A drug lab tests a batch and one result lands outside its limit. Did the test go wrong, or did the batch? An out-of-specification investigation, or OOS investigation, answers that question with evidence, on the record, before anyone decides the batch's fate. Its quieter cousin, the out-of-trend or OOT result, sits inside the limit but off the path that earlier lots followed.
This guide is for anyone who runs, signs or pays for this work in drug and biotech companies: quality control (QC) analysts and supervisors, quality assurance (QA) lab reviewers, stability leads, heads of quality, and the leaders deciding whether to automate it. No background needed.
Imagine you are the head of QC laboratories at Cobbleford Pharma, a mid-size drug maker with two plants. It is Tuesday, October 6, 2026. At 11:04 am the lab system flags one batch, lot CV26-0412, of Dravenzo 20 mg tablets: assay 93.1%, meaning the tablets seem to hold 93.1% of the drug the label promises. The limit starts at 95.0%. The lot is due to ship on October 14.
You could run the test again and hope. Instead you leave the tablets alone and read the record of the run. A check standard, a solution of known strength that shows whether the instrument reads true, came in low, and the pump's pressure wobbled, which labs call ripple.
The result
Assay
93.1%
Limit
95.0–105.0%
Earlier assays
312, none out
Lot status
On hold
The run behind it
Check standard
97.1%
Its limit
98.0–102.0%
Pump ripple
4.2%
Pump service
Overdue
A check standard failed right after the samples, on a pump past its service dateEvidence of a test problem, still to be testedand nothing yet says the tablets are fine.
The solutions prepared for the test are in the fridge, stable for 72 hours. You write down what you think happened and how you will test it, and QA approves that plan before anyone touches a vial.
A good investigation catches a failing test before it condemns a good lot, and it catches a failing lot before a passing retest hides it. Either way the first number stays on the record.
From the failing number to the batch decision: how OOS and OOT results are investigated and judged
What an out-of-limit result obliges a lab to do, what the US Food and Drug Administration (FDA) and the UK's Medicines and Healthcare products Regulatory Agency (MHRA) ask for, how retests, averages and outliers can mislead, what FDA's letters object to, and how teams work today, explained without selling anything. If you are new to quality control, start here.
01 · In plain words
What an OOS investigation is: finding out whether the test or the batch went wrong
Every batch of medicine is tested before it leaves the plant. A quality control lab, or QC lab, measures how much drug each tablet holds (the assay), what impurities are present and how fast the tablet dissolves. Each test has a limit written in advance, called a specification. Most results land comfortably inside. Now and then one does not, and that result is out of specification, or OOS.
An OOS result can mean two different things. The batch may be bad, and then it must be rejected before it reaches a patient. Or the measurement may be bad: a pump that stuttered, a contaminated solvent, a wrong dilution. Then the number says nothing about the batch, and throwing the batch away wastes good medicine. From the number alone nobody can tell which it is.
So the lab investigates. First it looks at the test itself, with the liquids prepared for the test, called solutions, kept aside: the raw data, the calculations, the instrument, the standards (materials of known strength), the analyst's method.
If that shows a clear test problem, the result can be set aside, with the reason on the record, and the sample tested again. If it shows nothing, the search widens to how the batch was made. FDA's rule, 21 CFR 211.192, says a failure "shall be thoroughly investigated, whether or not the batch has already been distributed".1
The temptation is to skip ahead. Testing again is easy, and a passing number feels like an answer. A lab that repeats a test until it passes and forgets the first result has learned nothing about the batch and may have shipped a bad one. FDA has a name for that: "testing into compliance".2 Most of the rules in this guide exist to stop that practice and still leave a fair way out for a test that did fail.
One failed assay, from the lab bench to the batch decision
The test runs and a result falls outThe analyst sees the number and keeps every solution. In the example, 93.1% against a limit starting at 95.0%.
The lab checks the test before it tests anything elseThe supervisor reads the raw data, checks calculations, instrument, standards and method, and interviews the analyst. This is Phase I, the step this guide centers on.
Any further testing follows an approved planA hypothesis is written down and tested, usually on the kept solutions. Running them through the instrument again, called re-injection, can point at the instrument.2
If the lab is cleared, the search moves to productionPhase II brings in the quality unit, the independent group that approves or rejects batches, along with production and engineering, and looks at other batches too.2
The quality unit decides and the record stays wholeRelease or reject, with every result kept, passing and failing, and a corrective action where a cause was found.1,2
What step 2 finds decides whether the case stays in the lab or moves to production. The people, company and figures in this example are fictional.
Why a passing retest proves little, and three other things newcomers get wrong about OOS
A passing retest does not cancel a failing test
If no error was found, FDA sees "no scientific basis for invalidating initial OOS results in favor of passing retest results". All results get reported and weighed.2
Rejecting the batch does not end the work
"Batch rejection does not negate the need to perform the investigation." The same cause may sit in other batches or other products.2
Too many lab errors are a finding of their own
FDA says "laboratory error should be relatively rare", and frequent errors suggest poor training, poor upkeep or careless work.2 One letter counts about 55 of 78 OOS results invalidated at one firm.3
A result inside the limit can still need an investigation
The EU asks that out-of-trend data be "addressed and subject to investigation".4 FDA also warns that a low assay still inside its limit "should also raise a concern".2
Assignable cause, reportable result, retest, resample: the words OOS work runs on
Assignable cause
An identified reason for the result. MHRA: "an identified reason for obtaining an OOS or aberrant/anomalous result".5
Reportable result
The final analytical result, defined in the written method and "derived from one full execution of that method, starting from the original sample".2
Retest
Analyzing more of the original, well-mixed (homogeneous) sample. FDA wants the maximum number of retests fixed in advance.2
Resample
Analyzing additional units or a new sample from the batch. MHRA's flowchart says it "should rarely occur".5
OOS, OOT and atypical results: three signals that carry three different duties
In shortAn OOS result is outside a written limit. An OOT result is inside the limit but off its expected path, usually on stability. An atypical result is inside the limit and looks odd, such as an unexpected peak on the instrument's trace. Only the first has a direct line to rejection and to a report to FDA on a fixed clock, and all three can be the early sign of the same problem.
OOS result
OOT result
Atypical result
Plain meaning
Outside the limit
Inside the limit, off the path
Inside the limit, looks wrong
Official wording
FDA: "all test results that fall outside the specifications or acceptance criteria" in applications, master files, compendia or set by the manufacturer.2
MHRA: "generally a stability result that does not follow the expected trend".5
MHRA: "still within specification but are unexpected, questionable, irregular, deviant or abnormal".5
Where the duty comes from
21 CFR 211.192 and 211.165(f).1,6 EU GMP 6.7(iv).4 ICH Q7 11.15.7
EU GMP 6.9 and 6.35.4 FDA, a footnote: much of the guidance "may be useful".2
MHRA's flowchart.5 FDA's caution on borderline results.2
Worked example, fictional
Assay 93.1% against 95.0–105.0%
Impurity B 0.31% against a limit of 0.50%, with a trend limit of 0.24%
An unknown peak under the reporting threshold
Reading the citations. 21 CFR is Title 21 of the US Code of Federal Regulations. EU GMP is the EU's guide to good manufacturing practice, the rules for making medicines. CGMP is FDA's term for current good manufacturing practice. ICH is the International Council for Harmonisation, where regulators and industry agree shared guidelines. An ICH text at Step 2 is a draft out for public consultation, and Step 4 is the final text.
FDA's guidance covers chemistry-based testing of drugs under its drug center, CDER, including chemistry tests on biotech products, and says it is "not intended to address biological assays" beyond a short discussion of chapter 111 of the US Pharmacopeia (USP), the US book of drug standards.2 MHRA's flowchart is wider: it adds microbiological investigations and batches for clinical trials.5 It also excludes in-process tests used to steer a process to its end point.5
An OOS result triggers every duty, while an OOT result leans on EU text and the lab's own procedure
What each kind of result asks of a lab, by our reading
Not askedCase by caseExpected in guidanceRequired by rule
InvestigateReject if confirmedTell the regulatorAdd to the trendOOS, release lotRequired by ruleRequired by ruleNot askedExpected in guidanceOOS, distributed lot or stabilityRequired by ruleRequired by ruleRequired by ruleExpected in guidanceOOT, stabilityExpected in guidanceCase by caseCase by caseExpected in guidanceAtypical, in specificationCase by caseCase by caseNot askedExpected in guidance
Our reading of the sources1,6,8,2,5,4 · our classification; your procedure and your market decide the detail
Show the numbers
Investigate
Reject if confirmed
Tell the regulator
Add to the trend
OOS, release lot
Required by rule
Required by rule
Not asked
Expected in guidance
OOS, distributed lot or stability
Required by rule
Required by rule
Required by rule
Expected in guidance
OOT, stability
Expected in guidance
Case by case
Case by case
Expected in guidance
Atypical, in specification
Case by case
Case by case
Not asked
Expected in guidance
A contract lab does not carry this alone. FDA gives a contract testing lab the same responsibility as a manufacturer, and says the lab should convey its data and findings to the manufacturer's quality unit, which starts Phase II when no clear lab error is found.2
03 · The rules, November 2026
21 CFR 211.192, FDA's OOS guidance of 2006 and 2022, MHRA's flowchart: what binds and what advises
Status as of November 3, 2026
In shortIn the US the binding text is short: 21 CFR 211.192 requires the investigation and 211.165(f) the rejection. FDA's OOS guidance, issued in October 2006 and revised in May 2022, explains how FDA reads them, and it is nonbinding. The UK's MHRA publishes a slide flowchart dated October 2017. EU GMP Chapter 6 names both OOS and OOT in text in operation since October 1, 2014.
Thirty-three years of OOS rules began with one court opinion, and the core text has barely moved
Feb 1993United States v. Barr Laboratories
A New Jersey federal court rules on retesting, resampling, averaging and outlier tests, and writes thirty business days for failure investigations. FDA still cites the opinion.
Jul 1993FDA's guide for inspecting QC labs
Tells investigators what the court ruled, says failure investigations should take 20 business days, and says the ruling is no binding precedent.
Oct 2006FDA's OOS guidance
Phase I in the lab, then a full-scale investigation.
Aug 28, 2013MHRA publishes its OOS page
Updated February 26, 2018. The flowchart inside is dated October 2017.
Oct 1, 2014EU GMP Chapter 6 revised
Adds an OOS and OOT procedure to the list of required documents.
Dec 2018FDA's data integrity Q&A
Invalidated data stays in the batch record.
Jul 2021FDA's Field Alert Q&A
Sets out when an invalidated result needs no three-day report.
May 2022FDA's OOS guidance, Revision 1
Quality unit wording, more on averaging and outliers.
May 21, 2026Survey by ECA, an industry body, first summary
169 responses. Its 2013 standard procedure is under revision.
Dec 2026ICH Q1 consolidated stability guideline
Planned Step 3 sign-off and Step 4 review. A plan.
Failure of a batch "shall be thoroughly investigated", extends to other batches and products that may be associated, with a written record including "the conclusions and followup".1
21 CFR 211.165(f)
Binding
Products failing standards or specifications "shall be rejected".6
21 CFR 211.160, 211.194
Binding
Deviations from lab procedures "recorded and justified"; records of complete data from all tests, reviewed by a second person.17,18
Field Alert Report within 3 working days when a distributed batch fails its specification.8
21 CFR 600.14
Binding for licensed biologics, products such as vaccines, blood products and therapeutic proteins
Biological product deviation report, "not to exceed 45-calendar days", when a deviation from established specifications on a distributed product may affect its safety, purity or potency.20
FDA OOS guidance
October 2006, Revision May 1, 2022. Nonbinding
The phases, retests, resamples, averaging, outliers and how to conclude.2,9
MHRA flowchart
Dated October 2017, on a page updated February 26, 2018
Phases Ia, Ib, II and III. "Details MHRA expectations" and is "complementary" to FDA's October 2006 guidance, so it predates the 2022 revision.13,5
EU GMP Chapter 6
In operation October 1, 2014
6.7(iv) a procedure for OOS and OOT; 6.9 "any out of trend or out of specification data should be addressed and subject to investigation"; 6.35 confirmed OOS or significant negative trend on marketed batches reported to authorities.4,21
ICH Q7
Step 4, November 10, 2000
For active ingredients, 11.15: any OOS "should be investigated and documented according to a procedure", and retesting follows a documented procedure.7
ICH Q1 draft
Step April 2, 2025; work plan of July 10, 2026 expects Step 3 sign-off and Assembly review for Step 4 in December 2026
Consolidates the stability guidelines. We found no final text on November 3, 2026, so treat it as a draft.14
What FDA's 2022 revision of the OOS guidance changed from 2006
FDA calls May 2022 a revision and publishes no list of changes that we could find, so we compared the two PDFs. Most of the text is the same. These are the differences a lab should read.2,9
Topic
October 2006
May 2022, Revision 1
Who decides
Quality control unit (QCU)
Quality unit (QU)
Blaming the lab
"It should not be assumed that OOS test results are attributable to analytical error"
"Should not be attributed to analytical error without completing an investigation that clearly establishes a laboratory root cause"
Outlier tests
May help estimate how discordant a result is, "in an auxiliary fashion"
"Solely in an informational capacity", with a footnote that outlier testing "should not be used to invalidate chemical assays", citing Barr
Averaging
One caution section
Cautions split: preparations from the original sample, and replicates from one final preparation
Borderline results
Inside the cautions
Its own heading, with a footnote to ICH Q1E on assay falling below its limit before expiry
Original data
"Should be retained"
"Must be retained (§ 211.180)", with a footnote to the December 2018 data integrity guidance
Field alerts
Report due unless the result is found invalid within 3 days
The same, with a footnote to the July 2021 Q&A
Other national texts follow the same lines. This guide states FDA, MHRA and EU text. Check your own market's inspectorate for local detail.
04 · Phase I step by step
The Phase I laboratory investigation: FDA's seven supervisor steps, and MHRA's Phase Ia and Ib
In shortFDA asks for a prompt, objective first look at the test, "before test preparations" are discarded where possible, with "no preconceived assumptions" about the cause. It lists seven things the supervisor should do. MHRA splits the same ground into Phase Ia, for obvious errors, and Phase Ib, for the checklist with the analyst and supervisor. FDA's text has no Phase Ia or Ib, so check which one your procedure means.
FDA's seven supervisor steps start with the analyst and end with a record that survives
1Discuss the method
Confirm the analyst's knowledge and that the correct procedure was followed.
Supervisor, analystInterview note, training record
2Examine the raw data
Chromatograms and spectra. Identify anomalous or suspect information.
SupervisorRun, audit trail
3Verify the calculations
Sound, appropriate and correct. Look for unauthorized or unvalidated changes to automated calculations.
SupervisorWorksheet, processing method
4Confirm the instrument
Performance, calibration and upkeep.
SupervisorLogbook
5Check standards and reagents
Right materials, meeting their own specifications.
SupervisorReagent and standard logs
6Evaluate method performance
Against validation and historical data.
SupervisorValidation report, LIMS history
7Document and preserve
All of the above, with the solutions kept.
Supervisor, QAInvestigation file
Source2 · FDA's list, in short form. The last label on each step is what a lab usually pulls for it, by our reading. A chromatogram is the trace the instrument draws of what a sample holds. An audit trail is a system's time-stamped log of who did what. A LIMS is the lab's results system, its laboratory information management system.
Show the numbers
Step
What happens
Who
Time
Discuss the method
Confirm the analyst's knowledge and that the correct procedure was followed.
Supervisor, analyst
Interview note, training record
Examine the raw data
Chromatograms and spectra. Identify anomalous or suspect information.
Supervisor
Run, audit trail
Verify the calculations
Sound, appropriate and correct. Look for unauthorized or unvalidated changes to automated calculations.
Supervisor
Worksheet, processing method
Confirm the instrument
Performance, calibration and upkeep.
Supervisor
Logbook
Check standards and reagents
Right materials, meeting their own specifications.
Supervisor
Reagent and standard logs
Evaluate method performance
Against validation and historical data.
Supervisor
Validation report, LIMS history
Document and preserve
All of the above, with the solutions kept.
Supervisor, QA
Investigation file
How FDA's Phase I maps to MHRA's Phase Ia and Phase Ib
Question
FDA guidance, May 2022
MHRA flowchart, October 2017
Obvious error, known at the time
Inside the analyst's duties in Phase I: spill, incomplete transfer, documented at once.
Phase Ia: "clear obvious errors", such as a power failure or a spilled sample.
Checklist with analyst and supervisor
Phase I, the seven steps.
Phase Ib, "restricted to data / equipment / analysis review only" at first.
Re-measuring kept solutions
Phase I: "Examination of the retained solutions should be performed".
Phase Ib, once "the hypothesis plan is documented". A later slide heads hypothesis testing "Applicable to Phase Ia and Phase II", so the deck is inconsistent here.
No lab cause
Phase II, the full-scale OOS investigation.
Phase II for failure and manufacturing investigation, Phase III for the wider impact and the batch decision.
MHRA's checklist is longer than FDA's seven steps and worth borrowing whichever regulator you answer to. It adds sample labels and chain of custody, storage before use, glassware and volumes, whether the correct specification was applied, visual appearance, other activity at the time, temperature and humidity in the room, other batches in the same analysis set, and any other OOS results on the same batch.5
Read the evidence before you name a cause: why FDA cares about the order of a Phase I
FDA asks for "no preconceived assumptions as to the cause".2 In practice the order is easy to lose. A supervisor who hears "the pump was acting up" on day one tends to read the logbook looking for the pump. Writing down each check, with its verdict and its record, before any hypothesis exists is a simple defense against that. It also protects analysts: a cause reached by evidence rarely ends with an unfair note saying "analyst error".
Why kept solutions matter. Analysts "should check the data for compliance with test specifications before discarding test preparations or standard preparations".2 Once the vials are in the waste, the best test of a lab-error hypothesis has gone with them. A good procedure says when each solution may be thrown away, and a reader should find the solution's stability time in the file.
05 · Re-inject, retest, resample
Re-injection, retest and resample: what each OOS test can prove, and how testing into compliance happens
In shortRe-injecting a kept solution tests the instrument. Retesting takes a fresh portion of the same sample and tests the sample's handling or preparation. Resampling goes back to the batch and is rare. Each has its own rule. FDA wants the maximum number of retests fixed in writing beforehand, because a batch below its limit can still throw a passing number if you test often enough.
Re-injection or re-measurement
Retest
Resample
What it uses
The same prepared solution
More of the original homogeneous sample, for example a new weighing from the same composite, a blend of many units.2
Other units from the sampling, or a new sample from the batch.2
What it can show
"Strong evidence that the problem should be attributed to the instrument", though such hypotheses "are difficult to prove".2
A sample handling problem, such as a dilution error, or the true value once a lab error is established.2
That the original sample was not representative or was poorly prepared.2
How many retests? FDA fixes the principle, and the number is yours to justify
FDA sets no number. It says the maximum "should be specified in advance", varies with the method's variability, "should be based on scientifically sound principles", and "should not be adjusted depending on the results obtained".2 MHRA says "papers have suggested 5, 7, or 9".5 Whatever you choose, the procedure must also say when testing stops and the batch gets judged.
The chart below shows why. Take a batch whose true assay is 94.6%, below a 95.0% limit, on a method with a standard deviation of 0.6%. One test has about a one-in-four chance of reading 95.0% or more by chance alone. Keep testing, and a pass becomes likely.
Test a failing batch often enough and a passing result will appear
Chance of at least one result at or above 95.0%, for a batch truly at 94.6%, method standard deviation 0.6%
25%1 test
44%2 tests
58%3 tests
77%5 tests
87%7 tests
Illustrative · replace with your own numbers · Normal distribution, independent tests. Each test: 25.2% chance of a pass. Replace the true value and the deviation with your own method's.
Show the numbers
Tests run
Chance of a pass
1 test
25%
2 tests
44%
3 tests
58%
5 tests
77%
7 tests
87%
One low assay written up two ways: the file an inspector questions and the file that holds up
Both versions start from one low assay on Talvoren 10 mg tablets at Cobbleford Pharma, a fictional company. Every value is invented, and no real firm or case is described.
The file an inspector questions
The file that holds up
First result
94.2%, limit 95.0%. Solutions discarded the same afternoon.
Analyst repeats the test without telling anyone: 94.4%, then 95.6%.
Supervisor reads the run. Nothing wrong found. Retest plan: three retests, second analyst, approved by QA first.
What was reported
95.6%. "Sample preparation error" written after the fact, with no evidence.
94.2%, 94.5%, 94.3%, 94.4%. All on the record.
Conclusion
Released.
Lab cleared. Result confirmed. Phase II opens, lot rejected, other lots reviewed.
The first file would fail on FDA's own words: "a strategy of repeated testing until a passing result is obtained, then disregarding the OOS results without scientific justification".2 FDA's data integrity Q&A adds that all data, "including obvious errors and failing, passing, and suspect data", must be in the CGMP records.11
Trial runs count. FDA also objects to using actual samples in system suitability runs (checks that an instrument is fit to start) and in test, prep or equilibration runs "as a means of disguising testing into compliance".11 An injection that never reached the report can still be a result.
06 · Averages and outliers
Can you average OOS results or use an outlier test? When FDA says yes and when it says no
In shortA method may define replicates as one reportable result, and then the average is the result. Averaging an original OOS with its retests "is not appropriate". An outlier test can tell you how far a value sits from the rest, and should not invalidate a chemical assay. It has no place at all in content uniformity (how evenly the drug is spread across single units), dissolution or release rate. A 1993 court opinion, known as Barr, still stands behind these lines.
Two sets of results both average 90%, and they tell opposite stories
FDA's own example: an assay with a specification of 90 to 110%
Set A: 89, 90, 91Set B: 80, 85, 105
70%80%90%100%110%91%105%
OriginalRetest 1Retest 2
Source2 · The first set tends to confirm the failure. The second shows high variability and may not be reliable.
Show the numbers
Result
Set A: 89, 90, 91
Set B: 80, 85, 105
Original
89%
80%
Retest 1
90%
85%
Retest 2
91%
105%
Situation
FDA's position
Replicate injections from one preparation, written in the method
"One test and one result", with limits on variability in the method. If those limits fail, the results should not be used.2
A series of full assays, written in the method as one reportable result
May be appropriate. If some are OOS, some pass, and all are within known variability, the passing ones "are no more likely to represent the true value", so treat the average as OOS even if it passes.2
The original OOS averaged with retests or resamples
"Not appropriate because it hides variability among the individual results."2
Content uniformity or blend uniformity
Averages are inappropriate, because the test exists to measure variability.2
Outlier test on a validated chemical assay
"Should not be used to invalidate the suspect result." Informational use only.2
Outlier test on content uniformity, dissolution, or release rate (how fast a product lets go of its drug)
"No applicability." A value that looks extreme may be "an accurate result of a nonuniform product".2
Outlier test on a high-variability biological assay
May be appropriate, set in advance in an SOP, with the test and its minimum data named.2
The Barr ruling in one paragraph, and why a lab still meets it in 2026
In United States v. Barr Laboratories, 812 F. Supp. 458, a federal court in New Jersey heard FDA's case on how a generic manufacturer handled failing tests. The reporter dates the opinion February 5, 1993, amended March 30, 1993, and FDA's footnote cites it as February 4.
The court wrote that after a test failure traced to the process, "additional testing alone cannot infuse the product with quality", that averages "hide the variability among individual test results", and that the USP's silence on outlier tests for chemical assays "is prohibitory".16
FDA's 1993 inspection guide tells investigators what came of it: retesting "must be done on the same, not a different sample", a passing resample alone cannot invalidate an initial OOS result, and a batch released for content uniformity on averaged results had to be recalled. The same guide says the ruling "should not be considered as law, regulation or binding legal precedent".10 FDA's 2022 footnote still cites the opinion for the rule on outlier tests.2
The same objections still appear. Silgan Dispensing, October 5, 2026: "you invalidated the OOS results by averaging".22 ABS Corporation, July 23, 2026, told FDA it was "discontinuing the acceptance of averaged analytical results".23 ECA's 2026 survey summary reports greater variability on repeats and replicates, averaging and the reportable result.15
07 · Invalidating a result
Invalidating an OOS result: the documented test event FDA asks for, and the three ways an investigation ends
In shortFDA allows invalidation "only upon the observation and documentation of a test event that can reasonably be determined to have caused the OOS result". Passing retests do not qualify. An investigation ends in one of three places: invalidated, confirmed, or inconclusive. In the third the OOS result keeps "full consideration" in the batch decision, and the quality unit decides.
Ending
What it means
What happens to the result
What happens next
Invalidated
A documented test event reasonably caused it.
Not used to evaluate the batch. Kept on the record with the justification.2,11
The retest "would substitute for the original test result". Corrective action on the lab cause.2
Confirmed
The cause affects batch quality.
Used to evaluate the batch.
Reject under 211.165(f). The case becomes a batch failure investigation, extended to associated batches and products.2
The quality unit decides, and "should always err on the side of caution".2
FDA gives one worked case for releasing a batch despite an OOS result that was never invalidated. Look at how much it takes: a clean Phase I, a clean production review, a process with a good history, seven retests all within method variability, and consistent results from other tests. Only then might a quality unit "conclude that the initial OOS result did not reflect the true quality of the batch".2
FDA's example of releasing after an OOS rests on seven tight retests and a clean full investigation
FDA's scenario: composite assay range 90.0 to 110.0%
89.5%Initial
99%R1
98.9%R2
99%R3
99.1%R4
98.8%R5
99.1%R6
99%R7
Source2 · FDA's illustration. It adds that the batch's other test results were consistent with the retests.
Show the numbers
Test
Assay
Initial
89.5%
R1
99%
R2
98.9%
R3
99%
R4
99.1%
R5
98.8%
R6
99.1%
R7
99%
Five questions a QA reviewer asks before approving an invalidation
What was the event?
Name it, with a time and a record. "Possible" is a weak word here: FDA told one firm "a possible laboratory error is insufficient to close an investigation at Phase I".24
Does it explain this result?
Direction, size and timing. An event after the result, or one that should have pushed the number the other way, explains nothing.
What was tested, and was the plan approved first?
A plan written after the numbers came in is a story. MHRA wants it approved "prior to initiating investigational testing".5
Who else did this touch?
Other samples in the run, other runs on the instrument. "All of the data collected during the suspect time period should be properly identified and should not be used."2
What stops it recurring?
"Whenever laboratory error is identified, the firm should determine the source of that error and take corrective action."2
A low result that passes is still information. FDA says an assay "low, but within specifications, should also raise a concern", since batches must be formulated to provide not less than 100% of the labeled amount, and a footnote asks firms to assess whether a low assay "may project to a subpotency failure" before expiry.2
08 · Phase II and the clocks
Phase II of an OOS investigation: production at the table, other batches in scope and a three-day report
In shortWhen Phase I finds no clear lab error, FDA asks for a full-scale investigation, conducted by the quality unit, with production, process development, maintenance and engineering. It covers batches already shipped. No regulation we read sets a day count to finish the investigation. Two report clocks are law: 3 working days for a Field Alert Report on a distributed batch under an approved drug application, and up to 45 calendar days for a deviation report on a licensed biologic.
What the written review should hold, per FDA
A plain reading
A clear statement of the reason for the investigation
Which result, against which limit, on which lot
A summary of the aspects of the manufacturing process that may have caused the problem
Steps, equipment and materials in scope
The results of a documentation review, with the assignment of actual or probable cause
Batch record, changes, deviations, with a named cause
The results of a review made to determine if the problem has occurred previously
Earlier events on this product, process or equipment
A description of corrective actions taken
What changed, and who owns it
Source: FDA guidance, section IV.A.2 FDA ties corrective and preventive action to the principles in ICH Q10.25 The method behind root cause work and corrective and preventive action (CAPA) has its own guide on this site, on deviation and CAPA management.
Two report clocks are regulation, and none we read sets a day count to finish the investigation
Time limits a lab meets, in days of the kind each source states
Field Alert Report, distributed batchworking days, 21 CFR 314.813 days
Deviation report, licensed biologiccalendar days, 21 CFR 600.1445 days
FDA's 1993 inspection guidebusiness days, does not bind FDA20 days
Barr opinion, 1993business days, one district court30 days
Example SOP: Phase Iworking days5 days
Example SOP: full investigationcalendar days30 days
Source8,10,12,16,20 · The highlighted rows are regulations. The last two rows are the fictional lab's SOP in Part B, shown to compare. Your own procedure sets yours.
Show the numbers
Clock
Days
Field Alert Report, distributed batch
3 days
Deviation report, licensed biologic
45 days
FDA's 1993 inspection guide
20 days
Barr opinion, 1993
30 days
Example SOP: Phase I
5 days
Example SOP: full investigation
30 days
How a Field Alert Report meets an OOS result on a distributed batch
For a product under an approved application, the applicant reports within 3 working days any failure of a distributed batch to meet its application specification.8 FDA's guidance says "unless the OOS result on the distributed batch is found to be invalid within 3 days, an initial FAR should be submitted", with a follow-up when the investigation ends.2
FDA's Q&A of July 2021 adds the stability case: results "scientifically invalidated (e.g., an analytical laboratory error is confirmed) within 3 working days do not require a FAR". For a batch that has not been distributed, no report is required.12
A Field Alert Report turns on three questions about the failing batch
For a product under an approved application
1Has it been distributed?
If it has not, no report is required.
2Does it fail its application specification?
The rule covers distributed batches that miss the specification in the application.
3Found invalid within 3 working days?
If a lab error is confirmed in that time, no report is required.
4If not, report it
An initial report within 3 working days, and a follow-up when the investigation ends.
Our reading of the sources8,2,12 · Our outline of FDA's rule, guidance and Q&A, in the order a lab asks them.
Show the numbers
Step
What happens
Who
Time
Has it been distributed?
If it has not, no report is required.
Does it fail its application specification?
The rule covers distributed batches that miss the specification in the application.
Found invalid within 3 working days?
If a lab error is confirmed in that time, no report is required.
If not, report it
An initial report within 3 working days, and a follow-up when the investigation ends.
That clock has a practical effect on Phase I. A stability failure on a marketed lot gives the lab three working days to find clear evidence, so the records need to come together on day one. In the EU, Chapter 6 asks that a confirmed OOS or significant negative trend affecting batches on the market be reported to the competent authorities.4 MHRA says they "will require notification within a short time point of discovery due to recall potential".5
A licensed biologic has its own rule. 21 CFR 314.81 covers new drug and abbreviated applications, and 21 CFR 600.14 asks the license holder to report a deviation on a distributed biological product as soon as possible, "not to exceed 45-calendar days".8,20 The dates for finishing an investigation come from softer places. The Barr court wrote "within thirty business days of the problem's occurrence", and FDA's inspection guide of July 1993 wrote 20 business days.16,10
What we read for this. 21 CFR Part 211, 314.81 and 600.14; FDA's OOS guidance of 2006 and 2022; FDA's 1993 guide; the Field Alert Q&A; MHRA's flowchart; EU GMP Chapters 6 and 8, which say "in a timely manner" and give no number; ICH Q7; and the Barr opinion, on November 3, 2026. We did not read every national rule, so check your own market.1,8,2,9,10,12,5,4,7,16,20,26
Rejecting does not close the door on testing. FDA: "once a batch has been rejected, there is no limit to further testing to determine the cause of the failure". MHRA adds the reverse: "the decision to reject cannot be reversed as a result of further testing".2,5
09 · Out-of-trend stability
Spotting an out-of-trend stability result: regression control chart, by-time-point and slope methods worked through
In shortA stability study tests stored samples at set times, such as 3, 6, 9 and 12 months. An OOT result is a point that leaves the path earlier lots took, and it can warn of a failure before shelf life ends. No regulator text we read prescribes a statistic. The three methods trade articles cite come from a 2003 PhRMA industry paper, and a lab must choose one, write it down and justify it.
The US rule, 21 CFR 211.166, requires a written stability testing program.27 FDA's guidance touches OOT only in a footnote: "much of the guidance may be useful for examining results that are out of trend".2 EU GMP goes further, asking that results be recorded in a way that permits trend evaluation, and that on-going stability data be enough "to allow for trend analysis".4
Trade authors note that FDA's guidance does not specify how to identify OOT results, and that regulatory guidelines do not fully address them.28,29 MHRA's flowchart calls "objective (often statistical) methods" advantageous and names none.5
What we read for this. We looked for a prescribed OOT statistic on November 3, 2026, and found none in 21 CFR Part 211, FDA's OOS guidance, MHRA's flowchart, EU GMP Chapter 6, ICH Q1E, the ICH Q1 draft, ICH Q7 or WHO's good practices for QC laboratories. We did not read every inspectorate's text. The method names below rest on the PhRMA team's 2005 follow-up, read in full, and two later reviews. We read only a listing of the 2003 paper, not its text.27,2,5,4,7,28,29,30,31,32,33
Method
How it works
Compares
Watch for
Regression control chart
Fit a line through the results, draw limits that bracket it along the study. A point outside is OOT.28
Needs several time points before a slope means much.
A worked regression control chart on one impurity
Take a fictional stability study of Dravenzo 20 mg tablets at 25 °C and 60% relative humidity. Earlier lots suggest impurity B starts at 0.05% and grows 0.0095 percentage points a month. At 12 months the line predicts 0.05 + 12 × 0.0095 = 0.164%. The band around it widens with time, by 0.05 + 12 × 0.0022 = 0.076 points. So the upper trend limit at 12 months is about 0.24%.
Lot CV25-0918 reads 0.31% at 12 months. The specification is 0.50%, so it passes. It is still well above 0.24%, so it is out of trend. A re-injection gives 0.30% and 0.31%, which clears the instrument. Its own slope, (0.31 − 0.05) ÷ 12 = 0.022 points a month, would reach 0.50% at about 21 months, on a product with a 36-month shelf life. The batch record then shows what differs: this is the only lot made with active ingredient from a second supplier route.
This lot passed at 12 months and still left the path, nine months before it would fail
Impurity B, %, by months on stability at 25 °C, 60% RH
Earlier lot CV25-0611Lot CV25-0918Upper trend limit
0%0.2%0.4%0.6%
0 M3 M6 M9 M12 M18 M
Fictional example from this guide · Fictional. Specification 0.50%. Upper limit calculated from the example's own fit. Lot CV25-0918 has no 18-month result yet. The last step on the axis spans six months, the others three.
Show the numbers
Month
Earlier lot CV25-0611
Lot CV25-0918
Upper trend limit
0 M
0.05%
0.05%
0.1%
3 M
0.08%
0.09%
0.135%
6 M
0.11%
0.13%
0.17%
9 M
0.13%
0.18%
0.205%
12 M
0.16%
0.31%
0.24%
18 M
0.21%
—
0.311%
What an out-of-trend flag asks of you: MHRA's three alert levels
MHRA's flowchart sorts OOT stability results into analytical, process control and compliance alerts, and says that "as the alert level increases from analytical to process control to compliance alert, the depth of investigation should increase".
An analytical alert is a single aberrant result inside limits. A compliance alert suggests "the potential or likelihood for OOS results to occur before the expiration date".5 It also says that if a result predicts a failure before the next test point, schedule additional testing before that point.5 The same three alert levels appear in the PhRMA team's 2005 paper, an industry text.30
A stability guideline to watch. ICH's consolidated Q1 guideline would bring its stability texts together. We found no final text on November 3, 2026, and section 3 gives its planned dates.14
10 · What FDA's letters say
What FDA writes about OOS results: our reading of 514 warning letters since 2021
In shortA warning letter is FDA's published letter telling a firm what violations it found. About one in five recent drug and active ingredient warning letters carries a finding about how an OOS result was investigated: 110 of 514, on our count. On the same count, 54 fault a firm for setting a failing result aside. 21 CFR 211.192 was the second most cited section on FDA's file of Form 483s, its inspection observations, for fiscal 2025, by our sum.
About 21 in 100 CGMP warning letters carry a finding about how an OOS result was investigated
110 of 514
Our count of CGMP warning letters to pharmaceutical and active ingredient sites, January 22, 2021 to October 22, 2026. The method is printed below the next chart.
Our count of CGMP warning letters to pharmaceutical and active ingredient sites, January 22, 2021 to October 22, 2026. The method is printed below the next chart.
21 of 100
Letters that fault how a failing result was set aside reached 18 by October 2026, the most of any year
Our count: letters where FDA objects to invalidating, excluding, discarding, leaving out or averaging away a failing result, or releasing on a retest or resample
42021
92022
52023
72024
112025
182026
Our reading of the sources34 · 54 in all. 2026 runs to October 22. Letters issued per year also vary, from 42 to 114.
Show the numbers
Calendar year
Letters
2021
4
2022
9
2023
5
2024
7
2025
11
2026
18
How we counted, read November 3, 2026. The population is FDA's table of CGMP warning letters whose subject names finished pharmaceuticals or active ingredients: 516 rows, 514 letters once two duplicates go.
The 110. A word search for OOS wording, leaving out FDA's standard remediation requests, found 99 letters. We read a random 30 in full context and the matching sentence of the other 69, and dropped 6 that only mention OOS in passing. We then read the OOS sentences in the other 122 letters that use the term, which added 17.
The 54. We read the sentences on invalidating, retesting, averaging, discarding and leaving out results, and counted lab results only, so media fills and production leak or filter tests are left out. A person reading these can miss a letter or judge one differently, so treat both as our count and as about.34
What FDA objected to in OOS files, quoted from its letters
Each line below comes from FDA's copy of the letter and states FDA's position on its date. Firms respond, and some close out. The dates run from 2022 to 2026.
Pattern
What FDA wrote
Letter
Repeated testing to a pass
"After failing the initial test, hypothesis, and five repeat tests, you invalidated all these results."
21 CFR 211.192 on Form 483s: about one citation for every three drug forms
A Form 483 lists what an FDA investigator observed at the end of an inspection. FDA publishes the citations by section each fiscal year. On our sum for fiscal 2025, 211.192 carries 236 citations, second to 211.22 at 309, across 713 drug Form 483s.44
Most of the 236 sit under "Investigations of discrepancies, failures" (164). Written records incomplete (32) and no written record (22) come next. The section covers all investigations, so OOS is only a part of it. FDA's fiscal 2025 quality report lists inadequate investigations among three top citations that resulted in facility withholds.45
Investigations draw roughly a third of a citation per drug Form 483, year after year
21 CFR 211.192 citations per 100 drug Form 483s
36.7FY2020
40FY2021
36.5FY2022
34.3FY2023
30.8FY2024
33.1FY2025
Our reading of the sources44 · Our arithmetic on FDA's file, which covers only forms issued from FDA's system. One form can carry several rows. The section covers all investigations, OOS among them.
Show the numbers
Fiscal year
Citations per 100 forms
FY2020
36.7
FY2021
40
FY2022
36.5
FY2023
34.3
FY2024
30.8
FY2025
33.1
MHRA inspections show the same subject in EU GMP Chapter 6 references. In MHRA's 2019 deficiency data, the newest GMP data on its page, C6.9 appears 31 times (12 major, 19 other) and C6.35 19 times (1 critical, 6 major, 12 other), out of 5,292 rows from 258 inspections, by our count.46
11 · Recalls and benchmarks
When a failed test reaches the market: drug recalls by reason, and why nobody publishes an invalidation rate
In shortIn FDA's enforcement data for 2021 to 2025, about 17% of drug recall records name a failed test or specification in their reason, by our grouping. Nobody publishes a trusted benchmark for how many OOS results a lab should see, how many it should invalidate, or what one investigation costs. FDA proposed reporting an invalidated OOS rate and has not made it a requirement.
Impurity limits and potency lead the drug recalls that name a failed test
Recall records, report dates 2021 to 2025, by the first matching wording in the stated reason
Impurity or degradation limits274 records
Potency: too low or too high239 records
Dissolution145 records
Other failed specification or OOS wording138 records
Stability, other wording61 records
Our reading of the sources47 · 857 of 5,039 records (17%). Our grouping, by the words in the reason; good manufacturing practice reasons with no OOS or failed wording left out. A record is one product line of a recall, so one event can count many times.
Show the numbers
Reason wording
Records
Impurity or degradation limits
274 records
Potency: too low or too high
239 records
Dissolution
145 records
Other failed specification or OOS wording
138 records
Stability, other wording
61 records
The numbers nobody publishes, and what to measure in their place
What people want
What we found
What to measure
Share of OOS results invalidated
No public figure. FDA says only "relatively rare".2 One firm's 55 of 78 drew FDA's objection, which is no benchmark.3
Invalidated ÷ all OOS, by method and instrument, each year.
Median and worst days for Phase I and for closure, over a year.
Market size for OOS software
No figure we would stand behind.
Your own cost per investigation, in Part C.
FDA's quality metrics. In its drafts, FDA proposed a metric for invalidated OOS results. Its page, content current December 12, 2025, says FDA "is proposing to develop and implement a Quality Metrics Reporting Program", and describes a voluntary phase in the November 2016 draft and a March 2022 request for comment. So no required national number exists.48 A high rate may mean weak methods or weak investigations. A low rate may mean strong labs, or labs that do not write things down. Read the rate with its reasons.
How labs handle it now. ECA's Analytical Quality Control Group, an industry body, closed a survey in April 2026 with 169 complete responses to inform an update of its OOS guidance, whose SOP dates from August 9, 2013. Its first summary says many fundamentals are standardized: clear definitions, structured Phase I checklists and second-person review. Practice varies more on repeats and replicates, averaging, the reportable result, and how formal hypothesis testing is. The detailed percentages are for members, and we did not read them.49,15
12 · AI in OOS work
AI in an OOS investigation: what draft EU GMP Annex 22, FDA's draft and Part 11 leave to the quality unit
Status as of November 3, 2026
In shortSoftware can gather records, read a run against its method, find similar past events, draft a report and re-fit a stability trend each night. The quality unit's decision does not move. Draft EU GMP Annex 22 says generative AI and large language models "should not be used in critical GMP applications", and it is still a draft. We found no published study of AI on OOS investigations, so ask any vendor for evidence on your own files.
The closer a step sits to the batch decision, the less of it belongs to software
Which steps software can do, and which stay with people, by our reading
Stays with peopleWith review each timeSoftware can do it
Read or calculateDraft for a personDecideGather records for a runSoftware can do itSoftware can do itStays with peopleCheck a run against the methodSoftware can do itWith review each timeStays with peopleRe-perform a calculationSoftware can do itWith review each timeStays with peopleFind similar past eventsSoftware can do itWith review each timeStays with peopleList and rank hypothesesWith review each timeWith review each timeStays with peopleWrite the test plan and reportWith review each timeWith review each timeStays with peopleFit stability trends nightlySoftware can do itWith review each timeStays with peopleConclude assignable causeStays with peopleWith review each timeStays with peopleInvalidate a resultStays with peopleStays with peopleStays with peopleRelease or reject the batchStays with peopleStays with peopleStays with people
Our reading of the sources19,2,50,51 · Our reading, for an operator to test against its own risk assessment. Draft Annex 22 may move this.
Show the numbers
Read or calculate
Draft for a person
Decide
Gather records for a run
Software can do it
Software can do it
Stays with people
Check a run against the method
Software can do it
With review each time
Stays with people
Re-perform a calculation
Software can do it
With review each time
Stays with people
Find similar past events
Software can do it
With review each time
Stays with people
List and rank hypotheses
With review each time
With review each time
Stays with people
Write the test plan and report
With review each time
With review each time
Stays with people
Fit stability trends nightly
Software can do it
With review each time
Stays with people
Conclude assignable cause
Stays with people
With review each time
Stays with people
Invalidate a result
Stays with people
Stays with people
Stays with people
Release or reject the batch
Stays with people
Stays with people
Stays with people
Text
Status
What it means for OOS work
Draft EU GMP Annex 22
Draft. Consultation July 7 to October 7, 2025. EudraLex lists no Annex 22 on November 3, 2026.21
Applies to static models with deterministic output, where the same input always gives the same answer, in critical GMP applications. Generative AI and LLMs "should not be used" there. In non-critical uses, qualified people answer for outputs.50
EMA workshop report
EMA/156789/2026, workshop of June 30, 2026
Comments supported allowing LLMs under a documented, risk-based strategy. The drafting group has discussed widening the scope. No revised text is published.52
EU GMP Annex 11
In force at its January 2011 revision. The revision is a draft, with a Q4 2026 target for handing final text to the Commission, and no adoption date.21,53
Computerized systems rules still apply as they stand.
FDA draft guidance on AI
Draft, January 2025
On AI producing information to support regulatory decisions on safety, effectiveness or quality. It excludes operational efficiencies that do not affect patient safety, drug quality or study reliability. A buyer's quality team classifies its own use.54
EMA and FDA principles
January 14, 2026
Ten shared principles for AI in medicine development. High level.55
EU AI Act
Regulation (EU) 2026/1744 in force July 27, 2026. Annex III rules December 2, 2027; Annex I rules August 2, 2028.56
We read lab investigation as outside Annex III, the Act's list of high-risk uses. Your counsel decides.
21 CFR Part 11
In force
Audit trails under 11.10(e); signature meaning under 11.50.57,58 Controls that support your compliance, in your own validated use.
GAMP AI guide, MHRA data integrity
July 2025; March 2018
ISPE's guide covers AI-enabled systems in GxP areas, those under good practice rules such as GMP.59 MHRA's data integrity guidance sets ALCOA expectations: attributable, legible, contemporaneous, original, accurate.60
What FDA has said to one firm about AI and the quality unit
FDA's letter to Purolea Cosmetics Lab, April 2, 2026, says: "If you use AI as an aid in document creation, you must review the AI generated documents". It places that duty under the quality unit's responsibilities, 21 CFR 211.22(c).51 It concerns one firm with other findings, so it sets no general policy. It does show how an investigator may read a machine-written report that nobody checked.
Four places software can mislead an OOS investigator
A percentage is a ranking
A screen that says "86%" gives an ordering, unless the vendor shows how often 86% turned out right. FDA's test is a documented event.2
Instrument stories are easy to write
FDA calls transient malfunction hypotheses "difficult to prove".2 Software that finds a coincidence quickly can make a weak story look strong.
Past files teach past habits
A model that learned from your closed files may repeat a lab's habit of closing on "analyst error". Check its suggestions against your best investigators.
A draft becomes a record
Read-only access to the lab system does not keep a tool out of scope. Once its checklist or report enters the file, it is part of a GMP record and falls under your computerized system controls.
13 · How labs run it today
Who runs an OOS investigation today, how the records move, and where a supervisor's day goes
In shortAn analyst notices, a QC supervisor investigates, QA approves, and a stability lead owns trends. The evidence lives in five or more systems, and the supervisor usually pulls it by hand while the lot waits. No public figure says how long that takes, so the hours below are one estimate to replace with your own. Labs run this on paper and spreadsheets, on a quality system module, or with specialist investigation software.
The analyst, supervisor, QA reviewer and stability lead around one result
AN
QC analyst
Runs the test, keeps every solution, tells the supervisor, and answers questions about the run.
Cares about: being asked early and judged fairly.
SV
QC supervisor
Reads the raw data, checks the seven steps, writes the plan and proposes a conclusion. FDA's assessment is written around this role.
Cares about: having the evidence before forming a view.
QA
QA lab oversight, part of the quality unit
Approves test plans, reviews each invalidation, leads Phase II, and decides release or rejection.
Cares about: a cause it can defend to an inspector.
ST
Stability lead
Owns the stability program, judges OOT flags, and asks for extra test points.
Cares about: seeing the bend in a line months before a failure.
PR
Production, process and maintenance engineers
Join in Phase II and own process or equipment corrective actions.
Cares about: hearing about a pattern while it can still be fixed.
QP
Qualified Person, in the EU
Certifies a batch for release. MHRA says an inconclusive OOS gets full consideration by the certifying QP.
Cares about: seeing all the results and the reasoning.5
Each hand-off in a typical OOS case means another system and another wait
1Flag
The lab system flags the result; the analyst keeps solutions and tells the supervisor.
AnalystLIMS
2Gather
The supervisor pulls the run, audit trail, logbook, reagent log, training and method.
SupervisorCDS, logbook, training
3Assess
Seven steps, analyst interview, a look at history.
Supervisor, analystWorksheet or form
4Plan
Hypothesis and test written down, approved before testing.
Supervisor, QAQuality system
5Test
Re-measure kept solutions.
AnalystCDS
6Conclude
Invalidate and retest, or open Phase II.
Supervisor, QAQuality system
7Decide
Batch released or rejected, record closed, CAPA opened, trend updated.
Quality unitQuality system, ERP
Our reading of the sources2,5 · Our outline from FDA's and MHRA's texts. Your procedure may differ. Systems named by type: CDS is the chromatography data system, and ERP is the company's business system.
Show the numbers
Step
What happens
Who
Time
Flag
The lab system flags the result; the analyst keeps solutions and tells the supervisor.
Analyst
LIMS
Gather
The supervisor pulls the run, audit trail, logbook, reagent log, training and method.
Supervisor
CDS, logbook, training
Assess
Seven steps, analyst interview, a look at history.
Supervisor, analyst
Worksheet or form
Plan
Hypothesis and test written down, approved before testing.
Supervisor, QA
Quality system
Test
Re-measure kept solutions.
Analyst
CDS
Conclude
Invalidate and retest, or open Phase II.
Supervisor, QA
Quality system
Decide
Batch released or rejected, record closed, CAPA opened, trend updated.
Quality unit
Quality system, ERP
Getting the evidence together can take more of a Phase I than judging it
Supervisor hours on one Phase I by hand, one estimate
Gathering recordsChecklist and interviewHypotheses and planWriting the report
One estimate, 9.5 hours4.5212
Illustrative · replace with your own numbers · An unmeasured estimate, the same one Part B uses. No public figure exists. Replace it with a log of your next ten investigations.
Show the numbers
Gathering records
Checklist and interview
Hypotheses and plan
Writing the report
One estimate, 9.5 hours
4.5
2
1
2
Paper, a quality system module or investigation software: three ways labs run OOS today
Paper forms and spreadsheets
A controlled form, a shared drive and a skilled supervisor. Cheap to start, and easy to fit to your SOP.
Watch for
Evidence copied by hand, weak trending of causes, hard-to-find history, and days lost to chasing records.
A quality system module
A workflow for the OOS form, with phases, approvals and due dates.
Watch for
It tracks the case and rarely reads the run. The evidence still arrives by hand, and the form can be filled before the data has been read.
Specialist investigation or stability software
Connects to the lab systems, pulls the records, and applies checks and trend methods.
Watch for
Validation effort, read-only access in practice, and whether a person's decision stays visibly separate. Part C has questions for this.
Part B · See it working
From a red dot to a signed conclusion: two fictional OOS results in Botminds OOS and OOT Investigation
Here is the same work on Botminds, with sample data from Cobbleford Pharma, a fictional drug maker. Every person, plant, product, lot, instrument, SOP and log row on these screens is invented, and no case is a statement about anyone real. Where the sample needs a critical reader, the caption or a note says so, and clause references to QC-SOP-114 and test methods point to fictional documents.
14 · The lab bench, 8:02 am
The lab bench at 8:02 am: every result against its limit, and an impurity OOS with its raw data read first
In shortLena Ortiz, head of QC laboratories, starts on one chart of 2,914 reportable results from the last 30 days. A new impurity result lands above its limit. She clicks it, and the panel reads the run before it offers any cause: a blank run of the diluent, the liquid that dilutes the sample, shows a peak in almost the same place, and the methanol in that diluent is a new lot on its first use.
1
Results from every test, drawn against one limit band
Each test's limits are stretched to the same band, so an assay, an impurity and a dissolution result can share a chart. Red is out of specification, amber is out of trend, and hollow circles are closed investigations. The footer counts 2,914 results and 6 open flags, and the 8:02 am result makes it seven. Each gray dot stands for about 11 results.
Beside the chart, the panel holds yesterday's assay, 93.1% against 95.0–105.0%. The note at its foot reads "Hypotheses wait for the raw data".
The lab bench. Wednesday, October 7, at Plant 1 and Plant 2. Sample data.
2
An unknown peak, a diluent blank and a new methanol lot
OOS-26-0152 arrives at 8:02 am: Dravenzo 20 mg tablets, lot CV26-0415, an unspecified impurity at 0.24% against a limit of 0.20%, at relative retention time (RRT) 1.32, its position on the instrument's trace. The instrument is HPLC-09, a liquid chromatograph, and the analyst is Marco Reyval. The panel draws the sample against the diluent blank.
Four checks follow. One passes. Two are findings: a 0.09% peak in the blank at RRT 1.31, and a diluent made from methanol lot MX-26-0712 on its first use. The peak itself stays open: not seen in the last 40 lots.
Only then does the panel name a likely cause, contamination from the new methanol, and it drafts a test using the previous lot. The screen's 71% is a ranking for the supervisor to weigh, with no stated probability model behind it. The blank peak is also smaller than the sample peak, which the card lists as evidence against.
The lab check. The screen labels this "Phase IA". FDA's text has only Phase I, and in MHRA's flowchart these checks sit in Phase Ib.2,5
The queue. Seven open cases, each with its result against specification, phase, owner, clock and next step. The Veltrimab case is in Phase II, and two stability results sit with the stability lead.
15 · One assay, start to finish
A 93.1% assay at Cobbleford Pharma, from the first check to the signed invalidation and the CAPA
In shortLot CV26-0412 of Dravenzo 20 mg tablets read 93.1% on HPLC-07. Eleven checks with sources found three problems: a failing bracketing standard, pump ripple in the audit trail, and an overdue pump service. QA approved a re-injection plan. On a second instrument the kept solutions read 99.4% and 99.7%. The supervisor proposed invalidation, QA approved it for the quality unit, and two retests decide the lot.
The failing bracket came at 10:47 am, and the lot's fate waits on two retests a day and a half later
Oct 6, 10:39 amPreparation 1 injected
Reads 93.0%. The bracket before it passed at 99.6%.
93.1% invalidated, with an e-signature on each step.
Oct 8Two retests, second analyst
These decide the lot. The screens stop before their results.
Fictional example from this guide · Cobbleford Pharma, HPLC-07, run CV-ASY-1007. The sample compresses October 7: plan approval, re-injection and both signatures all land before 9:30 am.
Show the numbers
When
What
Oct 6, 10:39 am
Preparation 1 injected
10:41 am
Preparation 2 injected
10:47 am
Bracketing standard
11:04 am
OOS flagged, lot on hold
11:10 am
Solutions kept cold
2:20 pm
HPLC-07 tagged out
Oct 7
Plan approved, then run
9:25 and 9:29 am
Proposal and QA approval
Oct 8
Two retests, second analyst
1
Ten records named before a single verdict
The investigation opens on the evidence the checks will read: the CDS audit trail, the injection sequence, the instrument log, Sam Patel's training record, the interview note, the preparation worksheet, reagent and standard logs, the test method, 12 months of history and the investigation SOP. On the right, the audit trail is already open with key lines marked.
The diagram below it shows who does what, and it ends in a box marked "You decide".
The evidence list. Read-only access to the lab and chromatography systems.
2
Each step of the check, as it runs
Lena presses "Run lab check". The screen shows each step with what it read and found. The raw-data reviewer reads the run and its 64 audit trail entries. The lab-conditions checker reads the instrument, standards and training. The similar-event finder returns 4 pump events on HPLC-07 since June and no earlier assay OOS in 312 results.
The trace. Each step reports what it read, so a reviewer can see the order of work later.
3
Eleven checks in FDA's seven-step order, each with its source
Eight pass and three are findings. Passes include Sam Patel's training on the current method version, no manual integration or reprocessing, and a calculation re-performed to 93.04% and 93.18% from the areas, weights and standard purity. A number beside each sentence opens the record at that line.
Lena accepts each verdict or changes it, and each acceptance goes in the audit trail. The checklist's headings follow FDA's seven supervisor steps. The wording in each row is the sample's.2
The checklist. 11 checks, 8 pass, 3 findings, each for a person to accept.
4
A bracket that failed and a pump that rippled
The bracketing standard is a known solution injected around the samples to prove the system held steady. Here it drops to 97.1%, below the method's 98.0%, and the method says samples bracketed by a failing standard are not valid. The pressure trace shows the two spikes the audit trail records.
FDA's guidance speaks to this directly: if standard responses show the system is not working, "all of the data collected during the suspect time period should be properly identified and should not be used".2
Raw data. Recovery against the method limit, and pump ripple from the audit trail, as read from the run.
5
Four hypotheses, with the evidence for and against each
The hypotheses open only after every check has a verdict. A transient pump malfunction leads, then a preparation or dilution error, a reference standard error, and a true product result. Weights and dilutions recalculate exactly, and the same standard weighing passed system suitability. Blend uniformity was 99.6% and tablet weights normal.
Each card names its test. A true product result would send the case to Phase II if the re-injection confirmed 93%.
The ranking. The percentages are the screen's ranking for the supervisor to weigh. They are no measured probability.
6
QA approves the test before it runs, and the results stay investigational
Plan HTP-0147-1 states what, why and the criterion: both preparations agree within 2.0%, and all bracketing standards pass. Lena sends it, and Omar Haddad, QA lab oversight, approves before any testing.
On HPLC-04 the brackets read 99.8%, 100.1% and 99.7%. Preparation 1 gives 99.3% and 99.5%, preparation 2 gives 99.6% and 99.8%. These numbers support a cause, the way FDA describes re-injection.2 They are never reported or averaged with the original.
The test. The criterion is written before the numbers exist.
7
The supervisor proposes, and QA approves for the quality unit
The justification is drafted from the evidence, and Lena can edit it. She signs "Invalidate — assignable laboratory cause (instrument)" with the meaning "proposed as QC supervisor". Omar Haddad approves with the meaning "approved for QA". The file keeps the 93.1%.
The lot stays on hold. Aisha Brandt, a second analyst, retests the original sample twice on October 8, a number the SOP fixes in advance. FDA says that after a clearly identified lab error, the retest "would substitute for the original test result".2
Signed. Who signed, when and with what meaning. Signature manifestations are what 21 CFR 11.50 describes, and this is a control that supports your compliance.58
8
A six-section report, with the run's other results and the CAPA
The report writer fills form QC-FRM-114-2, each statement cited. Section 5 follows the failing bracket: injections 15 to 17, lots CV26-0409 and CV26-0410, sat between the failing bracket and the next passing one, so they are marked for re-injection, while CV26-0408 was bracketed by passing standards and stands. That is the wider look that 21 CFR 211.192 asks for.1
The proposed CAPA services pump A before its next use, shortens the check-valve interval from 120 to 60 days on all four-solvent (quaternary) pumps, and adds a pump ripple flag.
The report. Drafted for people to edit and sign. A CAPA is a corrective and preventive action.
What a sharp QA reviewer would still ask on this sample. Preparation 1 ran as injection 11 at 10:39 am, two minutes before the first logged ripple, yet it also read low. So the pump alarms cover preparation 2 and the bracket directly, and the failing bracket and the re-injection carry preparation 1.
The samples also read about 7% low while the bracket read about 3% low, and the screens do not explain the gap. The hypothesis card lists "None found" as evidence against. FDA says such hypotheses "are difficult to prove", and a good file answers both points in writing.2
The bracket fell out of its limit just after the Cobbleford samples and recovered by injection 18
Standard recovery by injection, run CV-ASY-1007, against the method's lower limit
Bracketing standardMethod lower limit
96%98%100%102%99.2%98%
Inj 7Inj 10Inj 14Inj 18
Fictional example from this guide · Fictional. The samples of lot CV26-0412 ran as injections 11 and 12.
Show the numbers
Injection
Bracketing standard
Method lower limit
Inj 7
100.2%
98%
Inj 10
99.6%
98%
Inj 14
97.1%
98%
Inj 18
99.2%
98%
16 · Three other endings
When the retests pass and the OOS still stands, when Phase II opens, and when one vessel is the suspect
In shortAn instrument story is the tidy case. The same screens hold harder ones: a Talvoren impurity with no cause found, where the OOS result stood and the lot was rejected; a Veltrimab purity result reproduced on a second instrument, which moved to Phase II and a change in production; and a dissolution failure with three low units from one vessel, still waiting on QA.
1
Retests near the limit that do not rescue the lot
OOS-26-0141: impurity C at 0.21% against a limit of 0.20%, Talvoren 10 mg tablets, lot TX26-0219. No lab or process cause was found. Three retests by a second analyst, fixed in advance, read 0.19% to 0.20%. The summary says they "do not replace" the first result. QA closed the case as inconclusive and the lot was rejected on October 2.
This is FDA's third ending, where an OOS result keeps full consideration, and it is the quality unit's call.2
Inconclusive, lot rejected. Passing retests stayed on the record and did not decide the case.
2
A result that reproduces, and a pump change upstream
OOS-26-0151: high-molecular-weight species (protein clumps) at 2.4% against a limit of 2.0%, Veltrimab drug substance (the active ingredient before it becomes a finished product), lot VD26-118. Two preparations both read 2.4%, and re-injection on a second instrument gave 2.4% and 2.3%. So the lab is cleared. The trend does the rest: lots before August 22 read 1.1% to 1.4%, then 1.8%, 1.9% and 2.4% after feed pump P-301 was replaced under change CC-26-1162.
Phase II runs with the process team. Three drug-product fills wait on it, and the options on screen extend to lots VD26-114 and VD26-116, as 211.192 asks.1
Phase II. The chart shows what one result could not.
3
Three low units from one dissolution vessel
OOS-26-0149: Talvoren 10 mg tablets, lot TX26-0233. At Stage 3, the last round of testing, the average across 24 units is 79.8% against a Q of 80%, the share of the labeled dose that must dissolve. Three units sit below 65%, where no more than two are allowed. All three low units came from vessel 4, and its paddle height sits at 27 mm, the edge of the 25 ± 2 mm limit. The step that removes dissolved air from the test liquid, deaeration, was not recorded.
An outlier test has no place here: FDA says a value that looks extreme in dissolution "may in fact be an accurate result of a nonuniform product".2 So the plan with QA tests the apparatus directly, running kept tablets across vessels with freshly deaerated test liquid.
Units by vessel. A grid shows what an average hides.
17 · Trends, clocks, rules
Nightly stability trending, investigation clocks, the lab dashboard and the testing rules your quality unit locks
In shortEvery night the trend watcher fits new stability results to earlier lots and flags those outside the band. Dr. Maya Chen, the stability lead, confirms or closes each flag. The rest of the product keeps the work in view: clocks for each case, repeated patterns sent to their owners, a dashboard of outcomes and causes, and settings where FDA's lines on averaging and outliers cannot be switched off.
The trend that Part A worked by hand. Lot CV25-0918 at 12 months, 0.31% against a limit of 0.24% from earlier lots, specification 0.50%. Last night's run read 38 studies and 412 new results, and flagged 3. The screen offers regression at 95% or 99% and by-time-point views. The method and interval are your procedure's choice.
An OOT result checked like an OOS. The re-injection clears the lab at 0.30% and 0.31%. Then the question turns to the lot: the first active ingredient lot from a second source.
Patterns pushed to owners. Four pump events on HPLC-07 since June, a faster impurity on one supplier route, and a purity rise after a pump change. FDA asks management to be "especially alert to developing trends".2
The clocks. Each case has a 30-day bar with its Phase I date marked. Five working days and 30 calendar days are this lab's SOP settings. No regulation sets them.
The dashboard, on sample data. 3 of 10 closed investigations invalidated for a lab cause, and the screen's own note says that should stay rare. FDA agrees on the principle and gives no number.2
Causes, ageing and hours. The hours are the lab's estimate in the sample, unmeasured.
The rules that stay locked. Averaging with the original and outlier tests to invalidate a chemical assay follow FDA's text.2 FDA sets no number of retests, so "2 retests" is the lab's procedure.
Of 17 investigations in 90 days, three ended as lab error and seven are still open
17investigations
Invalidated, lab cause3
Confirmed, product or trend4
Inconclusive or not a trend3
Still open7
Fictional example from this guide · Sample data on the dashboard, last 90 days.
Show the numbers
Outcome
Cases
Invalidated, lab cause
3
Confirmed, product or trend
4
Inconclusive or not a trend
3
Still open
7
The design targets for OOS and OOT Investigation, and the one estimate
92%
of Phase I lab investigations closed inside five working days.
Design target, to be measured on your data
100%
of Phase I checks carry a verdict and a source before any hypothesis opens.
Design target
2.2 h
of supervisor time per Phase I, against 9.5 hours by hand.
The solution's own estimate, unmeasured
These are goals, and no customer result is implied. Part C shows how to test them on your own files.
18 · Who does what, who signs
Seven OOS investigation agents, where each one stops, and what the quality unit keeps
In shortSeven agents open the record, read the run and the lab conditions, find similar events, write the checklist and the hypotheses, draft the report and watch stability trends. All of them read lab systems without changing them. People accept each verdict, the quality unit approves test plans and invalidations, and the stability lead decides each trend flag.
Result intake agent
Opens a record from each OOS or OOT result in the LIMS: product, lot, test, method, specification, analyst, instrument, run. Starts the clocks.
Where it stops Never edits a LIMS result, and never closes or invalidates. Reads the limit from the product specification.
Raw-data reviewer
Reads the chromatography run: system suitability, bracketing standards, integration events, processing method version and the audit trail in the run window.
Where it stops Never reprocesses or re-integrates data. Read-only on the CDS. Cites every statement.
Lab-conditions checker
Checks the instrument (calibration, maintenance, events), standards and reagents (lot, expiry, standardization), and the analyst's training on the current method version.
Where it stops Never contacts the analyst without the supervisor.
Similar-event finder
Finds earlier OOS, OOT and lab deviations on the same product, method, instrument or analyst, and the result history.
Where it stops Similar is evidence, and never a conclusion.
Checklist and hypothesis composer
Fills the seven-step checklist with verdicts and citations, then ranks hypotheses with evidence for and against, and drafts the test plan.
Where it stops Proposes no cause until every check has a verdict. Never proposes averaging, unplanned retests or outlier tests for a chemical assay. Invalidation is a person's decision.
Report writer
Drafts the Phase I or Phase II report with citations, the CAPA proposal and the effect on other results in the run.
Where it stops A draft only. A person signs.
Trend watcher
Every night fits stability results to the trend of earlier lots, flags out-of-trend results, and pushes repeated patterns to the team that owns the cause.
Where it stops Flags only. The stability lead decides, and it never closes an OOT.
MHRA wants it approved before investigational testing.5
Invalidate a result
Proposed by the supervisor, approved by QA, each with an e-signature
The maker and the checker stay different people.
Release or reject the batch
The quality unit
21 CFR 211.22. FDA: the decision is "made by the QU".19,2
Confirm or close a trend flag
Stability lead, Dr. Maya Chen
A flag is a question for someone who knows the product.
Change a clock, approver or lab rule
Through settings, versioned in the audit trail
The procedure is yours, and each change is on the record.
The lab records going in, the cited OOS file coming out
From your lab systems
The OOS or OOT record from the LIMS
CDS run, chromatograms and audit trail
Instrument logs, calibration and maintenance
Standards, reagent and preparation records
Training records
Historical results and stability data
From your team
Your laboratory investigation SOP
Test methods and specifications
Who approves what, and your clocks
Your out-of-trend method and interval
Agents read, check and draftRead-only on every lab system
People accept every verdict
The quality unit approves and decides
What you get
A lab bench of results against their limits
A Phase I checklist with a verdict and source for every check
Ranked hypotheses and a test plan
A cited Phase I or Phase II report with the CAPA proposal
Out-of-trend flags and repeated patterns sent to owners
Works with the LIMS, CDS and logbooks a QC lab already runs
The solution reads what you run, by category: a LIMS for results and specifications, a chromatography data system for runs and audit trails, an instrument logbook, a learning system for training, a quality system for deviations, CAPA and change control, and an ERP for which materials went into which batch. Every verdict links to the record and the line behind it. It scales from one lab to a network of plants, with roles, maker-checker approval and an exportable audit trail.
Part 11 and Annex 11 controls on an OOS record, and the credentials we hold
The product gives you controls that support your compliance with 21 CFR Part 11 and EU Annex 11: audit trails, e-signatures with their meaning, and role-based access. Those rules apply to your own use of a system, and your validation answers for that use. No product can be certified for GxP.
Botminds is SOC 2 Type II audited and manages information security to ISO 27001. Draft EU GMP Annex 22 says generative AI and LLMs should not be used in critical GMP applications, and it is still a draft, so classify this use with your quality team and re-check when the text is final.21,50
Lena, Omar, Dr. Chen and Sam: the four people in the sample QC lab
LO
Lena Ortiz · Head of QC laboratories, Plant 1 and Plant 2
Opens every out-of-limit result with the raw data already checked and cited, then accepts verdicts, sends the plan and signs her proposal.
"Show me the run before you tell me the cause."
OH
Omar Haddad · QA lab oversight
Approves each test plan before testing and each invalidation with the evidence on one record.
"An invalidated result needs a cause I can defend to an inspector."
MC
Dr. Maya Chen · Stability lead
Gets the nightly trend watch, and confirms or closes each flag.
"I want the trend flag months before the failure."
SP
Sam Patel · QC analyst
His account of the run, including the wobble he noticed near 10:45 am, sits in the checklist next to the audit trail entries.
"I noticed the pressure wobble; nobody asked me until day three."
Part C · Are you ready to automate?
Deciding on OOS investigation software: your costs, your return, your readiness and what to ask
Written to you, the person who has to decide. It helps you price the investigations you run today, test whether software would pay for itself, score how ready your lab is, and ask vendors, including us, the questions that matter. Some of it may tell you to wait.
19 · What weak files cost
What a late or shaky OOS file costs you, and how to count it from your last ten closed investigations
In shortYour supervisor's hours are the easy part of the bill. The bigger costs are lots on hold, solutions that expire before anyone tests them, and the file an inspector takes apart. We found no public benchmark for hours or cost per investigation, so count your own. A week with your last ten closed files gives you what the calculator needs.
21%
of 514 FDA CGMP warning letters to drug and active ingredient sites since January 2021 carry a finding about how an OOS result was investigated (110 letters). The method is printed in section 10.34
Our count, read November 3, 2026
236
citations of 21 CFR 211.192 across 713 drug Form 483s in fiscal 2025, second among Part 211 sections. It covers all investigations.44
Our sum of FDA's file
17%
of 5,039 drug recall records from 2021 to 2025 name a failed test or specification in their reason.47
Our grouping of FDA's data
Where OOS hours and hold days hide, and how to count them in your lab
The cost
Where it hides
How to find your number in a week
Supervisor hours
Inside "QC overhead", spread over several days
Ask your supervisors to estimate hours by step on the last ten files, then log the next ten
Lots waiting
Release dates, blamed on general workload
For ten lots with an OOS, count days from the result to the batch decision, and the share spent waiting for records
Lost solutions
A line in the report saying re-injection was not possible
Count files where solutions had expired or been discarded before the first hypothesis
Invalidations you could not defend
Closed files nobody has reread
Reread five. Is a documented test event named, with its record? Was the plan approved first?
Repeats of the same cause
Separate records on the same instrument or method
Sort a year of files by instrument and method. How many share a cause, and how many had a CAPA?
Trends found late
Stability reports written twice a year
For your last three stability failures, could the earlier points have warned you, and how many months sooner?
Gathering records is where a Phase I has the most hours to give back
Supervisor hours on one Phase I, by step
By handWith agents
Gathering evidence4.5 hours0.4 hours
Checklist and analyst interview2 hours0.9 hours
Hypotheses and plan1 hour0.4 hours
Writing the report2 hours0.5 hours
Illustrative · replace with your own numbers · The solution's own estimate, 9.5 hours to about 2.2, unmeasured at any customer. Replace it with your own log.
Show the numbers
Step
By hand
With agents
Gathering evidence
4.5 hours
0.4 hours
Checklist and analyst interview
2 hours
0.9 hours
Hypotheses and plan
1 hour
0.4 hours
Writing the report
2 hours
0.5 hours
The patient, the analyst and the next inspection: OOS costs no spreadsheet prices
The patient behind the lotA failing batch released on a passing retest may reach someone. That is why the work exists, and it has no line in a spreadsheet.
The analyst's name"Analyst error" with no evidence can follow a person through their career, and it leaves the real cause in place. FDA asks for a cause clearly established.2
Your next inspectionAn investigator can ask for every invalidated result. FDA has asked firms for a retrospective review of them, which is costly and arrives at the worst moment.24,36
Good lots thrown awayA test failure read as a product failure also costs you. Rejecting a good batch because the file could not show otherwise wastes medicine and supply.
20 · What it can return
Your return on OOS investigation software: three levers and a calculator with every assumption showing
In shortThree things can pay for this: supervisor hours given back, hold days taken out of investigated lots, and repeat investigations avoided because a pattern reached its owner. Hold days carry most of the value and rest on your softest number. Every input is an assumption until you replace it, and a small lab may get a negative answer.
Hours
Supervisor hours given back
The records come together and the checks arrive with their sources, so the supervisor starts at the judgment.
investigations × (hours by hand − hours with software) × hourly cost
Holds
Hold days out of investigated lots
Phase I finishes sooner, so a lot that will ship waits less.
investigations × share holding a lot × days saved × cost of a lot-day
Repeats
Repeat investigations avoided
Four pump events on one instrument reach the team that owns the pump before a fifth.
repeats avoided × cost of one repeat
What 60 OOS investigations a year could return after your yearly cost
Every input marked illustrative is an assumption. Replace it with your own.
Your investigationsYour lots on holdYour repeats and your cost
Illustrative yearly value
Supervisor hours given back0
Hours, valued$0
Lot-days saved0
Lot-days, valued$0
Repeats avoided, valued$0
After your yearly cost$0
Formulas, per year: Hours = investigations × (hours by hand − hours with software) Lot-days = investigations × share holding a lot × days saved Repeats = repeats avoided × cost of one Net = hours valued + lot-days valued + repeats valued − your yearly cost
The 60 is close to the fictional lab's 61 opened in 12 months. The 9.5 and 2.2 hours are the solution's own unmeasured estimate. The rest are placeholders. Nothing here prices an inspection finding, or a bad lot caught.
Try it at both ends. At 15 investigations and one repeat avoided, leaving the rest, the net falls to about −$68,000: a small lab may do better with a tighter form and a good checklist. At 200 investigations it rises to about $501,000. Now set the lot-day cost to zero at the default 60. The net becomes about −$46,000, so at this volume hours alone do not pay. Find out what a day of hold costs you before you trust this number.
At these defaults, hold days bring in about two-thirds of the value
Lot-days, valued$135K
Supervisor hours, valued$41.6K
Repeats avoided, valued$32K
Illustrative · replace with your own numbers · The calculator's defaults, before the $120,000 yearly cost. Replace them.
Show the numbers
Lever
Yearly value
Lot-days, valued
$135K
Supervisor hours, valued
$41.6K
Repeats avoided, valued
$32K
21 · Your lab's readiness
Can your OOS process be automated yet? Score your SOP, your data access and how you invalidate
In shortSoftware can only apply a procedure you have written, to records it can reach, for a quality unit willing to look at its own numbers. Score each question from 0 to 2. The total places you in one of three bands, and each says what to do next.
1
A written OOS and OOT procedure
Does an SOP cover phases, roles, clocks, hypothesis testing, retests and how to conclude?
Why it mattersFDA expects a predefined procedure, and EU GMP lists one among required documents.2,4
A strong answer"Yes, revised since FDA's 2022 text, with OOT in scope."
2
Retest and averaging rules fixed in advance
Does the method or SOP state the maximum retests, who runs them, and what counts as one reportable result?
Why it mattersFDA wants the maximum "specified in advance". ECA's 2026 survey summary finds greater variability on repeats and averaging.2,15
A strong answer"Written per test family, with a second analyst and a stopping point."
3
Reachable run data
Can a read-only connection reach your CDS runs and audit trails, and your LIMS results?
Why it mattersEvery later check sees only what it is given. Paper chromatograms stop this early.
A strong answer"CDS and LIMS have export interfaces and audit trails turned on, at both plants."
4
Logbooks, reagents and training in usable form
Are instrument logs, reagent records and training records electronic and tied to IDs?
Why it mattersThese are FDA's steps 1, 4 and 5. A paper logbook means a person still has to go and read it.2
A strong answer"Electronic logbook and learning system, keyed by instrument and analyst."
5
You know your invalidation rate
Can you state invalidated OOS results as a share of all OOS, by method and instrument?
Why it mattersFDA says lab error should be rare, and has asked firms to review past invalidations.2,24,36 Software will show you this number, so see it first.
A strong answer"Reviewed each year, with reasons, and QA has reread a sample."
6
Enough stability data to trend
Do you have a chosen OOT method, with enough earlier lots per product and condition?
Why it mattersA trend limit needs history, and no regulator picks the statistic for you.28,29
A strong answer"Regression control chart, justified in the SOP, three or more lots for key products."
7
Volume that strains your team
Do investigations outrun supervisor time, or lots wait for Phase I to finish?
Why it mattersThe case for software rests on volume and hold time. At a handful a year, a better form may do.
A strong answer"Dozens a year across two labs, and Phase I often runs past our limit."
8
A quality position on AI, and an owner
Have quality and legal decided how you treat generative AI in GMP work, and who validates it?
Why it mattersDraft Annex 22 would keep such models out of critical GMP uses, and that wording may change.50,52 Your classification should come before a vendor's slide.
A strong answer"A written position: drafts only, with people deciding, and a named validation owner."
9
For reflection: your last invalidated result
Pull the last result your lab invalidated. Can a stranger find the test event, its record, the approved plan and the original number in ten minutes? If an inspector asked tomorrow, who would you send?
What your OOS readiness score tells you to do next
0–6
Explore
Update the SOP against FDA's 2022 text. Fix retest and averaging rules per method. Reread five closed invalidations. All of it pays back even if you buy nothing.
7–11
Ready to pilot
Replay closed files from one lab and one test family for eight weeks, with your quality unit judging the output. Compare what the checks found with what your file says.
12–16
Ready to implement
Roll out by lab and test family, with validation, procedures, training and rule approval built in, and a date to re-check against final Annex 11 and Annex 22.
22 · Vendors and a pilot
What to ask an OOS software vendor about records, lab-error bias and signatures, then an eight-week replay
In shortAsk whether the tool can be wrong in ways you can see: does it cite the exact record, does it hold back a cause until the checks are done, can it mishandle a case with no lab cause, and does it change anything in your lab systems? Ask us too. Then test it on closed files whose answers you already know, including files where the lab got it wrong.
A
Whether every verdict traces back to a raw record
A1
Can I click from a verdict to the exact line in the run, audit trail or logbook?
Why it mattersA verdict nobody can check becomes one more thing to investigate.
Strong answer · warning sign
Opens the record at the cited line, in its original form.
A summary with a document title.
A2
What does it do when a record is missing or a system cannot be reached?
Why it mattersA "pass" on a check that saw nothing is worse than no check.
Strong answer · warning sign
Marks the check open and names what is missing.
Infers from what it has.
A3
Is access to my LIMS and CDS read-only, and how do you show that?
Why it mattersResults must stay exactly as measured, with every change on the system's own audit trail.11
Strong answer · warning sign
A read-only account you control, and a test you can run.
"We would never change anything", with no way to verify it.
B
Whether the tool can lean toward an easy lab-error answer
B1
Does it propose a cause before the checks are finished?
Why it mattersFDA asks for "no preconceived assumptions".2
Strong answer · warning sign
Causes stay hidden until every check has a verdict, enforced by the product.
An instant "likely root cause".
B2
What do your percentages mean, and how often has 80% been right?
Why it mattersA number looks like evidence. FDA's test is a documented event.2
Strong answer · warning sign
A plain admission that it ranks, or calibration data on real files. Ask us: on our screens it ranks.
"Our AI is 86% confident."
B3
Show me a case where the tool found no lab cause.
Why it mattersA tool that always finds a lab error is a testing-into-compliance machine with better paperwork.
Strong answer · warning sign
A confirmed OOS and an inconclusive one in the demonstration.
Every story ends with an invalidation.
B4
Can it suggest averaging, an unplanned retest, or an outlier test on a chemical assay?
Illustrative · replace with your own numbers · Our judgment, for you to rearrange. Decisions stay with people in every quadrant.
Show the numbers
Item
Ease of testing on closed files (0–1)
Hours or risk it can reduce (0–1)
Gathering records
0.78
0.72
Stability trend
0.62
0.62
Report drafting
0.70
0.34
Ranking hypotheses
0.25
0.55
Finding repeat causes
0.45
0.78
Calculation re-check
0.75
0.20
Eight weeks with your own closed OOS files
Eight weeks can tell you whether the checks find what your best investigators found
Choose 30 closed files, agree the score sheet
Read-only access and your SOP loaded
Replay the files, QA scores blind
Add live cases alongside your normal process
Trend watch on stability data
Read out: results, errors, go or stop
Week 02468
Illustrative · replace with your own numbers · Plan for one lab and one test family. Longer if validation or read-only access takes longer.
Show the numbers
Activity
From
To
Choose 30 closed files, agree the score sheet
0
1
Read-only access and your SOP loaded
0.5
2.5
Replay the files, QA scores blind
2
5
Add live cases alongside your normal process
4
7
Trend watch on stability data
3
7
Read out: results, errors, go or stop
7
8
What to measure on your OOS pilot
Finding agreement: of the findings your file records, how many did the checks find, and how many did they add that QA agrees with?
Wrong verdicts: pass verdicts QA would overturn. These count more than anything else here.
Citation accuracy: pick 50 citations. Does each open the right line, and does the line say what the sentence says?
Hard cases: include confirmed OOS, inconclusive files and files your quality unit now doubts. Include a case with no lab cause.
Hours and days: supervisor hours by step, and days from result to the end of Phase I, against your log.
Trend flags: on old stability data, how many months before a later failure did the flag appear, and how many flags were noise?
Deeper questions for your quality and validation teams
Which steps use fixed rules, which use statistics and which use generated text? Can you show it on one case?
How is the tool's intended use written, and is the output a GMP record in your system map?
What if a supervisor changes a verdict? Who sees that, and does the tool's next suggestion learn from it?
How do you test for drift, and who holds the test set?
How does it treat methods the agents have not seen, or non-chromatographic tests such as dissolution, titration and microbiology?
Can your contract labs' data come in, and whose quality unit sees what?
How does the trend method handle a new product with few lots, and can the band be justified to an inspector?
23 · Questions people ask
OOS and OOT questions people search: phases, retests, averaging, invalidation and software
In shortShort answers on OOS phases, retests, averaging, invalidation, Field Alert Reports and software.
What is an OOS investigation?
It is the documented work a drug lab and its quality unit do when a test result falls outside its specification, to find out whether the test or the batch went wrong. 21 CFR 211.192 requires a thorough investigation of any batch failure, with a written record of the conclusions and follow-up. FDA's guidance, revised in May 2022, describes how it reads that duty.
What is the difference between OOS and OOT?
An out-of-specification result falls outside a written limit. An out-of-trend result stays inside the limit but leaves the path earlier lots followed, usually in a stability study. EU GMP Chapter 6 asks that both be investigated, while FDA's guidance mentions OOT only in a footnote saying much of it may be useful.
What are Phase I and Phase II of an OOS investigation?
Phase I is the laboratory investigation: the supervisor checks the method, raw data, calculations, instrument, standards and method performance, ideally before any solutions are discarded. Phase II is the full-scale investigation, run by the quality unit with production, when no clear lab error was found. Phase II includes a review of production and may include further lab testing.
What are Phase Ia and Phase Ib in MHRA's OOS guidance?
They come from a slide flowchart by the UK's medicines regulator, the MHRA, dated October 2017. Phase Ia looks for clear, obvious errors such as a power failure or a spilled sample. Phase Ib is the investigation by analyst and supervisor using a checklist. FDA's guidance has no such split, and the MHRA adds a Phase III for wider impact and the batch decision.
Can a passing retest invalidate an OOS result?
No. FDA says that if no laboratory or calculation errors are identified, there is no scientific basis for invalidating an initial OOS result in favor of passing retests. A result may be invalidated only on the observation and documentation of a test event that can reasonably be determined to have caused it.
How many retests are allowed in an OOS investigation?
FDA sets no number. It says the maximum should be specified in advance in a written procedure, based on sound principles and the method's variability, and never adjusted based on results. The MHRA's flowchart notes that papers have suggested 5, 7 or 9, so justify your own number in your SOP.
Can you average OOS results with retests?
No. FDA says averaging the original result with retest or resample results is not appropriate because it hides variability. A method may still define a set of replicates as one reportable result, with limits on their variability, and that average is allowed when the method says so. Content uniformity results should not be averaged to pass.
What does testing into compliance mean?
It means repeating tests until a passing result appears, then disregarding the failing ones without scientific justification. FDA calls it unscientific and objectionable under current good manufacturing practice (CGMP). Its December 2018 data integrity Q&A adds that using actual samples in test, prep or equilibration runs to disguise this is a violative practice.
How long should an OOS investigation take?
No regulation we read sets a day count to finish the investigation. FDA's 1993 inspection guide says failure investigations should be performed within 20 business days and states it does not bind FDA, and a 1993 federal court opinion, United States v. Barr Laboratories, wrote thirty. Many labs set their own limits in an SOP. A distributed batch that fails starts a 3-working-day clock for a Field Alert Report, and a reportable deviation on a licensed biologic has up to 45 calendar days.
When does an OOS result need a Field Alert Report?
When a distributed batch of a product under an approved application fails its application specification, and the result is not scientifically invalidated within 3 working days. A follow-up report goes in when the investigation ends. FDA's July 2021 Q&A says no report is required for a product that has not been distributed.
How do you detect out-of-trend stability results?
Trade articles cite three methods from a 2003 PhRMA industry paper: a regression control chart, a by-time-point method, and a slope control chart. Each compares a new result with what earlier lots predict. No regulator text we read prescribes a statistic, so choose a method, write it into your procedure and justify it.
Can AI invalidate an OOS result?
It should not. Invalidation and batch decisions belong to people, and in the US the quality unit holds that authority under 21 CFR 211.22. Software can gather records, check them and draft, and draft EU GMP Annex 22 says generative AI and LLMs should not be used in critical GMP applications. That draft had not been adopted on November 3, 2026.
Does OOS investigation software make a lab compliant?
No software can do that by itself. It can offer controls that support your compliance, such as audit trails, e-signatures with meaning, and fixed rules on averaging. Your quality unit stays responsible for the decisions, and your company validates the system for its intended use.
24 · The guide on one page
OOS and OOT investigation on one page: the method, November 2026 status and the terms
Print this page
In shortThe whole guide on one screen: the method, the rules as of November 2026, the readiness scale and the terms.
The method
Keep every solution and every result. Tell the supervisor at once.
Read the method, raw data, calculations, instrument, standards and history before you name a cause.
Write the hypothesis and the test, and get QA's approval before testing.
Re-measure kept solutions. The results support a cause and replace nothing.
Invalidate only on a documented test event. Keep the original on the record.
No clear lab cause? Go to Phase II, with production, and look at other batches.
Fix retests in advance. Never average them with the original.
Let the quality unit decide, and err on the side of caution.
Check the clock on a distributed batch: 3 working days for a Field Alert Report, up to 45 calendar days for a licensed biologic's deviation report.
Trend your causes and your invalidation rate, and watch stability lots against earlier ones.
Readiness: score 0–2 on eight questions: 0–6 explore · 7–11 pilot · 12–16 implement.
As of November 3, 2026: FDA OOS guidance October 2006, Revision May 1, 2022, nonbinding; 21 CFR 211.192 in force; MHRA flowchart dated October 2017, page updated February 26, 2018; EU GMP Chapter 6 in operation October 1, 2014; ICH Q1 consolidated draft not final on our reading; Annex 11 at January 2011, its revision and Annex 22 still drafts.
14 terms
OOS
Out of specification: a result outside its written limit.
OOT
Out of trend: inside the limit, off the path earlier lots followed.
Phase I
The laboratory investigation of the test itself.
Phase II
The full-scale investigation by the quality unit, with production.
Quality unit
The independent group that approves or rejects. FDA's 2022 word for the quality control unit.
Assignable cause
An identified reason for the result.
Reportable result
The final result, from one full run of the method as written.
Retest
Testing more of the original homogeneous sample.
Resample
Testing additional units or a new sample from the batch.
Re-injection
Running the same prepared solution again, to test the instrument.
Bracketing standard
A known solution run around samples to show the system held steady.
Testing into compliance
Repeating tests until one passes and dropping the failures.
Field Alert Report
A report to FDA within 3 working days when a distributed batch fails.
CAPA
Corrective and preventive action.
25 · Sources
Sources
Accessed November 2026. Regulatory status statements are as of November 3, 2026. Warning letters are FDA's own copies, cited only for what each says; a letter states FDA's position at its date, and firms may since have responded or corrected.
21 CFR 211.192, Production record review, 2025 edition (revised as of April 1, 2025), the newest on govinfo. govinfo.gov
FDA, Investigating Out-of-Specification (OOS) Test Results for Pharmaceutical Production, Guidance for Industry, Revision 1, May 2022. Nonbinding. fda.gov
FDA warning letter, Professional Disposables International, 617201, January 7, 2022. fda.gov
European Commission, EudraLex Volume 4, EU GMP Part I, Chapter 6 Quality Control, in operation October 1, 2014. europa.eu
MHRA, Out of Specification & Out of Trend Investigations, slide flowchart (38 slides), October 2017. gov.uk
21 CFR 211.165, Testing and release for distribution, 2025 edition. govinfo.gov
ICH, Q7 Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients, Step 4, November 10, 2000, section 11.15. ich.org
21 CFR 314.81(b)(1), Field alert report, 2025 edition. govinfo.gov
FDA, Investigating Out-of-Specification (OOS) Test Results for Pharmaceutical Production, Guidance for Industry, October 2006. The comparison with the 2022 text is ours. fda.gov
FDA, Guide to Inspections of Pharmaceutical Quality Control Laboratories, July 1993. Reference material for investigators; it says it does not bind FDA. fda.gov
FDA, Data Integrity and Compliance With Drug CGMP: Questions and Answers, December 2018, questions 2 and 13. fda.gov
FDA, Field Alert Report Submission: Questions and Answers, Guidance for Industry, July 2021. fda.gov
MHRA, Out-of-specification investigations, gov.uk page, published August 28, 2013, updated February 26, 2018. gov.uk
ICH, Q1 Expert Working Group work plan, July 10, 2026. ich.org
ECA Analytical Quality Control Group, OOS survey: a first short summary, May 21, 2026; 169 complete responses. The detailed report is for members and was not read. gmp-compliance.org
United States v. Barr Laboratories, Inc., 812 F. Supp. 458 (D.N.J. 1993), Civil Action 92-1744, reported as February 5, 1993, amended March 30, 1993. FDA cites the opinion as February 4, 1993. Text from the Caselaw Access Project. case.law
P. Sambaraju, Identifying Out-of-Trend Data In Stability Studies, Pharmaceutical Engineering (ISPE), March/April 2025. Cites the PhRMA CMC Statistics and Stability Expert Teams' methods. ispe.org
Methods for Identifying Out-of-Trend Results in Ongoing Stability Data, Pharmaceutical Technology, June 2, 2013. Cites PhRMA CMC Statistics and Stability Expert Teams, Pharm. Technol. 27 (4), 38-52 (2003). pharmtech.com
PhRMA CMC Statistics and Stability Expert Teams, Identification of Out-of-Trend Stability Results, Part II, Pharmaceutical Technology 29 (10), October 2005. Cites the team's 2003 paper, Pharm. Technol. 27 (4), 38-52. An industry paper. pharmtech.com
ICH, Q1E Evaluation of Stability Data, Step 4, February 6, 2003. ich.org
ICH, Q1 Stability Testing of Drug Substances and Drug Products, Step 2 draft of April 11, 2025, FDA's copy. fda.gov
WHO, Good practices for pharmaceutical quality control laboratories, Technical Report Series No. 957, 2010, Annex 1. who.int
FDA, Warning Letters database. Our count of 514 CGMP letters to pharmaceutical and active ingredient sites issued January 22, 2021 to October 22, 2026, two duplicate rows removed, read November 3, 2026. A word search and reading by hand; the method is printed in section 10. Treat it as about. fda.gov
FDA warning letter, Auriga Research, 730694, August 12, 2026. fda.gov
FDA warning letter, SnugZ USA, 735284, September 28, 2026. fda.gov
FDA warning letter, Cdymax India Pharma, 715022, November 13, 2025. fda.gov
FDA warning letter, Ava, 721180, April 14, 2026. fda.gov
FDA warning letter, Intas Pharmaceuticals, 721151, March 30, 2026. fda.gov
FDA warning letter, Unipack, 716621, December 19, 2025. fda.gov
FDA warning letter, Shiva Analyticals, 707857, July 23, 2025. fda.gov
FDA warning letter, Medical Products Laboratories, 721916, April 9, 2026. fda.gov
FDA warning letter, Monarch PCM, 620779, June 10, 2022. fda.gov
FDA, Inspection Observations data files, fiscal years 2020 to 2025, Drugs worksheet. The Frequency column summed by section and divided by the Summary sheet is our arithmetic. The files cover only Form 483s issued from FDA's system. fda.gov
FDA CDER, Report on the State of Pharmaceutical Quality, Fiscal Year 2025, June 2026. fda.gov
MHRA, Good manufacturing practice inspection deficiencies, 2019 Deficiency Data spreadsheet, added October 15, 2020, the newest GMP data on the page. Counts by reference and grade are our arithmetic. gov.uk
FDA, openFDA drug enforcement endpoint, report dates 2021 to 2025, 5,039 records, read November 3, 2026. The grouping by reason wording is ours. A record is one product line of a recall. open.fda.gov
FDA, Quality Metrics for Drug Manufacturing, content current December 12, 2025. fda.gov
ECA Analytical Quality Control Working Group, Standard Operating Procedure, Laboratory Data Management; Out of Specification (OOS) Results, August 9, 2013. Industry text. gmp-compliance.org
European Commission and PIC/S, draft EU GMP Annex 22 Artificial Intelligence, consultation July 7 to October 7, 2025. A draft. picscheme.org
FDA warning letter, Purolea Cosmetics Lab, 722591, April 2, 2026. fda.gov
European Medicines Agency, Report of the multistakeholder workshop on expert contributions to AI guidance development (Annex 22), workshop of June 30, 2026, EMA/156789/2026. ema.europa.eu
European Medicines Agency, GMP/GDP Inspectors Working Group 3-year work plan, 2026 to 2028. ema.europa.eu
FDA, Considerations for the Use of Artificial Intelligence to Support Regulatory Decision-Making for Drug and Biological Products, draft guidance, January 2025. fda.gov
European Medicines Agency, EMA and FDA set common principles for AI in medicine development, January 14, 2026. ema.europa.eu
European Commission, Regulatory framework on AI, on Regulation (EU) 2026/1744: in force July 27, 2026; Annex III rules December 2, 2027; Annex I rules August 2, 2028. europa.eu
21 CFR 11.10, Controls for closed systems, 2025 edition. govinfo.gov
ISPE, GAMP Guide: Artificial Intelligence, July 2025. ispe.org
MHRA, GXP Data Integrity Guidance and Definitions, Revision 1, March 2018. gov.uk
Next step
See it on five of your own closed OOS files.
Explore the solution, or bring five closed investigations with their run exports, your laboratory investigation SOP and your test methods. We will walk the checks with you, each verdict beside the record behind it, and your quality unit can compare them with what it concluded at the time.
We use essential cookies to make this site work, and cookieless, anonymised analytics to understand how it's used. "Accept all" also turns on Google Analytics, which sets cookies. Privacy policy