WorkflowResearch & Discovery

The complete guide · November 2026

CMC Module 3 authoring, explained.

Every drug application has a part that says how the medicine is made, tested and stored, with the data behind each claim. That part is Module 3, and CMC stands for chemistry, manufacturing and controls. Many people write it from hundreds of reports, yet a limit in one section has to hold up against the numbers in five others.

This guide is for anyone who writes, reviews, signs or waits on the quality part of a drug application: regulatory CMC leads and writers, analytical and process development leads, quality assurance, regulatory operations, and the leaders deciding whether to automate the work. No background needed.

See one case, screen by screen →
Watch with transcript →
A quick example · fictional

Imagine you are the regulatory CMC lead at Northwind Bio, a biotech filing its antibody, Veltrimab, with the US Food and Drug Administration (FDA). You sign the sections of Module 3. Content lock, the date the text freezes, is October 30, 2026, and today is October 7.

Last week a change control, the formal record of an approved change, tightened the protein content limit to 95.0 to 105.0% of label claim, the amount the label states. The limit applies at release, when a batch is cleared to ship, and throughout storage. The reason: 31 batches had been released between 95.9 and 101.3%. Section 3.2.P.5.1, the specification, now says so. Section 3.2.P.5.6, the argument for that limit, uses those release results.

On October 5 the 24-month stability report came out. On page 14 it says that two of the batches you are relying on read 94.6% at 18 months. Everyone who worked on either document was right about their own document.

3.2.P.5.1 · Specification v4
Test
Protein content
Limit
95.0 to 105.0%
Applies
Release and on stability
Effective
Sep 29, 2026
3.2.P.8.3 · Report STB-DP-031, p. 14
Batches
VLT-DP-24S01, 24S02
18 months
94.6%, both
24 months
94.3%, 94.2%
Claimed
24-month shelf life
Two batches fail the limit you proposeOptions: separate limits, or 12 monthsA person chooses, and the sections follow.

A careful cross-check catches the contradiction three weeks before content lock, while it is still your decision, instead of months later in a letter from the agency.

CMC Module 3 authoring guide
Part A · Understand it

The CTD quality module: what it holds, why its sections must agree, and how it is changing

What the work is, the rules as they stand in November 2026, the numbers that must line up, what goes wrong and how teams do it today, explained without selling anything. If you are new to regulatory CMC, start here.

01 · In plain words

What CMC Module 3 is, told through one protein result that stopped passing

A company asking to sell a medicine has to prove two separate things. The clinical part of the application shows the medicine works in people. The quality part shows that the company can make the same medicine, batch after batch, for as long as the label says it lasts. Regulators call that second subject CMC, for chemistry, manufacturing and controls. In the Common Technical Document, the shared format for drug applications, it lives in Module 3.

Module 3 is written the way big documents usually are. An analytical scientist writes up the tests. A process scientist writes up the production steps. A stability lead reports what happens to the product over two years in a cold room. A regulatory writer turns all of it into controlled sections, often starting from an application the company filed for another product, and retypes the numbers from certificates and tables. Each section gets its own reviewer. Each reviewer, reasonably, reads that section.

A medicine's numbers, though, do not stay in one section. Take one limit: the protein content of a syringe must be within a stated range of what the label claims. The limit appears in the specification. The batches tested at release have to meet it, and they appear in the batch analysis section. The stability results have to meet it right up to the end of the shelf life, and they appear in a third place. A justification explains why the limit sits where it does. The summary in Module 2 repeats it.

So when someone tightens a limit late, five sections have an opinion about the change and only one has been told. This guide is about writing Module 3 so that its sections agree on the day it is submitted. A regulator reading the file will compare them, and FDA can answer with a letter that ends the review cycle.

How a protein limit travels from a lab result to a signed section

  1. Development records pile upCertificates, specifications, stability reports, process reports and validation reports, each with its own version.
  2. Writers draft each sectionFrom a template and the closest approved filing, with the numbers retyped from those records.
  3. Sections are checked against each otherEvery limit against the batches, the stability data, the process, the justification and the summary.
  4. Leads decide and signA technical reviewer, then the regulatory CMC lead. A changed limit goes through change control.
  5. The dossier is assembled and filedThe dossier is the whole application. Publishing builds it as an electronic file, the eCTD. From here, any contradiction is the regulator's to find.

Steps 2 and 3 are the subject of this guide. The company, people and figures in the example are fictional.

A batch can pass today and sink the file later: what newcomers miss about Module 3

A tighter limit can be wrong because the data are good

A range set from release results alone looks well supported. The international guideline ICH Q6B also says specifications "should account for the stability" of the product.1 A protein that drifts down slowly passes every release test and then crosses the new line in storage.

A much-repeated statistic mixes writing with plants

"Three in four" complete response letters, FDA's letters ending a review without approval, cite quality or manufacturing, but that count includes facility inspections.2 In our count of FDA's letters from 2020 to 2024, only 23% carry a product quality finding with no facility finding.3

Two correct ranges can read as one failed batch

If one section gives a parameter's everyday range and another gives its wider proven range, and neither says which, a validation batch inside the wider range looks like a batch run outside its own process.

The format itself is being rewritten

A draft international revision, M4Q(R2), would move specifications and the core process description to Module 2.3, the quality summary, and call Module 3 a repository of supporting data. Adoption is planned for June 2027.4,5

Specification, shelf life, PPQ, content lock

Specification

The list of tests, methods and acceptance limits a batch must meet. Once approved, it is a condition of the approval.6

Shelf life

How long the product may be used when stored as labeled. FDA calls it the expiration dating period.

PPQ

Process performance qualification: the batches made to confirm the commercial process does what its design says.7

Content lock

A company's own date when the text freezes so the dossier can be built and published. No rule sets it.

Fourteen terms are defined in the one-page summary.

02 · What goes in Module 3

What goes in eCTD Module 3: substance, product, appendices and about 57 headings

In shortModule 3 has a drug substance part, a drug product part, appendices and a regional part. By our count the current guideline names 57 lowest-level headings. Each is usually its own managed document, which is why agreement between them takes deliberate work.

ICH, the council where regulators and industry write shared drug guidelines, sets the outline in a guideline called M4Q(R1), dated September 12, 2002.8 It also says which pieces go in separate files, in its granularity annex.9 A single application can hold several copies of a heading: one for each drug substance, each manufacturer or each dosage form.

What M4Q does not say is what a good section argues. That lives in the quality guidelines it points to, such as Q6B for the specifications of a biologic, a medicine made using living cells.

3.2.S

Drug substance

The active ingredient. Who makes it and how (S.2), how it is characterized (S.3), its specification, batch results and justification (S.4), reference standards, container and stability (S.5 to S.7).

3.2.P

Drug product

The finished medicine. Composition and development (P.1, P.2), manufacture (P.3), excipients, the inactive ingredients (P.4), specification and justification (P.5), reference standards, container and stability (P.6 to P.8).

3.2.A

Appendices

Facilities and equipment, the evaluation of viruses and other adventitious contaminants, the kind that get in by accident, and any novel excipient. These matter most for biologics.

3.2.R and 3.3

Regional and references

What a region asks for beyond the common outline, and copies of key literature.

The drug product part holds more than half of Module 3's headings

Lowest-level headings under 3.2 in M4Q(R1), counted by us. Multiple sites or forms repeat them.

3.2.P Drug product32
3.2.S Drug substance21
3.2.A Appendices3
3.2.R Regional1

Our reading of the sources 8

Show the numbers
ItemValue
3.2.P Drug product32
3.2.S Drug substance21
3.2.A Appendices3
3.2.R Regional1

Counts differ by how a team cuts the file: one vendor's infographic says 50 sections, and the fictional filing in this guide tracks 45 for one product and presentation.10 Both are ordinary. Count your own last filing.

The US law behind the outline, and what a specification binds

The outline is a format; the duty to provide the content comes from each region's law, and this section takes the US as the example. For a new drug, the new drug application (NDA) must carry "the specifications necessary to ensure the identity, strength, quality, purity, potency, and bioavailability of the drug product" and "stability data with proposed expiration dating".11 For a biologic, the biologics license application (BLA) must carry a "full description of manufacturing methods" and "data establishing stability of the product through the dating period".12

FDA can refuse to approve a new drug application that "contains an untrue statement of a material fact".13 An unnoticed contradiction differs from a false statement, and a careful team stays well clear of that line.

Once a batch is on the market, the same specification becomes the release test: US rules require "satisfactory conformance to final specifications" before a batch ships.14 So the number in the dossier governs the plant for years.

03 · The rules and their dates

Which quality guidelines bind Module 3 in November 2026, and which are still drafts

Status as of November 2026

In shortM4Q(R1) is the text in force. Its replacement is a draft expected in June 2027. Stability guidance is also being consolidated, analytical procedure guidance changed in 2023, and eCTD v4.0 is live but optional. A team filing in 2027 works under the old outline and should plan for the new one.

Module 3's outline stays in force while its replacement moves toward June 2027
  1. Sep 2002M4Q(R1)

    The outline in force today, numbering edit of September 12, 2002.

  2. Nov 2023Q2(R2) and Q14 adopted

    Validation and development of analytical procedures, adopted November 1, 2023.

  3. May 2025M4Q(R2) reaches Step 2

    Endorsed May 14, 2025; EMA comments closed October 24, 2025.

  4. Jan 2026FDA issues the draft

    Docket FDA-2025-D-2275, not for implementation.

  5. Mar 2026Consultation complete

    More than 2,500 comments, in ICH's work plan.

Source 8,4,5,15,16,17,18,19

Show the numbers
WhenWhat
Sep 2002M4Q(R1)
Nov 2023Q2(R2) and Q14 adopted
May 2025M4Q(R2) reaches Step 2
Jan 2026FDA issues the draft
Mar 2026Consultation complete
Dec 2026ICH Q1 Step 3 sign-off planned
Jun 2027M4Q(R2) Step 3 and Step 4 planned
Q1 2028eCTD v4.0 planned as mandatory for new EU centrally authorized applications

How to read the steps: at ICH's Step 2 a draft is endorsed and released for public consultation, Step 3 sign-off follows the comments, and Step 4 is adoption of the final guideline.5

TextWhat it governs in Module 3Status, November 2026
ICH M4Q(R1)Where each piece goesIn force, September 12, 20028
ICH M4Q(R2)A new outline for 2.3 and 3.2Step 2 draft; comments to be resolved by November 2026; Step 4 planned June 20274,5. At FDA, a January 2026 draft, not for implementation15
ICH Q6B, Q6ASpecifications and their justification, biologic and chemicalIn force since March 10 and October 6, 19991,6
ICH Q5C, Q1A to Q1EStability studies and shelf lifeIn force. A consolidated Q1 draft from April 2025 would absorb them; work plan of July 10, 2026 sets Step 3 sign-off for December 2026. We found no adoption notice20,21,16
ICH Q8(R2), Q11Development, process ranges, control strategyIn force22,23
ICH Q2(R2), Q14Analytical procedures, 3.2.S.4.2 to 4.3 and 3.2.P.5.2 to 5.3Adopted November 1, 202317,18
ICH Q12Established conditions: which text binds after approvalAdopted November 20, 201924
eCTD v3.2.2 and v4.0How the file is packagedFDA takes either; from October 16, 2026, an application first filed in v3.2.2 may continue in v4.0 (forward compatibility); no v4.0-only date19. The European Medicines Agency (EMA): optional for new centrally authorized applications since December 22, 2025, strongly recommended from Q1 2027, mandatory planned Q1 202825
FDA CDER refuse-to-file manualWhat can stop a file at the doorMAPP 6025.4 Rev. 1, effective October 23, 2025, with internal checklists26
Left off this list, and why. The EU pharma package is not law: Parliament's files read "Awaiting Parliament 2nd reading" on November 3, 2026, so nothing here rests on it.27 And FDA's structured quality data work, known as PQ/CMC, has no acceptance announcement: FDA's page says publication of the data guide does not represent it in final form or FDA policy, and that "there are formal processes and timelines" for announcing support.28
04 · The M4Q(R2) draft

M4Q(R2) and core quality information: where the draft would move each Module 3 section

In shortThe draft makes Module 2.3 the basis of assessment and Module 3 a repository of support. Specifications, process descriptions and shelf-life statements would move up to a new section called Core Quality Information. Your sections would still have to agree, across a different map.

The draft's central sentence is short: "Module 2.3 serves as the basis for regulatory assessment and facilitates lifecycle management, however it does not supersede regional post approval change requirements." A little later, "Module 3 serves as a repository for detailed descriptions of methods, data, and other relevant quality information that supports Module 2.3."4 Today, the opposite holds: the Quality Overall Summary "should not include information, data or justification that was not already included in Module 3 or in other parts of the CTD".8

Inside 2.3, section 2.3.3, Core Quality Information, would hold "all information subject to lifecycle management per regional post-approval change requirements". A second section, 2.3.4, Development Summary and Justification, would carry the arguments.

The draft also reorganizes every material under the same four headings: Description, Manufacture, Control and Storage. ICH wants a format fine-grained enough for digital use, and hopes it can enable "a single M4Q(R2) version of the dossier across countries or regions".4 It names artificial intelligence and structured data among the emerging concepts its format can take in, and asks applicants to put information on such tools in the relevant sections of the dossier.

The five sections in this guide's example, on the old map and the draft one

ContentM4Q(R1), in forceM4Q(R2) draft, core or justificationM4Q(R2) draft, data
Drug product specification3.2.P.5.12.3.3.DP.C, "acceptance criteria for both release and shelf life"3.2.DP.C
Batch analyses3.2.P.5.42.3.4.DP.C.2, a tabulated overview3.2.DP.C.1
Justification of specification3.2.P.5.62.3.4.DP.C.3, "release and stability/shelf-life specifications"3.2.DP.C.2, "any additional information"
Shelf life and stability3.2.P.8.1, 3.2.P.8.32.3.3.DP.S.2 and 2.3.4.DP.S.23.2.DP.S.2
Process description and ranges3.2.S.2.2, 3.2.S.2.42.3.3.DS.M.1 and 2.3.3.DS.M.23.2.DS.M.1

This mapping is ours, made from the draft's headings at Step 2, and it is not ICH's. ICH's work plan lists its own R1 to R2 mapping (December 2025) and a mock example (November 2025). We did not read either, so check ours against ICH's before relying on it. The final wording may differ too: in June 2026 the expert group generally agreed revisions to sections 2.3.1, 2.3.2, 2.3.3, 2.3.5 and 2.3.6.5

The draft moves the weight of the outline from Module 3 into the summary

Lowest-level headings, counted by us, approximate. Many draft headings apply only if the product has that part.

Under 3.2, body of dataUnder 2.3, the summary
M4Q(R1), in force57 headings19 headings
M4Q(R2) draft74 headings116 headings

Our reading of the sources 8,4

Show the numbers
Under 3.2, body of dataUnder 2.3, the summary
M4Q(R1), in force57 headings19 headings
M4Q(R2) draft74 headings116 headings

What a team should do now about a draft that may change

Nothing here changes a filing's legal outline before regional adoption. Three habits cost little and carry over. Keep each value's source and page with the value, because the same number will appear in a new place. Stop writing arguments into data sections: the draft separates them, and it is good discipline under the old outline too. Keep a list of every place each limit appears, because that list is the thing you will re-map.

05 · One limit, five sections

How one specification limit depends on batches, stability, process and Module 2.3

In shortEach limit in a specification makes claims in at least five sections. Lay them on a grid and most cells agree. The few that do not are where a reviewer's question will come from. Those cells also tend to be the ones nobody owns.

Q6B gives the reason these sections are tied together. Specifications are "part of an overall control strategy", they are "linked to a manufacturing process", they "should account for the stability of drug substance and drug product", and they are based on "lots used in pre-clinical and clinical studies".1 Each clause names another section of the dossier. The justification's job is to connect them, and a single M4Q sentence asks for it.8

SectionWhat it says about one limitRecord it comes fromThe test it has to pass
3.2.P.5.1 SpecificationThe test, method and acceptance limit, release and shelf lifeCurrent specification versionQuotes the version in effect
3.2.P.5.4 Batch analysesEach batch's resultCertificates of analysis, batch export from the lab systemResults meet the limit; reported to the specification's decimals; range in text equals the table
3.2.P.8.3 Stability dataResults over time, by conditionStability reportsEvery time point to the proposed shelf life meets the limit
3.2.P.8.1 Stability conclusionThe shelf life and storage claimedStability evaluationClaim does not outrun the data
3.2.P.3 ProcessThe fill target or control behind the attributeBatch formula, process reportsProcess can deliver what the limit demands
3.2.P.5.6 JustificationWhy this limitDevelopment, batches, stability, change controlRests on all of them, quotes the current limit
Module 2.3 SummaryThe same limit, restatedModule 3Same value, and nothing Module 3 lacks8
Laid on a grid, Veltrimab's problems cluster in a few cells, and one is a contradiction

Five of the fictional filing's 14 drug product limits, after the 24-month report. Look marks a cell someone should read.

No checkAgreesLookConflict
BatchesStabilityProcessJustificationSummarypHLookAgreesAgreesLookLookProtein contentAgreesConflictAgreesLookAgreesMonomer purityLookAgreesAgreesAgreesLookHigh-molecular-weight speciesAgreesAgreesNo checkAgreesAgreesPolysorbate 80AgreesAgreesAgreesAgreesAgrees

Fictional example from this guide

Show the numbers
BatchesStabilityProcessJustificationSummary
pHLookAgreesAgreesLookLook
Protein contentAgreesConflictAgreesLookAgrees
Monomer purityLookAgreesAgreesAgreesLook
High-molecular-weight speciesAgreesAgreesNo checkAgreesAgrees
Polysorbate 80AgreesAgreesAgreesAgreesAgrees

The small numeric faults that travel with a pasted paragraph

The cells marked Look show how a number goes wrong in ordinary ways. Here are three of them, in Veltrimab's fictional filing.

WhereWhat it saysWhat the record saysHow it got there
Batch section, monomer purityRanged from 98.6%; the summary repeats itThe table shows 98.3% for batch VLT-DP-26P02A paragraph pasted from the approved Dravenzo filing
Batch section, pH6.15The certificate reports 6.2, to match the specification's decimalsThe raw value from the lab export
Justification, pH limit5.8 to 6.4Changed to 5.9 to 6.3The old limit still quoted after the change

None of these is a scientific failure, and each one invites a reader to wonder what else slipped.

06 · Release and shelf-life limits

Release and shelf-life specifications: what ICH Q6B allows, and where the US and EU part ways

In shortA product can carry a tighter limit at release than at the end of shelf life, if justified. The EU registers both where they differ. Q6A says Japan and the United States treat the tighter limit as in-house for chemical drugs, and Q6B says "in some regions" for biologics. Work out the drift before you narrow anything.

A batch is released at some value inside its range, and then the value moves for as long as the product sits in storage. Release limits exist because of that drift. Q6B's whole text on the subject fits in one short paragraph: "The concept of release limits vs. shelf-life limits may be applied where justified." It adds, "In some regions, the concept of release limits may only be applicable to in-house limits and not to the regulatory shelf-life limits."1

Q6A, the sister guideline for chemical drugs, is more direct. "In Japan and the United States, this concept may only be applicable to in-house criteria, and not to the regulatory release criteria. Thus, in these regions, the regulatory acceptance criteria are the same from release throughout shelf-life." And, "In the European Union there is a regulatory requirement for distinct specifications for release and for shelf-life where different."6 The draft M4Q(R2) asks every applicant to state criteria "for both release and shelf life".4

Check this before you plan on two registered limits in the US. Q6A's sentence is about chemical drugs. Q6B does not name a region. If you want different registered limits on a biologics license application, ask FDA, in a meeting or as a review question, and keep the fallback ready: one registered range from release through shelf life, plus a tighter in-house release limit.

Veltrimab's protein content, worked month by month

Two registration batches cross the new 95.0% line between 12 and 18 months

Protein content, % of label claim, at 5 °C. The third batch started at 100.4% and stays above 99%.

VLT-DP-24S01VLT-DP-24S02Version 4 lower limit
93%94%95%96%97%
0369121824

Fictional example from this guide

Show the numbers
MonthVLT-DP-24S01VLT-DP-24S02Version 4 lower limit
096.2%95.9%95%
396%95.8%95%
695.8%95.6%95%
995.6%95.4%95%
1295.3%95.1%95%
1894.6%94.6%95%
2494.3%94.2%95%

Do the arithmetic in the open. Batch 24S01 lost 1.9 points in 24 months, about 0.08 a month. Batch 24S02 lost 1.7, about 0.07. The third batch lost 1.2 in 18 months, also about 0.07. The example's stability report rounds this to "about 0.1% per month".

The two low batches started at 96% because they were formulated at 144 mg/mL, before the fill target rose to 150 mg/mL. They were legitimately low, and under the older limit of 93.0 to 107.0% they passed. They are also primary stability batches, the ones a reviewer weighs most. Q6A says of setting specifications that results from "stability and scale-up / validation batches, with emphasis on the primary stability batches, should be considered".6

Now the test that tells you whether a limit pair works. Take a future batch released exactly at the release limit, 95.0%, and apply the faster drift: 95.0 minus 1.9 is 93.1% at 24 months. Against a 93.0% shelf-life limit that leaves 0.1 of a point, before any variation in the method.

A straight-line sum like this is no statistical evaluation, but it tells you where to look. ICH Q1E, the guideline on extrapolating stability results, asks the same question of a shelf life: it should hold for "a future batch released with test results close to the release acceptance criteria".20 Q1E's stated scope is new molecular entities, meaning active ingredients not approved before, so read that as a sensible test here, and see the next section for what governs a biologic.

RouteRelease limitShelf-life limitShelf lifeSections that changeWhat to weigh
Two limits95.0 to 105.0%93.0 to 107.0%24 monthsP.5.1, P.5.6, P.8.1, Module 2.3Regional acceptance; the 0.1-point margin above
One registered range, tighter in-houseIn-house 95.0 to 105.0%93.0 to 107.0% from release on24 monthsThe same fourThe tighter control is yours to keep, and outside the license
Shorter shelf life95.0 to 105.0%95.0 to 105.0%12 monthsP.8.1, Module 2.3Supply, wastage, and every result to 12 months passes

The example's numbers. Each route is a decision for the regulatory CMC lead and the specification owner, recorded in change control. Your own data and region decide among them.

07 · Stability for a biologic

Stability data for a biologic's shelf life: Q5C, real-time results and what 3.2.P.8 must show

In shortFor a biologic, the shelf life rests on long-term, real-time data at the storage condition. ICH Q5C asks for at least three batches and at least six months of data when more than six months' storage is requested. New time points keep arriving during writing and review, and each one can change an answer in five sections.

Q5C has governed biologics' stability since November 30, 1995: "Primary data to support a requested storage period for either drug substance or drug product should be based on long-term, real-time, real-condition stability studies." It adds that "Product expiration dating will be based upon the actual data submitted in support of the application."21

Q1E is often cited in the same breath, but its stated scope is "new molecular entities and associated drug products".20 On a biologic, cite Q5C first and check whether Q1E's reasoning is one your assessors will accept. The consolidated Q1 draft is meant to bring these texts under one roof; its final words are not out.16

A two-year shelf life means seven data points, and new reports during the writing

Q5C's suggested intervals for a shelf life over one year, with the example's reports beside them

  1. 0 to 12 monthsEvery 3 months in year one

    Month 0, 3, 6, 9 and 12. STB-DP-028 reports the fictional filing's 12-month results.

  2. 18 monthsEvery 6 months in year two

    STB-DP-031 reports it, released October 5, 2026, three weeks before content lock.

  3. 24 monthsYear two ends

    Same report for two batches; the third batch's 24-month pull is still due.

Source 21 · The report names and dates are the guide's fictional example.

Show the numbers
WhenWhat
0 to 12 monthsEvery 3 months in year one
18 monthsEvery 6 months in year two
24 monthsYear two ends
36 monthsAnnually after that

What the 3.2.P.8 sections have to agree on

Three headings hold the stability story. 3.2.P.8.1 states the summary and the conclusion: storage conditions and shelf life. 3.2.P.8.2 is the commitment to keep testing after approval. 3.2.P.8.3 holds the data. Q5C asks for stability information "on at least 3 batches of final container product", and, where possible, from different batches of bulk material.21 A batch made at a smaller scale or an older fill target may belong in the set, so long as the section says so plainly and the justification deals with it.

The hard part of this work is timing. Studies run in parallel with the writing, so the last time point often lands after the specification has been argued. A lead who wants to know whether last week's report touches this week's limit has two options: read it against every limit, or ask a person who has already done that. Most teams do the second, and that person is rarely writing the section that needs the answer.

3 batches

of final container product, at least, for a biologic's stability information.21

ICH Q5C, 1995
6 months

of data, at least, at submission when more than six months' storage is requested.21

ICH Q5C, 1995
0.5 to 5 years

Q5C's expected range of biologics' shelf lives, with few exceptions.21

ICH Q5C, 1995
08 · Process ranges

Proven acceptable range vs normal operating range: how a PPQ batch ends up outside its own process

In shortA proven acceptable range is what studies showed still makes good product. A normal operating range is where the plant aims to run. ICH defines the first and not the second. State which is which every time, or a good validation batch can read as a failure.

ICH Q8(R2) defines a proven acceptable range: "A characterised range of a process parameter for which operation within this range, while keeping other parameters constant, will result in producing a material meeting relevant quality criteria." It also warns, "A combination of proven acceptable ranges does not constitute a design space."22

Normal operating range is an industry term; a word search finds no definition in Q8(R2) or in the draft M4Q(R2) glossary.22,4 The draft does ask 3.2.DS.M.1 for "critical and other process parameters, and IPCs along with their control ranges/acceptance criteria"; IPCs are in-process controls.4 That is what you should spell out.

One purification setting that reads as a failed batch, in numbers

3.2.S.2.2 · Process description
Load conductivity
6.0 to 8.0 mS/cm
Which range
Not stated
3.2.S.2.4 · Controls, and 3.2.S.2.5 · PPQ
Controls say
5.0 to 8.0 mS/cm
PPQ 2 ran at
5.6 mS/cm

Load conductivity is one setting on a purification step. In this fictional filing it appears three ways, and all three statements are true. The development report, PCR-0412 Table 7-2, sets a normal operating range of 6.0 to 8.0 and a proven acceptable range of 5.0 to 8.0. The second qualification batch, VLT-DS-25012, ran at 5.6 and met every quality criterion.

Read as written, though, the dossier says a validation batch ran outside its process description. The repair takes one sentence naming both ranges in 3.2.S.2.2, and a lead has to spot the need for it.

PPQ 2's 5.6 mS/cm sits below the operating range and inside the proven one

The three qualification batches' load conductivity, in mS/cm. Operating range 6.0 to 8.0; proven acceptable range 5.0 to 8.0.

VLT-DS-25011, PPQ 17.1 mS/cm
VLT-DS-25012, PPQ 2below 6.05.6 mS/cm
VLT-DS-25013, PPQ 37.4 mS/cm

Fictional example from this guide

Show the numbers
ItemValue
VLT-DS-25011, PPQ 17.1 mS/cm
VLT-DS-25012, PPQ 25.6 mS/cm
VLT-DS-25013, PPQ 37.4 mS/cm

The same filing shows the fault in a smaller way: a hold time reads one range in 3.2.S.2.2 and a wider one in 3.2.S.2.4.

Q11 notes that with a traditional approach "set points and operating ranges are typically set narrowly based on the observed data". Either way, the ranges in the file are claims, and ICH Q12 can make them binding: established conditions are "legally binding information", and "any change to ECs necessitates a submission".23,24 A range you state loosely today can become a filing you owe later.

09 · How Module 3 goes wrong

How a CMC dossier ends up contradicting itself, and why section-by-section review misses it

In shortSingle-section review is good at values and poor at agreement. The errors that survive are the ones that live between two documents: a stale limit, an unlabeled range, a shelf life nobody re-tested. No regulator publishes a count of these, so the table below is a judgment from the texts and the example.

ErrorHow it happensAn exampleWhat it risks
Stale limitA specification changes; other sections keep quoting the old onepH 5.8 to 6.4 still in 3.2.P.5.6 and 2.3 after version 4A question, and doubt over which limit you propose
Data fails its own limitA new limit or a new time point; nobody re-reads the other94.6% at 18 months against 95.0%A deficiency on shelf life or limit
Unlabeled rangeTwo authors, two reports6.0 to 8.0 and 5.0 to 8.0A batch reads as out of process
Pasted numberText reused from an earlier product98.6% from the Dravenzo filingCredibility; repeated in 2.3
Raw value or superseded sourceLab export used where the certificate governs; a certificate reissued6.15 for 6.2; revision 1 for revision 2Value cannot be traced to a controlled record
A justification without its evidenceThe argument is written from the set of data on handProtein content justified from release results onlyQ6B expects stability and lots used in studies
Agreement errors slip past the reviews organized one section at a time

Our judgment, from the guidelines and the example. Test it on your own findings log.

Rarely caughtSometimesUsually caught
Author self-checkSection technical reviewReading Module 2.3 lastCheck across sectionsPasted numberSometimesUsually caughtSometimesUsually caughtRaw valueSometimesUsually caughtRarely caughtUsually caughtStale limitRarely caughtSometimesSometimesUsually caughtData fails its limitRarely caughtSometimesRarely caughtUsually caughtUnlabeled rangeRarely caughtSometimesRarely caughtUsually caughtJustification lacks evidenceSometimesSometimesRarely caughtSometimes

Our reading of the sources 8,1

Show the numbers
Author self-checkSection technical reviewReading Module 2.3 lastCheck across sections
Pasted numberSometimesUsually caughtSometimesUsually caught
Raw valueSometimesUsually caughtRarely caughtUsually caught
Stale limitRarely caughtSometimesSometimesUsually caught
Data fails its limitRarely caughtSometimesRarely caughtUsually caught
Unlabeled rangeRarely caughtSometimesRarely caughtUsually caught
Justification lacks evidenceSometimesSometimesRarely caughtSometimes

The last row stays at Sometimes even with a cross-check. A check can see that the justification cites release data only. Whether the argument is any good takes a scientist.

Why reading harder does not fix it

A person can only hold a certain number of sections in mind, and a dossier arrives in reading order, one document at a time. A reviewer who has just read 3.2.P.5.1 reads it again next to 3.2.P.5.6 only if something prompts them. When a change control lands three weeks before content lock, its reviewers tend to look at the change. Fixing this takes a named place where cross-section agreement lives, and an owner for it.

10 · What FDA's letters show

CMC complete response letters: what FDA's published letters say, counted by heading

In shortFDA's published letters back up "three in four" for quality or manufacturing, and by our count run higher: 83% of 203 letters from 2020 to 2024. Split apart, 53% carry product quality, 60% a facility finding, and only 23% product quality with no facility finding. Writing software can help with product quality and does nothing for a plant's inspection. Inside product quality sections, stability and specifications come up most.

A complete response letter is how FDA ends a review cycle without approving. In July 2025 FDA began publishing past letters. Pharma Manufacturing reported that, of 202 letters from 2020 to 2024 tied to approved applications, "150 (74%) involved quality/manufacturing issues", counting manufacturing processes, facility inspections and CMC.2 The article gives no split and no method. The figure lumps together two different problems, so we counted them apart.

Our count uses FDA's own dataset, as exported November 2, 2026. For 2020 to 2024 it holds 204 rows typed as complete responses, one listed twice, so 203 letters, for approved and unapproved applications alike. That is a different set from the article's. Of those, 168, or 83%, carry a product quality finding, a facility finding, or both. On approved applications alone it is 121 of 147 (82%).3 The method and its limits are printed below.

Five in six letters name product quality or a plant, and plants come up a little more

203 FDA complete response letters, 2020 to 2024, by finding. Our count.

NeitherFacility onlyProduct quality onlyBoth
2020 to 202435614661

Our reading of the sources 3 · Our count from FDA's scanned text, by heading plus a hand read. Approved and unapproved applications, and not every letter FDA has issued.

Show the numbers
LettersNeitherFacility onlyProduct quality onlyBoth
2020 to 202435614661
Fewer than a quarter of the letters are product quality with no plant finding
23 in 100

46 of 203 complete response letters from 2020 to 2024 carry a product quality finding and no facility finding, by our count

Our reading of the sources 3

Show the numbers
MeasureValue
46 of 203 complete response letters from 2020 to 2024 carry a product quality finding and no facility finding, by our count23 of 100

FDA's own presenters said the same in August 2024, after surveying over 100 complete responses to biologics license applications (BLAs): "Facility deficiencies are the most common reason for CR, however most CR letters with product quality content have multiple deficiencies." They added that issues "vary from application to application and often include specifications, methods, stability, and cell banking".29

They cautioned that their figures "should not be considered final or official data". About 80% of the responses they surveyed came in the first review cycle, and they reported that BLAs "were CR'ed nearly half the time in 2023".29 Contract manufacturing sites accounted for about half of the letters they reviewed, which is one more reason a facility finding can land on an application whose text was fine.30

Inside product quality sections, stability is the word that recurs most

How many of 125 readable product quality sections, 2009 to 2026, use each term. Our word search; a section can use several.

Stability72 sections
Specification60 sections
Batch56 sections
Analytical method47 sections
Acceptance criteria42 sections
Container closure or device37 sections
Expiry or shelf life36 sections
Extractables, leachables29 sections
Impurity28 sections
Control strategy19 sections
Microbiology or sterility18 sections
Process validation17 sections

Our reading of the sources 3 · A section runs from its heading to the next heading, with page headers removed; readable means at least 200 letters of text remain. FDA redacts much of this text as confidential, so these counts mark where words survive redaction. A word's presence does not make it the deficiency, and we did not code each letter by cause.

Show the numbers
ItemValue
Stability72 sections
Specification60 sections
Batch56 sections
Analytical method47 sections
Acceptance criteria42 sections
Container closure or device37 sections
Expiry or shelf life36 sections
Extractables, leachables29 sections
Impurity28 sections
Control strategy19 sections
Microbiology or sterility18 sections
Process validation17 sections

How we counted FDA's letters, and what the count can and cannot tell you

Our count · the method

Headings. A letter counts as product quality if a line of its own reads Product Quality or Drug Product Quality, in any capitals, or Chemistry, Manufacturing, and Controls, the wording of FDA's biologics center. It counts as facility if a line reads Facility, Facilities or Facility Inspection. Seven letters whose combined Product Quality and Facility heading covers only a plant count as facility. That finds 161 of the 203.

By hand. We read the quality and facility passages of the other 42. Seven state such a finding without a heading, and we added them. We left out five where a nonclinical or device section touches a specification, leachables or a device's design. We also read 34 sampled heading matches: all were real headings, and two sat over plant findings, which is why combined headings are split out.

Limits. The text is FDA's scanned copy, so misreads happen, and the count could move by a few letters. In 46 of the 103 product quality sections found by heading nearly everything is redacted, so the heading is all we can see. A heading says a finding exists, and says nothing of its weight.

The dataset is what FDA has published, which is not every letter issued. Searching for the two headings in capital letters alone gives 149 of 204 (73%): close to the published 74%, by chance, because it misses the wordings above.

The count shows where quality problems appear in FDA's published letters. It does not show how many arose from a contradiction between sections, because no such field exists. Many product quality deficiencies are about the science itself: a method that cannot measure what it must, a test missing from the specification, data that were never generated. Better drafting fixes none of those.

A fair reading: stability and specifications are regular subjects of these letters, and a dossier's internal agreement is the part of that risk fully inside the writing team's control.

First-cycle rates rise and fall, and FDA has not assigned a cause

FDA's first-cycle complete response rate fell, rose and fell again

NDA and BLA applications received, CDER, selected fiscal-year cohorts. Refused applications excluded.

47%FY2008
22%FY2018
37%FY2020
27%FY2024

Source 31 · FDA gives FY2024 as approximately 27% in two passages and 28% in one. Average across FY2008 to FY2024: 33.7%. FDA reads the long run as a decline and FY2018 to FY2020 as a temporary rise, and says further analysis may be needed to identify root causes.

Show the numbers
CohortValue
FY200847%
FY201822%
FY202037%
FY202427%
Europe has less to count. The EU does not publish letters like these. The clearest number we found is old: at an EMA workshop on April 16, 2015, a presenter from the Biologics Working Party said that "51% of the Major Objections on MAA for biologics were on Quality" (an MAA is the EU's marketing authorization application). The same slide puts about 46% of major objections from 2011 to 2013 on quality documentation, for applications from small and medium-sized companies, and does not say whether the 51% has that same limit.32 We found no current public figure.
11 · What a second cycle adds

What a CMC deficiency adds to the FDA review clock and to a launch date

In shortFDA's goal for a standard new molecular entity application or original BLA is 10 months from the 60-day filing date. A major resubmission adds a six-month goal, on top of however long you need to fix the problem. Published estimates, averages built for delays during clinical trials, put a day at about $500,000 to $800,000 in lost sales.

A second review cycle adds at least six months after your fix is ready

FDA's goal dates under PDUFA VII for a standard original BLA or new molecular entity NDA, in months from submission. The fix time is yours.

FDA's goalsYour work
Filing, 60 days
Review, 10-month goal
Respond to the letter, an assumed six months
Class 2 resubmission, 6-month goal
SubmitGoal dateResubmitGoal date

Our reading of the sources 33 · Goals apply to 90% of applications. The six months of response work is an assumption; replace it with yours.

Show the numbers
ActivityFromTo
Filing, 60 days02
Review, 10-month goal212
Respond to the letter, an assumed six months1218
Class 2 resubmission, 6-month goal1824

FDA's PDUFA VII goal letter, the commitments under the current prescription drug user-fee program, sets 10 months from the 60-day filing date for standard new molecular entity applications and original BLAs, and 6 months for priority.33 A Class 2 resubmission, the kind a substantive deficiency usually leads to, carries a six-month goal from receipt.33 Separately, an application can be refused at the door: CDER's manual, revised in October 2025, sets out the internal lists reviewers use.26 The FY2027 application fee with clinical data is $4,600,753.34

6 months

FDA's goal for a Class 2 resubmission, after your response, before any launch.33

PDUFA VII, FY2023 to FY2027
$500K to $800K

a day in lost sales, in two published figures from one 645-drug dataset. Both add about $40,000 a day in direct Phase II and III trial cost.35,36

Tufts CSDD, 2024. About trial delay; averages, and sales rather than profit
$4.6 million

FY2027 FDA application fee with clinical data.34

FR Doc. 2026-15334

Use those day figures carefully. They average across many drugs, measure sales, and were built for delays during trials. A small company's first product and a blockbuster's supplement live on different scales. Their value here is to set the order of magnitude: the money in a CMC deficiency sits in time, far more than in writer hours.

How many filings need a quality module, and what has no public figure

CDER approved 46 novel drugs in 2025.37 Every one had a quality module, and so do biosimilars, generics, and post-approval supplements that carry parts of one. We found no public market size with a dataset behind it, and no public count of Module 3 sections written per year. A vendor infographic puts one module at 100 to 200 full-time-equivalent weeks and over 1,000 figures and tables, with one to four weeks a section.10 Treat that as a vendor's framing, and measure your last filing.

12 · Templates, structure, data

When a limit narrows three weeks before lock: what Word templates, structured content authoring and PQ/CMC each do

In shortTemplates control layout. Structured content reuses a piece written once. Structured data, FDA's PQ/CMC work, aims to send values to the agency directly and has no acceptance date. Test each by asking what happens when a limit narrows three weeks before content lock.

ApproachWhat it isOn the day a limit narrowsWhere it falls short
Word template and prior filingCopy the closest approved file; retype numbersSomeone remembers where it is used, or a search finds itEverything depends on a person's memory
Structured content authoringComponents written once, reused by referenceThe quoted value changes everywhere it is reusedA clean update can still leave stability data failing the new limit; content needs setting up, and old filings have to be converted
Data-linked tablesTables filled from lab and stability systemsTables refresh; prose may notProse claims and arguments sit outside the link
Checks across sectionsEvery limit tested against the data that must carry itReports what no longer agrees, with both sourcesReports a contradiction; a person still has to resolve it
Structured submission (PQ/CMC)Values sent in a defined formatNo route yet at FDAPhase 1 data elements cover only parts of Module 3; no acceptance announcement28,38
Reuse and checking are separate jobs: a tool can do one without the other

Our placement of the approaches, from what each is built to do

How much it tests values against data →
Testing only
Both
Neither
Reuse only
Word templateStructured contentData-linked tablesCross-checksChecks plus reuse
How much it keeps values in step →

Our reading of the sources 4,28

Show the numbers
ItemHow much it keeps values in step (0–1)How much it tests values against data (0–1)
Word template0.140.10
Structured content0.750.20
Data-linked tables0.750.32
Cross-checks0.140.75
Checks plus reuse0.750.62

Reuse handles a change you know about. It carries the new number to every section, including one that now contradicts the stability table next door. Telling you that the update created a problem is a different job, done by a check. Most mature teams will want both, and M4Q(R2) pushes in that direction by asking for a format "with sufficient granularity to facilitate digitalisation".4

FDA's CMC readiness pilot stops taking applications in April 2027

FDA's CMC Development and Readiness Pilot (CDRP), announced for its fifth year on September 21, 2026, offers selected sponsors on expedited programs two extra CMC meetings. The notice is plain that such applications "still need to meet FDA's approval standards".39

FDA's strategy document of July 23, 2026 says the pilot stops taking new applications at the end of April 2027, that it accepted 10 products out of a possible 27 in its first three years, and that FDA sees no need at this time for new or revised internal procedures. CMC-focused meetings stay available, including for products with breakthrough, fast track or regenerative medicine designations.40 If your program is expedited, see whether the pilot still suits you: requests opened October 1, 2026, and that door closes in April 2027.

13 · AI in regulatory CMC

AI in CMC authoring: where FDA's draft, EMA's paper and draft Annex 22 draw the line on Module 3

In shortWe found no rule that forbids drafting with AI, and none that certifies it. FDA's draft guidance leaves drafting outside its scope only where drug quality and reliability are unaffected. EMA asks for close human supervision of generated text in a related setting. People remain answerable for every statement. Test accuracy on your own files, because no independent benchmark exists.

SourceWhat it saysStatusWhat it means here
FDA draft on AI for regulatory decisionsDoes not address AI "when used for operational efficiencies (e.g., internal workflows, resource allocation, drafting/writing a regulatory submission) that do not impact patient safety, drug quality, or the reliability of results from a nonclinical or clinical study"41Draft, January 2025; no final foundThe limit is the last clause. A tool that proposes a limit or a shelf life is on the wrong side of it. Ask FDA early if unsure
EMA reflection paperLarge language models "are prone to include plausible but erroneous or incomplete output"; product information documents need "close human supervision"42Adopted September 9, 2024That section is about product information. Applying it to Module 3 is our reading
FDA and EMA principlesTen shared principles of good AI practice43January 14, 2026; no binding forceDirection of travel
Draft EU GMP Annex 22Generative AI and large language models "should not be used in critical GMP applications"; in non-critical uses, those "which do not have direct impact on patient safety, product quality or data integrity", qualified people answer for outputs44Draft; consultation ended October 7, 2025. Not listed in EudraLex Volume 4 on November 3, 202645. EMA's report of a June 30, 2026 workshop says "there may be viable pathways"; no revised text46Annex 22 is a GMP text about manufacturing. A dossier-writing tool does not obviously fall under it, but a tool that feeds batch or release decisions could. Classify your use and write down why
EU AI ActHigh-risk duties moved by Regulation (EU) 2026/174447In force July 27, 2026; Annex III December 2, 2027; Annex I August 2, 2028Check with counsel; drafting support is unlikely to be the first concern
21 CFR Part 11, EU Annex 11Audit trails that do not obscure earlier entries; signatures with name, date, time and meaning, linked to the record48In force. Annex 11 revision is a draft45No tool is "Part 11 compliant" by itself. Software offers controls that support your compliance; you validate its use
FDA warning letter 722591"If you use AI as an aid in document creation, you must review the AI generated documents"49April 2, 2026; one firm, with other findingsA manufacturing letter to one firm, and no general policy

FDA's Computer Software Assurance guidance, final in February 2026, covers computers and automated data processing systems in medical device production and quality systems.50 It does not govern a drug dossier. CDER's guidance agenda, July 2026 posting, lists a planned supplement on software assurance for AI-based systems in drug manufacturing and clinical investigations; an agenda binds no one, and we found none issued as of November 3, 2026.51 ISPE's GAMP guide on AI (July 2025) covers AI-enabled computerized systems in GxP areas.52

Automate the reading and checking first; keep the choices with people

Our placement of Module 3 tasks by how often they repeat and how much judgment they take

How much judgment it takes →
People decide
Tools prepare, people sign
Leave alone
Automate, check
Setting a limitSigning a sectionChoosing a shelf lifeDraftingLimit testsNumber checksExtracting values
How much the task repeats →

Our reading of the sources 41,42

Show the numbers
ItemHow much the task repeats (0–1)How much judgment it takes (0–1)
Setting a limit0.120.80
Signing a section0.750.70
Choosing a shelf life0.120.60
Drafting0.750.54
Limit tests0.750.30
Number checks0.750.20
Extracting values0.750.10

What the published accuracy claims are worth

One trade article reports a six-month vendor pilot: a "60% faster draft turnaround" and "80-95% alignment with previously approved submissions".53 It gives no method and no independent evaluator. Alignment with an earlier filing is also a strange measure for a new product, because a paragraph can match an approved text perfectly and be wrong: Veltrimab's 98.6% was exactly that.

We found no independent test of any Module 3 tool's accuracy as of November 2026. The useful test is one you run yourself, with planted faults on a closed filing. Part C sets one out.

14 · How teams do it today

Regulatory CMC writing today: six desks, five steps and where a section's hours go

In shortA regulatory CMC lead coordinates writers, scientists and quality across dozens of sections. The time goes to finding, retyping and re-reading, and those are the hours teams rarely measure. Nobody's job title covers agreement between sections.

The desks a Module 3 section crosses

RL

Regulatory CMC lead

Owns the strategy, decides what to do about conflicts, signs each section as regulatory approver.

CW

CMC regulatory writer

Writes and edits sections, keeps the templates, reconciles comments.

AD

Analytical development lead

Owns methods and the specification. Technical reviewer for S.4 and P.5.

PD

Process development lead

Owns process descriptions, ranges and PPQ reports. Technical reviewer for S.2 and P.3.

ST

Stability lead

Runs the studies, issues reports, proposes the shelf life. Technical reviewer for S.7 and P.8.

QA

Quality assurance

Approves change controls and reads the record of who decided what.

A section passes through five steps, and none of them covers the other sections
  1. 1Sources gathered

    Find the current report, certificate and version.

    WriterHours to days
  2. 2Drafted

    Copy the closest approved section; retype the values.

    WriterHours to days
  3. 3Technically reviewed

    Check the science, and the numbers against the source.

    Scientist1 to 3 rounds
  4. 4Updated

    Change controls and new reports arrive; edits follow.

    Writer and scientistRepeats
  5. 5Approved and published

    Regulatory sign-off, then Module 2.3 and the eCTD build.

    Lead, operationsBefore lock

Illustrative · replace with your own numbers · A typical pattern, with no published timings. Replace it with your own.

Show the numbers
StepWhat happensWhoTime
Sources gatheredFind the current report, certificate and version.WriterHours to days
DraftedCopy the closest approved section; retype the values.WriterHours to days
Technically reviewedCheck the science, and the numbers against the source.Scientist1 to 3 rounds
UpdatedChange controls and new reports arrive; edits follow.Writer and scientistRepeats
Approved and publishedRegulatory sign-off, then Module 2.3 and the eCTD build.Lead, operationsBefore lock
Finding and retyping can take almost half of a section's hours by hand

One estimate for one section, 13.5 hours in all. Replace it with your own by timing five sections.

Finding the sourceRetyping valuesWriting the textChecking numbersRe-reading other sections
One section by hand2 h4 h3 h2.5 h2 h

Illustrative · replace with your own numbers

Show the numbers
Finding the sourceRetyping valuesWriting the textChecking numbersRe-reading other sections
One section by hand2 h4 h3 h2.5 h2 h

An estimate with no published study behind it. We found no public figure for hours per section.

Three ways companies staff CMC writing, and what to watch in each

WayFitsWatch for
In-house teamCompanies with several filings a year and strong development recordsPeaks around filings; knowledge held by a few people
Outsourced writers or a contract organizationFirst filings; small biotechsAccess to source records; the sponsor still signs; a partner's template becomes your baseline
Software on top of eitherTeams with controlled sources and repeated formatsSet-up effort, validation of intended use, whether the product checks or only drafts
Part B · See it working

Botminds CMC Module 3 Authoring on one stability report at a fictional antibody maker

Part A described the work without naming a product. This part shows how Botminds does it, for Northwind Bio, a fictional company filing a fictional antibody. Every company, person, batch, record and number in these screens is sample data. Rules are real and quoted in Part A.

15 · One stability report, start to finish

The 24-month report that turned a protein limit red, and four sections updated before lock

In shortThis is the example from the top of the page, inside the product. A new report arrives. The Consistency checker re-tests every limit and finds two contradictions. Dr. Maya Chen picks an option, the specification owner and quality approve it through change control, and four sections change as tracked edits.

1

The grid says it is out of date

It is October 7. Dr. Maya Chen opens the Module 3 cross-check for the Veltrimab BLA: 33 rows, 13 drug substance limits, 14 drug product limits and 6 critical process parameters (settings that can affect quality), against the sections each one must agree with. Last night's run reads 136 checks, 127 consistent, 8 to look at, 1 contradiction.

A banner says stability report STB-DP-031, released October 5, adds the 18- and 24-month results, and that the grid still shows 12-month data.

The new report, flagged. Nothing has been re-run yet. The banner names the report and what it adds.
2

Protein content turns red

Maya re-runs it. Now 125 are consistent, 9 to look at, and 2 contradict. Specification version 4, effective September 29, sets protein content at 95.0 to 105.0% of label claim at release and throughout shelf life. Batches VLT-DP-24S01 and 24S02 read 94.6% at 18 months. Section 3.2.P.8.1 proposes 24 months, and 3.2.P.5.6 justifies the limit from release data only.

Each result met the version 3 limit when it was tested.

Two options, and neither is chosen for her. The checker proposes; the lead decides. The option text cites ICH Q6B. Q6B also says that in some regions release limits may be in-house only, so on a US filing the lead would confirm this with FDA (section 6).
3

Both sources, side by side

She clicks the red cell. The panel draws the three batches against the limit and cites both documents at their pages: STB-DP-031 page 14 and specification SPC-VLT-DP-004 version 4. The batch analyses still pass, the process explains why these two batches start low (they were formulated at 144 mg/mL before the fill target rose), and the justification is amber.

The evidence pane. The stability cell, with the trend drawn against the version 4 limit and both sources one click away.
4

Option A goes to the people who can approve it

Maya chooses option A: release 95.0 to 105.0%, shelf life 93.0 to 107.0%, which is the version 3 range, keeping 24 months. She sends it to Sam Patel, the specification owner, and Dana Okafor in quality assurance, as an amendment to change control CC-2026-118. Nothing in the dossier changes yet.

The request. Her note travels with it. The sample's "about 0.1% per month" rounds what is closer to 0.08 (section 6).
5

Approved, and four sections change

Sam and Dana approve amendment 1. Specification version 5 is drafted, and the Change tracker drafts updates to 3.2.P.5.1, 3.2.P.5.6, 3.2.P.8.1 and Module 2.3 as tracked changes, each of which goes through the number check again. The row reads consistent, and the grid reads 127, 8 and 1.

The remaining contradiction is the process parameter below.

Resolved, option A. The chart redraws against the shelf-life limits. The tally is back to 127 consistent, 8 to look at, 1 contradiction.

Select any screen to open it larger. These are sample data. A real decision between these options needs your own statistics, your region's position, and your specification owner.

16 · Every other screen

How each Module 3 screen ties a number to its page and a decision to a person

In shortThe second contradiction, a section's number check, the data behind the cells, the status of every section and the settings. Each screen ties a number to a page and a decision to a person.

The second red row: a PPQ batch outside its own description

Anion-exchange load conductivity, the example from section 8. 3.2.S.2.2 says 6.0 to 8.0 mS/cm, 3.2.S.2.4 says 5.0 to 8.0, and PPQ 2 ran at 5.6. The proposed fix states both ranges in 3.2.S.2.2. Omar Haddad, the process development lead, reviews it.

Five sources, one parameter. Process description, controls, PPQ batches, development report and summary, compared cell by cell. A fix is drafted for a person to review. The sample's other process settings are taken off this screen, since the point here is whether sections agree.
The source, at its page. One click opens PPQ-VLT-DS-01 at page 22 with the passage highlighted: 7.1, 5.6 and 7.4 mS/cm.

What the grid leaves when you filter to the findings

The working view. Filtered to the rows that need someone. Most of a dossier agrees, so most of the grid can be hidden.

One batch analyses section and the two numbers its check flags

3.2.P.5.4, batch analyses, by Priya Ranvelle. 94 of 96 numbers match. The check flags the 98.6% pasted from the Dravenzo filing, where the lowest result is 98.3%, and the raw pH of 6.15 where the certificate reports 6.2. A third note says a certificate revision was picked up and no value changed.

A drafted section beside its check and its certificate. Findings on the left, the draft in the middle, the certificate on the right. The fix button is a person's to press, and the section cannot be signed until findings close.
Reuse you can see. 91% of the wording came from the approved Dravenzo section; every change is shown. The 98.6% is how a reused sentence goes wrong.
A signature with a meaning. Bound to a version and written to the audit trail. Technical review comes first; the regulatory lead signs last.

Batch results, specification versions and the stability trend behind each cell

Every result, with a link. Each cell opens its certificate at the page. A raw value replaced by the certified result is marked.
The change, and where it lands. pH and protein content narrowed in version 4. "Where used" lists every section and filing that quotes each limit, and the update arrives as tracked changes for authors to confirm. The sample cites USP chapter 787 for subvisible particles. USP's preview shows a proposal to omit that chapter because the harmonized chapter 788 now covers these products; we read only that preview, found no final decision, and took the sample's 6,000 and 600 per-container limits as matching a vendor's summary of the chapter.54,55
The trend, by batch and condition. Protein content at 5 °C for the three batches. The third batch's 24-month pull is still due.

Where every Module 3 section stands across three filings

Section by section. Three open filings with lock dates. For this BLA, 34 of 45 sections are approved. Sections are colored by state.
Every section, with its people and dates. Across all three filings, with the author, technical reviewer and due date for each.
25 controlled sources. Each with version and status. Superseded documents are kept and never cited.
Your rules. The template, the checks, who decides and who signs are settings.
17 · Who does what, inputs and outputs

What the agents do on a Module 3, what only people decide, and the systems it connects to

In shortSix agents, AI helpers that each do one job, read, extract, draft, check, compare and track. People decide contradictions, apply fixes and sign. Limits change only through change control. Design targets are stated as targets, to measure in your own pilot.

The re-run finds 136 checks: most agree, nine need a look, two contradict
Consistent: 125To look at: 9Contradict: 2
136checks
  • Consistent125
  • To look at9
  • Contradict2

Fictional example from this guide

Show the numbers
PartValue
Consistent125
To look at9
Contradict2

Source reader

Maps each report, certificate, specification and prior filing to its CTD sections, with version and supersession.

Limits Indexes approved documents only. Keeps superseded versions and never cites them.

Data extractor

Extracts batch results, limits and stability results, each with its page and confidence.

Limits Stores the reported result, never only the raw value. Every value keeps document, version and page.

Section drafter

Drafts each section in your house template from the closest approved text, and fills tables from the data.

Limits No number without a source. Marks what it wrote. Claims no shelf life the data do not support.

Number checker

Checks value, unit, decimals, source version, range against table, and agreement with Module 2.3.

Limits Proposes the fix; a person applies it.

Consistency checker

Builds the grid; tests every limit against batches, stability to the proposed shelf life, process, justification and Module 2.3, and every process parameter across its sections; proposes options.

Limits Never changes a limit, range or shelf life, and never chooses an option.

Change tracker

Finds every place a changed value is used, and drafts the updates as tracked changes.

Limits Publishes nothing until the author confirms.
A changed limit passes through three people before any section moves
  1. 1Consistency checker raises it

    Both sources, two options, no choice made.

    AgentSame morning
  2. 2The lead decides

    Dr. Maya Chen picks an option and writes why.

    Regulatory CMC leadMinutes
  3. 3Change control approves

    The amendment is approved by the specification owner, then quality.

    Sam Patel, Dana OkaforBefore any edit
  4. 4Updates drafted

    Tracked changes in the four sections; number check runs again.

    Change tracker, authorsAfter approval
  5. 5Technical review, then sign

    Each section has its reviewer. The lead signs last, with a meaning.

    Reviewers, leadBefore lock

Fictional example from this guide

Show the numbers
StepWhat happensWhoTime
Consistency checker raises itBoth sources, two options, no choice made.AgentSame morning
The lead decidesDr. Maya Chen picks an option and writes why.Regulatory CMC leadMinutes
Change control approvesThe amendment is approved by the specification owner, then quality.Sam Patel, Dana OkaforBefore any edit
Updates draftedTracked changes in the four sections; number check runs again.Change tracker, authorsAfter approval
Technical review, then signEach section has its reviewer. The lead signs last, with a meaning.Reviewers, leadBefore lock

The people in Northwind's filing, and what each one needs

Fictional, from the sample data
MC

Dr. Maya Chen · regulatory CMC lead

Owns three open filings. Signs every section and decides every contradiction before content lock.

"I can sign a section. What I can't see is whether section 5.1 still agrees with 8.3."
PR

Priya Ranvelle · CMC regulatory writer

Writes and edits three to five sections a week.

"Half my week is retyping certificates."
SP

Sam Patel · analytical development lead

Owns the specification. Technical reviewer for S.4 and P.5.

"Change the limit and nobody tells stability."
OH

Omar Haddad · process development lead

Technical reviewer for S.2 and P.3.

"Normal operating range or proven acceptable range: say which."
DO

Dana Okafor · quality assurance

Approves change controls and reads the audit trail.

"Show me who decided, on what evidence."

From development records to signed sections and a list of what disagrees

From your systems

  • Certificates of analysis and lab system batch exports
  • Specifications and change controls
  • Stability reports
  • Process development, validation and PPQ reports
  • Prior approved filings

From your team

  • The house template
  • Rules for decimals and citations
  • Who reviews, who decides, who signs
Agents read, extract, draft, check and compare Every number to its page, every limit to its sections
The lead decides each contradiction
Change control approves each limit

Outputs

  • Draft sections in your template, every number linked
  • The cross-check: every limit and parameter against five sections
  • Options for each contradiction, with both sources
  • Tracked updates wherever a changed value is used
  • Signed sections, with an audit trail and controls that support your Part 11 and Annex 11 compliance

What it is designed to reach

  • 5.8 hours, median, to write a section: design target, against an estimated 13.5 by hand
  • Contradictions left at assembly: 0, design target
  • 136 checks re-run on each new report or specification: on the sample filing
The largest hours saved are in retyping, and the least in re-reading other sections

One section, by task. An estimate by hand, against a design target with agents. Measure both in a pilot.

By hand (estimate)With agents (design target)
Finding the source2 h0.5 h
Retyping values4 h0.5 h
Writing the text3 h2 h
Checking numbers2.5 h1.3 h
Re-reading other sections2 h1.5 h

Illustrative · replace with your own numbers · Task split as the product's data gives it. Its with-agents column adds to 5.3 hours, against the stated 5.8-hour design target; both are unmeasured.

Show the numbers
By hand (estimate)With agents (design target)
Finding the source2 h0.5 h
Retyping values4 h0.5 h
Writing the text3 h2 h
Checking numbers2.5 h1.3 h
Re-reading other sections2 h1.5 h

Records a Module 3 rollout connects to

Document managementControlled reports, specifications, certificates and approved filings
Lab system (LIMS)Batch results, checked against the certificate
Stability systemResults by batch, condition and time point
Quality systemChange controls in, amendments and decisions back
Regulatory information managementFilings and dates; stays the system of record
PublishingApproved sections out to your eCTD build
Identity and accessRoles, separation of duties, electronic signature
Audit exportSources, runs, decisions and signatures on the record

Built for enterprise use: role-based access, maker-checker sign-off, a complete audit trail, integration with the systems above and scale across filings and regions. Botminds holds a SOC 2 Type II audit and manages information security to ISO 27001. It offers controls that support your compliance; GxP, Part 11 and Annex 11 responsibility, and validation of your intended use, stay with you. Source documents stay in your environment and do not train models.

On draft EU GMP Annex 22: agents here read, draft and check text for people to approve, and make no decision on a batch; classify the use yourself and record why.

Part C · Are you ready to automate?

Automating CMC regulatory writing: weigh a late contradiction against a year's hours, then test it

You write or sign Module 3, or you manage the people who do, or you wait on their dates. This part is written for you: what errors and delays cost today, what automation could return, whether your team is ready, and what to ask any vendor, including us.

18 · What errors and delays cost

Hours are the small cost of a Module 3 contradiction; the review cycle is the large one

In shortWriter hours are the visible cost and the small one. A CMC deficiency that costs you a review cycle is the large one. You can measure most of this from your last filing in a week, and you should, because almost nothing here has a published benchmark.

83%

of 203 FDA complete response letters from 2020 to 2024 carry a product quality finding, a facility finding or both. 53% carry product quality, by our count; the method is in section 10.3

openFDA, exported November 2, 2026
27%

FDA's first-cycle complete response rate for the FY2024 cohort of NDA and BLA applications at CDER, given as approximately 27% in two passages and 28% in one.31

FDA CDER, data as of June 1, 2026
6 months

FDA's goal for a Class 2 resubmission, after the time you need to answer.33

PDUFA VII
Lost sales outweigh direct trial cost by more than twelve to one, even on the low estimate

Tufts CSDD's figures for a day of delay in drug development, in dollars

Lost sales, white paper$800K
Lost sales, journal article$500K
Direct trial cost, Phase II and III$40K

Source 35,36 · Same 645-drug dataset. Both figures measure sales rather than profit, on trial delay, averaged across drugs. Your product's figure may be much higher or lower.

Show the numbers
ItemValue
Lost sales, white paper$800K
Lost sales, journal article$500K
Direct trial cost, Phase II and III$40K
What nobody publishes. There is no public figure for hours per Module 3 section, contradictions per dossier, the share of complete responses caused by a writing error, or what automation does to any of them. Vendor numbers come without a dataset. Measure your own.

Six Module 3 costs you can time from your last filing in a week

CostWhere it hidesHow to find your number in a week
Writer hours per sectionFinding versions, retyping tables, chasing a certificateTime five sections of different kinds, by task, with a stopwatch
Reviewer roundsComments on numbers a checker could have caughtPull the comments from your last filing; count how many concern a value or a version
Late changesChange controls and new reports in the last eight weeks before lockList them from the quality system. For each, count sections touched and days to close
Contradictions that shippedCorrected quietly in a later submission or a responseCheck three limits by hand across all sections of a filed dossier
Agency questions on CMCInformation requests, mid-cycle comments, FDA's Day 74 letter on filing review issuesSort every CMC question in your last two filings: could internal agreement have prevented it?
Slipped datesContent lock moved; publishing compressedPlanned against actual dates, with the reason

Four Module 3 costs a spreadsheet leaves out

The lead's attentionHours spent reconciling tables are hours spent away from the conversation with the agency.
Choices made too lateA shelf-life decision found at lock leaves no time for a meeting, a new analysis or a supply plan.
Trust between desks"Change the limit and nobody tells stability" is how a team learns to send fewer changes through the front door.
What the next filing inheritsThe approved text becomes the template, errors and all.
19 · Your return

Your return on faster sections and fewer second cycles: writer hours against one avoided delay

In shortOn hours alone, a filing does not pay for software: you would need about 271 sections a year at these defaults. The case rests on review time, so be honest about how small a chance of a second cycle you can credibly claim to remove, and try it at zero.

Six places a quality module can save hours or review risk

Writing

Hours per section

Sources mapped, values extracted with pages, tables filled, prior wording found.

sections × hours saved × loaded hourly cost
Late change

Rework after a new report

A new stability result or specification version is tested against every section the day it arrives.

late changes × rework hours saved × hourly cost
Review cycle

A lower chance of a quality deficiency

Agreement between sections is the part of the risk you control. Claim a small change, and only after measuring.

filings × points of chance removed × days at stake × value of a day
Questions

Fewer avoidable agency questions

A range labeled and a stale limit fixed before lock mean one fewer question to answer under the clock.

questions avoided × hours per answer × hourly cost
Reuse

Second region and next product

Extracted values and approved wording carry to the next filing with their sources.

measured on the second filing, never assumed on the first
Record

Who decided what

Decisions, sources and signatures in one record, ready for a question or an inspection.

hours to reconstruct a decision, before and after

Your hours and review days on 45 sections, two filings a year

This guide cites no wage survey for this role, so the hourly rate is a loaded cost to replace. Every input marked illustrative is an assumption.

Your filings
Hours per section
Late changes
Review cycle
Your cost
Illustrative yearly value
Writing time today, valued$0
Writing time released, valued$0
Late-change rework avoided, valued$0
Lower chance of a second cycle, valued$0
After your yearly cost$0
Hours released a year0
Sections a year to cover your cost, on writing hours alone0

Formulas, per year:
Writing time today = filings × sections × hours today × hourly cost
Time released = filings × sections × (hours today − hours with automation) × hourly cost
Rework avoided = filings × late changes × rework hours saved × hourly cost
Second cycle = filings × (points ÷ 100) × days × value of a day
After cost = the three values added, less your yearly cost
Hours released = filings × sections × (hours today − hours with automation) + filings × late changes × rework hours saved
Sections to cover your cost = yearly cost ÷ ((hours today − hours with automation) × hourly cost)

The second-cycle line is an expected value, and a real delay is all or nothing. One point means the chance falls by one percentage point. Set the points to 0 to see the case without it. Released hours count as value only if you plan what those people do next. 13.5 hours is an estimate, and 5.8 hours a design target to measure in your pilot.

On hours alone, you need well over 200 sections a year to cover the cost

Sections a year to cover $250,000 of yearly cost, at $120 an hour

Saves 5 hours a section417 sections
Saves 7.7 hours, the design target271 sections
Saves 10 hours a section208 sections

Illustrative · replace with your own numbers

Show the numbers
ItemValue
Saves 5 hours a section417 sections
Saves 7.7 hours, the design target271 sections
Saves 10 hours a section208 sections

At the defaults: two filings a year release 693 writing hours, worth $83,160; rework adds $28,800; the second-cycle line adds $360,000; after $250,000 of cost, $221,960. With the second-cycle line at zero, the same inputs come to minus $138,040. A company with one filing every two years should weigh this hard. A company with many filings, supplements and regions has more sections and more late changes to spread the cost over.

20 · Readiness check

Could your regulatory CMC team run a Module 3 pilot? Score sources, late changes, owners and sign-off

In shortEight questions, scored 0 to 2, and one for reflection. The score points to one of three next steps: build a baseline, run a pilot on a closed filing, or plan a rollout around a live one.

1
Filing volume

How many filings with substantial quality sections does your team write a year, including supplements?

Why it mattersVolume sets how far the hours spread.
A strong answer"Three biologics license applications or EU marketing applications and about 40 supplements, counted from the submission log."
2
Controlled sources

Are certificates, specifications, stability and process reports in one controlled place, with versions?

Why it mattersSoftware that reads uncontrolled files cites uncontrolled files.
A strong answer"All in the document system; superseded versions are marked; drafts are kept separately."
3
Who owns agreement between sections

Is one named person accountable for sections agreeing with each other?

Why it mattersA contradiction needs somebody who can decide.
A strong answer"The regulatory CMC lead decides, the specification owner and QA approve any change to a limit."
4
Late-change routine

When a new stability report or specification version lands near lock, what happens?

Why it mattersThis is where contradictions start.
A strong answer"A list of every section using the value goes out the same day and each owner confirms."
5
House template and approved text

Do you have a current house template and easy access to approved prior filings?

Why it mattersDrafts begin there, and a poor template teaches poor habits.
A strong answer"Version 5, owned by a named writer; approved filings by product and region."
6
Your baseline numbers

Do you know hours per section, comments per section and findings at lock?

Why it mattersWithout a baseline, a pilot proves nothing.
A strong answer"Median 11 hours on ten timed sections, 40% of comments about values."
7
Validation and AI position

Has quality decided how an AI-assisted drafting tool is classified, validated and reviewed?

Why it mattersA tool stalled in qualification saves nothing.
A strong answer"Intended use written, risk assessed, FDA and EU drafts read, no limit or shelf life set by the tool."
8
Sign-off discipline

Are technical review and regulatory approval separate, recorded signatures on each section?

Why it mattersAutomation needs a human decision to attach to.
A strong answer"Yes, with meaning stated, in a system that keeps name, date and time."
9
For reflection: the reviewer's question

If an assessor asked why a limit sits where it does, and you had an hour, could you show every section that quotes it, the batches and stability behind it, and who decided?

0–6

Explore

Bring sources under control, name an owner for agreement between sections, and time five sections. Software would mostly speed up the current confusion.

7–11

Ready to pilot

Pick one closed filing. Plant faults, run the test in section 22, and let the numbers decide.

12–16

Ready to implement

Plan around your next filing, with the cross-check running from the first draft, and keep measuring through lock.

21 · Questions for any vendor

Twelve questions that show whether CMC authoring software catches a stale limit

In shortAsk us too. A vendor that drafts well can still miss the contradiction between two sections. These questions test whether a tool traces each number, finds what a change breaks, and leaves the choices with your people.

A

Does every number trace to its page and current version?

A1

Show a number in a draft and open its source at the page. What happens when the certificate is reissued?

Why it mattersA value without a source and version is one more thing to check.
Strong answer · warning signOpens the page; flags the new revision · "It links to the document."
A2

How do you handle a raw instrument value and the certified, rounded result?

Why it mattersThe dossier reports the controlled result.
Strong answer · warning signFlags the difference and applies your decimal rule · Uses whichever it read first.
A3

What is your measured error rate for extraction from scanned certificates and rotated stability tables, on documents you have not trained on?

Why it mattersClean PDFs flatter every tool.
Strong answer · warning signNumbers by document type, and an offer to run yours · One overall percentage.
B

Does it catch what a new stability report breaks?

B1

Add a stability report whose 18-month result fails a limit. What fires, and how fast, without anyone asking?

Why it mattersThis is the failure the work exists to prevent.
Strong answer · warning signA finding, with both sources, on arrival · "Your writer can ask the assistant."
B2

Does it test each limit to the proposed shelf life, at the stated storage condition, with the release and shelf-life limits kept apart?

Why it mattersComparing only at release misses the drift.
Strong answer · warning signBy batch, condition and time point · Compares a limit to a summary sentence.
B3

Show a range stated two ways. Does it ask which is the operating range and which the proven range?

Why it mattersBoth may be correct; the omission is the problem.
Strong answer · warning signFlags it and cites the development report · Picks one.
C

Who decides, and what is on the record?

C1

Can the tool change a limit, a range or a shelf life on its own?

Why it mattersFDA's draft scope turns on whether quality is affected.
Strong answer · warning signNever; it proposes, and change control approves · "It auto-resolves conflicts."
C2

What stops a section being signed with an open finding, and how is an exception recorded?

Why it mattersA warning people can ignore is no control.
Strong answer · warning signA block, or a reason on the record · A banner.
C3

What controls support our Part 11 and Annex 11 position, and what validation package do you supply?

Why it mattersNo product can be compliant for you. Claims of certification should end the conversation.
Strong answer · warning signNamed controls, audit reports, your validation of intended use · "We are Part 11 certified."
D

Does it fit your data, your templates and M4Q(R2)?

D1

Do our documents leave our environment? Are they used to train a model?

Why it mattersA Module 3 holds your processes and limits.
Strong answer · warning signA written answer by data class · Marketing language.
D2

Can our own template drive every section, and how?

Why it mattersReviewers and publishers expect your house style.
Strong answer · warning signYour template, by version · A vendor format to convert from.
D3

If M4Q(R2) is adopted, how does our content re-map, and what breaks?

Why it mattersStep 4 is planned for June 2027.
Strong answer · warning signValues held apart from section numbers, with a plan · "We will update when it is final."
22 · A pilot plan

A twelve-week Module 3 pilot on a closed filing, with contradictions only you know about

In shortTwelve weeks, on a filing you know is approved. Copy it, plant faults only you know about, feed in the sources, and measure what is caught, what is falsely flagged, and how long a section takes. Add a live section only after that.

A twelve-week pilot ends with a decision on four numbers
Your teamVendor
Time five sections; pick a closed filing
Load sources, template and approved text
Plant 40 faults in a copy, unknown to the vendor
Run drafts and the cross-check
Score findings against the faults
Add a late change; time the rework
Decide on four numbers
Week 04812

Illustrative · replace with your own numbers

Show the numbers
ActivityFromTo
Time five sections; pick a closed filing02
Load sources, template and approved text14
Plant 40 faults in a copy, unknown to the vendor24
Run drafts and the cross-check47
Score findings against the faults69
Add a late change; time the rework810
Decide on four numbers1012

Planted faults, false alarms and hours per Module 3 section

MeasureHowWhy
Planted faults caughtStale limit, stability failure, unlabeled range, pasted value, raw value, superseded source. Caught ÷ planted, by type, with the count statedOne percentage hides the hard type
False alarmsFindings a lead clears in seconds, per 100 checksA tool that flags everything catches every fault and saves no time
Hours per sectionStopwatch by task, same people, against your baselineThe hours case rests on it, and 5.8 is only a target
Late-change timeAdd a new report. Time to a complete list of what it touches, and its accuracyThis is where the review-cycle risk sits
Citation accuracy100 random values checked against the cited pageTrust in the other measures depends on it
Reviewer commentsComments per section on values against those on scienceReviewers should spend their time on science

Decide on planted faults caught, false alarms, hours per section and late-change time. Keep the planted list away from the vendor until scoring, and set your pass marks before you start.

The full working-session questions: 12 questions in four groups

Bring regulatory CMC, analytical, process and stability leads, quality assurance, regulatory operations and IT into one room.

A

Which filing and which sections come first

A1

Which closed filing do people remember well enough to judge results?

A2

Which section families carry the most numbers: S.4, P.5, P.8?

A3

Which sections are mostly argument and should wait?

B

Sources and versions

B1

Where do partner certificates and reports actually sit?

B2

Which is the system of record for a result: the lab system or the certificate?

B3

How is a superseded document marked today?

C

Decisions and sign-off

C1

Who decides a contradiction, and who signs a changed limit?

C2

Can a section ever be signed with an open finding, and on whose word?

C3

What does our change control need to record for an amendment?

D

Quality position and the future outline

D1

How do we classify this use against FDA's draft and draft Annex 22, and who wrote that down?

D2

What validation of intended use will quality ask for?

D3

Who is reading M4Q(R2) and its mock example, and what will we change for June 2027?

23 · FAQ

M4Q(R2), 3.2.P.5.6, release limits, FDA letters and AI: common CMC Module 3 questions

In shortThe questions people search for, each answered so it stands alone.

What is CMC Module 3?

Module 3 is the quality module of the Common Technical Document, the shared format for drug applications. It describes how the drug substance and drug product are made, controlled and stored, with the data behind each claim. CMC stands for chemistry, manufacturing and controls.

What goes in CTD Module 3?

Module 3 holds a table of contents, a body of data and literature references. The body of data has a drug substance part (3.2.S), a drug product part (3.2.P), appendices (3.2.A) and regional information (3.2.R), under ICH M4Q(R1) dated September 12, 2002. By our count that outline has 57 lowest-level headings, and applications repeat them for each site or form.

What is ICH M4Q(R2), and when does it apply?

M4Q(R2) is a draft revision of the quality outline of the Common Technical Document, endorsed for public consultation (ICH's Step 2) on May 14, 2025. It would make Module 2.3 the basis for assessment, add a section called Core Quality Information, and treat Module 3 as a repository of supporting data. ICH's work plan of July 10, 2026 targets adoption (Step 4) in June 2027, with regional implementation after that. FDA's January 2026 version is a draft marked not for implementation.

What is a justification of specification in 3.2.P.5.6?

It is the section that explains why each test is in the specification and why each limit sits where it does. ICH's M4Q outline gives it one line, and the content expectations come from ICH Q6A and Q6B. For a biologic, Q6B ties specifications to the manufacturing process, to stability and to lots used in nonclinical and clinical studies. Each of those is a claim that has to match another section.

What is the difference between release and shelf-life specifications?

A release limit applies when a batch ships, and a shelf-life limit applies up to the end of the expiry period. ICH Q6B says tighter release limits may be applied where justified, and that in some regions they may be in-house only. Q6A says the EU requires distinct specifications where they differ, and that in Japan and the US the concept may apply only to in-house criteria for chemical drugs. On a US biologic, confirm your approach with FDA.

How much stability data do you need for a biologic at filing?

ICH Q5C asks for stability information on at least three batches of final container product, and at least six months of data at submission when more than six months' storage is requested. Expiration dating rests on the real-time data submitted. Agencies may expect more for the shelf life you claim, and a consolidated ICH Q1 draft is on its way to replace these texts.

What is the difference between a proven acceptable range and a normal operating range?

A proven acceptable range is a characterized range that, with other parameters held constant, still makes material meeting quality criteria, as defined in ICH Q8(R2). A normal operating range is the narrower band a plant aims to run in, and it is an industry term that Q8(R2) does not define. State which you mean in every section, so a batch inside one and outside the other does not read as a process failure.

What percentage of FDA complete response letters cite CMC?

One trade analysis counted 150 of 202 letters from 2020 to 2024, or 74%, as involving quality or manufacturing, including facility inspections. Our own count of FDA's dataset, by section heading plus a hand read, gives 168 of 203 (83%) with a product quality or facility finding, 107 (53%) with product quality, 122 (60%) with a facility finding, and 46 (23%) with product quality and no facility finding. FDA's presenters said in 2024 that facility deficiencies were the most common reason for complete responses to biologics applications.

How long does a second review cycle take after a CMC complete response?

Under PDUFA VII, the current prescription drug user-fee program, FDA's goal is to act on 90% of Class 2 resubmitted original applications within six months of receipt, and that clock starts only after you respond. How long you need to fix the problem depends on the deficiency. Studies, new batches or a reinspection can take much longer than the review.

Can you use AI to write Module 3?

No rule we found forbids it, and none certifies it. FDA's January 2025 draft guidance on AI for regulatory decisions does not address drafting tools when they do not affect patient safety, drug quality or study reliability. EMA stresses close human supervision of generated text in its reflection paper, and draft EU GMP Annex 22 restricts generative AI in critical GMP uses, with its status still a draft. People review, decide and sign, and the applicant remains responsible for every statement.

What is the difference between structured content authoring and a cross-section check?

Structured content authoring writes a piece of content once and reuses it, so a change flows everywhere. A cross-section check tests whether what the sections say still holds against the data. A correctly reused new limit can still fail the stability table, so reuse and checking do different jobs, and many teams will want both.

How long does it take to write CMC Module 3?

There is no independent public figure. One vendor's infographic says one to four weeks a section and 100 to 200 full-time-equivalent weeks in all, without a dataset. The best number is your own: time five sections by task, and count your last filing's late changes.

24 · One-page summary

The cross-check method, the 2026 quality rules and 14 Module 3 terms on one page

Print this page

In shortThe whole guide on one screen: the method, the rules as of November 2026, the readiness scale and the terms.

The method
  1. Keep every source under version control, and every value with its page.
  2. Draft each section from your template and approved text, then replace every fact from the new sources.
  3. Check every number: value, unit, decimals, version.
  4. Put every limit and critical parameter on one grid against batches, stability to the proposed shelf life, process, justification and Module 2.3.
  5. Label every range: operating or proven.
  6. Re-run on each new stability report and specification version.
  7. For each contradiction, a person chooses. Limits change through change control, with both sources on the record.
  8. Technical review, then regulatory approval, recorded and signed.

Readiness: score 0–2 on eight questions: 0–6 explore · 7–11 pilot · 12–16 implement.

As of November 2026: M4Q(R1) in force · M4Q(R2) draft, Step 4 planned June 2027 · FDA draft January 2026 · ICH Q1 consolidation Step 3 sign-off planned December 2026 · Q2(R2) and Q14 adopted November 1, 2023 · eCTD v4.0 optional at FDA, mandatory planned Q1 2028 for new EU centrally authorized applications · draft EU GMP Annex 22 and revised Annex 11 not adopted · PQ/CMC has no acceptance announcement.

14 terms
CMC
Chemistry, manufacturing and controls: how a medicine is made, tested and stored.
CTD, eCTD
The shared format for drug applications, and its electronic form.
Module 3
The quality module of the CTD.
Module 2.3
The quality summary. M4Q(R2) would make it the basis of assessment.
Core Quality Information
Draft M4Q(R2) section 2.3.3, the information subject to lifecycle management.
Specification
Tests, methods and acceptance limits; a condition of approval.
Release limit
What a batch must meet to ship; may be tighter than the shelf-life limit.
Shelf life
How long a product stays usable as stored; FDA's expiration dating period.
Critical process parameter
A process setting whose variation can affect a product property that must stay within limits for quality.
PAR
Proven acceptable range, as ICH Q8(R2) defines it.
NOR
Normal operating range: where the plant aims to run; an industry term.
PPQ
Process performance qualification: batches confirming the commercial process.
Complete response
FDA's letter ending a review cycle without approval.
Change control
The quality system's record of a proposed change and who approved it.
25 · Sources

Sources

Accessed November 2026. Regulatory status statements are as of November 2026. Where a count is ours, the text says so.

  1. ICH, Q6B Specifications: Test Procedures and Acceptance Criteria for Biotechnological/Biological Products, March 10, 1999. database.ich.org
  2. Slabodkin, FDA's CRLs reveal 74% of applications rejected for quality, manufacturing issues, Pharma Manufacturing, July 14, 2025. pharmamanufacturing.com
  3. FDA, openFDA Complete Response Letters dataset, exported November 2, 2026, 458 records, 445 of them complete response letters, newest August 7, 2026. Counts in this guide are ours. open.fda.gov
  4. ICH, M4Q(R2) The Common Technical Document: Quality, draft endorsed May 14, 2025, as EMA Step 2b, EMA/CHMP/ICH/178042/2025, June 19, 2025. ema.europa.eu
  5. ICH, M4Q(R2) EWG Work Plan, July 10, 2026. database.ich.org
  6. ICH, Q6A Specifications: Test Procedures and Acceptance Criteria for New Drug Substances and New Drug Products: Chemical Substances, October 6, 1999. database.ich.org
  7. FDA, Process Validation: General Principles and Practices, guidance for industry, January 2011. fda.gov
  8. ICH, M4Q(R1) The Common Technical Document: Quality, Step November 4 9, 2000, numbering September 12, 2002. database.ich.org
  9. ICH, M4 Organisation of the Common Technical Document, M4(R4), with Annex: Granularity Document, June 15, 2016. database.ich.org
  10. Dassault Systemes BIOVIA, AI in CMC: From Data to Dossier, vendor infographic, 2024. Vendor figures, no dataset. 3ds.com
  11. 21 CFR 314.50, Content and format of an NDA, CFR 2025 edition. govinfo.gov
  12. 21 CFR 601.2, Applications for biologics licenses, CFR 2025 edition. govinfo.gov
  13. 21 CFR 314.125, Refusal to approve an NDA, CFR 2025 edition. govinfo.gov
  14. 21 CFR 211.165, Testing and release for distribution, CFR 2025 edition. govinfo.gov
  15. FDA, M4Q(R2) The Common Technical Document for the Registration of Pharmaceuticals for Human Use: Quality, draft guidance, January 2026, docket FDA-2025-D-2275. fda.gov
  16. ICH, Q1 EWG Work Plan, July 10, 2026. database.ich.org
  17. ICH, Q2(R2) Validation of Analytical Procedures, adopted November 1, 2023. database.ich.org
  18. ICH, Q14 Analytical Procedure Development, adopted November 1, 2023. database.ich.org
  19. FDA, Electronic Common Technical Document (eCTD), content current October 29, 2026. fda.gov
  20. ICH, Q1E Evaluation of Stability Data, February 6, 2003. database.ich.org
  21. ICH, Q5C Stability Testing of Biotechnological/Biological Products, November 30, 1995. database.ich.org
  22. ICH, Q8(R2) Pharmaceutical Development, August 2009. database.ich.org
  23. ICH, Q11 Development and Manufacture of Drug Substances, May 1, 2012. database.ich.org
  24. ICH, Q12 Technical and Regulatory Considerations for Pharmaceutical Product Lifecycle Management, November 20, 2019. database.ich.org
  25. EMA, eSubmission: eCTD, timelines for eCTD v4.0. esubmission.ema.europa.eu
  26. FDA CDER, MAPP 6025.4 Rev. 1, Good Review Practice: Refuse to File, effective October 23, 2025. fda.gov
  27. European Parliament, Legislative Observatory, procedure file 2023/0132(COD), read November 3, 2026. oeil.secure.europarl.europa.eu
  28. FDA, PQ/CMC and HL7 FHIR, content current January 16, 2025. fda.gov
  29. FDA and Duke-Margolis, Continual Improvement of CDER BLA Submission, Assessment, and Facility Readiness/Inspection: CMC for Biologics and Biosimilars, slide deck, August 20, 2024. FDA's presenters note the figures should not be considered final or official. healthpolicy.duke.edu
  30. Duke-Margolis, meeting summary of the August 20, 2024 public meeting. healthpolicy.duke.edu
  31. FDA CDER, First-Cycle Complete Response Rates for CDER NDA and BLA Applications: A Longitudinal Analysis, FY 2008 to 2024, data as of June 1, 2026. fda.gov
  32. Brake, BfArM and BWP, Recent experience with scientific advice and marketing authorisations, EMA workshop slides, April 16, 2015. ema.europa.eu
  33. FDA, PDUFA Reauthorization Performance Goals and Procedures, Fiscal Years 2023 Through 2027. fda.gov
  34. FDA, Prescription Drug User Fee Rates for Fiscal Year 2027, FR Doc. 2026-15334, published July 30, 2026. federalregister.gov
  35. Smith, DiMasi and Getz, Quantifying the Value of a Day of Delay in Drug Development, Tufts Center for the Study of Drug Development white paper, August 2024. csdd.tufts.edu
  36. Smith, DiMasi and Getz, New Estimates on the Cost of a Delay Day in Drug Development, Therapeutic Innovation and Regulatory Science 58(5), 855-862, 2024. doi.org
  37. FDA, Novel Drug Approvals at FDA: 2025. fda.gov
  38. FDA, PQ/CMC Data Standards Scope and Development. fda.gov
  39. FDA, Chemistry, Manufacturing, and Controls Development and Readiness Pilot Program; Program Announcement, 91 FR 59783, September 21, 2026, FR Doc. 2026-19277. govinfo.gov
  40. FDA, Strategy Document on Facilitating Chemistry, Manufacturing, and Controls Readiness for Products With Accelerated Clinical Development, notice of availability July 23, 2026, Docket FDA-2026-N-7232. fda.gov
  41. FDA, Considerations for the Use of Artificial Intelligence to Support Regulatory Decision-Making for Drug and Biological Products, draft guidance, January 2025. fda.gov
  42. EMA, Reflection paper on the use of artificial intelligence in the medicinal product lifecycle, adopted by CHMP September 9, 2024. ema.europa.eu
  43. EMA, EMA and FDA set common principles for AI in medicine development, January 14, 2026. ema.europa.eu
  44. European Commission and PIC/S, draft EU GMP Annex 22, Artificial Intelligence, consultation July 7 to October 7, 2025. picscheme.org
  45. European Commission, EudraLex Volume 4, read November 3, 2026. health.ec.europa.eu
  46. EMA, report of the multistakeholder workshop on expert contributions to AI guidance development (Annex 22), workshop of June 30, 2026, EMA/156789/2026. ema.europa.eu
  47. European Commission, AI Act regulatory framework page, on Regulation (EU) 2026/1744, in force July 27, 2026. digital-strategy.ec.europa.eu
  48. 21 CFR Part 11, Electronic Records; Electronic Signatures, CFR 2025 edition. govinfo.gov
  49. FDA, warning letter 722591, April 2, 2026, section headed on artificial intelligence in pharmaceutical manufacturing. One firm, with other CGMP findings. fda.gov
  50. FDA, Computer Software Assurance for Production and Quality Management System Software, final guidance, February 2026. fda.gov
  51. FDA CDER, Guidance Agenda, July 2026 posting. fda.gov
  52. ISPE, GAMP Guide: Artificial Intelligence, July 2025. ispe.org
  53. Manufacturing Chemist, industry-first automation of CMC Module 3, trade article on a six-month vendor pilot, July 23, 2025. No method or independent evaluator stated. manufacturingchemist.com
  54. USP-NF, General Chapter 787, Subvisible Particulate Matter in Therapeutic Protein Injections, preview page with the briefing proposing to omit the chapter, Case ID SUB-2881. Preview only; the chapter was not read. doi.usp.org
  55. Beckman Coulter, USP 787: Subvisible Particulate Matter in Therapeutic Protein Injections, instrument vendor summary, read November 3, 2026. beckman.com
Next step

See it on your own development reports.

Explore the solution, or bring a closed filing and a sample of its sources, and we will cross-check its limits with you, every finding cited to both pages.

botminds.ai The complete guide to CMC Module 3 authoring · November 2026. Northwind Bio, Veltrimab, Dravenzo, every plant, person, batch, record and figure in the example and the screens are fictional. Regulatory status is as of November 2026; check the sources before relying on it.