WorkflowHR & Learning

The complete guide · November 2026

GxP training compliance, explained.

Before a medicine reaches a patient, people make it, test it, study it and ship it, each following a written procedure. The good-practice rules known together as GxP expect a company to show that each person was trained for the work, on the version of the procedure in force on the day they did it. Getting the training done is one job; proving it for one named person on one named date, while an inspector waits, is another.

This guide is for anyone who keeps, checks or answers for training records in regulated life sciences work: site quality assurance (QA) leads, training coordinators, inspection hosts and back-room teams, heads of site quality and the clinical, laboratory and distribution quality teams who face the same question. It also serves leaders deciding whether to automate the work. No background needed.

See one case, screen by screen →
Watch with transcript →
A quick example · fictional

Imagine you are the QA lead at a sterile drug plant, Northwind Bio's Plant 2 in Westport, on day 2 of a four-day agency inspection. It is October 7, 2026, at 10:31 am. The lead inspector asks for one thing: show me that everyone who touched batch VB-26-0917 was trained on the procedure versions in effect when they did the work.

The batch record, the signed log of how that batch was made, runs to 24 pages, 9 steps and 8 people. On page 16, an operator named Lucas Moreau capped vials at 2:20 pm on September 17, under capping procedure SOP-MFG-0262. Revision 7 of that procedure took effect on September 8. You open his training transcript.

The batch record says
Capped vials
Sep 17, 2:20 pm
Rev 7 in effect from
Sep 8
His transcript says
Completed rev 7
Sep 18
Due date set
Oct 8
Trained one day after the workFind the explanation, then disclose itbefore the inspector reads the same two dates and asks why no one mentioned them.

Joining who did each step, the revision in effect that day and the date each person finished it catches what a completion report misses: an operator well ahead of his due date and one day late for the batch.

GxP training compliance guide
Part A · Understand it

GxP training records from the first SOP read to the inspector's question: the rules, the dates and what goes wrong

What GMP, GCP, GLP and GDP ask of training, why the effective date decides everything, how media fills and gowning fit in, what FDA's own citation data shows and how teams answer today, explained without selling anything. If you are new to quality work, start here.

01 · In plain words

GxP training compliance means proving who was trained on what, on the day they did the work

Hundreds of people handle a medicine before it reaches a patient. An operator fills vials. A second person checks the fill weights. An analyst tests a sample. A warehouse clerk keeps a pallet cold. Each works from a standard operating procedure, or SOP. SOPs change: a machine is replaced, an inspection finds a weakness, a better method turns up. Each change makes a new revision, and each revision has an effective date, the day it becomes the rule.

Regulators set the same basic expectation everywhere. The people doing the work must be trained for it. So every plant, laboratory and clinical team keeps training records, usually in a learning management system, or LMS. When a revision is issued, the system assigns it to the right people. They read it, or watch a demonstration, and sign. The LMS records the date.

On a normal day that looks fine. Dashboards show 98% complete. Then an inspector arrives and asks whether one operator had finished the revision in force at 2:20 pm on September 17, when she signed one step of one batch. The LMS knows completion dates. The batch record knows who signed which step at what time. The document system knows when each revision took effect. Another register holds the sterile-area qualifications. No one system holds the answer.

So a small team in a back room reads all four by hand while the inspector waits in the conference room. Most of what they find is fine. The trouble is the rare record that is a day late. If the team spots it first, it can bring the explanation along: the deviation already filed (the formal record of a departure from procedure), the extra check that protected the batch, the fix now in place. If the inspector spots it first, the same explanation sounds like an excuse.

Capping procedure revision 7, from approval to the inspector's question

  1. A revision is approvedQA approves revision 7 of the capping procedure, with a new torque check every 30 minutes. An effective date of September 8 is set.
  2. Training is assignedThe LMS assigns the revision to every capping operator on September 1, with a due date. Some finish within days. Others wait.
  3. The work happensFrom September 8 the new revision is the rule. Operators sign batch record steps, each with a time, whether or not their training has caught up.
  4. The evidence is joinedSomeone reads the batch record, the revision history, the transcripts and the qualification register together, and finds who was late. This guide calls that reading-together the join.
  5. The inspector reads itA plain answer goes to the front room, where the inspector sits. Any gap travels with its explanation, or it arrives as a surprise.

Step 4 is the subject of this guide. The people, company and figures in the example are fictional.

Four surprises, starting with why 98% complete can still fail an inspection

A completion rate answers the wrong question

A training dashboard counts records against due dates. An inspector compares a completion date with the date of the work. Someone can finish well before the due date and still be a day late for the batch, as the example at the top of this page shows.

No regulation we read says "train before the effective date"

The US Food and Drug Administration (FDA) asks for training that enables people "to perform the assigned functions".1 EU GMP, Europe's good manufacturing practice guide, says only that "the effective date should be defined".2 EU GDP, its counterpart for distribution, comes closest, asking for competence "prior to commencing their tasks".3 Section 4 lists the texts we read. The exact order of events is written in your own procedures, and an inspector then holds you to them.

A slow search can have legal weight

FDA says "a delay in producing records to FDA without reasonable explanation may be considered delaying the inspection", which can make drugs adulterated under section 501(j).4 FDA also accepts reasons, such as a large volume of records. A few hours with a reason is normal. An unexplained stall is a risk.

Training ranks only 13th in FDA's counts, and that misleads

In fiscal 2025 section 211.25, FDA's drug personnel rule, ranked 13th of the 47 sections cited from Part 211, its drug manufacturing rules, by our own tally of FDA's data; section 8 prints the method.5 It rarely tops a list. It also sits underneath others: a procedure not followed, or a deviation poorly investigated, soon raises the training question.

Media fill, back room, effective date, read and understand: the words this work runs on

Effective date of a revision

The day a revision becomes the rule. It usually differs from the approval date, to leave time for training.

Read and understand training

A training method: the person reads the revision and signs that they understood it, with no practical assessment unless one is added.

Media fill

A rehearsal of sterile filling using a nutrient liquid instead of the drug, to show the process and the people keep microbes out. Also called an aseptic process simulation, or APS.

Back room

The working room out of the inspector's sight, where staff find, check and log each requested record before it goes to the front room.

Fourteen terms are defined in the one-page summary.

02 · The four practices

GMP, GCP, GLP and GDP each ask the training question about a different record

In short"GxP" is shorthand for a family of good-practice rules. This guide covers four: manufacturing, clinical trials, laboratories and distribution. All four want qualified people and proof of it. They differ in what the proof hangs on: a batch step, a delegated trial task, a study, or a shipment.

Who it coversThe record that names who did the workThe question an inspector asks
GMP · good manufacturing practiceOperators, supervisors, analysts, cleaners, maintenance and QA at a plantExecuted (completed and signed) batch record and equipment logbooks, which must identify "the persons performing and directly supervising or checking each significant step"6Was everyone on this batch trained on the revision in effect?
GCP · good clinical practiceInvestigators, site staff, monitors, sponsor and contract research organization (CRO) staffThe site's delegation record and the sponsor's role lists7Was this coordinator trained on this protocol version before she did this task?
GLP · good laboratory practiceStudy directors, technicians and quality staff in nonclinical safety studiesStudy raw data, signed and dated, read with the facility's training summary8Was this technician qualified for this assay when she ran it?
GDP · good distribution practiceResponsible persons, warehouse and transport staff at wholesalersReceipt, storage and dispatch records, including temperature records3Was this handler trained for cold-chain products before handling this load?

Medical device makers ask the same question under a quality management system rather than a GxP name, and section 7 shows how. Whatever the practice, you will meet the same labels: GxP training management, GMP training records, training matrix compliance, inspection readiness training records, read and understand training, and LMS for life sciences. Those phrases mostly describe the assigning and recording side. The join to the work is the harder side, and fewer tools address it.

Assigning training and proving training are two separate jobs

Running the training programProving it for a piece of work
The questionWho needs what, and who has done it?Who did this step, under which revision, and had they finished it by then?
Main toolLMS and training matrix, the table of roles against required coursesBatch record, document history, transcripts and register, read together
Unit of workA course and a personA person, a step, a timestamp and a revision
MeasurePercent complete by the due dateShare of work done by people already trained on the revision in effect
When it hurtsEvery month, as a backlogIn an inspection, when the answer is needed in hours
03 · The rules and their dates

21 CFR 211.25, EU GMP Chapter 2, ICH E6(R3), 21 CFR 58.29 and EU GDP 2.4: what each says about training

In shortEvery practice requires training for the role. Most ask for records. Only the EU manufacturing and distribution texts, ICH Q7 and the device standard ask in writing for training or its effect to be assessed. Only EU GDP says "prior to commencing". The rest of the discipline is your procedures, and an inspector reads you against them.

Reading the names. 21 CFR is Title 21 of the US Code of Federal Regulations, where FDA's rules sit. EU GMP is the European Union's good manufacturing practice guide, in chapters and annexes. ICH is the International Council for Harmonisation, which writes shared guidelines such as E6(R3) and Q7. QMSR is FDA's Quality Management System Regulation for devices. MHRA is the UK's medicines regulator, and EMA is the European Medicines Agency.

Practice and textWhat it saysStatus, November 2026
GMP, US: 21 CFR 211.25Each person shall have "education, training, and experience, or any combination thereof, to enable that person to perform the assigned functions". Training covers "the particular operations that the employee performs" and current good manufacturing practice (CGMP) "including... written procedures", given "by qualified individuals on a continuing basis and with sufficient frequency".1In force. The 2025 CFR edition is the newest on govinfo.
GMP, biologics and ingredients: 21 CFR 600.10; ICH Q7 3.12Biologics staff need "the necessary training and experience relating to individual products".9 For active ingredients, training records "should be maintained" and training "should be periodically assessed".10In force
GMP, EU: Chapter 2, 2.10 to 2.14Training for "all the personnel whose duties take them into production and storage areas or into control laboratories (including the technical, maintenance and cleaning personnel)". Continuing training, "and its practical effectiveness should be periodically assessed". "Training records should be kept."11In operation since February 16, 201412
GMP, sterile: EU GMP Annex 1, sections 7 and 9Gowning assessment at least annually. Unsupervised access to Grade A and B only after passing it and taking part in a successful media fill.13 Section 5 covers this.Revised 2022; the Commission's page says "fully applicable since August 25, 2024"12
GCP: ICH E6(R3), sections 2.1, 2.3.2, 3.4, 4.3.2, Appendix CInvestigators "qualified by education, training and experience". Trial training "should correspond to what is necessary" beyond people's usual training. Appendix C lists "Trial-specific training records" among records that "should generally be in place prior to the start of the trial". System users are "appropriately trained in their use".7EU: principles and Annex 1 from July 23, 2025; Annex 2 from January 15, 2027.14 FDA: final, September 2025.15
GCP, law: EU Regulation 536/2014 Article 49; 21 CFR 312.53(a)Other individuals "shall be suitably qualified by education, training and experience".16 FDA: sponsors select "only investigators qualified by training and experience".17In force
GLP, US: 21 CFR 58.29Education, training and experience for the assigned functions, and "a current summary of training and experience and job description" for each person.8In force in the 2025 CFR. FDA proposed a quality system update on August 24, 2016; we found no final rule, and an FDA notice of April 2026 still describes Part 58 as it stands.18,19
GLP, OECD principles: as set out in UK S.I. 1999/3106Management keeps "a record of the qualifications, training, experience and job description" and ensures people "clearly understand the functions they are to perform".20In force in that text
GDP, EU: 2013/C 343/01, section 2.4Staff "should have the appropriate competence and experience prior to commencing their tasks". Written training program. Specific training for temperature-sensitive and other special products. "A record of all training should be kept, and the effectiveness of training should be periodically assessed and documented."3In force
Devices: FDA QMSR, with ISO 13485:2016 clause 6.2People whose work affects quality must be competent "on the basis of appropriate education, training, skills, and expertise", in FDA's words on the clause.21 The old 21 CFR 820.25 said "Training shall be documented".22In effect February 2, 2026.23
Electronic records: 21 CFR 11.10(i) and 11.50; EU GMP Annex 11, section 2People who "develop, maintain, or use" these systems have "the education, training, and experience to perform their assigned tasks". A signature shows name, date and time, and meaning.24 EU: "appropriate qualifications, level of access and defined responsibilities".25Part 11 in force. Annex 11 at January 2011; its revision is a draft.12
Role training is universal; written demands on effectiveness and timing are rare

What each text states, by our reading. ISO 13485 is read through FDA's rule and one published copy of clause 6.2.

Not statedImpliedStated
Training for the roleContinuingRecords keptEffect checkedBefore the work21 CFR 211.25StatedStatedNot statedNot statedImpliedEU GMP Chapter 2StatedStatedStatedStatedImpliedICH E6(R3)StatedNot statedStatedNot statedStated21 CFR 58.29StatedNot statedStatedNot statedImpliedOECD GLP principlesStatedNot statedStatedNot statedImpliedEU GDP 2.4StatedStatedStatedStatedStatedISO 13485 clause 6.2StatedImpliedStatedStatedImplied

Our reading of the sources 1,11,7,8,20,3,21,26

Show the numbers
Training for the roleContinuingRecords keptEffect checkedBefore the work
21 CFR 211.25StatedStatedNot statedNot statedImplied
EU GMP Chapter 2StatedStatedStatedStatedImplied
ICH E6(R3)StatedNot statedStatedNot statedStated
21 CFR 58.29StatedNot statedStatedNot statedImplied
OECD GLP principlesStatedNot statedStatedNot statedImplied
EU GDP 2.4StatedStatedStatedStatedStated
ISO 13485 clause 6.2StatedImpliedStatedStatedImplied

"Not stated" means not in that section. US drug makers still keep records: FDA's inspection program lists training and qualification among the things it covers,27 and one letter faults a firm that "could not provide records of CGMP training".28

E6(R3)'s "before" is its note on essential records "prior to the start of the trial". ISO 13485 is a paid standard and we did not read ISO's own copy. We describe clause 6.2 through FDA's rule and one published reproduction, which has it "evaluate the effectiveness of the actions taken" and "maintain appropriate records".21,26 Read your own copy.

Dates that changed training evidence, with three drafts still open
  1. Feb 2014EU GMP Chapter 2

    Current text in operation.

  2. Aug 2024Annex 1 fully applicable

    Sterile personnel and media fill text, per the Commission's page.

  3. Jul 2025E6(R3) in the EU

    Principles and Annex 1.

  4. Sep 2025E6(R3) at FDA

    Final guidance.

  5. Feb 2026FDA QMSR

    Device personnel rule moves to ISO 13485.

Source 11,13,23,14,15,12,29,30

Show the numbers
WhenWhat
Feb 2014EU GMP Chapter 2
Aug 2024Annex 1 fully applicable
Jul 2025E6(R3) in the EU
Sep 2025E6(R3) at FDA
Feb 2026FDA QMSR
OpenChapter 4, Annex 11, Annex 22
Jan 2027E6(R3) Annex 2
Dec 2027AI Omnibus date
04 · Effective dates and due dates

Why a due date after the effective date creates late training on purpose

In shortTwo dates decide most of this subject. The effective date says when a revision becomes the rule. The due date says when the LMS calls training overdue. If the due date falls after the effective date, anyone who works in between is doing the job under a rule they have not been trained on, while the LMS shows nothing wrong.

EU GMP asks that documents containing instructions be approved and dated, and adds one short sentence: "The effective date should be defined."2 That January 2011 text is still the one in force; a revised Chapter 4 went to consultation from July 7 to October 7, 2025, and the Commission's page does not yet list it.12,30

The gap between approval and effect exists so training can happen. One consultancy's guidance puts it this way: "To allow for training the effective date generally should be different to the date the document is approved", with the time "agreed during the impact assessment of the change approval process", based on how many people need training and of what kind, and "many organisations have a standard time such as two weeks".31 That two weeks is a habit, and no regulator we read sets it.

The texts we read for "no regulation says". None of these has a sentence requiring training to finish before a revision's effective date: 21 CFR 11.10, 58.29, 58.31, 211.22, 211.25, 211.100, 211.180, 211.188, 312.53 and 600.10, in the 2025 edition; EU GMP Chapters 2 and 4, Annex 1 and Annex 11; ICH Q7, Q10 and E6(R3); EU GDP 2013/C 343/01; EU Regulation 536/2014, Article 49; the OECD GLP principles as set out in UK S.I. 1999/3106; and FDA's 2004 aseptic guidance.

The nearest wording is EU GDP 2.4, on competence before starting tasks, and E6(R3) Appendix C, on training records before a trial starts.1,11,2,13,32,10,7,3,33 We did not read ISO's own copy of ISO 13485, PIC/S, WHO or other countries' rules, so the finding covers these texts only. Training before the work is the plain reading of them, and your procedure should say so.

In the example, the capping procedure's revision 7 was approved and assigned on September 1 and took effect on September 8. That is the gap for training. The trouble is the due date. It was set to October 8, 30 days after the effective date. For a month, an operator could cap a batch under a rule he had not read, and his transcript would still show him as on time.

A due date 30 days after the effective date leaves a month the LMS does not see

Days from September 1, in the fictional example

TrainingThe month the LMS calls on timeThe work
Assigned, before the effective date
Rev 7 in effect, due date not reached
Batch VB-26-0917 capped
Operator's training complete
Sep 1Sep 8Sep 17Oct 8

Fictional example from this guide

Show the numbers
ActivityFromTo
Assigned, before the effective date07
Rev 7 in effect, due date not reached737
Batch VB-26-0917 capped1617
Operator's training complete1718

Same-day training, retraining and what counts as "trained"

SituationA clear rule to write downWhy it needs writing
Training finished the same day as the workCompare times where both exist. If the record shows only a date, say which way you read it.An hour's difference can flip the answer
Revision effective during a batchEach step answers to the revision in effect when that step began, unless the change plan says otherwiseA batch can cross an effective date
Assigned, or overdueNever counts as trainedAn assignment shows intent and no more
Verifier or checker on a stepChecked like the performer21 CFR 211.188(b)(11) identifies people "performing and directly supervising or checking"6
Minor editorial revisionDocumented decision that no retraining is needed, made when the revision is approvedOtherwise the record looks like a miss
Practical skill, such as aseptic techniqueObserved assessment. Reading alone does not pass.MHRA has cited sign-off "based on read and understand questionnaire with no practical assessment"34
A training record is a GMP record. It must be true on the day it was made. Finding a gap the week before an inspection never justifies a date that says otherwise. FDA says training people to prevent and detect data integrity problems is consistent with 21 CFR 211.25.35 MHRA's guidance covers the ALCOA principles, under which records are attributable, legible, contemporaneous, original and accurate; the "+" adds complete, consistent, enduring and available.36
05 · Media fill and gowning

Media fill, gowning and Knapp: the sterile qualifications that expire on their own clock

In shortA sterile plant, where product is filled by aseptic (germ-free) handling, checks more than SOP training. People qualify by taking part in media fills and passing gowning assessments, and those qualifications lapse with time. EU Annex 1 and FDA's 2004 guidance set the intervals below. Neither text we read gives a grace period. If your site uses one, it is your own rule, and you must be ready to defend it.

Regulators ask each operator for a media fill at least yearly, and about every six months on manual lines

Longest interval each text allows, in months

Annex 1: each operator, in a successful APS12 months
Annex 1: manual aseptic operation, each operatorapproximately6 months
Annex 1: each process, line and shiftapproximately6 months
Annex 1: gowning reassessment12 months
FDA 2004: everyone authorized in the room, media fill12 months
FDA 2004: each processing linesemi-annual6 months
FDA 2004: gowning requalificationnormally sufficient for automated operations12 months

Source 13,32

Show the numbers
ItemValue
Annex 1: each operator, in a successful APS12 months
Annex 1: manual aseptic operation, each operator6 months
Annex 1: each process, line and shift6 months
Annex 1: gowning reassessment12 months
FDA 2004: everyone authorized in the room, media fill12 months
FDA 2004: each processing line6 months
FDA 2004: gowning requalification12 months
QualificationWhat the text saysWhat to check in the record
Grade A and B accessGrade A is the critical zone for high-risk work such as filling, and Grade B is the cleanroom around it. Unsupervised access "should be restricted to appropriately qualified personnel, who have passed the gowning assessment and have participated in a successful APS". "Unqualified personnel should not enter grade B cleanrooms or grade A in operation", save exceptional cases under written procedure and supervision.13Airlock or access record against the register, by date
Media fill (APS)"Each operator should participate in at least one successful APS annually." Manual operations: about every 6 months for each operator.13 FDA: everyone authorized to enter "should participate in a media fill at least once a year".32Date of the last successful run, and whether the person's role in it fit their real duties
GowningAssessment "and periodic reassessment at least annually", visual and microbial.13 FDA: annual requalification "is normally sufficient for those automated operations where personnel involvement is minimized".32Result, assessor, and interval against your rule
DisqualificationSystems for disqualifying people, including after "being implicated in a failed APS". Retraining and requalification "before permitting the operator to have any further involvement".13Work dates against disqualification and return dates
Visual inspectionVisual inspectors, the plant staff who check filled units, are qualified against sets of known defects. The Knapp method is one statistically based way to measure how well a person or a machine finds them.37Test date and result, and how the test set was made

Working a media fill window through with real dates

Take a site whose procedure asks for a media fill every 6 months and allows 30 extra days. An operator's last run was March 4. Six months later is September 4, and thirty days after that is October 4. He missed the August 26 run while on leave, so work he does on September 16 falls on day 12 of the window: September 16 minus September 4.

If the next booked run is October 14, the window closes ten days before it, and from October 5 he should stay out of Grade A until he has qualified again.

A 30-day window can close ten days before the next booked media fill
  1. Mar 4Last media fill

    The operator's last successful run.

  2. Aug 26Run missed

    He is on leave.

  3. Sep 4Six months are up

    The site's 30 extra days begin.

  4. Sep 16Work inside the window

    Day 12 of the 30.

Fictional example from this guide

Show the numbers
WhenWhat
Mar 4Last media fill
Aug 26Run missed
Sep 4Six months are up
Sep 16Work inside the window
Oct 4Window closes
Oct 14Next booked run
A grace window is your own decision. We read Annex 1 sections 7.3 to 7.6, 9.38 and 9.39, and FDA's 2004 sections V and IX.A, and searched both full texts for "grace", "extension", "tolerance" and "overdue". Neither sets extra time on a qualification. FDA writes "semi-annual" and Annex 1 "approximately every six months", with no added days defined.13,32 A stricter 6-month rule leaves room under Annex 1's annual minimum for automated lines, so a short window may be defensible there. On a manual aseptic line, where Annex 1 itself says about every 6 months, it is harder to defend. Write down the reasoning, have QA approve it, and be ready to show the inspector how often the window was used.
06 · Four records, one check

How to check a batch against SOP revisions and transcripts: four records and one date rule

In shortThe check itself is simple date arithmetic. For each person on each step, find the revision in effect at that moment and ask whether they had finished it. The work lies in reading the records, matching names, and counting everything. One batch in the example comes to 26 checks.

RecordWhere it livesWhat you take from itWhat trips people up
Executed batch record, logbooksPaper, scanned, or an electronic batch systemStep, performer, verifier, date, time, page, procedure namedInitials, handwriting, and a verifier nobody counts
SOP version historyDocument systemEach revision's effective dateReading the approval date by mistake
Training transcriptLMS, with older records on paperCourse, revision, method, trainer, completion dateA name spelled differently, and migrated records with lost dates
Qualification registerOften a separate database or spreadsheetMedia fill, gowning and Knapp dates and resultsValidity worked out by hand
Explanations, when a check failsQuality system, HR, access controlDeviations, corrective and preventive actions (CAPAs), leave, airlock entriesFinding the record when no one remembers the event

The date rule, worked through for one operator and one step

Step 1, the work. Batch record page 16: stoppering and capping, performed by L. Moreau, September 17, 2:20 pm, under SOP-MFG-0262.

Step 2, the revision in effect. Take the latest revision whose effective date is on or before the work. Revision 7 took effect on September 8, which is on or before September 17, so revision 7 applies. It took effect 9 days before the work.

Step 3, the person. Match "L. Moreau" to the LMS by employee number, 40633. Matching by spelling alone fails: in the same batch, "C. Doyle" is "Ciaran Doyle" in the LMS and "Ciarán Doyle" elsewhere.

Step 4, the completion. The transcript shows revision 7 completed September 18. September 18 is after September 17, so this check fails by 1 day. His due date of October 8 plays no part.

Step 5, the count. The batch has 8 people across 9 steps. Each person's training on each procedure they used makes 18 training checks. The sterile and inspection qualifications add 8 more, for 26 checks. In this example, 24 pass.

Nine days after the rule changed, one operator capped vials a day before finishing his training
  1. Sep 1Assigned

    Revision 7 assigned to capping operators.

  2. Sep 4A verifier is ready

    Aoife Byrne, senior operator, completes it.

  3. Sep 8Revision 7 in effect

    Torque check moves from every 60 to every 30 minutes.

  4. Sep 17The work

    Lucas Moreau caps at 2:20 pm, checks done every 30 minutes.

  5. Sep 18Completed

    One day after the work.

  6. Sep 22Deviation raised

    DEV-2026-0398, by the training coordinator.

  7. Oct 2Deviation closed

    No product impact found.

Fictional example from this guide

Show the numbers
WhenWhat
Sep 1Assigned
Sep 4A verifier is ready
Sep 8Revision 7 in effect
Sep 17The work
Sep 18Completed
Sep 22Deviation raised
Oct 2Deviation closed
Oct 7The question
Oct 8Due date
07 · Clinical, lab, distribution, devices

GCP, GLP and GDP training records: the same join with a different record in the middle

In shortOutside the plant, the batch record gives way to a delegation log, a study file or a dispatch record. The date rule stays the same. Each field has its own trap: GCP refreshers that no regulation sets, GLP summaries kept current, GDP staff who handle cold-chain goods, and a device rule whose numbering just changed.

Who did itWhat rule appliedA trap worth knowing
GCPDelegation record, signature sheet, monitor and data manager role listsProtocol version approved at that site on that date, and its trainingMHRA: "the frequency of GCP training is not defined within the regulations and... the organisation should determine when updates to the training are required".38 Two-year and three-year cycles are local rules, and an old certificate says little about the current protocol. E6(R3) ties trial training to what the delegated task needs.7
GLPSigned and dated raw data, by study phaseStudy plan and the SOPs in force, approved by management20The record must stay "current".8 A summary last updated at hiring is an easy finding. A contract lab's staff count too, if they run a study phase.
GDPReceipt, picking, dispatch and transport recordsGDP procedures and the product's handling requirementsEU text says "prior to commencing their tasks" and names temperature-sensitive and other special products.3 Agency and seasonal staff are the usual gap.
DevicesDevice history records and process logsQuality system procedures under ISO 13485FDA's rule took effect February 2, 2026 and old procedures may still cite 820.25.23 FDA says clause 6.2 covers competence for anyone whose work affects quality, internal or external.21
Of the sections in this guide, FDA's fiscal 2025 training citations fall mainly on drug and device sites

Citations of each personnel section, all paragraphs, by our sum of FDA's Frequency column. Food sites, outside this guide, are left out. GCP citations on training sit under broader headings, so the count understates them.

Devices: 21 CFR 820.2579
Drugs: 21 CFR 211.2578
Nonclinical laboratories: 21 CFR 58.291

Our reading of the sources 5

Show the numbers
ItemValue
Devices: 21 CFR 820.2579
Drugs: 21 CFR 211.2578
Nonclinical laboratories: 21 CFR 58.291
Clinical teams feel this too. Site staff who booked a visit before their training, or a coordinator on an old protocol version, make the same pair of dates that a plant does. The worked example in this guide follows a batch. The method carries across, and a team in another practice should test it on its own record.
08 · FDA's citation data

What eight years of FDA Form 483 data say about 21 CFR 211.25 training citations

In shortFDA publishes the citations on its Form 483s, the list of observations an investigator hands over at the close of an inspection. Training under 211.25(a) drew 67 citations in fiscal 2025 by our own sum, the most since fiscal 2019. Per 100 drug Form 483s the rate has run near 9 to 11 since fiscal 2022, below the 14 to 15 of 2018 and 2019. It is steady background, and section 211.25 ranks 13th of 47 by our tally.

67

citations of 21 CFR 211.25(a) on drug Form 483s in fiscal 2025, by our own sum of FDA's three training rows.5

Our tally of FDA data, inspections ending by September 30, 2025
13th

rank of section 211.25 among the 47 Part 211 sections in FDA's fiscal 2025 drug file, by our own tally.5

Our tally; method below
9.4

211.25(a) citations per 100 drug Form 483s in fiscal 2025. A form can carry more than one, so this is a rate, which differs from a share of forms.5

Our arithmetic

How we counted. FDA publishes the rows; the sums, the rates and the rank are our own arithmetic. From the Drugs sheet of FDA's fiscal 2025 Inspection Observations file (inspections ending October 1, 2024 to September 30, 2025) we added the Frequency column for the three rows cited to 21 CFR 211.25(a), cite IDs 1111, 1112 and 1133: 28 + 25 + 14 = 67.

For the rank we grouped every row on that sheet by its Part 211 section and added Frequency. Section 211.25 comes to 78, with paragraph (b) at 3 and (c) at 8, thirteenth of 47 sections. The rate divides 67 by the 713 drug Form 483s on the file's Summary sheet. Other years follow the same steps.5

Training citations on drug Form 483s fell with the pandemic and are climbing back

Citations of 21 CFR 211.25(a) by fiscal year, our sum of FDA's three rows. FDA says inspection numbers have risen since the COVID-19 emergency.

110FY18
113FY19
39FY20
43FY21
44FY22
44FY23
60FY24
67FY25

Our reading of the sources 5,39

Show the numbers
PeriodValue
FY18110
FY19113
FY2039
FY2143
FY2244
FY2344
FY2460
FY2567
Those falls track the number of inspections: drug Form 483s dropped by about 70% to fiscal 2021

Drug Form 483s in FDA's files, by fiscal year

716FY18
779FY19
349FY20
215FY21
466FY22
510FY23
561FY24
713FY25

Source 5

Show the numbers
PeriodValue
FY18716
FY19779
FY20349
FY21215
FY22466
FY23510
FY24561
FY25713
Per 100 Form 483s, training citations have settled near 9 to 12 at both drug and device sites

Citations of 21 CFR 211.25(a) or 820.25 per 100 Form 483s in that program. Fiscal 2021 rests on few forms. Our arithmetic on FDA's rows.

Drugs, 211.25(a)Devices, 820.25
05101520
FY18FY19FY20FY21FY22FY23FY24FY25

Our reading of the sources 5

Show the numbers
Drugs, 211.25(a)Devices, 820.25
FY1815.47.5
FY1914.57.8
FY2011.212.1
FY21209.9
FY229.411.5
FY238.69.7
FY2410.79.2
FY259.410
FDA's three 211.25(a) citations share the load: general qualifications, training for the job, and frequency

Citations per fiscal year, by FDA's short description

Training, education, experience overallOperations, GMPs, written proceduresGMP training frequency
FY2212257
FY2311258
FY24222711
FY25282514

Source 5

Show the numbers
Training, education, experience overallOperations, GMPs, written proceduresGMP training frequency
FY2212257
FY2311258
FY24222711
FY25282514
Procedures and investigations draw far more citations than training, and training sits beneath them

Fiscal 2025 citations on drug Form 483s by section of Part 211, top 14 of 47 by our sum. Section 211.25 here includes (a), (b) and (c).

211.22 Quality unit309
211.192 Production record review236
211.67 Equipment cleaning204
211.100 Written procedures201
211.160 Laboratory controls176
211.84 Testing of components161
211.68 Automatic equipment153
211.113 Microbiological control129
211.166 Stability120
211.42 Buildings105
211.165 Release testing104
211.63 Equipment design81
211.25 Personnel qualifications78
211.188 Batch records69

Our reading of the sources 5

Show the numbers
ItemValue
211.22 Quality unit309
211.192 Production record review236
211.67 Equipment cleaning204
211.100 Written procedures201
211.160 Laboratory controls176
211.84 Testing of components161
211.68 Automatic equipment153
211.113 Microbiological control129
211.166 Stability120
211.42 Buildings105
211.165 Release testing104
211.63 Equipment design81
211.25 Personnel qualifications78
211.188 Batch records69
How to read these numbers. Each figure counts citations as FDA coded them. FDA says the spreadsheets "are not a comprehensive listing of all inspectional observations", they leave out Form 483s prepared by hand, and they say nothing about severity or how the citation came to be. They count findings that reached a form, so a training gap explained during the inspection may never appear. Do not turn any of this into a "percent of inspections with a training finding". FDA does not publish that.
09 · What letters and inspectors wrote

GMP training warning letters and MHRA examples, in the regulators' own words

In shortA warning letter is FDA's formal letter to a firm, issued only for significant violations.40 These letters usually fault a program: training that does not happen, records that cannot be found, a revision rolled out with no plan, retraining with no evidence. MHRA's published examples read much the same. All quotations below come from the regulator's own copy.

LetterThe kind of firmWhat FDA wroteThe lesson for training evidence
728537, August 7, 202641Sterile compounded productsA significant change to a visual inspector procedure was not managed "through formal change control or a timely requalification plan". "You did not perform a root-cause analysis for why inspectors continued performing critical visual inspections for approximately three months after the SOP revision without meeting the new standard."This is the join: work carried on after a revision changed the rule
720374, March 16, 202628Contract testing laboratory"CGMP training is not regularly performed at your firm as required by your established procedure. During the inspection, you could not provide records of CGMP training."Your own procedure sets the bar, and a record you cannot produce counts against you
709859, July 2, 202542Drug manufacturer"Although you identified the root cause as related to human error, no corrective action or training was implemented to prevent recurrence." The response lacked documentation "to show all analysts who perform this test method have been retrained".Name who was retrained, on what, by when, and be able to show it
706371, July 2, 202543Sterile drug manufacturerThe response "does not address the lack of oversight of the operators' aseptic practices and evaluate the insufficiencies in their training". "You lack a procedure for inspector training."Practice on the floor tests the training behind it
700180, April 7, 202544Over-the-counter drug makerThe quality unit failed to ensure "Operators received adequate CGMP training" (21 CFR 211.25(a)).FDA hangs training on the quality unit
701206, April 1, 202545Drug manufacturerThe response did "not provide any supporting documentation about the CAPAs that were described, such as updated procedures and training records."A CAPA is believed when the training record arrives with it

We chose these six to show the range, so they do not measure how common each fault is. Each letter also covers other violations.

MHRA's GMP examples of version control, matrices and sign-off

Three versions behindTraining on the deviation procedure "had not been performed since July 2011, this had been to version 2 when version 3 had already been issued. The company were currently at version 5".46
Read and understand, nothing elseAn operative "signed off as trained in raw material assessment based on read and understand questionnaire with no practical assessment".34
No check that the list was complete"There was no system for confirming that all personnel that required training had been trained."34
People missing from the matrixTraining for key roles "was not clear as they were not identified within the training matrix".46
An assessment with no pass markQuestions were asked after each module, but "there was no clearly defined pass mark therefore it could not be confirmed that the personnel understood the training".46
A new starter nobody could seeA new technician "started unsupervised manufacture but was not formally authorised", "invisible to product release staff".46
In MHRA's dosage-form inspections, personnel findings were mostly graded major or other, and grew from 2015 to 2016

Number of deficiencies in the Personnel group, by grade. Critical: 0 in 2015, 8 in 2016. Older data: these reports cover dosage forms only.

OtherMajorCritical
2015 (303 inspections)9541
2016 (324 inspections)15042

Source 34,46

Show the numbers
OtherMajorCritical
2015 (303 inspections)95410
2016 (324 inspections)150428
10 · The common errors

Nine ways GMP training records fail against the work, and why each one happens

In shortMost failures come from the design of the process. Due dates set after effective dates, matrices that miss people, verifiers no one checks, and retraining used as an automatic fix all repeat. Reading these as a list of system weaknesses tells you where to look first.

ErrorWhy it happensWhat catches it
1. Due date after effective dateThe LMS default runs from assignment, or nobody set itCompare due and effective dates on every open revision
2. Work before completionShift pressure, and nothing in the batch system stops itJoin each signature to the transcript; a system stop for the future
3. Wrong revision readApproval date used in place of effective dateUse the version history only, and cite the row
4. Verifier left outAttention stops at the operatorCount verifiers in every check
5. Name mismatchInitials, accents, married names, two people with one nameJoin on employee number through HR
6. Matrix gapsCleaners, contractors, maintenance and QA staff missing from the role listCompare who entered or signed with who is on the matrix
7. Qualification past its dateA separate register, worked out by hand, and leave or schedule clashesCheck at the time of each entry, and book the next run in time
8. Reading stands in for doingRead and understand is cheap and quickSort revisions by risk. Observe anything with a practical skill.
9. Retraining as the reflex fixIt closes a CAPA fast, and the cause staysAsk why the process allowed it. Check effectiveness.
"Lack of training" is often where a root cause analysis should start. MHRA writes, of clinical inspections, that inspectors "are often presented with 'human error' or 'lack of training' as the root cause, but these are commonly not the overall root cause of an issue".47 FDA has likewise criticized a letter recipient who named human error and did nothing further.42 If your CAPA says "retrain" every time, your training record grows and your problem stays.
Most of these errors stay hidden from an LMS and show only when records are joined

Where each error can be seen, by our reading of the steps above

HiddenPartly visibleClearly visible
LMS aloneBatch record aloneJoined recordsFloor observationDue date after effective datePartly visibleHiddenClearly visibleHiddenWork before completionHiddenHiddenClearly visiblePartly visibleWrong revision readHiddenHiddenClearly visibleHiddenVerifier left outHiddenPartly visibleClearly visibleHiddenName mismatchHiddenHiddenClearly visibleHiddenMatrix gapsPartly visibleHiddenClearly visiblePartly visibleQualification past its dateHiddenHiddenClearly visiblePartly visibleReading stands in for doingPartly visibleHiddenHiddenClearly visibleRetraining as the reflex fixPartly visibleHiddenPartly visiblePartly visible

Our reading of the sources 6,2,34,46

Show the numbers
LMS aloneBatch record aloneJoined recordsFloor observation
Due date after effective datePartly visibleHiddenClearly visibleHidden
Work before completionHiddenHiddenClearly visiblePartly visible
Wrong revision readHiddenHiddenClearly visibleHidden
Verifier left outHiddenPartly visibleClearly visibleHidden
Name mismatchHiddenHiddenClearly visibleHidden
Matrix gapsPartly visibleHiddenClearly visiblePartly visible
Qualification past its dateHiddenHiddenClearly visiblePartly visible
Reading stands in for doingPartly visibleHiddenHiddenClearly visible
Retraining as the reflex fixPartly visibleHiddenPartly visiblePartly visible
11 · What is at risk

What a training gap puts at risk: the product, the inspection clock and trust in every other record

In shortThree things are at stake: whether the work was done right, how the inspection goes, and how much the inspector believes everything else. A gap with a good explanation may cost nothing. A gap found by the inspector, with no explanation ready, can become a citation, and a pattern can reach a warning letter.

What is at riskHow it happensWhat the sources say
The product and the patientAn operator follows the old rule. Sterile work is the sharpest case.Annex 1 ties training to "the potential safety implications to the patient".13 21 CFR 211.25(b) ties supervision to "safety, identity, strength, quality, and purity".1
The inspection clockRecords take hours to assemble while the inspector waitsRecords must be "readily available" (211.180(c))48; a delay without reasonable explanation "may be considered delaying the inspection".4
A Form 483 citationThe gap reaches the closing meetingFDA generally allows 15 business days for a response before it decides on a warning letter.40
A warning letterA pattern, or a weak responseFDA issued 105 drug quality warning letters in fiscal 2024: 41 domestic, 64 foreign.39 Its fiscal 2025 report prints no such count.49
A repeat on the recordThe same weakness comes back at the next visitOne letter calls a deficiency "a repeat deficiency from the FDA inspections conducted in May 2021, September 2023, and September 2024".41
CredibilityOne surprise makes the next ten answers worth checking harderNo published measure. Ask anyone who has hosted an inspection.

Same two dates, two endings, depending on who sees them first

You find it first
In the first answer
Disclosed, with the deviation
Evidence ready
Impact, root cause, CAPA
Inspector's next move
Reads, may test the CAPA
The inspector finds it first
In the first answer
Nothing said
Evidence ready
Hunted for afterward
Inspector's next move
Asks how many others, and widens

Our illustration of a common pattern. No regulator publishes a rate for it.

Disclosure is a decision for QA. Whether, when and how to bring a gap forward depends on the question asked, your procedures and sometimes counsel. A prepared answer must be accurate and complete for what was asked. Software can find the gap and its record. It should never choose what an inspector is told.
12 · AI and training evidence

What FDA, EMA and the draft Annex 22 expect when AI reads GMP training records

In shortDate arithmetic needs no AI. AI helps read scanned batch records, match messy names and draft a plain letter, and a person must check each. FDA's January 2025 draft excludes uses that do not affect quality or study reliability. Draft EU Annex 22 says large language models (LLMs), the kind of AI behind chat assistants, should not be used in critical GMP applications. It is still a draft, and whether your use is critical is a judgment you must document.

SourceWhat it saysWhat it means for training evidence
FDA AI draft guidance, January 2025Covers AI producing information to support regulatory decisions on safety, effectiveness or quality. Does not address "operational efficiencies (e.g., internal workflows, resource allocation, drafting/writing a regulatory submission) that do not impact patient safety, drug quality, or the reliability of results".50 Still a draft.Finding records for a QA reviewer sits near the excluded side. A tool deciding who may work would not.
Draft EU GMP Annex 22Applies to static models with deterministic output. Generative AI and LLMs "should not be used in critical GMP applications"; in non-critical uses, people with adequate qualification and training answer for outputs.51 Not adopted: EudraLex lists no Annex 22 on November 3, 2026.12Document your risk call. Keep the reading step reviewed and the decision human.
EMA workshop report, on Annex 22Consultation comments supported allowing LLMs and generative AI in GMP applications; the drafters have discussed a documented, risk-based control strategy, and "there may be viable pathways".52 No revised text is published. Inspectors' target for final text to the Commission: Q4 2026, a target only.53Expect the wording to move. Check it before you rely on either version.
EMA reflection paper and joint principlesEMA's paper, September 9, 2024, takes a risk-based view of AI across the medicine's lifecycle.54 EMA and FDA published ten guiding principles in January 2026.55Principles to design against, with no checklist for this task
Annex 11 and GAMPAnnex 11, January 2011, is in force; its revision is a draft.12 ISPE's GAMP AI guide, July 2025, covers AI-enabled computerized systems in GxP areas.56Treat the tool as a computerized system with an intended use you can defend
FDA Computer Software AssuranceFinal, February 2026. Scope: computers and automated data processing systems in medical device production or the quality management system.57Written for device makers. A drug plant may borrow the thinking, but it is no authority there.
EU AI ActAnnex III point 4(b) lists AI "to monitor and evaluate the performance and behaviour of persons" in work relationships.58 Annex III duties apply from December 2, 2027.29 The AI literacy duty now asks providers and deployers to "take measures to support the development of AI literacy".29Ask counsel. A tool that checks people's records may fall within it, and works councils may also have a say.
Automate the reading and the arithmetic first; keep judgment on gaps with people
How much time it takes by hand →
Automate first
Assist, review
Automate later
Keep with people
Reading recordsComparing datesMatching namesFinding the deviationDrafting the letterDeciding on a gapSigning the release
How much judgment the task needs →

Our reading of the sources 50,51

Show the numbers
ItemHow much judgment the task needs (0–1)How much time it takes by hand (0–1)
Reading records0.100.78
Comparing dates0.100.64
Matching names0.100.20
Finding the deviation0.800.71
Drafting the letter0.800.56
Deciding on a gap0.800.26
Signing the release0.800.10

Handwriting, missing records and tidy packs: what to test in any training evidence tool

Handwriting and scans. A misread initial can put the wrong person on a step. Every extracted name needs the image beside it, and a person checks the doubtful ones.

Records the tool never saw. A paper logbook or an old system can hold the one line that matters. Ask what happens when a source is missing: the honest answer is a visible "unknown".

A clean-looking pack. A tidy table can hide a wrong join. Sample the links by hand, and keep testing as the systems change.

Human accountability. ALCOA+ applies to what the tool produces as well.36 The name on the signature belongs to a person, and that person must be able to see the source of every line.

13 · Market and trend

Who sells GxP training software and why the inspection pressure is rising

In shortThe market sells validated LMS products and training modules inside quality suites. They are strong at assigning and recording. No reliable public market size turned up. The measurable pressure comes from FDA: 1,248 drug quality inspections in fiscal 2025, up from 972, with almost all of the rise at US sites.

1,248

FDA drug quality assurance inspections in fiscal 2025, against 972 in fiscal 2024.49

FDA, FY2025 report
105

drug quality warning letters in fiscal 2024, against 94 a year earlier, the newest count FDA's reports print.39,49

FDA, FY2024 report
713

drug Form 483s in FDA's fiscal 2025 file, against 561 the year before.5

FDA data
44 in 100 FDA drug quality inspections were abroad in fiscal 2025, after 56 in 100 a year earlier
44 in 100

were at foreign sites: 546 of 1,248. Foreign counts barely moved, from 540; US inspections rose from 432 to 702. Abroad, training records, batch records and the people who explain them may be in another language and time zone.

Source 49

Show the numbers
MeasureValue
were at foreign sites: 546 of 1,248. Foreign counts barely moved, from 540; US inspections rose from 432 to 702. Abroad, training records, batch records and the people who explain them may be in another language and time zone.44 of 100
What is soldWhat it does wellWhere it stops
Validated LMS for life sciencesAssignments, curricula, e-signature, reports on completionIt rarely reads who did which step
Training module in a quality suiteLinks SOP revisions to assignments, so new revisions trigger trainingThe batch record usually lives in another system
Electronic batch record checksCan block a signature when training is missing, where it is connectedForward only: it cannot speak for last year's batches
Consultants and mock inspectionsJudgment, and practice under pressureDays of billable time, and nothing stays running

No public figure: we found no reliable market size for GxP training software, and we do not repeat press-release estimates. We name no vendors in this part. Ask each about the join.

14 · How teams do it today

Who answers a training request in an inspection today, step by step and hour by hour

In shortA small group reads four or five systems by hand while the clock runs. There is no public benchmark for how long it takes. Our own rough estimate for a single batch question is three to four hours, with the batch record and the transcripts taking most of it. Time your own.

Scribe, runner, training coordinator, QA lead: who touches an inspector's training request

QA

QA lead, inspection back room

Runs the back room during the inspection, reviews each answer and decides what goes out.

Cares about: finding the late one before the inspector does.
IH

Inspection host

Sits with the inspector, takes requests and hands over answers.

Cares about: no long silences and no surprises.
SC

Scribe

Writes each request as the inspector said it, with the time.

Cares about: the exact words, because a paraphrase changes the answer.
TC

Training coordinator, who runs the LMS

Pulls transcripts and runs the LMS day to day.

Cares about: records that are right and quick to find.
RN

Runner

Carries documents and people between rooms.59

Cares about: knowing exactly what was asked for.
HQ

Head of site quality

Answers for the outcome. Approves procedures and any disclosure with nothing on file.

Cares about: patterns across inspections.

Roles follow common practice: a front office with a lead, minute taker, subject experts and runner, and a back office where each document is checked first.59 Sites name them differently.

One batch question passes through six people and five record systems before anyone can sign
  1. 1Request logged

    The scribe writes the inspector's words and the time.

    Scribe0 min
  2. 2Scope set

    Which batch, dates and people does this cover?

    QA lead10 min
  3. 3Batch record read

    Every step, performer, verifier, time and page.

    QA specialist1 hour
  4. 4Revisions found

    Revision in effect at each step, from the document system.

    Document control30 min
  5. 5Transcripts and register

    Completion dates, media fill, gowning, Knapp.

    Training coordinator1 hour
  6. 6Gaps explained

    Deviations, CAPAs, leave and access records.

    QA specialist30 min
  7. 7Answer written and released

    Pack and letter, reviewed and signed, then to the front room.

    QA lead, then host30 min

Illustrative · replace with your own numbers

Show the numbers
StepWhat happensWhoTime
Request loggedThe scribe writes the inspector's words and the time.Scribe0 min
Scope setWhich batch, dates and people does this cover?QA lead10 min
Batch record readEvery step, performer, verifier, time and page.QA specialist1 hour
Revisions foundRevision in effect at each step, from the document system.Document control30 min
Transcripts and registerCompletion dates, media fill, gowning, Knapp.Training coordinator1 hour
Gaps explainedDeviations, CAPAs, leave and access records.QA specialist30 min
Answer written and releasedPack and letter, reviewed and signed, then to the front room.QA lead, then host30 min
The batch record and the transcripts take most of the hours on one batch question

Our estimate of the 3 to 4 hours, in hours, with QA's own decision time on top. Replace with your own timing.

Reading the batch record for who did each step1 hour
Pulling transcripts and qualifications1 hour
Finding the revision in effect on each date0.5 hours
Finding the record that explains a gap0.5 hours
Writing the pack and letter0.5 hours

Illustrative · replace with your own numbers

Show the numbers
ItemValue
Reading the batch record for who did each step1 hour
Pulling transcripts and qualifications1 hour
Finding the revision in effect on each date0.5 hours
Finding the record that explains a gap0.5 hours
Writing the pack and letter0.5 hours

In house, in a quality suite, or with outside help: three ways sites run this

WayHow it worksGood forWeak at
Spreadsheets and peopleTraining matrix in a workbook, requests answered by handSmall sites and few proceduresSpeed and repeatability, and the workbook may be its own record to control
LMS or quality suiteAutomated assignments and reports, batch joins by handThe program side, at any scaleThe join to the work, under time pressure
Outside readiness helpConsultants run mocks and sample records before a known inspectionAn independent eyeUnannounced visits, and everything between visits
Part B · See it working

Botminds GxP Training Compliance, on one inspector's question about one fictional batch

Part A described the work without naming a product. This part shows how Botminds does it for a sterile plant in the middle of an inspection, starting from the batch in the example at the top of the page. Every company, person, procedure number and record in the screens is sample data.

15 · One question, start to finish

10:31 am, day 2: from the scribe's log to a signed pack on batch VB-26-0917

In shortGrace Mensah, the QA lead, types the inspector's question. Six agents, software workers with one narrow job each, read the batch record, the procedure revisions and the training records. The pack opens with the two people who need her attention, each with the record that explains them. She decides both, signs, and a read-only pack reaches the front room 17 minutes after the question on the screen's clock.

1

The question goes in as the scribe wrote it

Plant 2 in Westport fills Veltrimab 150 mg/mL vials on Fill Line 2. It is day 2 of 4. Sam Patel, the scribe, has logged request R-14 from Ruth Calder, the lead inspector, word for word: "Show me that everyone who touched batch VB-26-0917 was trained on the SOP versions in effect when they did the work."

The first screen is a question box. It shows that it has read the scope as a batch, and three logged requests wait with their clocks.

What did the inspector ask? The question, read as a batch, and the three requests still open. The right side of the full screen holds the scribe's log.
2

Six agents read the records, and change none of them

The request reader sets the scope: September 16 to 18, 2026, everyone who performed or verified a step. The batch record reader goes through 24 pages and finds 9 steps and 8 people, joined by employee number. The SOP version resolver finds 9 procedures and notes that SOP-MFG-0262 revision 7 took effect 9 days before the work. The checker runs 18 training checks and 8 qualification checks.

Agents at work. Each step with what it found, and a note that nothing changes in the source systems.
3

"Not quite": the pack starts with what the inspector would find

The verdict comes first: 1 gap and 1 to confirm, 24 of 26 checks passed. Under "Found before the inspector", Lucas Moreau's card reads 1 day late. He capped vials at 2:20 pm on September 17. Revision 7 took effect September 8. He completed it September 18, assigned September 1, due October 8. Each statement carries a number that opens its record.

The second card is amber. Ciarán Doyle entered Grade A on September 16, day 12 past his 6-month media fill date, inside the 30-day window in the site's SOP-QA-0150 section 6.2.

The evidence pack, gaps first. Two cards, then one row per person, with a chip for each revision and qualification: green before the work, amber inside a window, red after.
4

The record behind the gap opens beside it

One click on the citation opens DEV-2026-0398. Lena Ortiz, the training coordinator, raised it September 22, and Omar Haddad closed it October 2. The record gives the facts: the torque checks on this batch were done every 30 minutes, as revision 7 requires, and were verified by Aoife Byrne, trained on revision 7 on September 4. No impact on product quality.

It also gives the root cause: the training due date was set 30 days after the effective date. CAPA-2026-0151 makes the batch record refuse a signature until training on the effective revision is complete.

The deviation on file. Highlights mark the passages the pack cites. The agent proposes how to use it, and the gap stays on the page whatever it finds.
5

Grace decides each gap, then signs with a stated meaning

She chooses "Disclose with DEV-2026-0398" for Lucas and "Confirm, inside the grace window" for Ciarán. Each decision records her name and time. Nothing can leave until every gap has a decision.

The sign screen restates what she is signing: 26 checks and 2 gaps with her decisions. She signs with the meaning "QA approved, release to the inspector". 21 CFR 11.50 asks a signed electronic record to show name, date and time, and meaning.24 The pack then becomes read-only, and Dana Okafor, the inspection host, carries it to the front room.

Approve and release. Signer, meaning and password. Sample data.
6

The letter answers in its first lines

"Short answer. 7 of 8 people completed training on the procedure revision in effect before the work. Lucas Moreau did not." The disclosure follows, with DEV-2026-0398 and the CAPA, and then the note on Ciarán Doyle. A table lists every person, step, procedure and completion date.

It was signed at 10:47 am, 17 minutes after the question on the screen's clock.

The response letter. Read-only once signed.
What a careful QA lead would still ask. The sample's window closed October 4, and Ciarán's next media fill is booked for October 14. The pack answers for September 16, which is what the inspector asked. A real QA lead would also check whether he has entered Grade A since October 4, and whether a 30-day window should exist at all (section 5).
Of 26 checks on this batch, two reached the QA lead, and one needed disclosure
Checks run26
Needing a decision2
Gap to disclose1

Fictional example from this guide

Show the numbers
StageCount
Checks run26
Needing a decision2
Gap to disclose1
16 · The other screens

The evidence matrix, trace, request log, training lookup, dashboard and check rules

In shortBehind the pack sit the full 26 rows, a picture of who did what under which revision, the log of every request, a lookup for any person on any date, a dashboard for the head of quality, and the rules your site sets. Each opens the record underneath.

Everyone on the batch record. Eight people. The red chip is the one late completion and the amber chip the grace window. The rest are green, and each chip opens its record.
Gaps with their explanation. The rule each was checked against, the suggested handling and QA's choices. "0 of 2 decided" holds the release back. SOP-QA-0150 is the sample site's own procedure; Annex 1 and FDA's 2004 guidance, which we read for this, set no such window.
Who did what, under which revision. Steps, people, then revisions and qualifications. The dashed red line is the late completion and the dashed amber line the window.
Evidence matrix. All 26 checks by step, with the batch record page, the training row and the version history a click away.
The request log. Seven requests by batch, equipment, procedure, process and person, each with its clock. R-16 has passed its target and waits for a QA check.
Training on a date, by person. Slide the date and the answer changes. The red stretch on the timeline runs from the effective date to the completion date.
Training on a date, by procedure. Who was trained on capping revision 7 on September 17: two yes, one not yet.
The dashboard. Minutes to each QA-approved pack against a 30-minute target, and what was found. Sample data for this inspection.
Seven items found in this sample inspection, and only one was training after the work
Names joined by employee number: 2Inside a grace window: 2Not trained, no access: 1Trained after the effective date: 1Trained after the work: 1
7found
  • Names joined by employee number2
  • Inside a grace window2
  • Not trained, no access1
  • Trained after the effective date1
  • Trained after the work1

Fictional example from this guide

Show the numbers
PartValue
Names joined by employee number2
Inside a grace window2
Not trained, no access1
Trained after the effective date1
Trained after the work1
Trained before the effective date, by area. The measure from section 2, month by month. Engineering and quality control microbiology show the amber cells a head of quality would ask about. Sample figures.
Check rules and approvals. Your procedures set these. Rules are versioned, and open packs re-check when one changes. A gap with no deviation needs a second approval.
17 · Roles, signatures, systems

The six training-evidence agents, what QA signs, and the systems they read

In shortSix agents each do one narrow job, and each has something it must never do. People decide every gap and sign every release. Source systems are read and never changed. Outcome figures here are design targets and our estimates, to be measured in the live solution.

Request reader to pack writer: each agent's job and its limit

AgentWhat it doesWhat it never does
Request readerSets scope, dates and people from the request as loggedNarrows what the inspector asked. An unclear scope goes to a person.
Batch record readerLists each step, performer, verifier, time, page and procedureMatches a name by spelling alone
SOP version resolverFinds the revision in effect at each step, and flags recent changesUses the approval date
Training and qualification checkerChecks completion before the step, and media fill, gowning or Knapp at that momentCounts assigned or overdue as trained, or changes a record
Gap explainerLooks for the deviation, CAPA, leave or booking on file, and proposes how to present itRemoves a gap, or decides it
Pack writerBuilds the pack, with gaps first and every line cited, and a short letterEdits a pack after release

Grace, Omar, Dana and Lena: who signs what on a training pack

Fictional, from the sample data
GM

Grace Mensah · QA lead, back room

Decides each gap and signs the release.

"Show me who was late before the inspector does."
OH

Omar Haddad · head of site quality

Gives the second approval when a gap has no deviation on file, so nothing unexplained reaches an inspector on one signature. Approves the check rules.

"If we disclose something unexplained, I sign it too."
DO

Dana Okafor · inspection host

Reads released packs and carries them to the front room.

"I don't want to keep the inspector waiting, or surprised."
LO

Lena Ortiz · training coordinator

Answers follow-ups with the date lookup. Raised the deviation in this example.

"The record is right. Finding it fast is the hard part."

From batch records and transcripts to a signed evidence pack

Read, never changed

  • Executed batch records and logbooks
  • Learning system transcripts
  • SOP version history, with effective dates
  • Qualification register: media fill, gowning, Knapp
  • Deviations and CAPAs
  • Employee number and name from HR; access records on request

From your inspection team

  • The inspector's words, as logged
  • Your check rules and approvers
Agents read, join and check Every line points to its source, with the extract's print time
QA decides every gap
Agents change no record

What comes out

  • Evidence pack: person, step, revision, completion date, every line cited
  • Gaps found first, each with what is on file
  • QA-signed, read-only pack and response letter
  • A complete request log and audit trail
Where the records come from. Seven systems by category, each read-only. HR supplies identity fields only.

Design targets for one inspection request, and how they will be measured

18 min

median from the inspector's question to a QA-approved pack, against 3 to 4 hours by hand.

Design target; hours are our estimate
100%

of gaps reach QA with their explanation before the inspector sees them.

Design target
10×

the training requests one back-room team can answer in an inspection day.

Our estimate

Targets are design goals, to be measured in the live solution; a pilot on your own records should test them, and section 22 shows how. The sample run's 17 minutes is one fictional request.

Roles, audit trail and credentials to check with your own validation team

Enterprise controls. Role-based access, maker-checker decisions, versioned rules, a full audit trail of every agent step and human decision, and audit export. Botminds is SOC 2 Type II audited, and its information security is managed to ISO 27001.

What software cannot claim. GxP, 21 CFR Part 11 and EU Annex 11 cannot be certified for a product. These are controls that support your compliance. You validate your use, you define what is critical, and your people sign.

Where the draft AI rules touch this. Agents that read documents and draft may use large language models. Draft EU Annex 22 says such models "should not be used in critical GMP applications", and it is still a draft.51,12 Here agents find and arrange records, and a person checks and signs. Document your own risk call on that use, and ask us how each step works.

Part C · Are you ready to automate?

Late GMP training and slow inspection answers: what they cost you, what automating the evidence returns and how to test it

You run site quality, an inspection back room or a training team, or you answer for what happens when the inspector asks. This part is written for you: what errors and delay cost, what automating the join could return, whether your site is ready, and what to ask any vendor of GxP training software, including us.

18 · What it costs you

What slow training answers and late completions cost your site quality team

In shortTwo costs sit apart. Hours in the back room are certain, and you can time them. A citation or warning letter is rare and heavy, and you cannot predict it. Nobody publishes the cost of a training finding, so the numbers that matter are the ones you can measure in a week.

15 business days

to answer a Form 483 if you want FDA to review your response before it decides on a warning letter.40

FDA program, 2009
67

training citations under 21 CFR 211.25(a) on drug Form 483s in fiscal 2025, by our own sum; section 8 prints the method.5

Our tally of FDA data
About 3 months

a firm's visual inspection staff kept working after a revision raised the standard, in one letter FDA wrote in August 2026.41

FDA warning letter 728537
Reading records is where the hours on one batch question can come down

Hours for one batch training request, by hand and with the solution; 0.05 hours is 3 minutes. QA's time deciding and signing comes on top.

By hand (our estimate)With the solution (design estimate)
Reading the batch record1 hour0.05 hours
Pulling transcripts and qualifications1 hour0.05 hours
Finding the revision in effect0.5 hours0.05 hours
Finding the record that explains a gap0.5 hours0.05 hours
Writing the pack and letter0.5 hours0.1 hours

Illustrative · replace with your own numbers

Show the numbers
By hand (our estimate)With the solution (design estimate)
Reading the batch record1 hour0.05 hours
Pulling transcripts and qualifications1 hour0.05 hours
Finding the revision in effect0.5 hours0.05 hours
Finding the record that explains a gap0.5 hours0.05 hours
Writing the pack and letter0.5 hours0.1 hours
What nobody publishes. We found no public figure for hours per training request, how often training is completed after the work, what a training citation costs, or how accurate any AI tool is at this join. Vendors may quote their own. Ask how they were measured, and measure yours.

Timing one batch question and sampling 50 signatures: finding your own baseline in a week

CostWhere it hidesHow to find your number in a week
Back-room hours per requestQA, document control and training staff pulled off their jobsPick last quarter's batch and answer the question cold, with a stopwatch
Work done before trainingNowhere on an LMS reportSample 50 batch signatures and join each to its transcript by hand
Due dates after effective datesLMS defaults, set once and forgottenExport open assignments and subtract the effective date from the due date
Deviations for late trainingFiled under "human error" or similarSearch the quality system's text for training terms over 12 months
Retraining as a CAPATraining hours booked to CAPA, with repeatsCount CAPAs whose only action is retraining, then check for recurrence
Qualifications past their dateA register, a spreadsheet and a booking calendar that disagreeCompare airlock entries with register dates for one month
Outside readiness helpConsultant invoices under inspection budgetsPull the last two inspections' invoices

The surprise, the repeat finding and other training costs a calculator misses

The answer after a surpriseAn explanation given after the inspector found the gap has to work harder than the same one offered first.
The finding that comes backFDA notes when it sees something again: one letter calls a deficiency "a repeat" from inspections in 2021, 2023 and 2024.41
The people in the back roomFour days of checking dates by hand, under pressure, wears down the people you most need thinking clearly.
Your next inspection's scopeA weak quality system can widen what an inspector samples next time.
The operator who never knewSomeone who worked a day ahead of their training usually finds out in a deviation. The process let them.
19 · Your return

What faster training evidence returns when you count back-room hours, audit lookups and early finds

In shortPut in your own numbers. Every default is an assumption to replace. The calculator counts time alone, and takes away what the software would cost you. It leaves out the value of avoiding a finding, because nobody can promise that.

Six places training evidence automation can pay, with the formula for each

The back room

Inspection requests in minutes

Your people review a cited pack, in place of reading four systems.

inspections × requests × hours saved × hourly cost
Audits and follow-ups

Routine lookups by date

Customer audits, self-inspections and follow-up questions use the same join.

lookups × hours saved × hourly cost
Early finds

Gaps found in ordinary months

A late completion found this week costs less to explain than one found in an inspection next year.

gaps found early × investigation hours saved × hourly cost
Fewer gaps

A due date that cannot fall after the effective date

Measured gaps show which revisions and areas to fix first.

work done before training ÷ all checks, month by month
Outside help

Consultant days aimed at judgment

Paid experts spend their time on hard questions and leave the date checks to the system.

outside days moved × daily rate
Seeing it first

Knowing before the question

QA sees every gap with its record first. Real, and left out of the calculator.

gaps seen first by QA ÷ all gaps found

A calculator for your yearly hours back and what they are worth

Hours per request start from our estimate of 3.5 by hand, and half an hour including QA's review. Every other default is a placeholder.

Inspections
Everyday questions
Cost
Illustrative yearly value
Inspection request hours freed0
Lookup and investigation hours freed0
Time saved, valued$0
After the yearly cost$0

Formula: (inspections × requests × hours saved per request + lookups × hours saved + early finds × hours saved) × hourly cost − yearly cost. A site with one or two inspections a year and few lookups may find the time value small. The case then rests on seeing gaps first and on the ongoing measure, and you should judge those on your own pilot.

20 · Readiness check

Is your site's training data ready for an automated join? Eight questions and a reflection

In shortAnswer honestly, 0 to 2 on each. Your score suggests whether to build a baseline, pilot on one batch, or plan a rollout. Nothing you choose leaves this page.

1
How often the training question comes

How many inspections, customer audits and self-inspections ask for training evidence each year?

Why it mattersA rare question may not repay automation, though the monthly measure still might.
A strong answer"Six or more a year across the site, each with a dozen training requests."
2
A baseline for one batch

Have you timed answering "was everyone on this batch trained?" from a cold start?

Why it mattersWithout one, no vendor's number means anything.
A strong answer"Yes: three batches, stopwatch, by step."
3
Batch records a system can read

Are your executed batch records electronic, or good scans with legible signatures and times?

Why it mattersThis record names who did the work. Poor scans mean more human checking.
A strong answer"Electronic on two lines. Clean scans on the third."
4
One identity across systems

Can an employee number link the batch record, the LMS and the register?

Why it mattersName matching is where a silent wrong join begins.
A strong answer"HR number in all three, including contractors."
5
Effective dates you trust

Does your document system give an effective date for each revision, back as far as your batches go?

Why it mattersEvery check rests on this date. Migrated systems often lost it.
A strong answer"Yes, and we spot-checked the migrated records."
6
A written rule for each check

Do your procedures say what "trained before the work" means, including same-day training, verifiers and grace windows?

Why it mattersA tool can only apply a rule you have written and approved.
A strong answer"Yes, with QA's reasoning for any window."
7
Who decides and signs a disclosure

Is it clear who decides how a gap is presented, and who approves when nothing is on file?

Why it mattersThe tool will show you gaps. Your process must take it from there.
A strong answer"QA lead decides. Head of quality co-signs a gap with no record."
8
Validation, IT and works council ready

Do IT and quality know how they would assess a read-only AI tool, and have HR or employee representatives been told?

Why it mattersA tool that checks named people's records raises more than IT questions.
A strong answer"Risk assessment template ready. HR and works council briefed."
9
The month after the inspection · for reflection

If you could see, every month, the share of work done by people already trained on the revision in effect, what would you change first: due dates, the matrix, the batch system's checks, or how you run retraining? Not scored.

A low score means timing one batch question before anything else

0–6

Explore

Time one batch question, sample 50 signatures against transcripts, and check due dates against effective dates. Those three pay off before any software arrives.

7–11

Ready to pilot

Take closed batches, plant known gaps (section 22 plans it), and score what a tool catches and what your team caught. Fix the rule and identity problems the pilot shows up.

12–16

Ready to implement

Plan connections to your batch, learning, document, quality and HR systems, your approvers and rules, your validation of the use, and read access for your own QA.

21 · Questions for any vendor

Batch joins, wrong matches, gaps and signatures: questions for a GxP training software vendor

In shortAsk every vendor the same questions, us included. The answers show whether the tool joins training to the work, what it does when a name or a date is doubtful, whether a gap can ever vanish, and how you would measure it on your own records.

AskA good answerA warning sign
The join to the work
Show me who was trained on the revision in effect for this batch step, today, on my data.A live demo from an executed recordA completion report by course
Which date decides the revision?Effective date, with the history row cited"The latest version"
Do you check verifiers as well as performers?Yes, and it is your settingOperators only
When the record is doubtful
How do you match "C. Doyle" to a person?Through a stable number, shown on the pageFuzzy name matching with no human check
What happens with an unreadable signature or missing date?A visible unknown goes to a personA best guess, with a confidence score
What if a source system is down?The pack says which source is stale, with its timeIt uses the last copy without saying so
Gaps and honesty
Can anyone remove a gap from a pack?No. QA decides how to present it, and the decision is logged.An admin can filter it out
What does the tool write to my systems?Nothing. It reads."It tidies up records"
Can it be set so a date looks better than it was?No, and here is the audit trailHesitation
Compliance claims and AI
Are you Part 11 or GxP certified?No product can be. Here are the controls, and here is what you validate."Yes, fully compliant"
Which steps use a language model, and what does a person check?A step-by-step map and your own risk call under draft Annex 22"AI handles it"
What security credentials do you hold?Named audits and reports, and you can see themLogos with no report
Proof and scale
Will you run a blind test on closed batches with planted gaps?Yes. You keep the answer key.Demo data only
How does it work across sites with different systems and languages?One rule set per site, connections by system type, shown on your second site"Every site must first move to one LMS"
What happens with employee data?Minimum identity fields, role-based access, data processing terms readyFull HR feed
22 · A pilot

A ten-week pilot on closed batches: planted gaps, a stopwatch and a decision

In shortStart with closed batches and no live inspection. Time your baseline, plant known gaps with a QA colleague, run the tool, and compare. Decide on four numbers. If the pilot succeeds, run it monthly so the first live question finds a site that already knows its gaps.

  1. Weeks 0 to 2. Time three batch questions by hand. Write your rules down: what "trained" means, verifiers, same-day work, windows.
  2. Weeks 2 to 4. Connect read-only access to the batch, learning, document, register and quality systems for one line. Validate your intended use to your procedure.
  3. Weeks 4 to 7. Run ten closed batches with gaps a colleague planted in copies of the data, or known real ones. The person scoring holds the answer key.
  4. Weeks 7 to 9. Run a mock inspection with a scribe, a host and a clock. Log every request.
  5. Weeks 9 to 10. Decide on the numbers below, and write down why.
A ten-week pilot ends in a decision built on four numbers
Your teamWith the vendor
Baseline three batches; write your rules
Connect one line, read-only; validate your use
Ten closed batches with planted gaps
Score the results, reviewer against tool
Mock inspection on the clock
Decide, and record why
Week 0246810

Illustrative · replace with your own numbers

Show the numbers
ActivityFromTo
Baseline three batches; write your rules02
Connect one line, read-only; validate your use24
Ten closed batches with planted gaps47
Score the results, reviewer against tool58
Mock inspection on the clock79
Decide, and record why910

Planted gaps, wrong joins, citations and minutes: how to score a training evidence pilot

MeasureHowWhy
Planted gaps caughtCaught ÷ planted, by type, for the tool and for your reviewerA missed late completion is the failure that matters
Wrong joinsSample 100 person-to-step links by handA wrong name makes a false pass or a false gap
Citation validityOpen 100 of the pack's citations. Does the record say it?A citation that fails to prove the line is worse than none
Minutes to a QA-approved packRequest logged to signature, same questions, before and afterYour baseline, since no public one exists
Share trained before the workPassing checks ÷ all checks, by area and monthA running measure that a completion rate cannot give you

The first four numbers decide the pilot. The fifth keeps running afterward.

Deep questions to settle before you scale

Scope. Do you start with batches, equipment logbooks or procedures? A cleaning logbook or a laboratory run may be simpler to prove first.

Retrospect. If the first run finds many old gaps, who assesses them, and how do they enter your deviation process? Agree this before you turn it on.

Windows and rules. Does a 30-day grace window survive a written justification, or is this your chance to retire it?

People. How will an operator hear about a gap? A tool that finds people must not become a tool for blaming them.

Prevention. Should the batch system refuse a signature, as the sample's CAPA does? What happens on a night shift when it does?

Other practices. Would the clinical or laboratory team use the same method on delegation logs or study records, and who would own that?

23 · Questions people ask

GMP training records questions: 21 CFR 211.25, read and understand, media fill and audit trails

In shortShort answers to what quality teams search for, each one complete on its own. Rules and statuses are as of November 2026.

What is GxP training compliance?

GxP training compliance means showing that each person doing regulated work was trained and qualified for it when they did it, on the procedure revision then in effect. It has two parts: running the training program, and proving the training for a specific piece of work. A completion report covers the first part. The second needs training records joined to the work.

What are the 21 CFR 211.25 training requirements?

FDA's drug manufacturing rule at 21 CFR 211.25(a) says each person shall have the education, training and experience to perform the assigned functions. Training must cover the particular operations the person performs and current good manufacturing practice (CGMP), including written procedures, given by qualified individuals on a continuing basis and with sufficient frequency. Paragraph (b) covers supervisors and (c) requires enough qualified people.

Must employees be trained before an SOP's effective date?

The texts we read do not state that in those words: the US drug, laboratory, trial and biologics sections, EU GMP Chapters 2 and 4 and Annex 1, ICH Q7 and E6(R3), and EU GDP. We did not read other countries' rules. FDA asks for training that enables people to perform their assigned functions, and EU GMP asks that the effective date be defined. In practice, finish the revision before doing work under it: set the due date on or before the effective date and write your rule down, because an inspector will hold you to it.

What is read and understand training?

Read and understand training means the person reads a procedure and signs that they understood it. It is quick and suits minor changes. It has limits for practical skills: the UK regulator MHRA has cited an operative signed off on a read and understand questionnaire with no practical assessment. Decide by risk which revisions need an observed demonstration.

How long should GMP training records be kept?

The rules set no single figure for training records in every case. 21 CFR 211.180 requires batch-associated production and control records for at least one year after the batch's expiration date, and training that supports them is commonly kept at least as long. Your own retention schedule, and the longest-lived batch a person worked on, should set your figure. Check national rules and ask your own quality team.

How often must aseptic operators do a media fill?

EU GMP Annex 1 says each operator should take part in at least one successful aseptic process simulation each year, and about every six months for manual operations. FDA's 2004 guidance says everyone authorized to enter the aseptic room should take part in a media fill at least once a year. Your own procedure may set a shorter interval, and it binds you too.

Is there a grace period for media fill qualification?

We found none in EU GMP Annex 1 or FDA's 2004 aseptic guidance, reading their personnel and media fill sections and searching the full text of each. A window is a site's own rule. It may be defensible where your interval is stricter than the regulator's minimum. Write the reasoning down, have QA approve it, and be ready to show how often it was used. On a manual aseptic line, where Annex 1 itself says about every six months, it is harder to defend.

What are the most common GMP training findings?

FDA's Form 483 data has three recurring 211.25(a) citations: overall education and training, training in the particular operations and written procedures, and how often GMP training occurs. Together they drew 67 citations on drug forms in fiscal 2025, by our own sum of the Frequency column in FDA's file. Warning letters and MHRA examples add missing records, versions out of date, and matrices that leave people out.

How long do you have to respond to a Form 483?

A Form 483 is FDA's list of observations from an inspection, and a response is voluntary. FDA's 2009 program says it will generally allow 15 business days and review responses received in that time before deciding on a warning letter. A response that arrives later will not ordinarily delay a warning letter. Include your evidence, such as updated procedures and training records.

Can retraining be the corrective action for a training finding?

It can be part of one. On its own it often misses the cause. The UK regulator MHRA writes that "human error" or "lack of training" are commonly not the overall root cause. Ask why the process allowed the event, whether others are affected, and how you will check effectiveness, as EU GMP Chapter 2 asks you to do for training.

How is GCP training different from GMP training?

Good clinical practice (GCP) training ties to a trial and a delegated task, so the record that names who did the work is the delegation log rather than a batch record. ICH E6(R3) asks that trial-related training correspond to what the delegated activity needs. The UK regulator MHRA says the frequency of GCP training is not defined in the regulations, so organizations set their own. Refreshers every two or three years are local rules.

What does an LMS for life sciences do, and what can't it do?

A life sciences LMS, or learning management system, assigns courses, tracks completions, handles electronic signatures and reports status. It usually has no record of who signed which batch step at what time, so it cannot say alone whether someone was trained for specific work. That answer needs the batch record and document history as well.

Can AI check training records for an FDA inspection?

Software can read records, match people and compare dates, and a person should check and sign. FDA's January 2025 draft on AI excludes operational uses that do not affect quality or study reliability. Draft EU Annex 22 says large language models should not be used in critical GMP applications, and it remains a draft. Document your own judgment about the use, and validate it for what it does.

Can software be 21 CFR Part 11 compliant or GxP certified?

No product can be certified for GxP, Part 11 or Annex 11. Those duties fall on the regulated company. A product can carry controls that support your compliance, such as audit trails, signatures showing name, time and meaning, and access controls. You validate your use.

24 · One-page summary

The eight-step GxP training check, the November 2026 rules and 14 terms, on one page

Print this page

In shortEight steps from due date to monthly measure, where each rule stands as of November 2026, the readiness bands, and the terms this guide uses.

The method
  1. Set the due date on or before the effective date, every time.
  2. For each step, read who performed and who verified it, by employee number.
  3. Find the revision in effect at that moment from the version history.
  4. Check completion before the work. Assigned or overdue never counts.
  5. Check media fill, gowning and Knapp at that moment, against your written rule.
  6. List the gaps first, each with the record that explains it. Never remove one.
  7. A named QA lead decides and signs, with the meaning of the signature.
  8. Measure the share trained before the work, every month, by area.

Readiness: score 0–2 on eight questions: 0–6 explore · 7–11 pilot · 12–16 implement.

As of November 2026: 21 CFR 211.25 in the 2025 CFR · EU GMP Chapter 2, 2014; Annex 1 fully applicable, per the Commission, since August 25, 2024 · ICH E6(R3): EU July 23, 2025, Annex January 2 15, 2027; FDA September 2025 · FDA QMSR in effect February 2, 2026 · FDA's AI guidance a draft · Chapter 4, Annex 11 and Annex 22 changes still drafts · AI Omnibus in force July 27, 2026.

14 terms
GxP: GMP, GCP, GLP, GDP
Good practice rules for manufacturing, clinical trials, laboratories and distribution.
SOP
Standard operating procedure: the written instruction.
Revision
A numbered version of an SOP.
Effective date
The day a revision becomes the rule.
Read and understand
Training by reading and signing.
LMS
Learning management system, which assigns courses and records completions.
Training matrix
A table of roles against required courses.
Media fill or APS
Aseptic process simulation: a sterile-filling rehearsal with nutrient liquid.
Gowning qualification
A check that a person can dress for a cleanroom without contaminating the gown.
Knapp
A statistically based method for evaluating visual inspection of filled units.
Form 483
FDA's list of observations, given at the close of an inspection.
CAPA
Corrective and preventive action, with a check that it worked.
Back room
Where staff find, check and log requested records.
ALCOA+
Attributable, legible, contemporaneous, original, accurate; plus complete, consistent, enduring, available.
25 · Sources

Sources

Accessed November 2026. Regulatory status statements are as of November 2026. Warning letters are cited from FDA's own copies, for what each letter says.

  1. 21 CFR 211.25, Personnel qualifications, 2025 edition (revised as of April 1, 2025), the newest on govinfo. govinfo.gov
  2. EudraLex Volume 4, EU GMP Part I, Chapter 4 Documentation, section 4.3, in operation since June 30, 2011. health.ec.europa.eu
  3. European Commission, Guidelines on Good Distribution Practice of medicinal products for human use, 2013/C 343/01, section 2.4. publications.europa.eu
  4. FDA, Circumstances that Constitute Delaying, Denying, Limiting, or Refusing a Drug or Device Inspection, guidance, Revision 1, June 2024, section III.C. fda.gov
  5. FDA, Inspection Observations, Excel files for fiscal 2018 to fiscal 2025 (inspections ending by September 30, 2025). Counts by row are FDA's; the sums and rates are our arithmetic. FDA notes that hand-prepared Form 483s are not in the files. fda.gov
  6. 21 CFR 211.188, Batch production and control records, 2025 edition. govinfo.gov
  7. ICH, E6(R3) Guideline for Good Clinical Practice, Step 4, January 6, 2025: sections 2.1, 2.3, 3.4, 4.3.2 and Appendix C. database.ich.org
  8. 21 CFR 58.29, Personnel, good laboratory practice, 2025 edition. govinfo.gov
  9. 21 CFR 600.10, Personnel, biological products, 2025 edition. govinfo.gov
  10. ICH Q7, Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients, section 3.12. database.ich.org
  11. EudraLex Volume 4, EU GMP Part I, Chapter 2 Personnel, sections 2.10 to 2.14, in operation since February 16, 2014. health.ec.europa.eu
  12. European Commission, EudraLex Volume 4 page, read November 3, 2026: Annex 11 at its January 2011 revision, no Annex 22, Annex 1 "fully applicable since August 25, 2024". health.ec.europa.eu
  13. EudraLex Volume 4, Annex 1, Manufacture of Sterile Medicinal Products, C(2022) 5938, August 22, 2022: sections 7.3 to 7.6, 9.38 and 9.39. health.ec.europa.eu
  14. EMA, ICH E6 Good Clinical Practice scientific guideline page: principles and Annex 1 in effect July 23, 2025; Annex 2 in effect January 15, 2027. Read November 3, 2026. ema.europa.eu
  15. FDA, E6(R3) Good Clinical Practice, final guidance, September 2025. fda.gov
  16. EU Clinical Trials Regulation 536/2014, Article 49, as read on legislation.gov.uk. legislation.gov.uk
  17. 21 CFR 312.53, Selecting investigators and monitors, 2025 edition. govinfo.gov
  18. FDA, Good Laboratory Practice for Nonclinical Laboratory Studies, proposed rule, 81 FR 58341, August 24, 2016. No final rule found; the 2025 CFR keeps the older text. We could not read a current regulatory agenda entry for this rule. govinfo.gov
  19. FDA, Agency Information Collection Activities: Good Laboratory Practice Requirements for Nonclinical Laboratory Studies, Docket FDA-2026-N-3532, FR Doc. 2026-08371, scheduled for April 30, 2026. public-inspection.federalregister.gov
  20. UK Good Laboratory Practice Regulations 1999, S.I. 1999/3106, Schedule 1, which sets out the OECD principles, test facility management section. legislation.gov.uk
  21. FDA, Quality Management System Regulation final rule, 89 FR 7496, February 2, 2024: clause 6.2 of ISO 13485 on competence. govinfo.gov
  22. 21 CFR 820.25, Personnel, 2025 edition: the device text before the Quality Management System Regulation took effect. govinfo.gov
  23. FDA, Quality Management System Regulation page: rule in effect February 2, 2026, inspections under Compliance Program 7382.850. fda.gov
  24. 21 CFR 11.10(i) and 11.50, electronic records and signatures, 2025 edition. govinfo.gov
  25. EudraLex Volume 4, Annex 11, Computerised Systems, revision January 2011, section 2. health.ec.europa.eu
  26. Greenlight Guru, Understanding ISO 13485 Training and Competency Requirements, which reproduces clause 6.2 of ISO 13485:2016. A vendor's article, used because ISO's own text is paid. greenlight.guru
  27. FDA, Compliance Program 7356.002, Drug Manufacturing Inspections, implementation date October 17, 2022. fda.gov
  28. FDA warning letter MARCS-CMS 720374, March 16, 2026. fda.gov
  29. Regulation (EU) 2026/1744 (AI Omnibus), in force July 27, 2026: Annex III duties from December 2, 2027; Article 1(5) on AI literacy. publications.europa.eu
  30. European Commission, stakeholders' consultation on EudraLex Volume 4: revised Chapter 4, revised Annex 11 and new Annex 22, July 7 to October 7, 2025. health.ec.europa.eu
  31. PharmOut, GMP SOP Writing 101: What is an SOP Effective date? (consultancy guidance, quoting the PIC/S GMP guide). pharmout.net
  32. FDA, Sterile Drug Products Produced by Aseptic Processing: Current Good Manufacturing Practice, guidance, September 2004: sections on personnel and media fills. Nonbinding. fda.gov
  33. Also read, 2025 edition: 21 CFR 211.22, 21 CFR 211.100, 21 CFR 58.31; and ICH Q10.
  34. MHRA, GMP Inspection Deficiency Data Trend 2016, dosage forms only. gov.uk
  35. FDA, Data Integrity and Compliance With Drug CGMP: Questions and Answers, December 2018, question 16. fda.gov
  36. MHRA, GXP Data Integrity Guidance and Definitions, March 2018, section 3.10. gov.uk
  37. ISPE Pharmaceutical Engineering, Evaluation of Visual Inspection in Parenteral Products. ispe.org
  38. MHRA Inspectorate blog, Making GCP training relevant and applicable: it's not just for clinical staff, November 5, 2018. mhrainspectorate.blog.gov.uk
  39. FDA, CDER Office of Pharmaceutical Quality, FY2024 Report on the State of Pharmaceutical Quality, version of September 2025 (an August 2025 version gave different inspection counts). fda.gov
  40. FDA, Review of Post-Inspection Responses, 74 FR 40211, August 11, 2009. govinfo.gov
  41. FDA warning letter MARCS-CMS 728537, August 7, 2026. fda.gov
  42. FDA warning letter MARCS-CMS 709859, July 2, 2025. fda.gov
  43. FDA warning letter MARCS-CMS 706371, July 2, 2025. fda.gov
  44. FDA warning letter MARCS-CMS 700180, April 7, 2025. fda.gov
  45. FDA warning letter MARCS-CMS 701206, April 1, 2025. fda.gov
  46. MHRA, GMP Inspection Deficiency Data Trending 2015, dosage forms only. gov.uk
  47. MHRA GCP Inspectorate, Guidance for Formulating Responses to GCP Inspection Findings, version 3. gov.uk
  48. 21 CFR 211.180, General requirements for records, 2025 edition. govinfo.gov
  49. FDA, CDER Office of Pharmaceutical Quality, FY2025 Report on the State of Pharmaceutical Quality, June 2026: 1,248 drug quality assurance inspections, 702 in the U.S. and 546 foreign; 972 in FY2024, 432 and 540. Outsourcing facilities are excluded. fda.gov
  50. FDA, Considerations for the Use of Artificial Intelligence to Support Regulatory Decision-Making for Drug and Biological Products, draft guidance, January 2025, section II. fda.gov
  51. Draft EU GMP Annex 22, Artificial Intelligence, joint European Commission and PIC/S consultation, July 7 to October 7, 2025, section 1. picscheme.org
  52. EMA, report of the multistakeholder workshop on Annex 22, EMA/156789/2026, workshop of June 30, 2026. ema.europa.eu
  53. EMA, 3-year work plan of the GMDP Inspectors Working Group, 2026 to 2028. ema.europa.eu
  54. EMA, Reflection paper on the use of artificial intelligence in the medicinal product lifecycle, adopted September 9, 2024. ema.europa.eu
  55. EMA and FDA, Guiding principles of good AI practice in drug development, January 2026. ema.europa.eu
  56. ISPE, GAMP Guide: Artificial Intelligence, July 2025. ispe.org
  57. FDA, Computer Software Assurance for Production and Quality Management System Software, final guidance, February 2026. Scope: computers and automated data processing systems in medical device production or the quality management system. fda.gov
  58. Regulation (EU) 2024/1689, the AI Act, Annex III, point 4. publications.europa.eu
  59. Thomas Peither, GMP Inspections: Organisation of the Front and Back Office, GMP Publishing LOGFILE 28/2021, July 12, 2021. gmp-publishing.com
Next step

See it on one of your own executed batch records.

Explore the solution, or bring one executed batch record with its training and qualification records, and we will build one evidence pack with you, every line opening the record it rests on.

botminds.ai The complete guide to GxP training compliance · November 2026. Northwind Bio, Plant 2 Westport, Veltrimab, batch VB-26-0917, every person, procedure number, deviation and figure in the example and the screens are fictional. Regulatory status is as of November 2026; check the sources before relying on it. This guide is general information and is not legal advice. Software cannot itself be GxP compliant or certified; it can carry controls that support your compliance.