Key takeaways
- Process validation requires manufacturers to collect and evaluate data across the product lifecycle to prove a manufacturing process consistently delivers quality products.
- FDA defines four types of process validation: prospective, concurrent, and revalidation — each applied at different lifecycle stages.
- Prospective validation is the most common approach and must be completed before routine commercial manufacturing begins.
- Revalidation is required whenever changes to equipment, formulation, batch size, or manufacturing processes could affect product quality.
- Digital validation platforms such as Kneat Gx reduce process validation cycle times by up to 50%, helping manufacturers meet regulatory expectations faster and with greater documentation accuracy.
What is process validation?
Process validation is the collection and evaluation of data — from the process design stage through commercial production — that establishes scientific evidence a process consistently delivers quality products. In its 2011 guidance, Process Validation: General Principles and Practices, the FDA defines process validation as “establishing documented evidence which provides a high degree of assurance that a specific process consistently produces a product meeting its predetermined specifications and quality attributes.”
Process validation applies to pharmaceutical, biotechnology, and medical device manufacturing. It is a requirement of current Good Manufacturing Practices (cGMP) for finished pharmaceuticals under 21 CFR Part 211, and of the Good Manufacturing Practice (GMP) regulations for medical devices under 21 CFR Part 820. Complementary international frameworks — including ICH Q8 (Pharmaceutical Development), ICH Q9 (Quality Risk Management), and ICH Q10 (Pharmaceutical Quality System) — reinforce the lifecycle approach that underpins modern process validation practice.
Process validation activities span the entire product lifecycle. They begin during development and continue through commercial manufacturing and beyond.
The three stages of process validation
FDA’s 2011 guidance formalizes a three-stage lifecycle framework for process validation. Each stage builds on the previous one.
Stage 1 — Process Design: Manufacturers define the commercial manufacturing process during this stage. Knowledge gained through development and scale-up activities informs the process design.
Stage 2 — Process Qualification: Manufacturers confirm that the process design can support reproducible commercial manufacturing. This stage includes installation qualification (IQ), operational qualification (OQ), and process performance qualification (PPQ).
Stage 3 — Continued Process Verification: Manufacturers gain ongoing assurance during routine production that the process remains in a state of control. This stage involves real-time data collection, statistical analysis, and continuous monitoring of critical process parameters (CPPs) and critical quality attributes (CQAs).
These three stages describe when validation activities occur across the product lifecycle. The three types of process validation described below describe how manufacturers establish validation evidence at each stage.
The three types of process validation
Industry guidelines identify three types of process validation. Each type applies at different points in a product’s lifecycle and under different regulatory circumstances.
- Prospective validation (or premarket validation)
- Concurrent validation
- Revalidation
Prospective validation (premarket validation)
Prospective validation requires manufacturers to establish documented evidence — before process implementation — that a system performs as intended, based on pre-planned protocols. This approach applies whenever a new pharmaceutical product, manufacturing process, or facility must be validated before routine commercial production begins.
In practice, prospective validation typically requires three consecutive successful process performance qualification batches. This standard demands rigorous protocol design, clearly defined acceptance criteria, and real-time data capture. Regulatory inspectors routinely request prospective validation protocols and reports during pre-approval inspections — incomplete or poorly structured documentation is a common FDA Form 483 observation.
Prospective validation often marks the formal transfer of a manufacturing process from the development function to production. It is the most widely used validation approach for new pharmaceutical and biotech products.
Concurrent validation
Concurrent validation establishes documented evidence that a manufacturing process performs as intended based on data generated during actual commercial production. Manufacturers collect and analyze process data in real time while monitoring CPPs and product quality attributes.
This approach demonstrates that the manufacturing process remains in a state of control under normal production conditions. Concurrent validation applies most commonly during technology transfers, product launches with limited batch history, or situations where manufacturing must begin before full prospective validation studies are complete. Concurrent validation may only be used in rare cases where there is a high demand for the product. This type of validation is not standard practice. Strict monitoring, deviation management, and documentation are required to satisfy regulatory expectations.
In practice, concurrent validation requires a pre-approved validation protocol, defined acceptance criteria, and a commitment to complete the validation study within a specified number of production batches. Manufacturers should not use concurrent validation as a routine substitute for prospective validation.
Revalidation
Revalidation repeats the original validation effort — or a defined portion of it — and includes an investigative review of existing performance data. Revalidation maintains the validated status of manufacturing plants, equipment, processes, and computer systems.
Revalidation is required when changes occur that could affect the performance or reliability of a validated process. Common triggers include:
- Transfer of a product from one manufacturing site to another
- Changes to product formulation or raw materials
- Modifications to manufacturing equipment or facilities
- Adjustments to critical process parameters
- Significant changes in batch size — typically an order-of-magnitude increase or decrease
- Sequential batches that fail to meet product or process specifications
- Changes to the cleaning process that could affect product quality
The scope of revalidation depends on the nature and extent of the change. A minor equipment modification may require only partial revalidation. A full site transfer typically requires a comprehensive revalidation program.
How to select the right type of process validation
Selecting the appropriate validation approach depends on the trigger event, the availability of data, and the regulatory context. The table below maps each type to its key selection criteria.
| Validation type | When to use it | Primary data source | Typical regulatory context |
|---|---|---|---|
| Prospective | New product, new process, new facility | Prospective study data | Pre-approval inspection; NDA/MAA submission |
| Concurrent | Limited batch history; technology transfer at launch, high demand for product | Real-time production data | Post-approval; launch under strict monitoring |
| Revalidation | Post-change; periodic review; repeated failures | New study data + historical data | Change control; periodic review program |
In practice, quality teams most frequently encounter prospective validation for new products and revalidation following change control events. Concurrent validation applies in specific launch scenarios and should be treated as an exception, not a routine approach.
How to perform process validation: a step-by-step guide
Process validation follows a structured sequence from planning through final approval. The steps below reflect FDA’s three-stage lifecycle framework and apply across pharmaceutical, biotech, and medical device manufacturing.
- Develop the Validation Master Plan (VMP). The VMP defines the overall validation strategy, scope, responsibilities, and timelines. It serves as the governing document for all validation activities at a site or for a specific product.
- Identify critical quality attributes (CQAs) and critical process parameters (CPPs). Teams analyze the manufacturing process to identify which product attributes are critical to quality, safety, and efficacy — and which process variables affect those attributes. These CQAs and CPPs may be defined in a Process Control Strategy (PCS) type document.
- Author validation protocols. Each validation study requires a pre-approved protocol that defines the test methods, acceptance criteria, sampling plan, and responsibilities. Protocols must be approved before execution begins.
- Execute testing and collect data. Teams execute the approved protocol, recording results directly against each test step. Deviations from expected results require formal deviation documentation and investigation.
- Analyze data and evaluate results against acceptance criteria. Statistical analysis confirms whether the process consistently meets predefined quality standards. Out-of-specification results require investigation before the study can be closed.
- Author and approve the validation summary report. The report documents the study results, any deviations, corrective actions taken, and the overall conclusion. Regulatory inspectors review this report during pre-approval and routine inspections.
- Transition to Continued Process Verification (CPV). Following successful qualification, manufacturers establish ongoing monitoring programs to confirm the process remains in a state of control throughout commercial production.
In practice, incomplete protocols and inadequate acceptance criteria are among the most common process validation deficiencies cited in FDA Form 483 observations. Digital validation platforms that enforce protocol structure and capture data in real time significantly reduce these risks.
Process validation requirements across pharma, biotech, and medical devices
Process validation requirements vary by industry segment, reflecting the different regulatory frameworks that govern pharmaceutical, biotechnology, and medical device manufacturing.
| Regulatory framework | Industry | Primary requirement | Key guidance |
|---|---|---|---|
| 21 CFR Part 211 | Finished pharmaceuticals | cGMP compliance; prospective validation before commercial production | FDA 2011 Process Validation Guidance |
| 21 CFR Part 820 | Medical devices | Design validation and process validation as part of the Quality System Regulation | FDA Quality System Regulation |
| EMA Guideline on Process Validation | EU pharmaceuticals and biologics | Lifecycle approach; concurrent validation permitted with justification | EMA 2016 Guideline on Process Validation for Finished Products |
| ICH Q8/Q9/Q10 | Global — pharma and biotech | Quality by Design (QbD); risk-based validation; pharmaceutical quality system | ICH Quality Guidelines |
Pharmaceutical manufacturers operating under 21 CFR Part 211 must complete prospective validation before commercial production begins. FDA’s 2011 guidance requires a minimum of three process performance qualification batches for most processes, though the number depends on process variability and risk.
Medical device manufacturers operating under 21 CFR Part 820 must validate any process whose results cannot be fully verified by subsequent inspection and testing. This includes sterilization, welding, and aseptic filling processes.
Biotech manufacturers face additional complexity due to the inherent variability of biological systems. ICH Q8, Q9, and Q10 frameworks guide the risk-based, lifecycle approach that regulators expect for biologics manufacturing.
The European Medicines Agency (EMA) aligns closely with FDA’s lifecycle approach but permits greater flexibility in validation strategy. EMA’s guidance emphasizes statistical process control (SPC) and requires revalidation when significant changes occur.
Process validation deliverables: plans, protocols, reports, and acceptance criteria
A complete process validation study produces a defined set of documentation deliverables. Each document serves a specific regulatory and quality function.
Validation Master Plan (VMP): The VMP defines the overall validation strategy for a product or site. It identifies the scope of validation activities, the responsible functions, the timeline, and the acceptance criteria framework. Regulatory inspectors review the VMP to assess whether a manufacturer’s validation program is systematic and risk-based.
Validation protocol: Each validation study requires a pre-approved protocol. The protocol specifies the test methods, acceptance criteria, sampling locations and frequencies, equipment to be used, and the responsibilities of each team member. Protocols must be approved before execution begins — executing against an unapproved protocol is a common FDA Form 483 observation.
Executed validation records: During execution, teams record test results directly against each protocol step. Executed records must meet ALCOA+ (Attributable, Legible, Contemporaneous, Original, Accurate, plus Complete, Consistent, Enduring, and Available) data integrity principles. Paper-based execution introduces significant ALCOA+ compliance risk through illegibility, backdating, and document loss.
Deviation records: Any departure from the approved protocol requires a formal deviation record. The deviation must be investigated, root-caused identified, and closed before the validation study can be approved.
Validation summary report: The summary report documents the study results, statistical analysis, deviations, corrective actions, and the overall conclusion. The report must be approved by quality before the process enters commercial production.
Acceptance criteria: Acceptance criteria define the quantitative or qualitative standards a process must meet to be considered validated. Vague or missing acceptance criteria are a leading cause of validation study failures and regulatory observations.
Common compliance risks in process validation and how digital validation software addresses them
Process validation documentation failures are among the most frequently cited cGMP deficiencies in FDA inspections. Common risks include incomplete protocols, missing acceptance criteria, inadequate deviation management, and data integrity violations in executed records.
Paper-based validation amplifies every one of these risks. A large global pharmaceutical company archives up to eight million pages of compliance documentation at any given time. Manual documentation introduces backdating risk, illegibility, and document loss — all of which violate ALCOA+ data integrity principles.
Digital validation platforms address these risks systematically. Kneat Gx — recognized as the leading pharma and biotech validation software on G2 — enforces protocol structure, captures execution data directly to a secure database, generates automatic audit trails, and prevents backdating through automatic timestamps.
Customers using Kneat Gx report validation cycle time reductions of up to 50% and labor hour savings of 50–65%, based on independent benchmarking studies published by customers in case studies. MSD (Merck Sharp & Dohme) reduced test execution cycle times by more than 50% and simplified its process from 15 steps to 8 after implementing Kneat Gx globally. A tier-one biotech manufacturer achieved productivity improvements of more than 100% and reduced manual process steps by 60% after digitizing its validation lifecycle with Kneat Gx.
Kailash Rathi, Director of Quality Systems & Validation at Recipharm Advanced Bio, described the impact on review efficiency: “With Kneat’s version compare and keyword search, our review cycles have gone from taking days to just hours.”
By centralizing protocol authoring, execution, deviation management, and reporting in a single 21 CFR Part 11 and Annex 11 compliant platform, Kneat Gx reduces the documentation risks that drive FDA Form 483 observations — and gives quality teams real-time visibility into validation status across global sites.
Frequently asked questions about process validation
What are the three types of process validation? The three types of process validation are prospective validation, concurrent validation, and revalidation. Each type applies at a different point in the product lifecycle. Prospective validation establishes documented evidence before commercial production begins. Concurrent validation collects evidence during active production. Retrospective validation uses historical data from well-established processes. Revalidation confirms that a validated process remains in control after changes to equipment, formulation, or operating conditions.
What is the difference between the three stages and three types of process validation? The three stages of process validation — Process Design, Process Qualification, and Continued Process Verification — describe the lifecycle framework defined by FDA’s 2011 guidance. The three types of process validation describe the approach manufacturers use to establish validation evidence at different points in that lifecycle. The stages answer when validation occurs. The types answer how manufacturers collect and evaluate validation evidence.
What is prospective process validation? Prospective validation requires manufacturers to establish documented evidence — before routine commercial manufacturing begins — that a process consistently produces products meeting predefined quality specifications. Manufacturers develop validation protocols, identify CPPs and CQAs, and conduct controlled testing to demonstrate process reliability. Prospective validation is the most common approach for new pharmaceutical products, new manufacturing processes, and new facilities. Regulatory inspectors routinely request prospective validation protocols and reports during pre-approval inspections.
What triggers the need for revalidation in pharmaceutical manufacturing? Revalidation is required when changes occur that could affect the performance or reliability of a validated manufacturing process. Common triggers include changes to product formulation or raw materials, modifications to manufacturing equipment or facilities, process parameter adjustments, technology transfers between manufacturing sites, significant changes in batch size, and repeated deviations or out-of-specification results. The scope of revalidation depends on the nature and extent of the change.
How do process validation requirements differ between pharma and medical devices? Pharmaceutical manufacturers operating under 21 CFR Part 211 must complete prospective validation before commercial production begins, typically requiring a minimum of three process performance qualification batches. Medical device manufacturers operating under 21 CFR Part 820 must validate any process whose results cannot be fully verified by subsequent inspection and testing — including sterilization, welding, and aseptic filling. Both frameworks require documented evidence, defined acceptance criteria, and ongoing monitoring, but the specific requirements and guidance documents differ by industry segment.
What deliverables does a process validation study produce? A complete process validation study produces a Validation Master Plan, pre-approved validation protocols, executed validation records, deviation records, and a validation summary report. Each document must meet ALCOA+ data integrity principles — meaning records must be attributable, legible, contemporaneous, original, accurate, complete, consistent, enduring, and available. Incomplete protocols and missing acceptance criteria are among the most common process validation deficiencies cited in FDA Form 483 observations.
How can digital validation software support process validation? Digital validation platforms help life sciences organizations reduce process validation cycle times, improve documentation quality, and maintain data integrity across global manufacturing sites. Kneat Gx enables teams to author validation protocols, execute testing electronically, manage deviations, and generate validation summary reports — all within a single 21 CFR Part 11 and Annex 11 compliant platform. Customers report cycle time reductions of up to 50% and labor hour savings of 50–65%, based on independent benchmarking studies. The platform enforces ALCOA+ data integrity principles through automatic timestamps, audit trails, and role-based access controls.
Talk to an expert
Kneat Gx supports every type of process validation with a purpose-built platform that digitizes the entire validation lifecycle. Teams gain greater speed and documentation accuracy, improved cross-site visibility, and guaranteed data integrity compliance.
Eight of the world’s top ten pharmaceutical companies use Kneat Gx to manage their validation programs.
