cause must be investigated, a risk process must conclude the impact is negligible, and the QP must consider extra stability. Failing a registered specification closes this route. Planned deviations were never on it.

Section 3 lets a QP consider certifying only after four tests are answered

Annex 16 section 3 and EMA question 3, in short form

  1. 1Was it unexpected?

    A deviation is unexpected until discovered. Planned deviations are outside paragraph 3.1.

    QAFirst
  2. 2Are registered specifications met?

    Active substance, excipient, packaging and medicine, including in-process and bulk. Some in-process excursions may be accepted on risk.

    QC, regulatoryOtherwise this route closes
  3. 3Is the impact negligible?

    A quality risk process concludes the impact on quality, safety or efficacy is negligible, and considers extra stability. Biologics get added caution.

    QA, subject expertsDocumented
  4. 4Is the cause dealt with?

    Thoroughly investigated, root cause corrected. A variation may be needed for continued manufacture.

    QA, regulatoryBefore repeats
  5. 5Does the QP accept it?

    The QP "may consider" certifying. The annex says may.

    Qualified PersonPersonal judgment

Source 4 8

Show the numbers
StepWhat happensWhoTime
Was it unexpected?A deviation is unexpected until discovered. Planned deviations are outside paragraph 3.1.QAFirst
Are registered specifications met?Active substance, excipient, packaging and medicine, including in-process and bulk. Some in-process excursions may be accepted on risk.QC, regulatoryOtherwise this route closes
Is the impact negligible?A quality risk process concludes the impact on quality, safety or efficacy is negligible, and considers extra stability. Biologics get added caution.QA, subject expertsDocumented
Is the cause dealt with?Thoroughly investigated, root cause corrected. A variation may be needed for continued manufacture.QA, regulatoryBefore repeats
Does the QP accept it?The QP "may consider" certifying. The annex says may.Qualified PersonPersonal judgment

The worked case: formulated bulk held 26 hours 40 minutes against a 24-hour limit

Here is the fictional case used throughout this guide. On September 18, 2026, at 9:40 pm, a stopper bowl on a filling line jammed. Filling stopped for 3 hours 10 minutes while a feeder was realigned. The formulated bulk, the finished solution waiting to be filled, stayed at 2–8 °C for 26 hours 40 minutes from the end of formulation to the end of filling. The batch record's limit was 24 hours, so this was a major deviation, DEV-26-1187.

The hold ran 2 h 40 min over the batch record's limit and 9 h 20 min inside the validated study

Fictional case. Time from end of formulation to end of filling, at 2–8 °C

Batch record limit24 hours
Actual hold (26 h 40 min)26.7 hours
Validated hold-time study VR-11436 hours

Fictional example from this guide

Show the numbers
Limit or eventHours
Batch record limit24 hours
Actual hold (26 h 40 min)26.7 hours
Validated hold-time study VR-11436 hours
TestWhat the file showsWho answers
Registered specifications met?17 of 17 finished product results in specificationQC lead, on the certificate of analysis
Time over the limit26 h 40 min − 24 h = 2 h 40 min, about 11% overArithmetic
Covered by evidence?Study VR-114 validates 36 h at 2–8 °C. 26 h 40 min is 74% of that. Temperature stayed between 3.1 and 5.4 °C. Bioburden before filtration 0 CFU per 100 mLValidation lead, microbiology
Root causeFeeder track misaligned after planned maintenance; the check omitted a full-speed run-in. Corrective action adds oneInvestigator, QA
Biological product cautionAnnex 16 warns that for biologics a deviation "can have an unexpected impact on safety and efficacy". The batch is added to ongoing stability4QA operations
The conclusionNegligible impact, approved by QA operationsQA, then the QP reads and decides
Three traps in this test. A hold limit written into the license sits differently from one in a batch record alone, so check which applies. A deviation that repeats is no longer unexpected: EMA says later repeats "should be considered changes", with variations submitted, and continuing only in exceptional circumstances to avoid disrupting supply.8

And a site's own rule that "any open deviation blocks" is often a sensible procedure, stricter than Annex 16's wording, which asks that investigations are "completed to a sufficient level to support certification".4 Know which is your rule and which is the regulator's.
08 · Clean-room evidence

What environmental monitoring means for certifying a sterile batch: Annex 1's limits and a settle plate at 6 CFU

In shortFor sterile products, passing the sterility test is the last check in a chain and cannot stand in for the rest. EU GMP Annex 1 says monitoring data and trends "should be reviewed as part of product batch certification/release", and excursions should be investigated before certification. So a closed investigation still comes to the person signing.

A sterility test samples a tiny share of a batch. Annex 1 says it "should only be regarded as the last in a series of critical control measures" and "cannot be used to assure sterility of a product that does not meet its design, procedural or validation parameters".12 The rest of the assurance comes from the process, and from the clean-room data taken while the batch was made.

Among those data are settle plates, dishes of growth medium left open to catch microbes falling from the air. Annex 1 grades clean rooms from A, the strictest, to D.12

Annex 1's settle plate limit tightens tenfold from Grade C to Grade B, and to no growth in Grade A

Maximum action limits for viable particles, CFU per 4 hours on a 90 mm settle plate. Colony-forming unit (CFU): one visible colony on the plate

Grade A (no growth; any growth is investigated)0 CFU
Grade B5 CFU
Grade C50 CFU
Grade D100 CFU

Source 12

Show the numbers
Clean-room gradeCFU per 4 hours
Grade A (no growth; any growth is investigated)0 CFU
Grade B5 CFU
Grade C50 CFU
Grade D100 CFU

Working through one plate on the fill day

In the fictional case, settle plate B-07 in room F-214, Grade B, read 6 CFU per 4 hours on September 18 against the limit of 5. That is one colony over. The organism was Micrococcus luteus, identified to species as Annex 1 expects for Grades A and B.12 All 46 Grade A samples read 0 CFU, gloves and gowns read 0, and investigation EM-26-0311 closed on October 3 with no impact on the batch, plus gowning retraining for one operator.

The rule

Investigate before certifying

Non-conformities, including environmental monitoring excursions, "should be adequately investigated before certification/release of the batch".12

The scope

Other batches and processes

The investigation asks about other batches, and why any batch is included or excluded "should be clearly justified".12

The trend

This plate and the plates before it

Annex 1 asks for review of monitoring data "and trend data". One colony over is a different story when it is the fourth this month.12

The reader

The person signing has access

Those responsible for certification should have access to the information and "adequate knowledge and experience in the manufacture of sterile products".12

What FDA has written about sterile batches and release, in 2026 letters

FDA's own wordsLetterThe lesson for a release desk
"In multiple investigations, you inappropriately concluded there was no product impact based on overreliance on passing finished drug product test results (e.g., sterility, endotoxin, and environmental monitoring)."Fresenius Kabi USA, September 22, 20266Passing tests do not close an investigation on their own
Mold was recovered below a filling machine after a batch was filled. "You released the product without sufficient investigation."Jabil Inc., August 27, 202624A mold recovery needs its answer before the signature
"Your firm continued to manufacture and release sterile drug products manufactured by aseptic processing following media fill failures on June 21, 2024, September 4, 2024, and November 4, 2024 as well as inconclusive media fill results and other significant quality events."K.C. Pharmaceuticals, August 12, 202625A media fill is a trial run of the filling line with nutrient broth in place of the drug. Evidence about the process applies across batches, and it must reach release

A warning letter, FDA's formal notice of significant violations, states FDA's position at its date; a firm may have responded or corrected since. The letters are cited only for the sentences quoted.

09 · Markets and changes

Why a batch's certificate may be narrower than its order: market-by-market approvals, changes and serial numbers

In shortA batch must match the license of every market it goes to, and licenses change on different dates. A change approved in the EU and pending in Canada means the batch cannot go to Canada. Annex 16 asks that manufacture and testing match the license, and that change impact is evaluated. Serial data must be in place before release too.

Annex 16 points 1.7.4, 1.7.5 and 1.7.15 say sites must comply with the marketing authorization "for the intended territory", activities must be "consistent with those described" in it, and "the impact of any change" must be evaluated.4 The batch certificate names the destination countries, at least within the EU.4 In the fictional case, batch VL26-0418 is the first to use stoppers from a second-source supplier. The sample change record shows four markets on four clocks.

One stopper change, four markets, and the fourth still open when the batch needs to ship

Fictional change record CC-26-0233, as its sample record shows it. Real filing categories depend on the change and the product

  1. Aug 30, 2026United States

    CBE-30 (changes being effected in 30 days) effective. A supplement filed at least 30 days before distribution.

  2. Sep 2, 2026European Union

    Type IB, an EU variation category, shown approved.

  3. Sep 10, 2026United Kingdom

    Approved.

  4. Sep 11, 2026Stopper lot released

    Lot WE-7731, first used in VL26-0418.

  5. Sep 18, 2026Canada filed

    Approval pending on October 7.

Fictional example from this guide

Show the numbers
WhenWhat
Aug 30, 2026United States
Sep 2, 2026European Union
Sep 10, 2026United Kingdom
Sep 11, 2026Stopper lot released
Sep 18, 2026Canada filed
Oct 9, 2026Batch needed in the EU
What to check per marketWhy it trips people upSource of the answer
Is every change this batch uses approved here?Change control may close when the first market approves. The batch that follows may not know the others are pendingChange record and regulatory tracking system
Are the sites on this license?A new testing lab can sit in one dossier and not yet in anotherRegulatory system
Is the specification this market's?Registered limits can differ by market, and internal alert limits are a different thingLab system's specification library
Are serial numbers uploaded or shared?In the EU the marketing authorization holder must ensure the data are uploaded "before the medicinal product is released for sale or distribution"11Serialization system
Is the shipping route qualified?"The appropriate arrangements for distribution and shipment" is point 1.7.204Logistics and quality records

The EU's system for license changes, called variations, moved too: chapter codes became E, Q, C and M from January 15, 2026, under guidelines C/2025/5045.26 A stored procedure that quotes old B.II codes needs a look. In the US, 21 CFR 601.12(c) covers the 30-day supplement for biologics.9

10 · What inspectors find

Quality unit oversight and investigations are FDA's two most cited drug manufacturing sections in fiscal 2025

In shortBy our count of FDA's published data, 21 CFR 211.22 and 211.192 were the two most cited Part 211 sections on Form 483s, FDA's list of observations at the end of an inspection, in fiscal 2025. Their counts roughly doubled from fiscal 2020 as the number of drug Form 483s doubled, so the rate per form stayed about level. Warning letters show what that looks like: batches released before the records were reviewed, or before a question was answered.

The quality unit and investigations lead FDA's fiscal 2025 drug citations

Our sum of FDA's Frequency column, grouped by Part 211 section. 2,608 Part 211 citations in all

211.22 Quality control unit309 citations
211.192 Production record review and investigations236 citations
211.67 Equipment cleaning204 citations
211.100 Written procedures201 citations
211.160 Laboratory controls176 citations
211.84 Testing of components161 citations
211.68 Automatic and electronic equipment153 citations

Source 27

Show the numbers
21 CFR sectionCitations
211.22 Quality control unit309 citations
211.192 Production record review and investigations236 citations
211.67 Equipment cleaning204 citations
211.100 Written procedures201 citations
211.160 Laboratory controls176 citations
211.84 Testing of components161 citations
211.68 Automatic and electronic equipment153 citations
Per Form 483, both sections have stayed about level: their counts doubled as the forms doubled

Citations per 100 drug Form 483s: our sums by section, divided by FDA's count of forms. From fiscal 2020 to 2025, forms went from 349 to 713, 211.22 from 147 to 309 citations, 211.192 from 128 to 236

211.22 Quality unit211.192 Records and investigations
02040604333
FY20FY21FY22FY23FY24FY25

Source 27

Show the numbers
211.22 Quality unit211.192 Records and investigations
FY204237
FY215040
FY224736
FY233934
FY244831
FY254333
What went wrongFDA's own wordsLetter
Released before results were reviewed"[B]etween April 2024 and May 2025, released numerous batches of drug products for distribution prior to reviewing all test results to ensure they met specifications."Seaway Pharma, December 1, 202528
Records not reviewed firstThe quality unit failed to ensure "Batch records were reviewed before drug product release (21 CFR 211.22(a))".Purolea Cosmetics Lab, April 2, 202629
A disposition reversed without QAA batch approved for destruction in 2021 "was reworked in March 2022 without a pre-approved rework protocol". The inspection documented that QA management was not involved in that decision, and FDA faulted a response that did not commit to investigating "the redisposition, rework, and release" and other batches that may have been "released without documented QU approval".Persōn & Covey, September 23, 202530
About one FDA drug quality inspection in five ended in official action indicated in fiscal 2025
18 in 100

of 1,309 inspections classified as official action indicated; 60% voluntary action indicated and 22% no action indicated

Source 31 32 · Official action indicated is FDA's class for a facility in an unacceptable state of compliance. This covers all findings, far beyond batch release. FDA's report prints no count of findings about release.

Show the numbers
MeasureValue
of 1,309 inspections classified as official action indicated; 60% voluntary action indicated and 22% no action indicated18 of 100

When a batch that should have waited has already shipped

"cGMP deviations" appears in about a quarter of 2025's US drug recall events

cGMP is current good manufacturing practice. openFDA drug enforcement reports, report dates in 2025: 327 recall events covering 765 product entries. Our word searches on the recall reason, hyphenated or not, counted by event. The groups overlap and are no measure of release failures

"cGMP deviations"81 events
"Lack of assurance of sterility"34 events
"Out of specification"33 events
"Stability"32 events
"Failed dissolution"23 events

Source 33

Show the numbers
Words in the recall reasonEvents
"cGMP deviations"81 events
"Lack of assurance of sterility"34 events
"Out of specification"33 events
"Stability"32 events
"Failed dissolution"23 events

Six common errors on the release desk, and why they happen

ErrorWhy it happensWhat catches it
A summary is trusted over the recordThe deviation list says "closed" while the impact assessment is still awaiting approvalReading the approval record itself
An audit lapses mid-batchThe audit date and the batch date live in different systemsComparing each party's status on the date used, for active substance and critical materials
A QP confirmation is assumedRequested by email and never chasedA named owner and due date on each confirmation
A market is carried on by habitThe order is copied from the last batch, while a change is pending in one countryPer-market status for every change the batch uses
An old stability result is relied onNobody asks how old the data areA stated age limit in your procedure. Annex 16 asks only that data continue to support certification4
An out-of-specification result sits unseenIt lives in the lab until someone asks, and it may be late in the cycleA shared view of open investigations by batch, with need dates beside them
11 · The cost of a day

What a day in quarantine costs, and how little batch release lead time data is published

In shortPublished numbers here are thin and mostly come from vendors, and we mark them that way. We found no independent benchmark for hours per certification or days from made to certified. The arithmetic for your own site is simple: value in quarantine, multiplied by your carrying rate, divided by 365.

≈40 hours

for a team to reach a release decision on one batch, by one vendor's account of its work with drug makers.34

A software vendor, 2022
48 hours

called the average review of one batch report, with reports of up to 500. The article cites no study.35

PharmTech, 2019
4 weeks to 6 hours

average release time at one unnamed manufacturer after moving to review by exception, by its vendor's account.36

An automation vendor, 2021. One case
What we could not find published. We found no official count of QPs in Europe, and no public figure for hours per QP certification, the share of batches blocked at first review, a median from manufacture to certification, or the size of batch release software as its own market. Treat any such number in a slide as a claim until you see its dataset. Measure your own.

Working out a day's carrying cost in quarantine

A company's money is tied up in stock it cannot sell. One way to value a day is the batch's value at cost or transfer price, multiplied by the annual rate your finance team uses for inventory, divided by 365. The rate here is an assumption to replace.

Carrying cost per day = batch value × annual carrying rate ÷ 365
StockValueAt an illustrative 10% a yearOver 2.6 days
One batch, the fictional VL26-0418€11.6 million€3,178 a day€8,263
All eight batches in the fictional quarantine€63.6 million€17,425 a day€45,304

The carrying cost is usually the smaller part of the case. A batch that misses its need date can mean a market out of stock. That is why planners watch this work closely.

New US drug shortages have fallen steeply, with 93 still ongoing at the end of 2025

New shortages by calendar year, FDA's report to Congress. Shortages have many causes, and FDA points to market conditions and limited capacity among them

55 new shortagesCY 2023
15 new shortagesCY 2024
4 new shortagesCY 2025

Source 37

Show the numbers
PeriodValue
CY 202355 new shortages
CY 202415 new shortages
CY 20254 new shortages

FDA's report gives no link between shortages and release lead time, and neither do we. It does show release acting as a control under pressure: to prevent or ease shortages in 2025, FDA used regulatory flexibility 78 times, and one example was "extra testing for product quality" before release.37

12 · AI and the signature

What regulators say about AI near a batch release decision, and the line draft Annex 22 draws

In shortThe law names a person for this signature, and no text we read changes that. Draft EU GMP Annex 22 goes further: it says generative AI and large language models "should not be used in critical GMP applications". It is still a draft, and EMA's June 2026 report describes the drafters discussing a wider scope. Any company using such models near release needs a dated, written position.

TextWhat it says that bears on releaseStatus
Draft EU GMP Annex 22Applies to static models, which do not adapt during use, with deterministic output, where identical inputs give identical outputs. Dynamic and probabilistic models, generative AI and large language models "should not be used in critical GMP applications". It describes non-critical uses as those "which do not have direct impact on patient safety, product quality or data integrity", where qualified people answer for the output14Draft. Consultation July 7 to October 7, 2025. Not on the EU's published GMP page (Volume 4) on November 3, 202617
EMA workshop reportConsultation comments supported allowing these models. The drafting group has discussed widening scope under a documented, risk-based control strategy, and "concerns remain" about what that strategy needs. The report closes that "there may be viable pathways"15Workshop of June 30, 2026. No revised text published
FDA draft guidance on AICovers AI producing information for regulatory decisions on drug quality, including in manufacturing. Excludes operational efficiencies "that do not impact patient safety, drug quality, or the reliability of results"38Draft, January 2025. "Not for implementation"
EMA reflection paper; EMA and FDA principlesA risk-based approach across the medicine's life, and ten shared principles39,40Paper September 9, 2024; principles January 14, 2026
EU AI ActTiming was changed by the EU regulation known as the AI Omnibus. Check your own classification with counsel41In force July 27, 2026. Annex III rules December 2, 2027; Annex I rules August 2, 2028
ISPE GAMP AI guideIndustry guidance on developing and using AI-enabled computerized systems in GxP areas42July 2025. Not a regulation
Data integrity guidanceThe ALCOA+ principles: records attributable, legible, contemporaneous, original and accurate, and the "+" adds complete, consistent, enduring and available43MHRA, March 2018
FDA Computer Software AssuranceIts scope is device production and quality system software. A drug plant cannot rest on it44Final, February 2026
The nearer software sits to the decision, and the harder its output is to check, the less room there is

Our own reading of draft Annex 22 and EMA's report, for discussion with your quality team. Your risk assessment decides

How easily a person can check the output →
Check and use
Person reads all
Little reason
Keep to people
Find recordsCompare to limitSummarize a reportDraft certificateJudge impactDecide or sign
How close to the release decision →

Our reading of the sources 14 15

Show the numbers
ItemHow close to the release decision (0–1)How easily a person can check the output (0–1)
Find records0.200.80
Compare to limit0.150.62
Summarize a report0.620.31
Draft certificate0.720.70
Judge impact0.780.20
Decide or sign0.800.10
Software can do it wellStays with a qualified person
Find every record that touches a batch, its materials and its equipmentDecide whether the reliance on those records is well founded
Compare results and dates with limits, and say which is outDecide whether a result, or a limit itself, needs a closer look
Show the sentence behind each line, in the source recordRead it, and judge whether an impact is negligible
Re-check a line when its record changes, and tell the ownerOwn the approval that clears the line
Draft a certificate and register entryCertify, approve, hold or reject, with a signature that carries its meaning
One question to settle before any tool sits near this work. Is the use a "critical GMP application" in draft Annex 22's terms? A tool that decides a batch's fate plainly would be. The draft's test for a non-critical use is no "direct impact on patient safety, product quality or data integrity".14

A tool that gathers records and shows them to a person who reads and decides is an arguable case against that test, and the draft does not address it by name. Write down your reasoning, name an owner, and date it, so it can be rechecked when the final text appears.
13 · How teams do it today

Who touches a batch before certification: the QP, QA, QC, regulatory, suppliers and the planner waiting on them

In shortRelease is a relay among six or more roles, and most of the waiting sits at the hand-offs. Common setups run from a paper checklist to a release module on a quality or ERP suite. All of them still need a person to chase the missing approval.

The people a batch waits on

Qualified Person or quality unit head

Answers for the decision, and often for several plants and products. Wants to know what still stops the batch.

QA release manager

Assembles the file and runs batch record review, often by exception. Spends the week asking for records.

QA operations

Approves deviation impact assessments and changes. Needs to know which batch waits on which approval.

QC laboratory lead

Approves results and the certificate of analysis, and runs out-of-specification investigations.

Regulatory and supplier quality

Hold the market approvals, audits and technical agreements that Annex 16 asks about.

Supply planner

Has no decision to make, and carries the consequence: a late batch can leave a market short.

From last lab result to warehouse, hand-off by hand-off

Each hand-off on a manual release desk is a place for a batch to wait

A typical manual path. Times are placeholders; measure your own

  1. 1Last result approved

    The lab approves the final result and issues the certificate of analysis.

    QC leadDay 0
  2. 2File assembled

    Records exported and collected by email and shared folder.

    QA release managerHours to a day
  3. 3Open items chased

    Deviations, confirmations, audits and market status asked for, person by person.

    QA release manager, ownersHours to days
  4. 4QP reads

    Reads what was collected, often again from the start, and asks questions.

    Qualified PersonHours
  5. 5Signed and moved

    Certificate and register entry, then stock status and notices.

    QP, warehouseSame day

Illustrative · replace with your own numbers

Show the numbers
StepWhat happensWhoTime
Last result approvedThe lab approves the final result and issues the certificate of analysis.QC leadDay 0
File assembledRecords exported and collected by email and shared folder.QA release managerHours to a day
Open items chasedDeviations, confirmations, audits and market status asked for, person by person.QA release manager, ownersHours to days
QP readsReads what was collected, often again from the start, and asks questions.Qualified PersonHours
Signed and movedCertificate and register entry, then stock status and notices.QP, warehouseSame day

Where 2.6 days on one batch file went at the fictional plant

Finding and chasing records takes most of the review time at this fictional plant

An estimate for the fictional plant used in this guide, 2.6 days in all. We found no public benchmark, so time five of your own files

Batch record, materialsResults, stabilityDeviations and approvalsClean room, changes, marketsQP review, register
By hand0.5 days0.4 days0.6 days0.8 days0.3 days

Fictional example from this guide · Fictional figures.

Show the numbers
Batch record, materialsResults, stabilityDeviations and approvalsClean room, changes, marketsQP review, register
By hand0.5 days0.4 days0.6 days0.8 days0.3 days

Paper checklists, release modules and rule-driven review: three ways plants run this

SetupHow the file gets builtStrengthWeakness
Paper or spreadsheet checklistQA fills a release checklist by hand, and attaches printoutsSimple, and easy to inspectSlow; a blocker surfaces when someone next looks; hard to see across batches
A release module on a quality or ERP suiteStatus fields and workflows pull together records from connected systemsOne place for status, with e-signaturesA status field can say closed without showing why, and unconnected systems stay manual
Review by exception in the batch record, plus software that reads across systemsRules flag exceptions; software gathers evidence and cites it; people read and decideAttention goes where the risk is, with the record alongsideThe rules and connections need validation, and regulators' position on AI models is unsettled

Any of these can be run in house or with a contract partner. A contract manufacturer's QP, or a contract QP service, adds a written agreement and shared access to the mix. MHRA says there is "no regulatory requirement for the QP to be physically present at the site", and that remote certification must be controlled in the quality system.21 EMA says it could be allowed if the national authority accepts it, and that it takes place within the EU/EEA or Northern Ireland.8

Part B · See it working

Botminds Batch Disposition & QP Release on one batch at a fictional fill-finish plant

Part A described the work without naming a product. This part shows how Botminds prepares it, for Northwind Bio, a fictional biotech with a fill-finish site called Plant 3 in Leiden. Every company, person, batch, record and number in the screens is sample data, and procedures and rule wording on screen are the sample site's own.

14 · One batch, start to finish

Batch VL26-0418: from the last lab result at 7:52 am to a QP's signature at 10:58 am

In shortThis is the example from the top of the page, inside the product. Agents, AI helpers that each do one job, read the records and set six checkpoints: clear, to review, or blocked with an owner. Omar Haddad approves the one blocker. Lena Ortiz, the Qualified Person, reads the one item left, and she decides.

The product does not release or certify anything. It reads records, compares them with limits, cites its sources, chases owners and drafts text. The Qualified Person certifies, or the US quality unit approves. A hold or a rejection is also a person's signed decision. Stock status changes only after that signature, because that person decided it.
Three hours and six minutes from the last result to the signature, with one blocker cleared on the way

Fictional case, Wednesday, October 7, 2026. Needed at the EU distribution center on October 9

  1. 7:52 amLast QC result released

    The six checkpoints are ready to check; the signature stays locked.

  2. 46 secondsAgents set the checkpoints

    112 records from seven systems in this sample run: four clear, one blocked, one to review.

  3. 10:42 amOmar Haddad approves

    QA operations approves DEV-26-1187's impact assessment; only that checkpoint re-checks.

  4. NextLena Ortiz accepts EM-26-0311

    The settle plate result is read, accepted and recorded with her name.

  5. 10:58 amShe certifies

    QPC-2026-1043, for DE, FR, NL, ES and IT. Canada stays off.

Fictional example from this guide

Show the numbers
WhenWhat
7:52 amLast QC result released
46 secondsAgents set the checkpoints
10:42 amOmar Haddad approves
NextLena Ortiz accepts EM-26-0311
10:58 amShe certifies
1

The last result arrives, and the signature is locked

Lena opens the release checkpoints. Across the top are the 8 batches in quarantine, each with six small status marks. Below sit this batch's six checkpoints: batch record, deviations, QC results and CoA (the certificate of analysis), environmental monitoring, changes and markets, stability. The seventh tile, QP certification, is locked.

The batch record review report is open on the right: 214 of 214 steps signed.

Before the check. The batches in quarantine, the six checkpoints, the locked signature tile, and the batch record beside them.
2

Specialist agents read seven systems, in view

One press starts the run. Each agent reports as it goes: 214 steps signed and 11 materials released; 2 deviations, one open; 17 of 17 results in specification with sterility no growth; 1,284 samples from the fill day; 48,210 identifiers uploaded.

Each tile fills in as its checks finish. The screen gives these timings for the sample run, and your own will differ.

Agents at work. Each agent's line shows what it found, and the checkpoints fill in one at a time.
3

One deviation stops its checkpoint, with a name beside it

The tile for deviations turns red, and the signature stays locked. DEV-26-1187: the formulated bulk was held 26 h 40 min against the batch record's 24-hour limit after a stopper-bowl jam. Study VR-114 supports 36 hours. The impact assessment concludes negligible impact, and QA approval is pending from Omar Haddad, due 12:00 pm.

Small numbers in the text link to the sentence in the source. The deviation report sits on the right, with that passage highlighted. Lena's button says "Ask Omar to approve".

A blocked checkpoint. The blocker, its owner and due time, and the deviation report open at the cited passage.
4

Omar approves, and only that checkpoint re-checks

Omar gets the deviation with its cited records and the need date. At 10:42 am he approves: negligible impact, with the batch added to the ongoing stability program. That follows Annex 16 section 3's conditions in Part A.4 His approval clears the line. The decision on the batch stays with Lena.

The coordinating agent re-checks the deviations lines alone, and the tile turns green. An agent never closes a deviation.

Re-checked and clear. The approval record is what clears the line. Three of three checks are met, each with its record.
5

One closed excursion comes to the QP to read

Environmental monitoring is amber, "to review". On the fill day, plate B-07 in room F-214 read 6 CFU per 4 hours against the Grade B limit of 5; the organism was Micrococcus luteus; every Grade A sample read 0; EM-26-0311 closed on October 3 with no impact. An open action-level investigation would block. A closed one reaches the QP as something to read.

An item to read. The excursion, its investigation, and the monitoring summary with the passage marked. It clears only when the QP accepts it.
6

She accepts it, and the signature tile opens

Lena reads the investigation and presses "Accept — no impact on the batch". The line now reads "Accepted by Lena Ortiz", and the acceptance goes on the record and the certificate. All six tiles are green, and the seventh turns dark and opens.

Every checkpoint clear. The seventh tile says "sign now". The decision still has to be made.
7

She certifies for five markets, with Canada off the list

The statement names the batch. The six checkpoints are listed, along with DE, FR, NL, ES and IT, and the note "Canada excluded — CC-26-0233". What cleared today is shown: DEV-26-1187 approved by Omar Haddad, EM-26-0311 accepted by her. She signs with the meaning "Certified for release (Annex 16)" and her password.

The signature. The wording is the sample site's. Annex 16 Appendix II's own statement begins "I hereby certify that all the manufacturing stages of this batch of finished product have been carried out in full compliance with the GMP requirements of the EU".4
8

The register, the certificate and the stock follow her signature

Certificate QPC-2026-1043 is issued at 10:58 am. Then the steps she has just allowed run: the register entry is written, the signed PDF issued, the ERP status moves from Quarantine to Unrestricted for the five markets, and the warehouse and planner Priya Ranvelle are told. This is Annex 16's third act, and it follows her decision.4

After the signature. Four steps follow from one person's decision, each timed.
9

The certificate names who accepted what

The drafted certificate became final only when Lena signed. It lists the markets, "not Canada" with its reason, the outcome of each checkpoint, the item she accepted and the signature block with her name, meaning and time.

The certificate. A draft until signed. Its contents go beyond Appendix II's minimum, as a site may choose.
10

Every step is on one trail, people and agents alike

The activity tab lists, newest first, what each person and agent did and when. An inspector asking how this batch got certified can read it top to bottom: AI steps are marked, and every human decision carries a name.

The activity trail. Agents' steps carry an AI mark. People's steps carry their initials.
15 · The other screens

Market restrictions, lapsed supplier audits, open out-of-specification results and the release runway on screen

In shortOther batches show what else can stop a release: a change pending in one market, a lapsed supplier audit, an out-of-specification result in investigation. Further screens show every batch against its need date, each blocker by its owner, the register, the trends and the rules.

Canada comes off the certificate. The change record shows each market's status. The sample record says "Type IB variation approved". EU guidelines C/2025/5045, row Q.II.e.7, list adding a packaging component supplier as Type IA when its conditions are met, and a new sterilization site or process for that component as Type IB.26 A real filing depends on the change and the product, so treat this as the sample's wording.
A lapsed audit, with a person to ask. Batch TX26-0091. The sentence about 1.7.3 is the sample's wording. Annex 16 1.7.3 names audits of sites making and testing the medicine and making the active substance; excipients come under 1.7.6 and 1.7.9.4 A site can reasonably go further for a critical excipient, as a rule of its own.
An out-of-specification result stays a blocker. Batch CR26-1102: dissolution 78% at stage S3 against Q = 80%, Phase I found no laboratory error, Phase II open. A failed registered specification falls outside Annex 16 section 3, so this batch waits for the conclusion.8
The release runway. Each batch against its need date. CR26-1102 is needed October 9 and forecast October 11, so planner Priya Ranvelle has the alert. The forecast informs people; it decides nothing.
Every batch, one table. Stage, checkpoints clear, what is open and who owns it, need date and value. The plant is in the Netherlands, so the sample's values are in euros.
Blockers by the person who can clear them. Each ask carries the cited record and the need date. When the record changes, the affected lines re-check.
The certification register. Certifications, US approvals and rejections with their signer, time and stock status. Article 51 asks for at least five years.1
What holds batches up, over time. Sample data on every panel. The 17.6-day median and 71% first-time clear are design targets shown on sample batches. Measure yours live.
Your rules, as approved versions. The site's own rules, shown here with sample values. Annex 16 sets neither the 120 days nor the 36 months: 1.7.14 asks that stability data continue to support certification, and 2.2 asks that repeat audits follow risk management. "Any open deviation blocks" is stricter than 1.7.16's wording, and a site may choose it.4
Who signs for each market. Named people per market, and what they may sign.
The US quality unit's version. The same six checkpoints route to the quality unit, here Sam Patel, with the meaning "Approved for distribution (21 CFR 211.22)". Part 11 asks for name, date and time, and meaning.20
A rejection takes two signatures here. The second signature is the sample site's choice, set in its rules. No rule we read requires it.
16 · Who reads, who signs

Eight release agents that read and draft, and the people whose signatures make it a decision

In shortA release coordinator and six specialists set the checkpoints, and a drafter prepares the certificate. Each has a job and a line it does not cross. Every decision belongs to a named person. Your checklist, and how close it stands to all 21 Annex 16 points, is yours to set.

Release coordinator

Opens the checks when the last result is released, sends each to a specialist, and sets each checkpoint from what comes back. Never certifies, holds or rejects.

Batch record reader

Reads the review-by-exception report: signed steps, exceptions, in-process controls and yield. Reads only; never edits the record.

Results and CoA checker

Compares each result with the registered specification, and checks sterility, stability age and the out-of-specification register. Never uses an internal alert limit for pass or fail.

Deviation and change tracer

Finds deviations, investigations, complaints and changes touching the batch, its materials or equipment. Never marks a deviation closed, and cites the approval record.

Environment and utilities checker

Pulls clean-room, personnel, water and utility data with each excursion and its investigation. An open action-level investigation always blocks.

Supply chain and materials checker

Checks material and supplier status, audits, technical agreements and QP confirmations. Always shows conditional status.

Market and serialization checker

Checks each market's license and change status, the shipping route and serial numbers. Never adds a market the license does not cover.

Certificate drafter

Drafts the certificate and register entry from the checkpoints. Draft only; the QP signs.

What each agent found. The agents tab keeps each agent's result and timing, so a reviewer can see who found what.
Four-eyes, the rule that a second person checks, applies to people here. Omar Haddad approves the deviation, and Lena Ortiz certifies. An accepted item carries her name. A rejection takes a second signature in this sample. Release rules change only through an approved version, and every step is on the trail. These controls support your compliance with 21 CFR Part 11, EU GMP Annex 11 and your own procedures; validation stays yours. Botminds' credentials are SOC 2 Type II audited and information security managed to ISO 27001.
Draft Annex 22 bears directly on this design. These agents use large language models. Draft EU GMP Annex 22 says such models "should not be used in critical GMP applications".14 It remained a draft on November 3, 2026, and EMA's June 2026 workshop report says the drafters have discussed a wider scope under a documented, risk-based control strategy, with no revised text published.17,15

The draft's test for a non-critical use is no "direct impact on patient safety, product quality or data integrity", and batch release sits close to that line. In this design the agents read and draft, a person reads what they flag, and only the QP or the quality unit decides. Whether your use counts as critical is your own documented risk decision, so date it, name an owner and recheck it when the final text appears.

The sample checklist's 18 lines against Annex 16's 21 points

Each checkpoint holds lines, 18 in the sample: six on the batch record, three on deviations, two on results, two on the clean room, four on changes and markets, one on stability. Together they cite 17 of the 21 points. Points 1.7.7 (active substance GMP), 1.7.8 (active substance import), 1.7.10 (TSE status) and 1.7.19 (self-inspection) have no line of their own in the sample, so add them to your own checklist, or record where your quality system already answers them.4 Section 1.6's personal duties stay with the QP.

Lena, Sam, Omar, Dana and Priya in the screens

LO

Lena Ortiz · Qualified Person, Plant 3

Certifies 30 to 40 EU batches a month across three products.

"I don't need more data. I need to know what still stops this batch."
SP

Sam Patel · QA release manager, and US disposition

Prepares release and owns batch record review by exception.

"Half my week is asking people for the one record they forgot to close."
OH

Omar Haddad · QA operations

Approves deviation impact assessments and changes.

"Tell me which batch is waiting on me and by when."
DO

Dana Okafor · QC laboratory lead

Releases results and runs out-of-specification investigations.

"The CoA is done. It's the out-of-specification result nobody sees until day ten."
PR

Priya Ranvelle · supply planner, Europe

Sees forecasts and makes no quality decisions.

"A late batch is a stock-out in Germany."
17 · Inputs, outputs and targets

From seven systems' records to a batch file with every blocker named, and what it is designed to reach

In shortThe solution reads the systems a batch's evidence already lives in, through read-only connections, and writes back status only after a signature. Its outcome numbers below are design targets on sample data, to be measured on your batches.

From your systems

  • Batch record review (manufacturing execution system, or MES)
  • Results and certificates of analysis (laboratory information system, or LIMS)
  • Deviations, changes and complaints (quality system)
  • Environmental monitoring and utilities
  • Material, supplier and audit status (ERP)
  • Licenses, variations and serial numbers

From your team

  • Release rules, as approved versions
  • Who signs for each market
  • Stability age and audit validity limits
Agents read, compare, cite and draft Every line of the checklist, under your rules, each with its record
Owners approve what they own
The QP or quality unit decides

Outputs

  • Six checkpoints with cited evidence
  • Blockers with owners and due dates
  • Certificate draft and register entry, for signature
  • After the signature: ERP stock status per market

What it is designed to reach

  • Under 1 day to set the checkpoints and review a batch, against 2.6 days by hand: design target and estimate
  • 71% of batches clear when first checked: design target
  • 17.6 days median from made to certified, against 20.2: design target
The design target moves the hours from finding records to reading them, and the QP's own review barely shrinks

Estimated days per batch at the fictional plant, by hand and with the solution. Design targets, to be measured live

By handDesign target
Batch record, materials, supply chain0.5 days0.05 days
QC results, CoA, ongoing stability0.4 days0.05 days
Deviations, out-of-specification results, complaints, approvals0.6 days0.15 days
Clean room, water, utilities0.4 days0.05 days
Changes, market approvals, serial numbers0.4 days0.05 days
The QP's review, certificate, register0.3 days0.25 days

Fictional example from this guide

Show the numbers
By handDesign target
Batch record, materials, supply chain0.5 days0.05 days
QC results, CoA, ongoing stability0.4 days0.05 days
Deviations, out-of-specification results, complaints, approvals0.6 days0.15 days
Clean room, water, utilities0.4 days0.05 days
Changes, market approvals, serial numbers0.4 days0.05 days
The QP's review, certificate, register0.3 days0.25 days
The design target is 71 batches in 100 clear when first checked
71 in 100

batches with no checkpoint blocked at first check. A design target on sample data, to be measured live

Fictional example from this guide · No public benchmark found. Your own first-look rate is the baseline.

Show the numbers
MeasureValue
batches with no checkpoint blocked at first check. A design target on sample data, to be measured live71 of 100

The systems a batch's evidence already lives in

Batch records (MES)Review-by-exception reports, in-process controls, yield
Laboratory (LIMS)Results, certificates of analysis, the OOS register, stability
Quality system (QMS)Deviations, changes, complaints, audits
Environmental monitoringViable, non-viable, water and utilities
ERPMaterial and stock status, suppliers
Regulatory and serializationMarketing authorizations and variations; EU hub and trading-partner uploads

Built for scale across plants, products and markets, with roles, maker-checker approvals (one person prepares, another approves), a full audit trail, export and integrations configured for each site. Your own batches, rules and people replace everything shown here.

Part C · Are you ready to automate?

Automating batch release preparation: what late blockers cost, what you could get back and how to test it

You sign for batches, or you run the desk that prepares them, or you pay for the stock waiting on them. This part is written for you: what your current way costs, what preparing the file faster could return, whether your site is ready, and what to ask any vendor, including us.

18 · What late blockers cost

What a blocker found late costs your plant in quarantine days, missed need dates and inspection exposure

In shortWe found no independent figure for what release delays cost, so this section shows you how to find yours in a week. Start with four numbers from your own systems: median days from made to certified, value in quarantine, how often batches are blocked on first look, and how many miss a need date.

309

citations of the quality unit section, 21 CFR 211.22, on FDA's fiscal 2025 drug Form 483s, the most of any Part 211 section by our count.27

FDA data, our sum
236

citations of 21 CFR 211.192, record review and investigations, second on the same count.27

FDA data, our sum
≈40 hours

for a working group to reach one release decision, by one vendor's account. Time your own five batches before you trust it.34

A software vendor, 2022
Of 100 batches, every step that fails first time costs a chase, so count where yours drop out

Illustrative shape. Replace with counts from your own last 100 batches

Finished QC testing100 batches
No open investigation at first look82 batches
All approvals and confirmations in74 batches
Market status clear for all destinations70 batches
Certified or approved with no question sent back62 batches

Illustrative · replace with your own numbers

Show the numbers
StageBatches
Finished QC testing100 batches
No open investigation at first look82 batches
All approvals and confirmations in74 batches
Market status clear for all destinations70 batches
Certified or approved with no question sent back62 batches

Reading five recent batch files to find your own release baseline

CostWhere it hidesHow to find your number in a week
Days from made to certifiedEach stage is measured by a different team, if at allManufacturing end date and certification date for the last 50 batches, from the batch record and the register
Days after the last resultInside "QA review", and blamed on nobodyCertification date minus final QC approval date, per product. This is the part preparation can change
Person-hours per batchScattered across QA, QC, regulatory and the QPTime five batches of different kinds, step by step, including the emails
Blocked at first lookFixed in a hallway and never recordedFor 20 recent batches, list what was open when the file first reached the QP
Value in quarantineA finance number that nobody connects to releaseAverage quarantine value from the ERP, multiplied by your finance team's carrying rate
Missed need datesIn planning, as air freight, split shipments or short supplyPlanner's list for the last 12 months, each with the blocker that caused it
Market errors caught lateA certificate reissued, or stock moved and moved backSearch the quality system for corrections to destination countries
Inspection timeHours behind the scenes rebuilding why a batch was releasedAsk whoever led the support team at your last inspection how long one batch's story took to rebuild

QP fatigue, weak reliance and the deviation nobody saw

The QP's attentionHours spent finding records come out of the hours for judging them, and the judging is what the role exists for.
Your ongoing assuranceAnnex 16 expects reliance on the quality system to be well founded. A desk that fixes things by hallway leaves little evidence that it is.
Goodwill between teamsThe same five people get chased on every batch, with little sense of which request matters most today.
A market short of a medicineA late batch has effects no calculator here can price, and they fall on patients first.
The people who knowHow a release gets done in practice often lives in one experienced release manager's head. It leaves when they do.
19 · Your return

What faster release preparation returns: quarantine days, QA hours and need dates kept

In shortPut in your own numbers. The calculator values days taken out of quarantine, QA and QP hours you will reuse, and need dates kept. It subtracts the yearly cost. Every default is an assumption to replace, and the value rests on your own baseline.

Quarantine days, QA hours and kept need dates: where the value comes from

Carrying cost

Days out of quarantine

Stock released sooner ties up less money. This is the arithmetic from section 11, across your year.

batches × batch value × carrying rate × days saved ÷ 365
Working capital

Cash no longer sitting in quarantine

A one-time step down in average stock. Report it apart from yearly savings.

batches × batch value × days saved ÷ 365
Effort

QA, QC and QP hours per batch

Value only as far as you will redeploy them, so the share reused sits in the sum.

batches × (hours today − hours after) × hourly cost × share reused
Supply

Need dates kept

Each missed date has a cost your planner can estimate: air freight, split shipments, short supply.

missed dates avoided × cost per miss
Quality

Blockers found earlier

Hard to price, and worth tracking: days from a blocker appearing to the owner knowing about it.

days from raised to cleared, before and after
Inspections

The batch's story on file

Time spent rebuilding a batch's story falls when the record already shows who decided what, on which evidence.

hours to rebuild one batch's release, before and after

Batches a year, value in quarantine and hours per batch file

This guide cites no wage survey for these roles, so hourly rates are loaded costs to replace. Every input marked illustrative is an assumption.

Your volume and stock
Hours per batch file
Need dates and your cost
Illustrative yearly value
Carrying cost freed$0
Hours per year released0
Hours reused, valued$0
Need dates kept, valued$0
After your yearly cost$0
One-time stock reduction, reported apart$0

Formulas, per year:
Carrying cost = batches × value × rate × days saved ÷ 365
Hours released = batches × (hours today − hours after)
Valued = hours released × hourly cost × share reused
Need dates = missed dates avoided × cost per miss
After your cost = carrying cost + hours valued + need dates − yearly cost
Stock reduction = batches × value × days saved ÷ 365, a one-time effect that is left out of the yearly total

40 hours is one vendor's account, cited in section 11. The fictional plant in Part B shows a design target of 2.6 days off its median, so 1 day here is deliberately lower. Set the hours reused and the missed dates to zero to see the case on carrying cost alone.

At these assumptions, batch volume decides whether the case clears the yearly cost

Yearly value after a $300,000 cost, using this calculator's other defaults, for three batch counts

50 batches$11K
400 batches$788K
1,500 batches$3.2M

Illustrative · replace with your own numbers

Show the numbers
Batches a yearValue after cost
50 batches$11K
400 batches$788K
1,500 batches$3.2M

At these assumptions a small site with 50 batches a year barely covers the cost, and it may be better served by a clean checklist, a shared open-items list and a weekly look at need dates. A busy multi-product site clears it quickly, and its first question should be what the released hours are for. A cheap product changes the picture too: at low batch values, the carrying cost line fades and the case rests on hours.

Start here20 · Readiness check

How ready your release desk is: batch volume, connected systems, written rules and a QA position on AI

In shortPick the answer closest to your site today. Eight questions score 0 to 2, and the last is for reflection. The meter adds up your score as you go, and each question says why it matters and what a strong answer sounds like.

1
Batches a year

How many batches does your site or network release a year?

Why it mattersVolume turns hours per file into a real number, and decides whether software pays for itself.
A strong answer"About 450 across three products, from the register."
2
Your release baseline

Do you know the days from final QC approval to certification, and the hours a batch file takes?

Why it mattersWe found no public benchmark, so your own baseline is the only proof of improvement.
A strong answer"Median 2.4 days after the last result, measured on 50 batches, and 31 hours on five we timed."
3
Written release rules

Is it written down what blocks a batch, what the QP reads and accepts, and how each maps to Annex 16 or 21 CFR 211?

Why it mattersSoftware can only apply rules that exist. Writing them is half the value, with or without a tool.
A strong answer"One procedure with a checklist covering all 21 points, approved by the QPs."
4
Batch record quality

Are your batch records electronic, with review by exception under agreed rules?

Why it mattersThe record's review report is the largest single input. Scanned paper can be read too, with more checking.
A strong answer"Electronic on all lines since 2023. The exception rules are validated and reviewed each year."
5
Reachable systems

Can your lab, quality, clean-room, ERP, regulatory and serialization systems be read by an integration, read only?

Why it mattersSeven systems usually means seven owners and seven access reviews. Start early.
A strong answer"Five have APIs IT already supports. The regulatory database exports nightly."
6
Market status per batch

Can someone say, for a given batch, the approval status of every change it uses in every destination market?

Why it mattersThis is the check that keeps a batch out of a market that has not approved it, and it is often held in a spreadsheet.
A strong answer"Yes, from regulatory tracking, linked to change control by number."
7
Your QPs' view

Have the QPs, or the head of the quality unit, been part of this idea, and do they want it?

Why it mattersThey carry the responsibility, so a tool they do not trust goes unused and adds a second review.
A strong answer"Two of our three QPs asked for it, and the third wants to see the sampling plan first."
8
QA's position on AI

Has QA agreed where software may read and draft, who decides, and how this sits under your validation and draft Annex 22?

Why it mattersA pilot stalls if QA first meets the question at the end. Draft Annex 22 makes it sharper here than almost anywhere else in a plant.
A strong answer"Yes: reads and cites only, a person reads every item, the QP signs. A dated risk assessment exists with an owner."
9
For reflection: the inspector's batch

If an inspector picked one certified batch from last year, how long would it take you to show every open item on the day it was certified, who closed each, and what the QP read before signing?

0–6

Explore

Write one release procedure and a checklist against all 21 points, or against 21 CFR 211 for the US. Time five batches. Run a shared open-items list with owners and need dates for a quarter. You will learn most of what software would need.

7–11

Ready to pilot

Replay 20 to 30 past batch files with known outcomes, then run live batches on one product alongside your current process. Compare blockers found, records cited correctly and hours per file. Your QP signs as usual throughout.

12–16

Ready to implement

Plan the rollout: read-only connections, rules as approved versions, signing rules per market, a revised release procedure, a sampling plan for the QP's ongoing assurance, and validation evidence your quality team accepts.

21 · Questions for any vendor

What to ask a batch release software vendor about evidence, blockers, signatures and draft Annex 22

In shortAsk every vendor the same questions, us included. The answers show whether a tool only tracks statuses or reads the records behind them, whose rules it applies, what it records, and how you would test it on your own batches.

AskA good answerA warning sign
Who decides
Can your software certify, approve, or release a batch by itself?No. A named person signs, and we can show where that is enforced"Auto-release" with no account of who answers for it
What happens to stock status, and when?It changes only after the signature, for the markets signed, and the safeguard is validated in your systemStatus can change from a draft or an approved checklist
Evidence
Show me every line of the checklist against all 21 points of Annex 16A mapping, with any point not covered named, and how a site adds it"Annex 16 ready", with no point-by-point table
Does a "closed" line cite the approval record or a summary field?The record itself, opened at the passageA status from one system, trusted without a source
How do you find every deviation touching a batch, its materials and its equipment?A stated method, tested on batches you pick, including an event logged against equipmentSearches by batch number only
How do you handle per-market approvals of each change?The markets narrow with the reason shown, on the file and on the certificateOne approved or not approved flag per change
Blockers and re-checks
When a record changes after the file is built, what happens?The lines it touches re-check and the QP is told, including after a line was clearA snapshot at the time of assembly
Who owns each blocker, and how do you know?The owner from the source record, with a due date. Gaps show as gapsSent to a shared mailbox
Signature, record and validation
What does the signature carry, and what does the register show?Printed name, date and time, meaning; items the QP accepted; retention you setA click with a user ID
What will you say about Part 11, Annex 11 and GxP?Controls that support your compliance, with evidence for your validationA badge claiming GxP, Part 11 or Annex 11 status; no body grants one to a product
AI position
Which kinds of model do you use, and is ours a critical GMP use under draft Annex 22?The kinds of model named, and a dated position worked through with your quality team"Annex 22 does not apply to us", or FDA's device software guidance quoted for a drug plant
How would a QP sample your output for ongoing assurance?A sampling plan, with rates by risk, and results kept"Accuracy is over 99%", with no method
Can we test it on our past batches, with blockers we planted?Yes. Results by blocker typeOnly a scripted demonstration
22 · How to start

A twelve-week batch release pilot: past files first, then live batches with the QP signing as usual

In shortTake 25 past batch files with known outcomes, and plant known blockers in copies of five. Write your rules against all 21 points. Run one product's live batches in parallel, with your desk working as usual and your QP deciding every one. Decide on three numbers: blockers missed, wrong citations and hours per file.

  1. Measure first: time five batch files and pull the last 50 batches' days from final QC approval to certification.
  2. Write the rules: one checklist against all 21 points, or 21 CFR 211, approved by your QPs, with what blocks and what the QP reads.
  3. Replay 25 past files, including a planted lapsed audit, a planted market change and a planted open investigation.
  4. Run one product live, in parallel, for five weeks. Your desk works as usual and your QP signs from your current process.
  5. Decide on your numbers, with a written position from QA on Annex 22, a sampling plan and your validation approach.
A twelve-week pilot ends with a decision on three numbers
Your teamVendor
Time five files; pull 50 batches' dates
QA risk assessment, QP sampling plan
Write rules against the 21 points
Read-only connections to two or three systems
Replay 25 past files with planted blockers
One product live, in parallel
Measure and decide
Week 04812

Illustrative · replace with your own numbers

Show the numbers
ActivityFromTo
Time five files; pull 50 batches' dates02
QA risk assessment, QP sampling plan03
Write rules against the 21 points14
Read-only connections to two or three systems14
Replay 25 past files with planted blockers36
One product live, in parallel611
Measure and decide1112

Blockers missed, wrong citations and hours per batch file

Track all six measures. Blockers missed, wrong citations and hours per file are the three you decide on.

MeasureHowWhy
Blockers missedPlanted and known blockers not raised ÷ total, by typeThe costliest error. One miss in a critical type matters more than the average
Wrong citationsLines whose cited record does not say what the line says, on a sample your QP reads in fullA QP's reliance rests on it, and it is your evidence of ongoing assurance
Hours per fileTimed across QA, QC and the QP, against your baselineThe time case rests on it
False blockersLines raised that a person cleared at onceToo many and people stop reading them
Days after the last resultCertification date minus final QC approval, in parallelThe measure buyers care about, and it may move little if approvals are the real wait
Market lines rightEvery change on every destination, against regulatory's own answerThe error with the worst consequence for the least effort to check
The full working-session questions: 12 questions in four groups
A

What blocks your batches, and who clears it

A1

Which of our rules go further than Annex 16 or 21 CFR 211, and why?

Why it mattersA stricter rule is often sensible, and it should be labeled as yours.
A2

What does the QP read in full, and what by sample?

Why it mattersReliance has to be "well founded", and this is how you show it.
A3

Who may clear what? Are our deviation approvers, and their deputies, current?

Why it mattersA blocker needs an owner, and an absent owner should not stop a batch for a week.
B

Your batch records and market status

B1

Where do deviations link to batches, materials and equipment, and how clean are the links?

Why it mattersA deviation logged against equipment reaches a batch only if something joins them.
B2

Is our supply chain diagram current for each product?

Why it mattersPoint 1.7.2 asks for it, and EMA's question 4 asks that records identify all entities involved.
B3

Where does regulatory hold per-market status?

Why it mattersThis is often the last system anyone connects, and it decides where stock may go.
C

Your QPs, release managers and planners

C1

How will our QPs keep their own knowledge of the batches if they read less?

Why it mattersAnnex 16 asks for "detailed knowledge", and it should stay real.
C2

What happens to the release manager's time?

Why it mattersSaved hours only count if you decide what they are for.
C3

Who tells planners, and when?

Why it mattersA forecast release date is only useful if it reaches the person short of stock.
D

Your validation plan and draft Annex 22

D1

How does the tool sit in our validation plan and our release procedure?

Why it mattersIts output becomes evidence the QP relies on, and Annex 16's safeguards may be electronic only if validated.
D2

Is this a critical GMP use under draft Annex 22? Who rechecks that when the final text appears?

Why it mattersThe answer may change the design, so it needs an owner and a date.
D3

Which national authorities need to hear about this?

Why it mattersMember states differ, for example on remote certification, and an early talk costs little.
23 · Frequently asked questions

QP certification and batch disposition questions answered: Annex 16, deviations, the quality unit and software

In shortQuestions QPs, QA teams and buyers search for, each answered on its own.

What is QP batch certification?

It is the signed act by which a Qualified Person confirms that a batch of medicine was made and checked in line with good manufacturing practice (GMP) and its marketing authorization, recorded in a register or equivalent document. EU law requires it under Article 51 of Directive 2001/83/EC, and EU GMP Annex 16 explains how it works. A batch may not be sold or supplied in the EU until it is done.

What is the difference between batch certification and batch release?

EU GMP Annex 16 treats batch release as three acts: checking the batch, the QP's certification, and the transfer to saleable stock. Certification is what the annex calls the quality release of the batch. Moving the stock comes after it and must take the certification into account.

What does EU GMP Annex 16 require a QP to check?

Section 1.6 lists three duties the QP must personally ensure, and section 1.7 lists 21 points the QP must have secured. They run from GMP compliance and the supply chain to audits, records, QC results, ongoing stability, investigations, changes, self-inspection, shipping and safety features. The 21 points may be delegated as tasks, and the QP relies on the quality system with ongoing assurance that this reliance is well founded.

Can a QP certify a batch with an open deviation?

EU GMP Annex 16 asks that investigations are completed to a sufficient level to support certification, and section 3 lets a QP consider certifying after an unexpected deviation if registered specifications are met and a risk process concludes the impact is negligible. A failed registered specification falls outside that route, and so does a planned deviation. Many sites add their own stricter rule that an open deviation blocks certification.

Who approves a batch in the United States?

The quality control unit, under 21 CFR 211.22, which gives it the responsibility and authority to approve or reject drug products. 21 CFR 211.192 requires it to review and approve production and control records before a batch is released or distributed, and to see that any unexplained discrepancy is thoroughly investigated. US rules set no individual role like the EU's Qualified Person.

How long must a QP certification register be kept?

Directive 2001/83/EC says it stays at the disposal of the competent authority for the period set by the member state and in any event for at least five years. It must be kept up to date as operations are carried out. For US batch records, 21 CFR 211.180 sets at least one year after the batch's expiration date.

Can a QP delegate batch certification?

The tasks behind it can be delegated, and Annex 16 allows points 1.7.1 to 1.7.21 to go to trained personnel or third parties. EU GMP Chapter 2 says the QP's responsibilities may be delegated only to other Qualified Persons. Certification itself can only be performed by a QP of a manufacturer or importer described in the marketing authorization.

What is review by exception in batch release?

It means reviewing the items an electronic system flags under rules agreed in advance, instead of reading each line of a batch record. It applies to record review, one part of a release file, and the rules themselves need validating. Vendor case studies report large time savings, and we found no independent benchmark, so measure your own.

Can software or AI certify or release a batch?

No. In EU law certification is the act of a Qualified Person, and in the US approval belongs to the quality unit. Software can gather records, compare them with limits, cite passages and draft a certificate for a person to read and sign. Draft EU GMP Annex 22 says generative AI and large language models should not be used in critical GMP applications. It remained a draft on November 3, 2026, so each company needs its own dated, documented position.

Does batch release software make a plant compliant with Part 11 or Annex 11?

No body grants a product a GxP, Part 11 or Annex 11 status. Software offers controls that support your compliance, such as signatures that show the name, date, time and meaning, access roles and an audit trail. Compliance depends on your validation, procedures and use.

What happens if a change is approved in one market and not in another?

The batch can go only to markets whose license covers it. EU GMP Annex 16 asks that activities match the marketing authorization for the intended territory and that change impact is evaluated, and the batch certificate names destination countries, at least within the EU. Teams usually track each change's status per market and narrow the destinations on the certificate.

Does Annex 16 apply outside the EU?

EU GMP Annex 16 covers certification within the EU, of products with a marketing authorization or made for export. The European Medicines Agency said in December 2025 that "certification" of batches not made in, not intended for and not physically imported into the EU or European Economic Area is outside EU law. PIC/S, the international network of GMP inspectorates, has had its own Annex 16, for an authorized person, since February 1, 2022, and its members apply it under their own national rules.

24 · One-page summary

Batch disposition and QP release on one page: the method, the rules and the terms

Print this page

In shortThe whole guide on one screen: the method, the rules as of November 2026, the readiness scale and the terms.

The method
  1. When the last result is approved, list every point for this batch: all 21 in Annex 16, or your 21 CFR 211 equivalent.
  2. Find each record in its own system. Read the approval, beyond the summary field.
  3. Name what blocks the batch, who can clear it and by when. Tell them, with the record and the need date.
  4. Put what needs judgment in front of the person signing: closed excursions, conditional suppliers, deviations with a risk conclusion.
  5. Check every change against every destination market. Narrow the destinations if needed.
  6. The QP certifies or the quality unit approves, holds or rejects, with a signature that carries its meaning.
  7. Enter it in the register. Only then does stock move, for the markets signed.

Readiness: score 0–2 on eight questions: 0–6 explore · 7–11 pilot · 12–16 implement.

As of November 3, 2026: Article 51 of Directive 2001/83/EC and Annex 16 (in operation April 15, 2016) stand · 21 CFR 211.22 and 211.192 stand as of the CFR's 2025 edition, no change listed through September 30, 2026 · Annex 1 in operation since August 25, 2023 · EU pharma package not law · draft Annex 22 and draft Annex 11 still drafts · PIC/S Annex 16 since February 1, 2022 · FDA's AI guidance still a draft.

14 terms
Qualified Person (QP)
The legally qualified person who certifies each batch in the EU and UK.
Quality control unit
The US function with authority to approve or reject drug products.
Certification
The QP's signed entry that a batch meets GMP and its license.
QP confirmation
A QP's signed statement on a stage done at another site.
Batch disposition
The decision to release, hold or reject.
Quarantine
Stock that exists and may not yet be sold or shipped.
Marketing authorization (MA)
The license for a medicine in a market. A biologics license application (BLA) or new drug application (NDA) in the US.
Deviation
A departure from an approved instruction or limit, recorded and investigated.
Out of specification (OOS)
A test result outside its registered limit.
Registered specification
A limit filed in the license, in process, bulk or finished product.
Environmental monitoring
Measuring particles and microbes in clean rooms during manufacture.
CFU
Colony-forming unit: one visible colony grown on a plate.
Review by exception
Reviewing what a system flags under agreed rules.
Form 483
FDA's list of observations given to a firm at the end of an inspection.
25 · Sources

Sources

Accessed November 2026. Regulatory status statements are as of November 3, 2026, except US CFR sections, which are as of the 2025 edition with later changes checked through September 30, 2026. Warning letters are FDA's own copies, cited only for what each says; a letter states FDA's position at its date, and firms may since have responded or corrected.

  1. Directive 2001/83/EC on the Community code relating to medicinal products for human use, Articles 48 to 52, consolidated text of January 1, 2025. eur-lex.europa.eu
  2. 21 CFR 211.22, Responsibilities of quality control unit, 2025 edition (revised as of April 1, 2025), the newest edition of this section on govinfo.gov on November 3, 2026. govinfo.gov
  3. 21 CFR 211.192, Production record review, 2025 edition. govinfo.gov
  4. European Commission, EudraLex Volume 4, Annex 16: Certification by a Qualified Person and Batch Release, October 12, 2015, in operation April 15, 2016. health.ec.europa.eu
  5. European Commission, EudraLex Volume 4, Part I, Chapter 2, Personnel, in operation February 16, 2014. health.ec.europa.eu
  6. FDA warning letter, Fresenius Kabi USA LLC, MARCS-CMS 733107, September 22, 2026. fda.gov
  7. 21 CFR 211.165, Testing and release for distribution, and 211.180, General requirements (records), 2025 edition. govinfo.gov
  8. European Medicines Agency, Guidance on good manufacturing practice and good distribution practice: questions and answers (Annex 16, questions 2 to 5, with question 5 dated December 2025; remote certification, July 2023). ema.europa.eu
  9. 21 CFR 610.2, Requests for samples and protocols; official release, and 601.12, Changes to an approved application, 2025 edition. govinfo.gov
  10. PIC/S, Revision of the PIC/S GMP Guide (PE 009-16), February 1, 2022. picscheme.org
  11. Commission Delegated Regulation (EU) 2016/161, Article 33, Uploading of information in the repositories system; applies from February 9, 2019. eur-lex.europa.eu
  12. European Commission, EU GMP Annex 1: Manufacture of Sterile Medicinal Products, C(2022) 5938 final, August 22, 2022, in operation August 25, 2023 (point 8.123, August 25, 2024). health.ec.europa.eu
  13. MHRA, Wholesalers' and manufacturers' guidance following agreement of the Windsor Framework, updated March 11, 2025, section 3.7. gov.uk
  14. European Commission and PIC/S, draft EU GMP Annex 22: Artificial Intelligence, consultation July 7 to October 7, 2025. picscheme.org
  15. European Medicines Agency, Report of the multistakeholder workshop on expert contributions to artificial intelligence guidance development (Annex 22), workshop of June 30, 2026. ema.europa.eu
  16. Council of the European Union, Position at first reading, document 7106/2/26 REV 2, Articles 155 to 157, 2026; European Parliament Legislative Observatory, 2023/0132(COD), read November 3, 2026. consilium.europa.eu
  17. European Commission, EudraLex Volume 4 page, read November 3, 2026: Annex 11 at its January 2011 revision and no Annex 22 listed. health.ec.europa.eu
  18. European Commission, EudraLex Volume 4, Part I, Chapter 1, Pharmaceutical Quality System, in operation January 31, 2013. health.ec.europa.eu
  19. Office of the Federal Register, List of CFR Sections Affected, March 2026 (Title 21 changes April 1, 2025 through March 31, 2026) and September 2026 (April 1 through September 30, 2026): neither issue lists Part 11 or Part 211. March 2026 · September 2026
  20. 21 CFR 11.50, Signature manifestations, 2025 edition. govinfo.gov
  21. T. Watson, Maintaining control: Remote working and QP certification, MHRA Inspectorate blog, February 25, 2020. mhrainspectorate.blog.gov.uk
  22. Quarles & Brady, FDA Issues Broad Exemptions from DSCSA Enhanced Drug Distribution Security Requirements, October 10, 2024 (a law firm's note). quarles.com
  23. U. Kissel and D. Cockburn, survey of more than 300 Qualified Persons by the European QP Association, March 2020, GMP Journal Logfile 20/2021, May 18, 2021. gmp-publishing.com
  24. FDA warning letter, Jabil Inc., MARCS-CMS 731037, August 27, 2026. fda.gov
  25. FDA warning letter, K.C. Pharmaceuticals, Inc., MARCS-CMS 729870, August 12, 2026. fda.gov
  26. European Commission, Guidelines on the details of the various categories of variations, C/2025/5045, applying from January 15, 2026, published September 22, 2025, with EMA's webinar of January 13, 2026 on the new chapter codes. eur-lex.europa.eu
  27. FDA, Inspection Observations, fiscal years 2020 to 2025 (Excel files; FY2025 page current December 16, 2025). Totals by section are our own sum of the Frequency column; rates divide them by the Summary sheet count of drug Form 483s. fda.gov
  28. FDA warning letter, Seaway Pharma Inc., MARCS-CMS 717355, December 1, 2025. fda.gov
  29. FDA warning letter, Purolea Cosmetics Lab, MARCS-CMS 722591, April 2, 2026. fda.gov
  30. FDA warning letter, Persōn & Covey, Inc., MARCS-CMS 711191, September 23, 2025. fda.gov
  31. FDA, FY2025 Report on the State of Pharmaceutical Quality, June 25, 2026. fda.gov
  32. FDA, Inspection Classification Database, definitions of the three classifications. fda.gov
  33. FDA, openFDA drug enforcement reports API, report dates January 1 to December 31, 2025, queried November 3, 2026 (data updated October 28, 2026). Events are distinct event IDs; word searches and arithmetic are ours. open.fda.gov
  34. A. Mandishah, Turbocharging Batch Release Processes in Life Sciences, SAP News Center, July 27, 2022 (a vendor's figure from its work with drug makers). news.sap.com
  35. J. Zebib, Review by Exception: Connecting the Dots, Pharmaceutical Technology, November 12, 2019 (no study cited). pharmtech.com
  36. J. Cahill and E. Cook, Digitalizing and Automating Review by Exception, Emerson Automation Experts, January 18, 2021 (a vendor's account of one unnamed manufacturer). emersonautomationexperts.com
  37. FDA, Report to Congress: Drug Shortages CY 2025. fda.gov
  38. FDA, Considerations for the Use of Artificial Intelligence to Support Regulatory Decision-Making for Drug and Biological Products, draft guidance, January 2025, Docket FDA-2024-D-4689. fda.gov
  39. European Medicines Agency, Reflection paper on the use of artificial intelligence in the medicinal product lifecycle, September 9, 2024. ema.europa.eu
  40. European Medicines Agency, EMA and FDA set common principles for AI in medicine development, January 14, 2026. ema.europa.eu
  41. European Commission, Regulatory framework on AI: the AI Omnibus, Regulation (EU) 2026/1744, in force July 27, 2026; Annex III rules December 2, 2027, Annex I rules August 2, 2028. digital-strategy.ec.europa.eu
  42. ISPE, GAMP Guide: Artificial Intelligence, July 2025. ispe.org
  43. MHRA, GXP Data Integrity Guidance and Definitions, March 2018. gov.uk
  44. FDA, Computer Software Assurance for Production and Quality Management System Software, February 2026. fda.gov
Next step

See it on your own batches.

Explore the solution, or bring a sample of past batch files and your release procedure, and we will walk through them with you, every line beside its record. The Qualified Person or the quality unit decides, every time.

botminds.ai The complete guide to batch disposition and QP release · November 2026. Northwind Bio, Plants 1 to 3, Veltrimab, Dravenzo, Talvoren, every supplier, person, batch, record and figure in the example and the screens are fictional. Regulatory status is as of November 3, 2026, except US CFR sections, which are as of the 2025 edition with later changes checked through September 30, 2026. FDA warning letters state FDA's position at their date. This guide is general information, so take your own quality and legal advice before acting on it.