Skip to content
← All articles

FDA aseptic processing guidance (2004) vs EU GMP Annex 1 (2022)

12 min read · 12 November 2026

Sterility test isolator with glove ports, a transfer hatch and a hydrogen peroxide generatorHEPA · GRADE AH₂O₂ΔP +45 Pa

Indian sterile sites that export usually face two references at once: the US FDA guidance Sterile Drug Products Produced by Aseptic Processing (2004) and EU GMP Annex 1 (2022), which PIC/S inspectorates use too. They were written nearly twenty years apart, in different styles. This article compares them topic by topic so you can design one programme that meets both.

As always, this is our own summary for learning. Read the current official texts before making decisions.

Sterility test isolator with glove ports, a transfer hatch and a hydrogen peroxide generatorHEPA · GRADE AH₂O₂ΔP +45 Pa
Both guidances favour barrier technology; Annex 1 makes it the clear expectation.

Different styles

The FDA guidance is relatively short and principle-based. It explains what FDA considers acceptable and often says that alternative approaches may be used if justified. It sits beneath the legally binding 21 CFR Parts 210 and 211.

Annex 1 is long and detailed. It sets explicit limits and expectations, and adds an overarching requirement: a documented contamination control strategy that ties everything together. It leans heavily on quality risk management.

In practice, Annex 1 is usually the stricter reference on detail, while FDA inspections are often stricter on investigations and data integrity.

Cleanroom classification and limits

TopicFDA 2004Annex 1 (2022)
Area namesISO classes (ISO 5, 7, 8)Grades A, B, C, D
Critical zoneISO 5, with in-operation monitoringGrade A, continuous particle monitoring during critical processing including set-up
Microbial limits in critical zoneRecommended action level of 1 CFU for air and settle plates (expectation of no growth in practice)No growth for all sample types
Background to critical zoneISO 7 (supporting area)Grade B for aseptic processing in RABS/open systems

The practical result is the same: any recovery in the critical zone is investigated and the organism identified.

Personnel

Both guidances treat people as the main contamination risk.

  • FDA: training in aseptic technique, gowning qualification with microbiological monitoring, and observation of behaviour.
  • Annex 1: all of that, plus participation in a successful media fill before working in Grade A, requalification triggered by monitoring trends, and limits on numbers of people.
Gowning airlock with a sterile coverall, hood, goggles, boots and a step-over benchSTEP-OVER · GRADE C → GRADE B
Gowning qualification includes microbiological monitoring under both guidances.

Environmental monitoring

TopicFDA 2004Annex 1 (2022)
Location selectionBased on risk and airflowFormal risk assessment, documented in the CCS
FrequencyEach shift for critical areasContinuous in Grade A; frequent in Grade B
IdentificationIdentify isolates; species level for critical areasGrade A and B isolates to species
TrendingExpectedExpected, with review of alert levels and CCS

Aseptic process simulation

TopicFDA 2004Annex 1 (2022)
InitialThree consecutive successful runsThree consecutive successful runs per shift
PeriodicTwice a year per shift and lineAbout every six months per process, line and shift
AcceptanceTarget zero; investigate any positive; criteria by batch sizeAny contaminated unit fails the APS
DesignWorst case, interventions, durationWorst case, all interventions, maximum personnel, duration
Aseptic filling line running a media fill, with incubated vials and one turbid unitSCDM FILL!14 days · 20–25 → 30–35 °C
Annex 1 treats any contaminated media fill unit as a failure.

Design to the Annex 1 acceptance rule and you satisfy both.

Sterilising filtration

Both expect validated sterilising-grade filters and integrity testing. Annex 1 adds the expectation of pre-use post-sterilisation integrity testing (PUPSIT), or a documented risk-based justification where it is not feasible. FDA expects a post-use integrity test and validation of the filter with the product.

Disinfection

FDA expects validated disinfection with periodic sporicide use. Annex 1 is more explicit: disinfectants used in Grade A and B must be sterile, efficacy must be demonstrated, and sporicide use must be planned based on risk and EM data.

Investigations and data integrity

FDA's strength. Warning letters frequently cite weak investigations under 21 CFR 211.192, invalidation of sterility or EM results without evidence, and data integrity failures such as shared logins or missing audit trail reviews. Annex 1 also expects thorough investigation and links it back to the CCS.

Monitor showing an audit trail, with a padlock and a fingerprint for secure user accessAUDIT TRAIL10:02 A.Shah count 14 → saved10:05 R.Iyer reviewed ✓10:07 system backup done10:11 A.Shah plate photo added
Data integrity is a recurring theme in FDA findings for micro labs.

One programme for both

  1. Adopt Annex 1 limits and grades as your internal standard, mapped to ISO classes for FDA documents.
  2. Write a CCS even if you only export to the US; it organises your evidence.
  3. Identify all Grade A/B isolates to species and keep an organism library.
  4. Design media fills to Annex 1: worst-case, every intervention, any positive fails.
  5. Plan PUPSIT or document the risk-based rationale.
  6. Apply FDA-level rigour to investigations and audit trail review.
  7. Keep a compliance matrix showing which requirement each SOP meets.

Sterility testing and the laboratory

Both guidances expect the sterility test to be performed in an environment that does not add contamination: an isolator, or a Grade A zone with a Grade B background. Both expect negative controls, monitoring of the test environment and the analyst, and identification of any organism from a positive test.

The FDA guidance contains a detailed section on investigating sterility positives and is explicit that a sterility test should only be invalidated when there is clear evidence that the positive came from the laboratory. Annex 1 adds that sterility testing is only one part of the evidence for batch release, which must also consider EM, APS and process data. Taken together, the message is simple: if no laboratory error is proven, the batch fails, and the investigation must look at manufacturing too.

Utilities and water

FDA covers water and compressed gases briefly, expecting them to be suitable and monitored. Annex 1 is more detailed: water for injection may be produced by validated non-distillation methods, water systems need validated sanitisation and trending of TOC, conductivity, endotoxin and counts, and gases that contact the product must be filtered through a sterilising filter and tested at point of use. A programme designed to Annex 1 here will satisfy FDA.

Documentation style that works for both inspectors

Inspectors from both agencies respond well to the same habits:

  • A short rationale at the start of each programme document, explaining what was decided and why
  • Data presented as trends, with alert and action levels marked
  • Investigations that show each hypothesis and the evidence used to accept or reject it
  • CAPA with measurable effectiveness checks

These habits cost little and make every inspection easier, whichever agency arrives.

Common gaps found at Indian sites

  • EM limits documented as "less than 1 CFU" without a clear no-growth expectation
  • Media fill acceptance written as "not more than one positive" from older practice
  • No documented rationale for sporicide frequency
  • Grade A isolates identified only to genus
  • Audit trails enabled but never reviewed

Each of these can be fixed with a revised SOP and a few months of data. Fix them before an inspector finds them.

Where to go next

The Guidelines hub has one-page summaries of EU GMP and US FDA expectations, and the Regulatory Compliance SOP pack includes media fill, CCS and data integrity SOPs you can generate with your company details.

Educational content. Always follow your site's approved SOPs, the current pharmacopoeia and applicable regulations.