WorkflowManufacturing & Quality

The complete guide · November 2026

Batch record review by exception, explained.

Before a batch of medicine can ship, the plant's quality unit, the group that can approve or reject it, has to sign off the record of how it was made. That record often runs to hundreds of pages, and reading all of it line by line can take days. Review by exception means a tested system checks every entry against the plant's approved instructions, and people concentrate on the entries it marks; the people still own the decision.

This guide is for anyone who reviews, signs or pays for batch records in drug and biologics manufacturing: quality assurance (QA) batch record reviewers, production supervisors, QA operations leads, Qualified Persons, validation leads, site quality heads and manufacturing excellence teams. It also serves leaders deciding whether to automate the work. No background needed.

See one case, screen by screen →
Watch with transcript →
A quick example · fictional

Imagine you are a QA batch record reviewer at a drug manufacturer, Cobbleford Pharma. It is 7:40 am on Wednesday, October 7, 2026. Batch DR26-1109, 600,000 Dravenzo 20 mg film-coated tablets, has just come off the scanner as a 304-page paper record holding 4,270 entries. Its release target is October 14.

Somewhere around page 100 an operator wrote down two clock times for the final blend, with initials and a second person's initials beside them. The row looks complete. Nothing is blank. You only see the trouble if you subtract one time from the other and remember what the master record, the approved instructions, asks for. It calls this blend time a critical process parameter, a setting that can affect the quality of the tablets. Running outside its limits means a deviation: a formal record of the departure from the instructions.

Master record · step 7.12
Blend
15 ± 1 minutes at 8 rpm
Status
Critical process parameter
Executed record · page 101
Start and end
1:05 pm to 1:17 pm
Worked out
12 minutes
Signed, initialed, nothing blankRaise a deviation, hold the batchbecause a critical step ran 2 minutes under its lower limit of 14.

A good review catches the entry that looks finished and is wrong. On this record, a good exception method marks nine pages and brings you to that entry first, while someone still checks that the other 295 pages deserve to be called clean.

Batch record review by exception guide
Part A · Understand it

Production record review, and the rules around reviewing by exception

The record, the regulators' exact words with their dates, who keeps the decision, the arithmetic, what FDA cites, what AI changes and how plants work today, explained without selling anything. If you are new to batch records, start here.

01 · In plain words

A batch record is the plant's signed diary of one batch, and the quality unit must approve it before the medicine ships

On the floor of a drug plant, an operator reads a weight off a balance, writes it on a form and initials it, and a second person who watched initials beside it. That form is part of an issued copy of the master batch record, the approved document that says which materials, how much, which machine, how long, and who checks whom. The pages collect blender start and stop times, balance printouts and more initials. By the end, the issued copy has become the executed batch record, often hundreds of pages long.

The law treats those pages as the proof of how the batch was made. In the United States, every production and control record must be "reviewed and approved by the quality control unit" before the batch is released or distributed.1 In the European Union, the assessment of a finished product includes "a review and evaluation of relevant production documentation",2 and a Qualified Person, a named individual, certifies the batch before it can be sold.3

So a reviewer sits down with the master record on one side and the executed record on the other, and goes through it. Is every field filled? Is every value inside its limit? Did the second person sign? Was anything crossed out without a reason? Does the time on page 81 fit the time on page 58? Most pages turn out fine, and the reviewer knows that going in, which is what makes the rare wrong entry hard to see.

Review by exception changes the order of work. A system checks every entry against rules the plant wrote and approved, then shows the reviewer the entries that broke one. The reviewer decides those, checks that the system can be trusted, and signs. The idea is old: a working group at ISPE, an engineering society for the drug industry, was writing about it to European regulators in 2008.4 The argument today is about how far it can reach, and on what kind of record.

One tablet batch, from issued copy to the shipping dock

  1. QA issues a copy of the master recordBatch DR26-1109 gets a numbered copy of master record v7.2. Page counts are recorded so a missing page can be noticed later.
  2. The floor makes the batch and fills in the pagesOctober 2 to 6, dispensing through packaging. Values, times, initials, printouts.
  3. The record is reviewedEvery entry against the master record and the documentation procedure. This is where a 12-minute blend is caught, or carried forward.
  4. Problems are workedCorrections go back to production. Deviations, the formal records of a departure from the instructions, are opened and investigated, including for other batches they may touch.
  5. The batch gets its decisionPlants call this disposition. The quality unit approves or rejects it. In the EU a Qualified Person certifies it. Only then can it ship.

Step 3 is the subject of this guide. The people, companies and figures in this example are fictional.

Four findings that surprise people new to review by exception

One regulator permits it in so many words, for electronic data

The European Medicines Agency (EMA), in its questions and answers on good manufacturing practice (GMP), says "review by exception is permitted, when scientifically justified", in an answer on the review of electronic data, and require testing and validation of the system and its exception report.5 That answer says nothing about a scanned paper record.

FDA has published no guidance using the term, as far as we can find

The US rule on production record review, 21 CFR 211.192, says "All" records. Searches of FDA's site, the Federal Register and regulations.gov on November 3, 2026 found no guidance on the method, and 515 recent warning letters, FDA's notices of what it believes are significant violations, never use the phrase (our word search).6 One FDA discussion paper repeats stakeholders' mention of it and says it is no guidance.7 FDA has neither blessed nor banned it in anything we could read.

Citations under the review section are mostly about investigations

FDA's FY2025 drug file holds 236 citations under 211.192. Only 9 sit on the row for the quality unit's review of records; the rest concern how discrepancies were investigated (our arithmetic).8

Published review times differ by more than 100 times

A trade article says 48 hours on average and up to 500.9 A preprint submitted in November 2025 says about three.10 Neither gives a method. No regulator or audited benchmark exists that we could find, so your own stopwatch is the only figure you can defend.

The two records, the exception and the critical parameter: four terms this guide uses

Master batch record

The approved instructions for making one product: materials, amounts, steps, limits and required checks.

Executed batch record

The filled-in copy for one batch. It can be paper, electronic, or a hybrid of the two.

Exception

An entry that breaks a predetermined rule: outside a limit, missing a signature, blank, out of order, or in conflict with another page.

Critical process parameter

A process setting the manufacturer has identified as able to affect product quality, so its range is tightly controlled. Blend time is one in our example.

Fourteen terms are defined in the one-page summary.

02 · What the method is

Three different things people call review by exception, and why the difference decides your risk

In shortThe phrase, often shortened to RBE or BRBE, covers three practices. An electronic batch system can report its own exceptions. A tool can screen an audit trail, a system's log of who changed what, for unusual changes to data. Newer software reads paper and exports, then checks what it read. They share a name and carry very different risks, because the first one prevented many errors at the point of entry and the third one starts by reading handwriting.

The nearest thing to a shared definition comes from the industry. A 2019 trade article quotes ISPE, the engineering society for the drug industry, as defining review by exception as "an approach in which manufacturing and quality data are screened to present or report only critical process exceptions".9 We could not find that sentence on ISPE's own site, so treat it as a quotation of a quotation.

ISPE's 2010 good practice guide on manufacturing execution systems lists an appendix on review by exception with a part headed "Definition and Justification", which may be where it comes from. That guide is sold, and we read only its contents page.11

MHRA, the UK medicines regulator, and PIC/S, a co-operative scheme among GMP regulators, give a tighter definition for the tool itself, in the context of audit trails: an exception report is "a validated search tool that identifies and documents predetermined 'abnormal' data or actions".12,13 Two words carry the weight. "Validated" means the plant has proven the tool does what it claims. "Predetermined" means someone decided in advance what counts as abnormal.

Exception reports from systems, audit trails and paper readers

Born electronic

The batch system reports on itself

A manufacturing execution system guides the operator step by step, refuses or flags a value out of range at the moment of entry, and prints an exception report at the end. Many errors never reach the record. EMA's answer speaks most directly to this case.5

Changes to data

The audit trail tool screens the changes

A tool filters a computer system's log of who changed what. MHRA, PIC/S and EMA each describe a validated exception report for this job, and the draft of EU Annex 11, the annex on computerized systems, says reviewing every entry "may not be effective".12,13,14 This is the form with the most regulator text written about it.

Paper and hybrid

Software reads the pages first

A system reads scans, including handwriting, turns them into values, and applies the rules. It reaches plants with no electronic system. It also adds a new way to fail: a misread value can look clean. No regulator text we read addresses this case by name; section 3 lists what we read.

What stays with named people in all three forms

A named person in the quality unit decides. Rules are written and approved before they are used. Someone checks that the entries the system passed were fine. And the full record stays available: EU GMP Chapter 4, on documentation, says "All records should be available to the Qualified Person".15 Review by exception changes what a person reads first and how much of the rest they read. It leaves the responsibility where it was.

On one 304-page record, the method moves 289 pages away from a person's eye

The fictional record: 9 pages with exceptions and 6 clean pages drawn for a spot-check

Line by lineBy exception
Pages a person opens304 pages a person opens15 pages a person opens

Fictional example from this guide · A system still checks all 304. Whether it can be trusted to do so is the subject of sections 3, 6 and 10.

Show the numbers
Line by lineBy exception
Pages a person opens304 pages a person opens15 pages a person opens
Clean is a claim. On a line-by-line review, "clean" means a person read the page and found nothing. By exception, it means a system applied rules and raised nothing. Those are different statements, and a plant should be able to say how often the second one has turned out wrong. Section 6 does that arithmetic.
03 · What regulators say

What FDA, EMA, MHRA and PIC/S have put in writing about reviewing by exception, with dates

Status as of November 3, 2026

In shortEMA says review by exception of electronic data is permitted when scientifically justified, with a tested and validated system. EU Chapter 4 lets automatically generated reports be limited to summaries and exceptions, for a validated, continuously monitored process. FDA's rule says "All" records and we found no FDA guidance on the method. No regulator text we read covers software reading paper records. Chapter 4 and Annex 11 are in draft revision, and Annex 22 on AI is still a draft.

The written position has grown in small steps since 2008, and none of it covers software reading a paper record for review
  1. Oct 2008ISPE writes to EMA, then called EMEA

    Its GAMP group says defining the regulated record "becomes very significant enabling Review by Exception". An industry comment.

  2. Jan 2011EU Chapter 4 note

    Automatically generated reports "may be limited to compliance summaries and exception" reports, for a validated, continuously monitored process.

  3. Aug 2016EMA data integrity Q&A

    EMA announced the set on August 11, 2016. Answer 17: "review by exception is permitted, when scientifically justified", on electronic data.

  4. Mar 2018MHRA guidance

    Audit trails may be reviewed by an "exception reporting" process, and defines the tool.

  5. Dec 2018FDA data integrity Q&A

    All records "which includes audit trails" are reviewed by the quality unit. Does not use the phrase.

  6. Jul 2021PIC/S PI 041-1

    Lists "Review by exception" as one focus for audit trail reviews.

  7. Jul 2025EU drafts open

    Chapter 4, Annex 11 and new Annex 22, consultation to October 7, 2025.

  8. Nov 2026Still drafts

    EudraLex Volume 4, the European Commission's set of EU GMP rules, lists Chapter 4 at January 2011, Annex 11 at January 2011 and no Annex 22.

Source 4,15,5,16,12,17,13,18,19

Show the numbers
WhenWhat
Oct 2008ISPE writes to EMA, then called EMEA
Jan 2011EU Chapter 4 note
Aug 2016EMA data integrity Q&A
Mar 2018MHRA guidance
Dec 2018FDA data integrity Q&A
Jul 2021PIC/S PI 041-1
Jul 2025EU drafts open
Nov 2026Still drafts

The texts, in their own words

Text and dateWhat it saysWhat it reaches
21 CFR 211.192, 2025 edition"All drug product production and control records, including those for packaging and labeling, shall be reviewed and approved by the quality control unit to determine compliance with all established, approved written procedures before a batch is released or distributed."1Binding. Silent on method. Any exception approach has to fit inside it.
21 CFR 211.68(b) and (c), as amended 2008Input and output are checked, with "degree and frequency" based on "the complexity and reliability" of the system. Automated equipment can meet a second-person check if "one person checks that the equipment properly performed the operation".20Binding. The nearest US text on trusting a system, written for equipment.
FDA data integrity Q&A, December 2018"all production and control records, which includes audit trails, must be reviewed and approved by the quality unit". "The regulations provide flexibility to have some activities reviewed by a person directly supervising or checking information".17Nonbinding guidance. Does not use the phrase.
ICH Q7, 2000, section 6.71Records of critical process steps go to the quality unit before release. "Production and laboratory control records of non-critical process steps can be reviewed by qualified production personnel or other units following procedures approved by the quality unit(s)."21An international guideline for active ingredients only. Decides who reads, and leaves every record read by someone.
EU GMP Chapter 4, January 2011, 4.20"Where a validated process is continuously monitored and controlled, then automatically generated reports may be limited to compliance summaries and exception/ out-of-specification (OOS) data reports."15A note on automatic reports, with its condition. Paper is outside it.
EMA GMP Q&A, data integrity, question 17; the set was announced August 11, 2016, and the page prints no date on the answer16"review by exception is permitted, when scientifically justified". "The level of review of the full electronic batch record can vary based on the exceptions as well as the level of confidence and experience with a particular process." "Appropriate testing and validation must be completed for the automated system and the output Batch Exception Report".5The most direct text we found. Its condition is scientific justification. It answers a question about electronic data. Wording as read November 3, 2026.
EMA GMP Q&A, question 16Electronic data "is the original record which must be reviewed and evaluated prior to making batch release decisions". A review "based solely on printouts" may exclude records.5Limits how far a PDF export can stand in for the record.
MHRA, March 2018; PIC/S PI 041-1, July 1, 2021Audit trails may be reviewed "by an 'exception reporting' process".12 "Review by exception" is one focus for audit trail reviews.13Audit trails. Nonbinding guidance from inspectorates.
Draft EU Chapter 4, 2025Keeps the 4.20 note as part of 4.36 and adds a pointer for decisions "supported by automatic validation scripts or artificial intelligence". Accountability for what automatic means produce "rests with the regulated user".22A draft. EudraLex still lists the January 2011 text.19
No text we read speaks to software reading paper records for review, and only EMA names the method for batch records

Our reading of each text. Check the wording above before relying on this grid.

SilentTouches itSpeaks to itSays it directly
Uses the wordsElectronic batch recordsAudit trailsPaper read by softwareAI21 CFR 211.192SilentTouches itSilentTouches itSilentFDA 2018 Q&ASilentTouches itSays it directlySilentSilentICH Q7, 6.71SilentSilentSilentSilentSilentEU Chapter 4, 4.20 noteTouches itSpeaks to itSilentSilentSilentEMA Q&A 17Says it directlySays it directlyTouches itSilentSilentMHRA 2018Speaks to itSilentSays it directlyTouches itSilentPIC/S PI 041-1Says it directlySilentSays it directlySilentSilentDraft Chapter 4Touches itSpeaks to itTouches itTouches itSpeaks to itDraft Annex 22SilentSilentSilentSilentSays it directly

Our reading of the sources 1,17,21,15,5,12,13,22,23

Show the numbers
Uses the wordsElectronic batch recordsAudit trailsPaper read by softwareAI
21 CFR 211.192SilentTouches itSilentTouches itSilent
FDA 2018 Q&ASilentTouches itSays it directlySilentSilent
ICH Q7, 6.71SilentSilentSilentSilentSilent
EU Chapter 4, 4.20 noteTouches itSpeaks to itSilentSilentSilent
EMA Q&A 17Says it directlySays it directlyTouches itSilentSilent
MHRA 2018Speaks to itSilentSays it directlyTouches itSilent
PIC/S PI 041-1Says it directlySilentSays it directlySilentSilent
Draft Chapter 4Touches itSpeaks to itTouches itTouches itSpeaks to it
Draft Annex 22SilentSilentSilentSilentSays it directly

Two more texts come up in this argument and settle less than people hope. ICH Q9(R1), an international guideline adopted January 18, 2023, is the general basis for risk-based decisions in quality work, and it says nothing specific about batch record review.24 FDA's January 2025 draft guidance on 21 CFR 211.110 covers in-process controls, advanced manufacturing and process models; FDA marks it as a draft, not for implementation, and it does not address the review of records.25

How we looked for FDA text and for text on paper records, and what a search cannot prove

FDA. On November 3, 2026 we searched fda.gov, federalregister.gov and regulations.gov for "review by exception" and "exception report". We word-searched the 2018 data integrity Q&A, the 2023 paper on AI in manufacturing, the two January 2025 drafts and the 2026 software assurance guidance,17,26,27,25,28 six other FDA texts,29 and 515 warning letters.6 None uses either phrase.

The search did find one use: a November 2023 paper on distributed manufacturing from CDER, FDA's drug center, reports stakeholders proposing automated batch decisions "by using review by exception algorithms". That paper says it "is not a draft or final guidance".7

Paper read by software. We searched those FDA texts, EU Chapter 4 and Annex 11 with their drafts, draft Annex 22, Annex 16, EMA's data integrity answers, MHRA 2018, PIC/S PI 041-1, WHO TRS 1033 Annex 4 and ICH Q9(R1) for handwriting, optical character recognition and scanning. None addresses software reading the entries on a paper record so that a person can skip pages.

The nearest line is MHRA's definition of a "validated scanning process", which uses controls "such as location identifiers and OCR" so that a duplicated page "does not have to be further checked by a human". That is about making a copy.12 FDA's Q&A on electronic systems in clinical investigations likewise speaks of validated scanning to make certified copies.29 EMA says its data integrity set applies to paper and electronic systems, and its answer on review by exception speaks of electronic data.16,5

A search can miss a text, and inspectors may hold views no one has published. Treat each "we found none" as true of what we read on that date, and ask your own inspectorate before relying on it.

What ISPE, the industry body, has published

ISPE is an engineering society with no regulatory power, and GAMP is its work on computerized systems. We found no ISPE guide dedicated to batch record review by exception. The timeline lists what we did find, and how much of each we read.

ISPE's published mentions run from 2008 to 2026, and we found no guide dedicated to reviewing batch records by exception
  1. Oct 2008GAMP group's comment to EMA

    Comment of October 20, 2008: defining the regulated record "becomes very significant enabling Review by Exception".

  2. Feb 2010Good practice guide on manufacturing execution systems

    Its contents page lists "Appendix 8 – Review by Exception". The guide is sold, and we did not read it.

  3. Sep 2014Article in ISPE's magazine

    Lists review by exception among the gains of electronic batch operations.

  4. Jul 2022GAMP 5 Guide, Second Edition

    Sold by ISPE, and we did not read it.

  5. Mar 2026Article on audit trails, March/April issue

    Says the GAMP 5 Guide, Second Edition, "promotes the use of validated review by exception tools". It does not mention batch records.

Source 4,11,30,31,32

Show the numbers
WhenWhat
Oct 2008GAMP group's comment to EMA
Feb 2010Good practice guide on manufacturing execution systems
Sep 2014Article in ISPE's magazine
Jul 2022GAMP 5 Guide, Second Edition
Mar 2026Article on audit trails, March/April issue
Read this before quoting anyone. We found no FDA guidance that endorses review by exception for batch records, and none that forbids it. EMA's answer permits it for electronic data under stated conditions. A trade blog reported in February 2021 that an FDA staff member addressed "myths" about it in a recorded webinar. The post quotes no words, an event listing places the speaker in CDRH, FDA's device center, we did not hear the recording, and a webinar is no statement of agency policy.33,34 Vendor pages that say the method "aligns with" a regulation are describing their reading. Your inspector will read the rule, your procedure and your validation report.
04 · Who keeps the decision

The quality unit in the US and the Qualified Person in the EU keep the batch decision, whatever reads the pages

In shortUS rules give the quality unit the authority to approve or reject and the duty to review records. EU rules add a Qualified Person, who certifies each batch and must be sure all records are complete and endorsed. Neither role can pass to software. A second-person check can sometimes be met by automated equipment, but only with a person checking the equipment.

21 CFR 211.22(a) gives the quality control unit "the responsibility and authority to approve or reject" drug products, and "the authority to review production records to assure that no errors have occurred or, if errors have occurred, that they have been fully investigated".35 ICH Q7, written for active ingredients, adds that the main responsibilities of the independent quality unit "should not be delegated".21

In the EU, GMP Chapter 1 requires that no batch be released "prior to certification by a Qualified Person".2 Annex 16, on that certification, makes that person responsible for ensuring that "All records are complete and endorsed by appropriate personnel".3 The draft EU Chapter 4 says that accountability for records processed by AI or other automatic means "rests with the regulated user".22

Up to five signatures stand between the floor and the dock, and each belongs to a person

A typical chain. Your procedures name the exact roles.

  1. 1Operator performs

    Enters each value at the time of the step.

    Operator21 CFR 211.100(b)
  2. 2Second person checks

    Weighings, charge-ins and critical steps.

    Checker211.188(b)(11)
  3. 3Production reviews

    Approves the record for processing.

    Production supervisorEU Chapter 4, 4.20
  4. 4Quality reviews and approves

    Against procedures; investigates what does not fit.

    Quality unit211.192, 211.22
  5. 5Certifies, in the EU

    Each batch before sale.

    Qualified PersonAnnex 16

Our reading of the sources 36,35,21,3

Show the numbers
StepWhat happensWhoTime
Operator performsEnters each value at the time of the step.Operator21 CFR 211.100(b)
Second person checksWeighings, charge-ins and critical steps.Checker211.188(b)(11)
Production reviewsApproves the record for processing.Production supervisorEU Chapter 4, 4.20
Quality reviews and approvesAgainst procedures; investigates what does not fit.Quality unit211.192, 211.22
Certifies, in the EUEach batch before sale.Qualified PersonAnnex 16

Does a Qualified Person read every page?

EU rules do not say so in those words. Chapter 4 says all records "should be available" to the Qualified Person and that "a system should be in place to indicate special observations and any changes to critical data".15 ECA Academy, a training body, reads this as no express duty for the Qualified Person to review each record personally, with production reviewing first and a competent quality function second.37 That is one body's reading of the text, and many companies expect more of their Qualified Persons than the text does.

Second-person checks: where a machine can stand in, and where it cannot

RuleWhat it allowsWhat still needs a person
21 CFR 211.188(b)(11)A significant step "performed by automated equipment under § 211.68" can name the person checking the equipment.36"the person checking the significant step"
21 CFR 211.103A yield calculated by automated equipment is "independently verified by one person" instead of two.38The one verifier
EU Annex 11, clause 6For critical data entered by hand, the additional accuracy check "may be done by a second operator or by validated electronic means".39Whoever validated the electronic means
EU Annex 11, clause 15Systems can record certification."only Qualified Persons" certify, and the system must identify them.39
21 CFR 11.50Electronic signatures.Shows the signer's printed name, the date and time, and the meaning of the signature.40
05 · What the record holds

What 21 CFR 211.188 and EU Chapter 4 require on the page, and which errors each part invites

In shortThe rules list what an executed record must show: dates, equipment, lots used, weights, in-process results, yields, labeling, sampling, who did and checked each step, and any investigation. Some errors show on one line. Others only appear when two pages are compared, and a few can only be found outside the record, in a training file or a balance log.

21 CFR 211.188 requires "complete information relating to the production and control of each batch". It lists an accurate copy of the master record and thirteen more items, including dates, major equipment, lots of components, weights and measures, in-process and laboratory results, actual and percentage yields, labeling records, sampling, and the people "performing and directly supervising or checking each significant step".36 EU Chapter 4 paragraph 4.20 asks for much the same, in addition to "dates and times" of the start, significant stages and completion, and "signed authorisation for any deviation".15

Where the common batch record errors can be seen

A person reading page by page sees one-page errors; the costly ones often need two pages or a second system

Our classification, drawn from the required content of the record.

NoRarelyOftenAlways
On one lineOn one pageAcross pagesOutside the recordValue outside its limitAlwaysNoNoNoBlank field or missing initialsAlwaysNoNoNoOverwrite with no reasonOftenRarelyNoNoMissed check in a timed seriesNoAlwaysRarelyNoHold time over its limitNoNoAlwaysNoSteps out of orderNoNoAlwaysNoQuantity differs from reconciliationNoNoAlwaysNoSigner not trained on the stepNoNoNoAlwaysPrintout missing or does not matchNoRarelyNoOftenValue entered earlier or later than the workNoRarelyOftenRarely

Our reading of the sources 36,15

Show the numbers
On one lineOn one pageAcross pagesOutside the record
Value outside its limitAlwaysNoNoNo
Blank field or missing initialsAlwaysNoNoNo
Overwrite with no reasonOftenRarelyNoNo
Missed check in a timed seriesNoAlwaysRarelyNo
Hold time over its limitNoNoAlwaysNo
Steps out of orderNoNoAlwaysNo
Quantity differs from reconciliationNoNoAlwaysNo
Signer not trained on the stepNoNoNoAlways
Printout missing or does not matchNoRarelyNoOften
Value entered earlier or later than the workNoRarelyOftenRarely
Part of the recordThe ruleA typical check
Weighing and charge-in (adding material to the batch)Weighed amounts examined by a second person, or the automated equivalent, 21 CFR 211.101(c) and (d)41Weight inside tolerance, printout attached, second person signed
Processing stepsProcedures followed and "documented at the time of performance", 211.100(b)42Times in order, equipment matches, nothing entered ahead of the work
Time limitsLimits set "when appropriate"; deviation "shall be justified and documented", 211.11143Hold time between paired steps, across pages
In-process controlsResults recorded, 211.188(b)(5)36Every timed check present, results inside limits
Yield and reconciliationActual and percentage of theoretical, 211.103; unexplained discrepancy investigated, 211.19238,1Recalculate; compare with every other mention of the quantity
ChangesAny deviation "recorded and justified", 211.100(b)42Single line through, initials, date, reason; deviation number present

The documentation rules, known as good documentation practice, are usually a site's own procedure built on those texts. The "ALCOA" test (attributable, legible, contemporaneous, original, accurate) comes from data integrity guidance, including MHRA's.12

06 · The arithmetic

Hold times, reconciliations and a spot-check's real strength, worked through with numbers

In shortThe sums are simple, which is why they get missed: nobody expects to find a wrong sum on page 291. Two pages can hide a 26-hour hold behind a 24-hour limit. A written 99.6% can be a true 99.1%. And finding zero misses in a small spot-check proves far less than it sounds.

A hold time no single page shows

A hold time is how long material may wait between two steps. Batch DR26-1108's master record says wet granule may wait no longer than 24 hours between the end of granulation and the start of drying, and calls that a critical process parameter. Page 58 records granulation ending October 1 at 9:40 pm. Page 81 records drying starting October 2 at 11:55 pm. Each page is correct and signed by different people.

October 1, 9:40 pm → October 2, 9:40 pm = 24 h 00 min  ·  9:40 pm → 11:55 pm = 2 h 15 min  ·  total 26 h 15 min, 2 h 15 min over the limit

21 CFR 211.111 says a deviation from a time limit "may be acceptable if such deviation does not compromise the quality of the drug product", and "shall be justified and documented".43 So going over a limit has to be justified in writing. On this record the drying page shows "N/A" beside deviation reference, which is a second finding. Both records are fictional.

A reconciliation written wrong, inside its limit

A reconciliation compares what came out with what should have, as a percentage. On batch DR26-1109, page 291, the packaging team records 590,140 tablets packed, 1,200 QC samples and 3,260 rejects, against 600,000 theoretical, and writes 99.6%.

(590,140 + 1,200 + 3,260) ÷ 600,000 = 594,600 ÷ 600,000 = 99.1%

Both figures sit inside the 98.0% to 100.5% limit, so no alarm rings. It is still an error to correct: 21 CFR 211.103 requires yields to be "independently verified",38 and a second person signed this one. A check that only asks "is the written number in range?" passes it. A check that recomputes it does not.

A written yield can read better than its own entries, and a range check alone will pass it

Percentages from two fictional records

As writtenRecomputed from entries
Packaging reconciliation, DR26-110999.6%99.1%
Compression yield, DR26-110898.4%96.1%

Fictional example from this guide

Show the numbers
As writtenRecomputed from entries
Packaging reconciliation, DR26-110999.6%99.1%
Compression yield, DR26-110898.4%96.1%

What zero misses in a spot-check can and cannot prove

Any exception method needs a sample of the pages it passed, opened by a person, to measure how often "clean" is wrong. A small sample proves little. If you check n pages and find no miss, a standard rule gives the most you can say at 95% confidence: the true miss rate is below about 3 in n.44 That ceiling is called the upper bound.

Six pages with no miss says the rate is below 39%, by the exact formula. It takes about 300 pages with no miss to say below 1%, and a 1% rate on a 295-page clean set would still mean about three wrong pages per record.

Six clean spot-check pages say little about the miss rate; 298 bring its upper bound to about 1 in 100

Highest miss rate still consistent, at 95% confidence, with finding zero misses in that many pages. Treats pages as independent.

6 pages, one record's sample39.3%
30 pages, about a week9.5%
100 pages3%
298 pages, about a month1%
1,000 pages0.3%

Our reading of the sources 44 · 1 minus 0.05 to the power of 1/n. Page counts in the labels are illustrative for a plant reviewing a few records a day.

Show the numbers
ItemValue
6 pages, one record's sample39.3%
30 pages, about a week9.5%
100 pages3%
298 pages, about a month1%
1,000 pages0.3%

Two practices follow. Pool the spot-checks across records to get a meaningful number over a month or a quarter, and report the bound along with the count. And add planted errors: a challenge set of records with known errors tests a system directly, while a spot-check only samples what it happened to pass.

07 · What FDA cites

What FDA's inspection data shows under 21 CFR 211.192, and why most of it concerns investigations

FDA files through FY2025; letters to October 22, 2026

In short21 CFR 211.192 is the second most cited section of Part 211, FDA's drug manufacturing rules, on FDA's FY2025 drug Form 483s, the observations investigators give a firm's management at the end of an inspection, with 236 citations by our count. But 227 of those concern investigating a discrepancy, and 9 concern the quality unit's review of records. Faster reading can surface a discrepancy sooner. The finding usually comes from what a plant did next.

236

citations of 21 CFR 211.192 on FDA's FY2025 drug inspection observations, second among Part 211 sections.8

FDA Inspection Observations · our sum across five rows
9 of 236

sit on the row "Quality control unit review of records". The other rows concern investigations.8

FDA FY2025 drug file · our arithmetic
147 of 515

recent warning letters on current good manufacturing practice (CGMP) to drug and active ingredient sites mention 211.192 at least once.6

Our word search, January 2021 to October 22, 2026
Citations of 211.192 rebounded to 236 in FY2025, the highest since FY2019

Sum of all 211.192 rows in FDA's drug observations, by fiscal year. Drug Form 483 counts fell to 349 in FY2020 and 215 in FY2021.

201FY18
264FY19
128FY20
86FY21
170FY22
175FY23
173FY24
236FY25

Source 8 · Our arithmetic on FDA's rows. FDA does not publish this total or a rank.

Show the numbers
PeriodValue
FY18201
FY19264
FY20128
FY2186
FY22170
FY23175
FY24173
FY25236
Inside 211.192, how discrepancies were investigated dwarfs the review itself

FY2025 rows under 21 CFR 211.192, FDA's short descriptions

Investigations of discrepancies, failures164
Written record of investigation incomplete32
No written record of investigation22
Extent of discrepancy, failure investigations9
Quality control unit review of records9

Source 8 · 227 of 236 on the four investigation rows: 164 + 32 + 22 + 9 (our arithmetic). FDA's long wording for the largest row reads "failure to thoroughly review" a discrepancy; its short title and 21 CFR 211.192 speak of investigating, so we count it there.

Show the numbers
ItemValue
Investigations of discrepancies, failures164
Written record of investigation incomplete32
No written record of investigation22
Extent of discrepancy, failure investigations9
Quality control unit review of records9
Only the quality unit's own section is cited more often than production record review

Top five sections of Part 211 by citations, FY2025 drug file

211.22, quality control unit309
211.192, production record review236
211.67, equipment cleaning and maintenance204
211.100, written procedures and deviations201
211.160, laboratory controls176

Source 8 · Our sum per section across 47 sections with rows. FY2025 had 713 drug Form 483s from the system.

Show the numbers
ItemValue
211.22, quality control unit309
211.192, production record review236
211.67, equipment cleaning and maintenance204
211.100, written procedures and deviations201
211.160, laboratory controls176

How to read the "+171%" you may see quoted

An article in Pharmaceutical Online, January 30, 2025, says that for sterile drug manufacturers 211.192 was the second most frequently observed section in 2024, with "a 171% increase" on 2023, the largest of any section. It uses FDA's Data Dashboard and prints no counts in its text.45

That is a statement about one kind of plant and one pair of years. Across all drugs, FDA's own files show 175 citations in FY2023, 173 in FY2024 and 236 in FY2025.8 ECA Academy was already calling 211.192 the most cited paragraph of FDA warning letters in November 2011, so this is a long-running feature of inspections.46

How often FDA's warning letters name production record review

A warning letter is FDA's notice to a firm it believes has committed significant violations. The letters follow the same pattern as the Form 483 counts.

About one warning letter in three has named 211.192 in the last two years

Share of CGMP letters to drug and active ingredient sites that mention 211.192, by year of issue

0%20%40%60%33.3%
202120222023202420252026

Source 6 · Our word search of 515 letters: 7 of 42, 28 of 66, 18 of 82, 27 of 115, 33 of 108, and 34 of 102 for 2026 to October 22. Letters to active ingredient sites often cite ICH Q7 instead.

Show the numbers
Letters mentioning 211.192
202116.7%
202242.4%
202322%
202423.5%
202530.6%
202633.3%
Roughly 29 in 100 recent CGMP warning letters mention production record review
29 in 100

147 of 515 letters, January 2021 to October 22, 2026. In 145 of the 147, the 250 characters before a citation mention investigating, discrepancies or an unexplained result (a rough classifier of ours).

Source 6

Show the numbers
MeasureValue
147 of 515 letters, January 2021 to October 22, 2026. In 145 of the 147, the 250 characters before a citation mention investigating, discrepancies or an unexplained result (a rough classifier of ours).29 of 100

For context, FDA reports 1,248 drug quality assurance inspections in FY2025.47 These counts tell you what investigators wrote down. They cannot tell you how many review errors were never noticed.

08 · What goes wrong

Released before anyone read it: what FDA's letters show about production record review failures

In shortWhen FDA does write about the review itself, the story is rarely a subtle missed entry. Batches ship before the review happens, records are never received, dates and initials are filled in ahead of the work, or a firm says it lacks the people to do the review. An exception method fixes none of those by itself.

LetterWhat FDA's letter saysWhat it teaches
Custom Research Labs, July 8, 2022A quality unit employee stated that shipping and production "had released drug product batches before the batch record had been reviewed by the QU", and that the firm was trying to catch up on backlogged reviews.48A backlog turns into shipment. Review time is a compliance matter.
Bi-Coastal Pharma International, June 30, 2022"you do not receive or verify executed batch records unless requested by FDA during inspections", despite the firm's own procedure.49A procedure that promises a review has to be followed.
Seaway Pharma, December 1, 2025Between April 2024 and May 2025 the quality unit "released numerous batches of drug products for distribution prior to reviewing all test results".50The record includes laboratory results. Check that they are present.
LiquidCapsule Manufacturing, December 19, 2025Multiple instances "where initials and dates were pre-filled", and a batch distributed although the "QA Checklist" for review and release was not completed.51Pre-filled entries pass a blank-field check. Look for entries ahead of the clock.
Chemspec Chemicals, December 23, 2025The firm said it failed to document release of lots because it does "not have enough quality assurance personnel to review batch production records and release batches".52Capacity is an answer FDA did not accept as sufficient.
Cosmobeauti Laboratories, August 11, 2023A consultant told investigators that they "backdated review steps on batch production records".53The review's own signature must be contemporaneous.
Shree Jaya Laboratories, February 28, 2025"Several original batch production records were found torn in your scrapyard", and management then supplied a second set.54Issued-copy control sits underneath every review. No reader can see a replaced page.

Each firm is named only for what its letter says, as of that letter's date. Firms may since have responded or corrected. Quotations are FDA's.

Why reviewers miss the entries that matter

A long, repetitive check on mostly correct material is hard work for any person. Evidence specific to batch records is thin. A 2019 trade article, written without a stated method, gives manual entry errors of about 1 in 100 and right-first-time batches "as low as 47%".9 We use those only as a sign of what people report. Your own record of corrections per batch is better evidence, and most plants already hold it.

Three patterns recur in practice and in the letters: an error that crosses pages, an entry that looks complete and is arithmetically wrong, and a value signed by someone not trained on the step. The first two are good candidates for a rule. The third needs the training system beside the record.

09 · Time and cost

How long a batch record review takes, and why nobody can give you a trustworthy benchmark

In shortThe figures in print range from about 3 hours to 500 for one record, and 10 to 40 days to release on paper. None gives a dataset, a page count or a method. A record's length, whether it is paper, and how many hands it passes through all change the answer. Time five of your own.

Published review times span three to 500 hours, none with a stated method

Hours to review one batch record, as printed

2025 preprint, citing an ISPE article we could not find3
2019 trade article, average48
2019 trade article, worst reported500

Source 10,9

Show the numbers
ItemValue
2025 preprint, citing an ISPE article we could not find3
2019 trade article, average48
2019 trade article, worst reported500
ClaimSource and dateHow far to trust it
Paper batch release "can take 10–40 days"Pharmaceutical Technology, November 12, 20199Trade article. No dataset. Covers the whole of release, of which review is one part.
"reduce a 150-page batch record review to a three-page exception report"EY, April 10, 202355Written as what "one could" do. A possibility, unmeasured.
92% shorter cycle and 55% fewer errors on batch production recordsMIT thesis, one biotech plant, 201056One site. Value stream mapping and real-time review, with no reading software involved.
"approximately three hours" per recordAgarwal and colleagues, preprint submitted November 26, 2025, authors at a software company10It cites "ISPE Metrics Team", Pharmaceutical Engineering 43(4), 2023. A search of the title and ISPE's page for the July/August 2023 issue did not find that article. Baseline not measured in the paper.

The MIT result shows that a large share of the delay can sit in hand-offs and waiting, and that process work alone can cut it. Before pricing any software, walk one record through the building with a stopwatch and see how much of the elapsed time is someone reading.

What late release and missed entries cost a plant

We found no public figure for the cost of a day of release delay or for a missed entry. The cost lines are easy to name: finished goods held while a record waits, shelf life used up before shipping, supply gaps, rework when a problem is found after the line has moved on, and investigations that have to reach back to other batches.

21 CFR 211.192 requires an investigation to "extend to other batches of the same drug product and other drug products" that may be associated with the failure,1 so a discrepancy found late can touch far more than the batch in hand. Part C shows how to put your own numbers on each.

10 · What AI changes

What AI can add to reading batch records, what draft Annex 22 says, and the limits you should plan for

Status as of November 3, 2026

In shortAI can read scans and handwriting, which is what brings exception review to paper records. It also brings risk: a misread value can pass as clean, and the EU's draft AI annex says generative models "should not be used in critical GMP applications". EMA has since reported that comments favored allowing them under controls, and no revised text exists. Whether a step is critical is a classification your quality unit has to make and defend.

Exact rules and reading are two different jobs

Checking a typed value against a limit, recomputing a yield or subtracting two times is exact arithmetic: it gives one answer each time and can be tested like any other software. Reading a smudged handwritten "7" is a judgment by a model, and it may vary. Most of the regulatory worry attaches to the second job, and any reader of a paper record does it.

Automate the exact checks first; keep a person close wherever a model's reading feeds a release decision

Our judgment. Your quality unit classifies your own steps.

How close to the release decision →
Person checks each output
Validate and sample
Support, with review
Automate
Reading handwritingReading printRecomputing yieldsHold timesDrafting a deviationSignature checks
How exact the method is →

Our reading of the sources 23,22,5

Show the numbers
ItemHow exact the method is (0–1)How close to the release decision (0–1)
Reading handwriting0.120.74
Reading print0.240.60
Recomputing yields0.740.67
Hold times0.740.57
Drafting a deviation0.120.24
Signature checks0.740.10
TextWhat it saysStatus
Draft EU GMP Annex 22Applies to static models with deterministic output in critical GMP applications. Generative AI and large language models (LLMs) "should not be used in critical GMP applications". In non-critical uses, qualified people answer for outputs, a human in the loop.23Draft. Consultation July 7 to October 7, 2025. Not listed in EudraLex on November 3, 2026.19
EMA workshop report, EMA/156789/2026Comments supported allowing generative AI in GMP applications. The drafting group discussed widening the scope under a documented, risk-based control strategy.57A report. No revised text published. Inspectors' target of Q4 2026 for final text to the Commission carries no adoption date.58
Draft EU Chapter 4, 4.23 to 4.25Names "batch release based on in-process controls and process analytical technologies" supported by "automatic validation scripts or artificial intelligence (Annex 22)". Such support "should be included in a pharmaceutical quality system".22Draft.
FDA draft guidance on AI, January 2025A credibility framework for AI supporting regulatory decisions. Leaves out operational efficiencies "that do not impact patient safety, drug quality, or the reliability of results from a nonclinical or clinical study".27Draft. A tool feeding a release review may touch drug quality, so do not assume the exclusion.
FDA warning letter, Purolea Cosmetics Lab, April 2, 2026Under the heading "Inappropriate Use of Artificial Intelligence in Pharmaceutical Manufacturing": "If you use AI as an aid in document creation, you must review the AI generated documents to ensure they were accurate and actually compliant with CGMP."59One firm, on document creation, among other CGMP findings. No general FDA policy on batch record review.
FDA CDER discussion paper, 2023Questions on AI in drug manufacturing. It says it does not convey "any current regulation or policy".26A discussion paper.
EMA reflection paper, September 9, 2024; EMA and FDA principles, January 14, 2026Risk-based use of AI across a medicine's lifecycle; ten shared principles for AI in medicine development.60,61Nonbinding.
EU AI ActHigh-risk dates moved by Regulation (EU) 2026/1744, in force July 27, 2026.62 We read nothing naming a GMP review tool as high risk; take legal advice on your use.Law.
ISPE GAMP AI guide, July 2025Industry guidance on developing and using AI-enabled computerized systems in GxP areas.63Industry guide.
FDA Computer Software Assurance, February 2026Written for computers and automated data processing systems in medical device production or the quality system.28Final. Its scope is devices, so it does not govern a drug plant's tool.

The evidence on reading executed batch records is thin

We found no independent, peer-reviewed study that measures AI accuracy on executed handwritten batch records against verified truth. The closest paper is a preprint submitted November 26, 2025 by three authors at a company in the field. It ran three records of 15, 44 and 66 pages through a conversion to structured data, and it did not test catching errors against a master record.

It reports composite confidence of 82.08 to 89.00, a score its own workflow produces, and states handwriting accuracy of "approximately 85%" without describing how that was measured, calling it an upper bound on the system's performance.10 That is a warning: on a page with many handwritten entries, an accuracy in the 80s would be far too low to trust without a person checking what matters.

One preprint scores 82 to 89 on three short records, on the authors' own measure

Composite confidence, Table 3 of the 2025 preprint, by record

Oral solid encapsulation, 15 pages89
Contract packaging, 44 pages82.1
Solid-dose tablet, 66 pages88.8

Source 10 · The paper does not define the composite formula or a ground-truth method. Page counts follow its Table 2.

Show the numbers
ItemValue
Oral solid encapsulation, 15 pages89
Contract packaging, 44 pages82.1
Solid-dose tablet, 66 pages88.8

Five limits to plan for when AI reads batch records

  • A false clean, a wrong page the system passed, is the failure that matters. A false alarm costs a reviewer a little time. A misread value that lands inside its limit costs a release decision. Test for it with planted errors, on your own handwriting.
  • An illegible entry must stop the read. Any tool should flag what it cannot read and never guess.
  • The electronic record is the original. EMA's question 16 warns against review based only on printouts.5 If your source is an export, know what it leaves out, audit trails above all.
  • Forms and models change. A new form version or a model update can move accuracy. Treat either as a change under your quality system.
  • A software tool is never compliant by itself. 21 CFR Part 11, FDA's rule on electronic records, Annex 11 and GMP apply to you, in your use. A vendor can offer controls that support your compliance and you do the proving.
11 · How teams do it today

Who reads a batch record at a typical plant, where the days go, and the three ways plants organize the review

In shortProduction reviews first, then QA, then the quality decision, with corrections bouncing back between them. Reading is only part of the elapsed time; queues and correction loops take much of the rest. Plants choose among line-by-line paper review, exception reports from an electronic batch system, and software that reads paper or exports, often using more than one across their products.

The five people who carry one record

RolePart in the reviewWhat they want
QA batch record reviewerReads the record against the master record and documentation procedure, decides each finding, signs.To spend the hours on the pages that matter.
QA operations leadSecond-signs critical findings, balances workload across plants, reports review times.One view of what is late and why.
Production supervisorFirst review; gets corrections; owns deviations for the area.One list per batch, sent once.
Qualified Person or quality headDisposition. In the EU, certifies.Every deviation raised before the decision.
Validation leadOwns proof that any automated check works, and its changes.Measured misses, kept current.
A paper record crosses the same desks several times before anyone can sign it
  1. 1Record closes

    Pages gathered from the floor; count checked against the issued copy.

    ProductionDay 0
  2. 2Production review

    Gaps filled and queries answered.

    Production supervisor1 to 3 days
  3. 3Waits for QA

    Queue, sorted by release date.

    QAVariable
  4. 4QA line-by-line read

    Every entry against master record and procedure.

    QA reviewerHours to days
  5. 5Corrections loop

    Pages go back, return, are read again.

    BothOften repeats
  6. 6Decision

    Deviations closed or assessed; quality decides; a Qualified Person certifies in the EU.

    QualityLast

Illustrative · replace with your own numbers · An illustrative path; time your own.

Show the numbers
StepWhat happensWhoTime
Record closesPages gathered from the floor; count checked against the issued copy.ProductionDay 0
Production reviewGaps filled and queries answered.Production supervisor1 to 3 days
Waits for QAQueue, sorted by release date.QAVariable
QA line-by-line readEvery entry against master record and procedure.QA reviewerHours to days
Corrections loopPages go back, return, are read again.BothOften repeats
DecisionDeviations closed or assessed; quality decides; a Qualified Person certifies in the EU.QualityLast

Where a reviewer's 31 hours might go on a 300-page paper record

Most reading hours go to steps a rule could check; judgment is the smaller part

An illustrative split of one reviewer's hours on a paper record. Replace it with your own timing.

Entries against limits and stepsSignatures, corrections, blanksHolds, order, reconciliationsWrite-upPages present, decision, signature
Hours on one record10 h8 h5 h4 h4 h

Illustrative · replace with your own numbers · 31 hours in all, a planning figure and no benchmark. Section 9 explains why no benchmark exists.

Show the numbers
Entries against limits and stepsSignatures, corrections, blanksHolds, order, reconciliationsWrite-upPages present, decision, signature
Hours on one record10 h8 h5 h4 h4 h

Line-by-line paper, a batch system's reports, or a reader on paper and exports

Line by line, by peopleException reports from a batch systemSoftware reads paper and exports
Works onAnythingRecords made inside that systemPaper, hybrid and exports
Prevents errorsNo, finds them laterYes, at the moment of entry, where configuredNo, finds them after the batch
Regulator text on itThe rule's plain readingEMA question 17; Chapter 4 noteNone by name; draft Annex 22 and draft Chapter 4 touch it
Main riskFatigue, delay, cross-page missesLong rollout; weak rule designMisreading; false clean; export gaps
What to proveTraining and procedureSystem and exception reportReading on your forms, rules, misses over time

Market size: we found no audited figure for review by exception, and no credible survey of how many plants still run paper. Market reports we read gave adoption shares with no method, so we leave them out.

Part B · See it working

One 304-page tablet record on Botminds, from the scan station to a signed review

The same fictional company, Cobbleford Pharma, on the solution's real screens. Dates and times follow the screens. Every person, plant, batch and figure here is sample data. Where a master record or procedure is quoted, it is the sample company's own text.

12 · One record, start to finish

Dana Okafor's Wednesday: batch DR26-1109 goes from 304 unread pages to one critical deviation

In shortDana is a QA batch record reviewer. Her home screen draws each executed record as a strip of its pages. A new paper record arrives at 7:40 am. Six agents read it against the master record, and nine pages come back marked. The first she opens is a blend that ran 12 minutes against 15 ± 1, and she raises the deviation herself.

The review bench draws each batch record as a strip of its pages

The bench opens straight on the work. Each line is a record, and each stripe in the strip is one page. Colored ticks mark exceptions by severity, and the list on the right holds the 15 still open for Dana, worst first. The new arrival sits on top, not yet read.

The review bench. Every record as a strip of its pages. The new arrival is on top and unread; the exceptions to decide are listed worst first.

Six agents read every page in place

She presses Read the record. The strip fills from left to right. The page reader confirms 304 of 304 pages against the issued copy and reports how many are handwritten and how many boxes could not be read. The entry extractor turns the pages into 4,270 entries, with signatures, initials, dates and times. The comparator, the documentation checker and the cross-page reconciler then each do their job, and any page that was unreadable would go to a person. The scan itself is never altered.

Reading in place. 304 of 304 pages present, 41 handwritten, no illegible boxes. Six steps report what each covered.

Nine pages marked out of 304, and six clean pages drawn for her

The strip settles. Nine exceptions on nine pages: one critical, three major, one check and four documentation errors. Of the 295 clean pages, six are drawn at random for her spot-check. Eight of the nine need a decision. The ninth, a check, shows a re-dry that followed the route the master record allows, marked so she can confirm the route was followed.

Nine ticks remain. One critical, three major, one check, four documentation. 295 pages clean, 6 of them drawn for the spot-check.
Eight of the nine marks on this record need a decision, and only one is critical

Exceptions on batch DR26-1109 by severity

Check, nothing to decide: 1Documentation: 4Major: 3Critical: 1
9exceptions
  • Check, nothing to decide1
  • Documentation4
  • Major3
  • Critical1

Fictional example from this guide

Show the numbers
PartValue
Check, nothing to decide1
Documentation4
Major3
Critical1
304 pages narrow to 15 a person opens and one critical decision

Batch DR26-1109. The 15 are the nine marked pages and six spot-check pages.

Pages read304
Pages a person opens15
Pages with an exception9
Critical1

Fictional example from this guide

Show the numbers
StageCount
Pages read304
Pages a person opens15
Pages with an exception9
Critical1

The final blend on page 101, with the rule quoted beside it

She clicks the red tick and lands on the scanned page with the entry highlighted. Step 7.12 runs from 1:05 pm to 1:17 pm. A band works out the 12 minutes. On the right, the sample master record's own words: "Blend 15 ± 1 minutes at 8 rpm after adding magnesium stearate. Blend time is a critical process parameter." The master record comparator suggests a deviation, and shows its confidence. Three choices wait: raise a deviation, send a correction, or accept with a reason.

An exception on its page. The entry highlighted on the scan, the sum beneath it and the suggested decision. The rule text is the sample master record's.

A deviation drafted from the record, raised by Dana and signed twice

She confirms. The deviation is already drafted: DEV-26-0631, the batch, the evidence (page 101, master record step 7.12), classified critical, owned by Sam Patel in production with Dana for QA, and the batch on hold until the deviation is closed or assessed. She checks it and raises it into the quality system. Because it is critical, the QA operations lead, Omar Haddad, signs second. An agent has drafted the words. People have made every decision.

Raise a deviation. Drafted from the record, checked by the reviewer and raised into the quality system with the batch on hold.
13 · The exceptions

A hold time across pages, a missing printout, a gap in the hardness series and a sum written wrong

In shortExceptions are of several kinds, each cited to its page and rule. Some are one entry; some exist only between two pages. Each comes with a suggested decision that the reviewer can overturn, and corrections collect into one list for production.

A second-person check missing on the binder weighing

Next on the list, page 49: 41.4 kg of purified water weighed by J.M., inside 41.5 ± 0.5 kg, with the checker's box empty. The suggestion here is a correction to production. A value inside its limit, with no second signature, is what a rule catches every time and a tired reader can pass.

A missing second-person check. The next exception on the bench. The first now shows as a deviation in the list on its own record.

26 hours 15 minutes that exist only between pages 58 and 81

On the batch before, DR26-1108, the cross-page reconciler paired the end of granulation with the start of drying and showed both pages with the sum between them: October 1 at 9:40 pm to October 2 at 11:55 pm, against a 24-hour limit in step 6.4. The drying page's "N/A" beside the deviation reference tells the rest. No single page shows this.

Across two pages. Granulation end and drying start, each on its own page, with the sum between them.

An active ingredient weight with no balance printout behind it

Page 24 records the active ingredient at 12.006 kg, written by hand. The master record requires the balance printout on the page, and it is missing. The suggestion is to ask production to attach the BAL-07 printout from the weighing log and, if it cannot be found, to raise a deviation.

A required printout missing. The handwritten weight cannot be traced to the balance without the printout.

A hardness check every 30 minutes, and one empty row

Page 158. The press ran from 10:40 am to 2:15 pm without a stop, and the 11:30 am check is empty between two good results. The value that is missing cannot be out of range, so a range check alone would pass the page. It takes a check of the series to find it.

A gap in a timed series. Two good results either side of one empty row.

A re-dry that followed the allowed route

Page 86 shows loss on drying of 2.7% against a 2.0% limit, then a 10-minute re-dry and 1.9%. The master record allows one re-dry, so the comparator marks this as a check, with "accept" suggested. Following allowed routes before raising an exception is what keeps false alarms down, and the page stays visible so a person can agree.

An allowed route, shown for a person. Marked as a check, with nothing to decide except that the route was followed.

99.6% written, 99.1% by the entries on page 291

Both are inside 98.0% to 100.5%, so this is a calculation error with a documentation fix, and the screen says so. The calculation sits under the page: (590,140 + 1,200 + 3,260) ÷ 600,000.

A sum written wrong. Both figures are inside the limit. The written one is still wrong.

A late entry that nobody marked late

Coating ended at 5:05 pm on October 5. The entry is signed October 6 at 8:20 am, with no "late entry" note. The sample documentation procedure's section 5.8 is quoted, and the suggestion is a correction.

A late entry, unmarked. The sample procedure's section on late entries is quoted beside it.

One correction list per batch for Sam Patel

Corrections collect into one list, with page, rule and what to do. Production corrects and rescans only those pages, and the agents re-read only those pages. The original scan stays as it was.

One correction list per batch. Page, what to correct and the rule. Only corrected pages come back.
14 · Clean pages and the signature

How the 295 clean pages get checked, what a miss does, and what Dana's signature says

In shortClean pages are sampled at random on every record, before it can be signed. A problem found there is logged as a miss against the plant's validation report and the validation lead is told. Critical parameter steps are shown even on a record with nothing to decide. Only a person signs, and the signature shows its meaning, name and time.

Six clean pages, opened one by one

The sample runs at 2% of clean pages by default. "Clean" here comes with its evidence: each page shows the entries the agents checked. If everything agrees, she moves to the next page. If not, I found something starts an exception.

The spot-check. Page 1 of 6, picked at random, with every checked entry marked.

What happens when a spot-check finds a miss on a clean page

A problem found on a clean page becomes an exception of its own, logged as a miss against the validation report, and Lena Ortiz, the validation lead, is notified. The rule that should have caught it goes into the next rule set. Part A's section 6 explains why those misses need pooling across records before they mean much.

What a miss looks like. Shown here by flagging page 7 of another record, to demonstrate the route a miss takes.

A 478-page electronic record with nothing raised

VL26-0428, a batch of Veltrimab drug substance, came through with no exceptions. The screen says "Nothing needs you" and asks only for the spot-check. Critical parameter steps are still listed for her to see. Paper, hybrid and electronic records share one bench.

Nothing to decide, and still shown. 8,980 entries checked. Critical parameter steps are listed for the reviewer anyway.

The signature box and its meaning

Agents cannot sign. Dana's name, the time and the meaning are bound to the record: "Production record review complete — 21 CFR 211.192". That wording is a label the sample company chose in its settings, and it records what her signature means.

The signed review goes to disposition with any open deviations listed beside it. The sample plants supply both US and EU markets, so Dr. Maya Chen, the Qualified Person, receives it for certification. A US-only site would route it to its quality unit decision, and the settings also offer "Batch record reviewed — EU GMP Chapter 4".

The signature. Meaning, name and time, bound to the record. Agents cannot sign.
15 · Who reads and who signs

Six agents read and check each page; a QA reviewer decides, and a second person signs anything critical

In shortEach agent has one job and a limit it cannot cross. None of them decides. A named QA reviewer decides each exception and signs. The QA operations lead second-signs anything critical, production owns its corrections, the validation lead owns the rule set, and the quality unit, or the Qualified Person in the EU, decides the batch.

Record intake and page reader

Receives scanned, hybrid and electronic records, checks the page count against the issued copy, sorts each page into its master record section, and reads print and handwriting.

Never guesses an illegible entry; it flags it. It never alters the original scan.

Entry extractor

Turns each box on each page into a typed entry (value, unit, initials, signature, date and time) with its page and position, and marks overwrites, strike-throughs, blanks and N/A.

Never loses the original: the text as written stays beside the normalized value, and each value cites its page and box.

Master record comparator

Checks each entry against the master record and specifications: limits, critical process parameters, required steps and second-person checks. It follows the retest and rework paths the master record allows before raising anything.

Never lets a critical parameter step pass unseen. Every exception cites the master record step.

Signature and documentation checker

Applies the documentation rules: signatures, second-person checks, corrections, blanks, late entries, date formats, and initials against the signature roster and training records.

Never judges product quality. It looks at documentation only, and quotes the rule section.

Cross-page reconciler

Builds the batch timeline and material balance from every entry: hold times between paired steps, step order, each yield and reconciliation recomputed, each quantity compared with every other mention of it.

Never raises a cross-page exception without showing both pages and the calculation.

Exception writer

Merges duplicates and writes one plain exception per problem, with page citations, the rule, severity, confidence and a suggested decision: deviation, correction or accept with a reason.

Never decides. A named QA reviewer decides, and no exception exists without a page citation.

The QA reviewer signs each review; anything critical is signed twice

Decides and signsQA batch record reviewerDecides each exception, spot-checks clean pages and e-signs the review with its meaning.
Second signatureQA operations leadSecond-signs critical exceptions with the page in front of them, after the reviewer has decided.
Owns the rulesValidation leadApproves every rule set version and owns the spot-check plan and the plant's own validation report.
Decides the batchQuality unit or Qualified PersonReads the signed review and its open deviations at disposition. In the EU the Qualified Person certifies.

Each agent finding, decision, correction list, deviation, spot-check and signature goes on the audit trail with who, what and when. These controls support your compliance with 21 CFR Part 11 and EU Annex 11, and with your own procedures; the proof in your use remains yours to build. Which steps count as critical under your risk assessment, including any step that uses a language model, is your quality unit's classification. See section 10.

16 · Every record, every plant

The records list, the documentation error map, the dashboard and the rule settings a plant controls

In shortAround the review sit the screens a QA lead lives in: every record by stage, a heat map of documentation errors, review time and reviewer agreement across plants, and the settings that decide what reaches a person. Each change to those settings is a new, approved rule set version.

Every batch record across three plants

Paper, hybrid and electronic records by plant and stage, with open exceptions by severity, reviewer and release date.

Every record. Filter by type, plant and stage.

The documentation error map that points training at one shift

All documentation errors by type and area. In the sample, the largest cluster is corrections without initials, date or reason at compression, 17 in the last 30 days, mostly on one shift. One click sends the pattern to training with a date to re-measure. This is what turns a stream of one-at-a-time corrections into a fix.

The documentation error log. Error type by area. The darkest cell is corrections without initials, date or reason at compression.

Review hours, pages opened and how often reviewers agree

The dashboard shows review time per record, what the agents raise, exceptions by area, and agreement with suggestions by agent. The numbers below are design targets, shown on sample data. The live solution measures your own.

10.8 h

median review time per record, against 31 hours line by line in the sample's own baseline.

Design target · sample data
4.2%

of pages opened by a person, spot-checks included. Batch DR26-1109's own 15 of 304 is 4.9%.

Design target · sample data
91%

of suggested decisions kept by the reviewer. Read this beside planted-error results: agreement alone can also mean a rubber stamp.

Design target · sample data
The dashboard, on sample data. The figures are design targets shown on sample records.

What reaches a person, who signs, and what the signature means

Critical parameter steps are always shown by default. The near-limit check, late entry rule, spot-check share, record types, second signature, deviation owner, correction recipients and signature meaning are all settings. Each change is a new rule set version, approved by the validation lead. Check-only rules can add exceptions and never hide one. The "Validated" mark on this screen refers to the sample plant's own report, VR-RBE-0412, on its own rule set, with a challenge set of 40 seeded records: a customer's validation is its own work.

Rules the plant controls. Each change is a new rule set version, approved by the validation lead.

What the agents read, and what the review produces

From the floor

  • Executed batch records: paper scans, hybrid bundles, electronic exports
  • Balance printouts and attachments

From quality

  • Approved master batch records and specifications
  • Your documentation procedure as checkable rules
  • Signature roster and training records
Agents read, check and write up Every page of each record, against your master record and your rules
A named person decides and signs
Every exception linked to its page

Outputs

  • Exception list with page citations
  • Documentation error log by type and area
  • Deviations raised into your quality system, linked to the batch
  • One correction list per batch
  • Review-complete record with e-signature
  • Review cycle-time dashboard

What changes for the team

  • Pages to open instead of pages to read
  • One list to production
  • Misses measured, month by month

Systems a batch record review connects to

Scan stations and batch systemsRecords sent in automatically, or added as a file or an export
Master record and document systemsApproved master records, specifications and procedures
Quality management systemDeviations raised from a review, linked to the batch
Training recordsWho may sign a step, and patterns sent to training
People and rolesReviewer, approver, production, disposition and rule set approver
Audit trailEvery step, who and when, ready for an inspection request
Part C · Are you ready to automate?

Deciding whether exception review belongs at your plant

Written to you, the person who answers for release times and inspection findings: what slow review and missed entries cost, what you could get back, whether you are ready, what to ask any vendor, and how to test it on your own records.

17 · What it costs you

What a slow or thin batch record review costs your plant, and where to find those numbers in a week

In shortHours are the cost you can see. A release held up by a queue ties up finished goods and shelf life. A correction found on day ten sends a record back through production. A discrepancy found late can reach other batches. Nobody publishes these for your plant, so here is how to measure them.

10–40 days

typical paper-based batch release, in a 2019 trade article with no stated dataset.9

Pharmaceutical Technology · treat as a prompt to measure
236

citations of 21 CFR 211.192 on FDA's FY2025 drug observations, the second most cited section of Part 211.8

FDA Inspection Observations · our arithmetic
1,248

drug quality assurance inspections FDA reports for FY2025, 702 of them in the US.47

FDA State of Pharmaceutical Quality, FY2025
The hours most likely to move are the mechanical checks; decisions and signatures stay

A planning estimate for one 300-page paper record, in hours. The right-hand total, 10.8, is a design target to test in your pilot.

Line by lineBy exception
Paging through, confirming pages2 hours0.2 hours
Entries against limits and steps10 hours2.5 hours
Signatures, corrections, blanks, late entries8 hours2 hours
Hold times, order, reconciliations5 hours1.5 hours
Writing up findings and deviations4 hours2.6 hours
Spot-checks, the decision, the signature2 hours2 hours

Illustrative · replace with your own numbers · Estimated, unmeasured. Published review times range from about 3 hours to 500 (section 9), so time your own.

Show the numbers
Line by lineBy exception
Paging through, confirming pages2 hours0.2 hours
Entries against limits and steps10 hours2.5 hours
Signatures, corrections, blanks, late entries8 hours2 hours
Hold times, order, reconciliations5 hours1.5 hours
Writing up findings and deviations4 hours2.6 hours
Spot-checks, the decision, the signature2 hours2 hours

Where review costs hide on a batch record, and how to size each one

CostWhere it hidesHow to find your number in a week
Reviewer hoursReading, cross-checking, writing upTime five records of different lengths, with the clock stopped for breaks and interruptions
Queue timeRecords waiting for a reviewer, or waiting for production to answerFrom your document system, take arrival and signature dates for 50 records; subtract hours actually read
Correction loopsPages sent back, returned, read againCount round trips per batch for a month; time one round
Inventory heldFinished goods waiting for a signature, shelf life runningAsk finance for batch value and carrying cost; multiply by days from record close to release
Late-found discrepanciesInvestigations that reach into other batchesPull last year's deviations; mark those raised after a next batch had started
Misses that reached the recordThings a later audit or an inspector foundList batch record findings from self-inspections and FDA or EU inspections for three years
Documentation error volumeThe same mistake on the same shift, corrected one at a timeTally 20 records' corrections by type and area

Batch record costs that never reach a spreadsheet

The reviewer who stops seeingHour 20 of a 300-page read is harder than hour 2. Nobody logs which pages got the tired eye.
The supervisor who learns lastA training gap on one shift keeps producing the same correction for months, because each one arrives alone.
The Qualified Person's confidenceA certifier who doubts the review repeats it, and your cycle time grows quietly.
Inspection timeAn investigator asks for a record and its review history. Minutes of searching read as weak control.
Your best reviewers' careersPeople who could be improving the process spend their years reading pages that were fine.
18 · Your return

What exception review could return per batch record, with the formula behind every figure

In shortThe return comes from four places: reviewer hours, fewer correction loops, less inventory held, and documentation errors fixed at the source. The calculator covers the first three, with every default marked illustrative. Set your own numbers and subtract the cost of proving the tool works, which a regulated plant must carry. You also gain a measured miss rate to show an inspector, which no calculator prices.

Reviewer hours

Pages opened instead of pages read

A person works from marked entries and a spot-check sample, with every value already compared to the master record.

records × hours saved per record × loaded hourly cost
Correction loops

One list per batch, sent once

Production gets every correction together, with page and rule, and only corrected pages come back.

records × round trips avoided × hours per round × hourly cost
Release timing

Days taken out of the queue

A record reaches the decision sooner, and finished goods carry less cost while they wait.

records × days saved × batch value × carrying cost ÷ 365
Patterns

Errors fixed at the source

Documentation errors counted by type, area and shift show which training would prevent next month's corrections. We leave this out of the calculator; count it once you have a baseline.

corrections avoided × minutes per correction ÷ 60 × hourly cost
Your volume and costs
Illustrative yearly value
Review hours today, valued$0
Reviewer time saved$0
Correction loops avoided$0
Carrying cost of inventory saved$0
Net of the tool's cost$0
Reviewer hours freed0

Formulas: time saved = records × (hours today − hours by exception) × hourly cost. Loops = records × round trips avoided × hours per round × hourly cost. Carrying = records × days saved × batch value × carrying % ÷ 365. Net = the three together, less the yearly cost. Every default is an assumption of ours, for you to replace: no public benchmark exists for any of them. Enter a saving you have measured, or you are pricing a hope.

19 · Readiness check

Is your batch record operation ready for exception review? Eight questions, scored as you go

In shortScore yourself 0 to 2 on eight questions about your records, rules, people and inspection position. Nothing you choose leaves this page. A low score usually points to work worth doing anyway: master records that can be checked by a rule, and a documentation procedure written clearly enough to enforce.

1
Volume

How many batch records does your site review in a year?

Why it mattersVolume turns hours per record into capacity, and sets how fast you can pool spot-checks into a meaningful number.
A strong answer"About 600, two-thirds of them on two products, with a release date on each."
2
A baseline

Do you know your hours per record, days to release and corrections per batch?

Why it mattersPublished figures run from 3 hours to 500. Without your own, no one can tell whether a tool helped.
A strong answer"Timed on 20 records last quarter, by product, with queue time apart from reading time."
3
Master records a rule can read

Are your limits, critical parameters and required checks stated clearly enough to turn into rules?

Why it mattersA rule can only enforce what a master record states. "Blend until uniform" is a problem; "15 ± 1 minutes" is a rule.
A strong answer"Every critical parameter has a number and a unit, and allowed re-work routes are written as steps."
4
Documentation procedure

Could your good documentation practice procedure be enforced as written, without someone's interpretation?

Why it mattersEach review team's unwritten habits become false alarms or misses the day a system applies the text.
A strong answer"One global procedure, numbered sections, examples for corrections, late entries and N/A."
5
The state of your records

Do you know what share of your records are paper, hybrid and electronic, and how good the scans are?

Why it mattersEach type carries different proof. Regulator text exists for electronic data; paper relies on your own validation of the reading.
A strong answer"Three products on paper, scanned at 300 dpi with page counts checked; one electronic, with audit trail access."
6
Validation owner

Is there someone who will own validation of a rule set, including changes, misses and periodic review?

Why it mattersEMA asks for testing and validation of the system and its exception report.5 A vendor can provide evidence, and the responsibility stays with you.
A strong answer"A named lead, with a challenge set and an annual review in the plan."
7
Quality unit position

Has your quality head written down what a person must read every time, what may be sampled and why?

Why it mattersEMA says "when scientifically justified". The justification is your document, and draft Annex 22 raises the question of which steps count as critical.
A strong answer"A signed risk assessment: critical parameter steps always read, spot-check rate set, a clear position on AI."
8
Connections

Can review findings reach your deviation system, training records and document system?

Why it mattersMost 211.192 findings concern the investigation that follows, so a finding stuck in a separate tool solves the easier half.
A strong answer"Deviations raised into the quality system with the batch linked, roster and training data available."
9
Vision · for reflection

If an investigator asked tomorrow how you know a page you never opened was fine, what would you put on the table?

Why it mattersYour answer lists the gaps. Each one is a job for your procedure, your validation or your software.
A strong answer"The rule set in force, its validation report, the spot-check results with their confidence bound, and the misses we fixed."
0–5

Explore

Time five records, list your correction types and rewrite the master records a rule could not read. That work pays back with or without software.

6–11

Ready to pilot

Run a measured pilot beside your normal review on 40 of your own records, some with planted errors. Decide on catches, misses and minutes.

12–16

Ready to implement

Plan by product and plant, start validation early, connect your deviation and training systems, and set the spot-check rate from your risk assessment.

20 · Questions for a vendor

What to ask any batch record review vendor about reading, misses and who answers to an inspector

In shortAsk us too. A demonstration on clean sample data tells you little. Ask how the tool does on your handwriting, what it does with an unreadable field, how misses are measured, which steps use a generative model, and what happens when an inspector wants to follow one decision back to its page.

A

Reading a scanned or handwritten page

A1

What is your accuracy on our handwriting, on our forms, measured on entries, against a truth set we prepare?

Why it mattersHandwriting varies by person and plant. Public evidence is thin.
Strong answer · warning sign
A test on your records, per field type.
One percentage from someone else's documents.
A2

What happens when a field cannot be read?

Why it mattersA guess that lands inside a limit is the worst outcome.
Strong answer · warning sign
It flags the field and a person reads it.
A confidence score and no stop.
A3

For electronic records, do you read the system's data and audit trail, or an exported PDF?

Why it mattersEMA warns against review based solely on printouts.5
Strong answer · warning sign
A stated answer, and what each route leaves out.
"Exports are the same."
B

Measuring misses on pages called clean

B1

Will you run a blind test with errors we plant, and report what you missed?

Why it mattersThis is the only direct measure of a false clean.
Strong answer · warning sign
Yes, on your records, every miss reported.
Scores on their own test set only.
B2

How do you stop reviewers from approving everything a system suggests?

Why it mattersA high agreement rate can mean good suggestions or a rubber stamp.
Strong answer · warning sign
Agreement measured beside seeded errors.
Agreement alone offered as proof of quality.
B3

What does your tool always show a person, whatever it found?

Why it mattersCritical parameter steps deserve eyes even when clean.
Strong answer · warning sign
A setting you control, on by default.
"Only exceptions, always."
C

Regulators, AI and the words on your brochure

C1

Which steps use a generative model or an LLM, and which are exact rules?

Why it mattersDraft Annex 22 treats them very differently, so your classification needs this answer.23
Strong answer · warning sign
A step-by-step list, in writing.
"Our AI" with no breakdown.
C2

Do you say your product is "compliant" or "validated"?

Why it mattersThose describe your use of a system. A vendor can support them with controls and evidence.
Strong answer · warning sign
"Controls that support your compliance."
"Part 11 certified."
C3

When a model or a form changes, who tells us, and what do we re-test?

Why it mattersA silent update can move accuracy under a validated system.
Strong answer · warning sign
Version pinned; change notice; regression evidence.
Continuous updates, unannounced.
D

The decision, the signature and the inspection

D1

Show me one decision followed back to its page, rule version and reviewer.

Why it mattersThis is what an investigator will ask for.
Strong answer · warning sign
Done live, with the original scan unchanged.
A report assembled afterward.
D2

Can your software decide or sign anything?

Why it mattersThe quality unit approves. Annex 11 clause 15 reserves certification to Qualified Persons.39
Strong answer · warning sign
No. It suggests; a named person signs, with the meaning shown.
Auto-approval for clean records.
D3

Do findings reach our deviation and training systems, and do we keep the rule set if we leave?

Why it mattersMost findings concern what happens after a discrepancy, and records outlive contracts.
Strong answer · warning sign
Named connections; exportable rules and review records.
Findings live only in the tool.
21 · Pilot plan

A twelve-week batch record pilot that runs beside your normal review and ends with three numbers

In shortPick one product and one record type. Keep your normal review running, so no release decision depends on the pilot. Plant known errors in copies. At the end, decide on three numbers: errors caught, misses on pages called clean, and reviewer minutes per record.

Twelve weeks is enough to measure misses on one product, in parallel with today's review
Your teamVendor
Write the quality position; time five records
Choose 40 closed records; plant errors in 10 copies
Load master records and documentation rules
Read the test set blind
Parallel run on live records
Score catches, misses, minutes
Decide, with the quality head
Week 04812

Illustrative · replace with your own numbers

Show the numbers
ActivityFromTo
Write the quality position; time five records02
Choose 40 closed records; plant errors in 10 copies14
Load master records and documentation rules25
Read the test set blind46
Parallel run on live records510
Score catches, misses, minutes911
Decide, with the quality head1112

Catches, misses and reviewer minutes per record

MeasureHow to take itDecide with
Planted errors caughtErrors you planted, by type: limits, signatures, holds, reconciliations, late entriesEvery critical parameter error caught, or stop
Misses on clean pagesPages the tool passed, read in full by a second reviewer; report the bound as well as the countA bound your quality head will sign
Reading accuracySample of handwritten entries, compared with the page by a personPer field type, with unreadable fields flagged
False alarmsMarks a reviewer dismissed, per recordFew enough that reviewers still read them
Reviewer minutesStopwatch per record, against your baselineA saving that survives the spot-check time
Days to releaseArrival to signature, against your baselineMeasured queue change

Three of these decide the pilot: planted errors caught, misses on clean pages and reviewer minutes. The others explain the result.

The working-session questions: what to settle with quality, production, validation and IT

Bring QA reviewers, production, validation, the Qualified Person, IT and whoever owns the deviation system into one room.

A

The quality position on what a person must read

A1

Which steps must a person always see, even when clean?

Why it mattersCritical parameter steps are the usual answer. Write it down.
Strong answer · warning sign
A list by product, from the risk assessment.
"Whatever the tool flags."
A2

What spot-check rate, and how do you pool results across records?

Why it mattersSix pages prove little; a pooled quarter proves more.
Strong answer · warning sign
A rate, a bound and a trigger to raise it.
A rate copied from a vendor default.
A3

What happens to the batch when a spot-check finds a miss?

Why it mattersA miss may touch other batches read under the same rule.
Strong answer · warning sign
An exception, a look-back, a new rule version.
Correct the page and carry on.
B

Records, sites and systems

B1

Who scans, at what resolution, and who checks the count against the issued copy?

Why it mattersA missing or replaced page beats every later check.
Strong answer · warning sign
A controlled step with a recorded count.
Scanning as an afterthought.
B2

Do US and EU supply follow one review, or two?

Why it mattersSignature meaning and the Qualified Person's role differ.
Strong answer · warning sign
One review with market-specific sign-off.
Not yet considered.
22 · FAQ

Questions people ask about reviewing batch records by exception

In shortThe questions people search about review by exception, each answered on its own, with the regulators' position stated as we read it on November 3, 2026.

What is batch record review by exception?

It is a way of reviewing an executed batch record in which a system checks every entry against approved rules and a person concentrates on the entries it marks. The person decides each one, checks that passed pages can be trusted, and signs. The quality unit keeps the decision.

Does FDA allow review by exception?

We searched FDA's site, the Federal Register and regulations.gov on November 3, 2026, and found no FDA guidance that uses the term and none that forbids it. One 2023 FDA discussion paper repeats stakeholders' mention of it and says it is not guidance. 21 CFR 211.192 requires the quality control unit to review and approve all production and control records before release, and 211.68 allows automated systems with checks based on their complexity and reliability. A plant using the method has to show how it meets that rule, through its procedures and validation.

What does EMA say about review by exception?

The European Medicines Agency's questions and answers on data integrity in good manufacturing practice say "review by exception is permitted, when scientifically justified", in an answer about the review of electronic data, including electronic batch records. They add that appropriate testing and validation must be completed for the automated system and its batch exception report. The answer does not address paper records.

Can you review paper batch records by exception?

Software can read scans and apply rules to paper and hybrid records, and that is what brings the method to plants without an electronic batch system. We read FDA, EU, EMA, MHRA, PIC/S and WHO texts on November 3, 2026 and found none that addresses it; the UK regulator MHRA mentions optical character recognition only for checking scanned copies. You would need your own justification, validation on your own forms and handwriting, and a measured miss rate, with the original paper retained.

What does 21 CFR 211.192 require before a batch is released?

It requires that all drug product production and control records, including packaging and labeling, be reviewed and approved by the quality control unit before a batch is released or distributed. It also requires any unexplained discrepancy or failure to be thoroughly investigated, extended to other batches that may be associated, and written up. Most FDA citations of the section concern that investigation.

What must a batch record contain under 21 CFR 211.188?

It must include an accurate reproduction of the master record and documentation of each significant step: dates, major equipment, component lots, weights and measures, in-process and laboratory results, yields, labeling records, sampling and the people performing and checking each step. It also includes any investigation made under 211.192.

What does EU GMP Chapter 4 say about exception reports?

The January 2011 text says that where a validated process is continuously monitored and controlled, automatically generated reports may be limited to compliance summaries and exception or out-of-specification data reports. A 2025 draft keeps that note and points to its AI paragraphs. The draft has not replaced the 2011 text as of November 3, 2026.

Can AI approve a batch record?

No rule we read lets software take the decision. In the US the quality control unit approves or rejects. In the EU a Qualified Person certifies, and Annex 11 says only Qualified Persons may certify through a computerized system. AI can read, check and suggest, with a named person deciding.

What does draft EU GMP Annex 22 mean for batch record review?

The draft says generative AI and large language models should not be used in critical GMP applications, and that qualified people answer for outputs in non-critical use. EMA has since reported that comments favored allowing them, and no revised text exists. It remains a draft on November 3, 2026, and your quality unit has to classify each step.

How do you validate review by exception?

Validation belongs to the plant using the tool. A common approach is to define intended use, write rules from the master record and procedure, test against challenge records with known errors, and report what was missed. Then keep testing in use with a spot-check of passed pages and a change process for rules, forms and models.

How large should a spot-check of clean pages be?

No regulator sets a number that we could find. As a rough guide, zero misses in n pages bounds the miss rate at about 3 in n at 95% confidence, so 300 clean pages with no miss bounds it near 1%. Pool results across records, and set the rate from your own risk assessment.

How long does a batch record review take?

Nobody publishes a reliable benchmark. Printed figures run from about 3 hours to 500 per record, and 10 to 40 days to release on paper, without stated methods. Time five of your own records of different lengths, and keep queue time apart from reading time.

Is review by exception the same as real-time release?

No. Real-time release testing relies on process data in place of end-product tests, under an approved dossier. Review by exception is about how people review the record. EU Chapter 4 does mention exception reports from process analytical technology, as per the approved marketing authorization, in its footnote on certificates of analysis.

23 · One-page summary

Review by exception on one screen: seven steps, the regulators' words and fourteen terms

Print this page

In shortThe whole guide on one screen: the method, the rules as of November 3, 2026, the readiness bands and the terms.

The method
  1. Write what a person must always read, and why, before choosing a tool.
  2. Turn master records and your documentation procedure into versioned, approved rules.
  3. Check every entry: limits, signatures, blanks, corrections, holds, order, reconciliations.
  4. Mark exceptions by severity, each with its page and rule. Flag anything unreadable.
  5. A named person decides each one: deviation, correction, or accept with a reason.
  6. Spot-check pages called clean, pool the results and report the bound.
  7. Sign with name, time and meaning. The quality unit decides; in the EU a Qualified Person certifies.

Readiness: score 0–2 on eight questions: 0–5 explore · 6–11 pilot · 12–16 implement.

As of November 3, 2026: 21 CFR 211.192 says all records, and we found no FDA guidance on the method · EMA permits it for electronic data when scientifically justified · EU Chapter 4 and Annex 11 at January 2011, 2025 revisions still drafts · Annex 22 still a draft · no regulator text found on paper records read by software.

14 terms
Master batch record
Approved instructions for one product.
Executed batch record
The filled-in copy for one batch.
eBR
An electronic batch record.
MES
Manufacturing execution system: software that guides and records production.
Hybrid record
Part paper, part electronic.
Exception report
A list of predetermined abnormal data or actions, from a tool proven to work.
Quality unit
The group with authority to approve or reject; in FDA's words, the quality control unit.
Qualified Person
The named person in the EU who certifies each batch before sale.
Critical process parameter
A setting identified as able to affect quality, with a controlled range.
Deviation
A recorded departure from an approved instruction, assessed and justified.
Good documentation practice
The rules for how entries, corrections and signatures are made.
Hold time
How long material may wait between two steps.
Reconciliation
Comparing what came out with what should have, as a percentage.
Spot-check
A random sample of passed pages, opened by a person.
24 · Sources

Sources

Accessed November 2026. Regulatory status statements are as of November 3, 2026. Warning letters are FDA's own copies, cited only for what each says; a letter states FDA's position at its date, and firms may since have responded or corrected.

  1. 21 CFR 211.192, Production record review, 2025 edition. govinfo.gov
  2. EU GMP Part I, Chapter 1: Pharmaceutical Quality System, in operation since January 31, 2013, paragraph 1.9(vi) and (vii). health.ec.europa.eu
  3. EU GMP Annex 16, Certification by a Qualified Person and Batch Release, in operation since April 15, 2016, point 1.7.11 and 1.7.16. health.ec.europa.eu
  4. ISPE (compiled by its GAMP Community of Practice), comments to EMEA on proposed revisions to Chapter 4 and Annex 11, October 20, 2008. ispe.org
  5. EMA, Guidance on good manufacturing practice and good distribution practice: questions and answers, Data integrity, questions 8, 16 and 17, read November 3, 2026. ema.europa.eu
  6. FDA, Warning Letters database; our word search of 515 CGMP letters to drug and API sites issued January 2021 to October 22, 2026, read November 3, 2026. fda.gov
  7. FDA CDER, Distributed Manufacturing of Drugs: Stakeholder Feedback and Action Plan, November 2023 ("not a draft or final guidance"). fda.gov
  8. FDA, Inspection Observations, FY2018 to FY2025 drug files; page current December 16, 2025. Totals and ranks are our arithmetic on the rows. fda.gov
  9. J. Zebib, "Review by Exception: Connecting the Dots", Pharmaceutical Technology, November 12, 2019. pharmtech.com
  10. B. Agarwal, N. Bendre and V. Rojkova, "From Paper to Structured JSON: An Agentic Workflow for Compliant BMR Digital Transformation", arXiv 2601.04368, preprint submitted November 26, 2025. All authors are at MasterControl AI Research. arxiv.org
  11. ISPE, GAMP Good Practice Guide: Manufacturing Execution Systems, A Strategic and Program Management Approach, February 2010 (contents page read; the guide is sold and was not read). ispe.org
  12. MHRA, GXP Data Integrity Guidance and Definitions, Revision 1, March 2018, section 6.13. assets.publishing.service.gov.uk
  13. PIC/S, PI 041-1, Good Practices for Data Management and Integrity in Regulated GMP/GDP Environments, July 1, 2021, sections 5.6 and 9.6, and glossary. picscheme.org
  14. Draft EU GMP Annex 11, consultation text, 2025, section 12. health.ec.europa.eu
  15. EU GMP Part I, Chapter 4: Documentation, January 2011, paragraphs 4.20, 4.27 and the footnote to Certificates of Analysis. health.ec.europa.eu
  16. EMA, "Data integrity: key to public health protection", news, August 11, 2016 (EMA's announcement of the data integrity questions and answers; the questions and answers page itself prints no date on them). ema.europa.eu
  17. FDA, Data Integrity and Compliance With Drug CGMP: Questions and Answers, guidance for industry, December 2018 (nonbinding), questions 7 and 8. fda.gov
  18. European Commission, stakeholders' consultation on EudraLex Volume 4, Chapter 4, Annex 11 and Annex 22, July 7 to October 7, 2025. health.ec.europa.eu
  19. European Commission, EudraLex Volume 4, read November 3, 2026: Chapter 4 "January 2011", Annex 11 "revision January 2011", Annex 16 "into operation since April 15, 2016", no Annex 22. health.ec.europa.eu
  20. 21 CFR 211.68, Automatic, mechanical, and electronic equipment, 2025 edition. govinfo.gov
  21. ICH Q7, Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients, Step 4, November 10, 2000, sections 2.22 and 6.70 to 6.73. database.ich.org
  22. Draft EU GMP Chapter 4, consultation text, 2025, paragraphs 4.23 to 4.25, 4.36 and 4.85. health.ec.europa.eu
  23. Draft EU GMP Annex 22, Artificial Intelligence, consultation text, 2025, sections 1 and 3.3. picscheme.org
  24. ICH Q9(R1), Quality Risk Management, adopted January 18, 2023. database.ich.org
  25. FDA, Considerations for Complying With 21 CFR 211.110, draft guidance, January 2025, Docket FDA-2024-D-5374. fda.gov
  26. FDA CDER, Artificial Intelligence in Drug Manufacturing, discussion paper, 2023 (not guidance). fda.gov
  27. FDA, Considerations for the Use of Artificial Intelligence to Support Regulatory Decision-Making for Drug and Biological Products, draft guidance, January 2025. fda.gov
  28. FDA, Computer Software Assurance for Production and Quality Management System Software, final guidance, February 2026 (scope: medical device production and quality system software). fda.gov
  29. Other FDA texts word-searched November 3, 2026, none using the phrase: Part 11 Scope and Application, August 2003 fda.gov; PAT framework, September 2004 fda.gov; Quality Systems Approach, September 2006 fda.gov; Process Validation, January 2011 fda.gov; Electronic Systems in Clinical Investigations, October 2024 fda.gov; Compliance Program 7356.002, implementation date October 17, 2022 fda.gov.
  30. R. Harrison, "'Paper on Glass' User Centric Batch Operations", Pharmaceutical Engineering (ISPE), September/October 2014. ispe.org
  31. ISPE, GAMP 5 Guide: A Risk-Based Approach to Compliant GxP Computerized Systems, Second Edition, July 2022 (publication page; the guide itself is sold and was not read). ispe.org
  32. A. Dachs Soler and S. Wyn, "Audit Trail Review: Regulation and Practice in GxP Environments", Pharmaceutical Engineering (ISPE), March/April 2026. ispe.org
  33. Axendia, "FDA Debunks Industry Myths on Electronic Batch Records and Review by Exceptions", February 12, 2021 (a trade blog pointing to a recorded episode; the page quotes no words, and we did not hear the recording). axendia.com
  34. WCG, Device Quality Management event, speaker listing: Francisco Vicenty, Program Manager, Case for Quality, CDRH, FDA (undated). wcgclinical.com
  35. 21 CFR 211.22, Responsibilities of quality control unit, 2025 edition. govinfo.gov
  36. 21 CFR 211.188, Batch production and control records, 2025 edition (revised as of April 1, 2025). govinfo.gov
  37. ECA Academy, "Who needs to review Batch Records?", April 6, 2022. gmp-compliance.org
  38. 21 CFR 211.103, Calculation of yield, 2025 edition. govinfo.gov
  39. EU GMP Annex 11: Computerised Systems, revision January 2011, clauses 6, 9, 14 and 15. health.ec.europa.eu
  40. 21 CFR 11.50, Signature manifestations, 2025 edition. govinfo.gov
  41. 21 CFR 211.101, Charge-in of components, 2025 edition. govinfo.gov
  42. 21 CFR 211.100, Written procedures; deviations, 2025 edition. govinfo.gov
  43. 21 CFR 211.111, Time limitations on production, 2025 edition. govinfo.gov
  44. J. A. Hanley and A. Lippman-Hand, "If nothing goes wrong, is everything all right? Interpreting zero numerators", JAMA 1983;249(13):1743-5. pubmed.ncbi.nlm.nih.gov
  45. M. Ingram, A. Pazhayattil, P. Sagar and S. Chakraborty, "2024 Trends in FDA Observations for Sterile Drug Manufacturers", Pharmaceutical Online, January 30, 2025. pharmaceuticalonline.com
  46. ECA Academy, "Production Record Review: the most frequently cited paragraph in FDA Warning Letters", November 30, 2011. gmp-compliance.org
  47. FDA CDER, Report on the State of Pharmaceutical Quality, FY2025, June 25, 2026. fda.gov
  48. FDA warning letter, Custom Research Labs, Inc., 616184, July 8, 2022. fda.gov
  49. FDA warning letter, Bi-Coastal Pharma International, 628196, June 30, 2022. fda.gov
  50. FDA warning letter, Seaway Pharma, Inc., 717355, December 1, 2025. fda.gov
  51. FDA warning letter, LiquidCapsule Manufacturing, LLC, 717069, December 19, 2025. fda.gov
  52. FDA warning letter, Chemspec Chemicals Private Limited, 718403, December 23, 2025. fda.gov
  53. FDA warning letter, Cosmobeauti Laboratories & Manufacturing, Inc., 657682, August 11, 2023. fda.gov
  54. FDA warning letter, Shree Jaya Laboratories Pvt. Ltd., 698690, February 28, 2025. fda.gov
  55. A. Amery (EY), article on electronic batch records in pharma manufacturing, April 10, 2023. ey.com
  56. R. L. Ford, "Using value stream mapping to improve documentation processes in the biopharmaceutical industry", MIT thesis, 2010. dspace.mit.edu
  57. EMA, Report of the multistakeholder workshop on Annex 22, EMA/156789/2026, workshop of June 30, 2026, file dated October 1, 2026. ema.europa.eu
  58. EMA, 3-year work plan of the GMDP Inspectors Working Group, 2026 to 2028. ema.europa.eu
  59. FDA warning letter, Purolea Cosmetics Lab, 722591, April 2, 2026. fda.gov
  60. EMA, Reflection paper on the use of artificial intelligence in the medicinal product lifecycle, September 9, 2024. ema.europa.eu
  61. EMA, "EMA and FDA set common principles for AI in medicine development", January 14, 2026. ema.europa.eu
  62. European Commission, Regulatory framework on AI, read November 3, 2026: AI Omnibus (Regulation (EU) 2026/1744) in force July 27, 2026. digital-strategy.ec.europa.eu
  63. ISPE, GAMP Guide: Artificial Intelligence, July 2025 (publication page). ispe.org
Next step

Bring ten closed batch records and see each mark beside its page.

Explore the solution, or bring ten closed executed records, the master record and your documentation procedure, with errors planted in a few copies if you like, and we will read them with you.

botminds.ai The complete guide to batch record review by exception · November 2026. Cobbleford Pharma, Dravenzo, Talvoren, Veltrimab, every plant, person, batch, master record and figure in the example and the screens are fictional, and no sample finding is a statement about any real person or company. Regulatory status is as of November 3, 2026; this guide is general information, so take your own quality and legal advice before acting on it.