Sanitary Tubing Inspection Schedule for Pharmaceutical and Food Plants

Sanitary tubing inspection is a schedule, not a single event at turnover. The welds are inspected once, at installation, and again wherever the line is cut. Everything else on a hygienic line changes in service: gaskets age with every steam cycle, hot water for injection loops rouge, supports move, insulation gets wet, and a passive layer that tested clean at commissioning can be stripped by one weld repair. A plant that wants to schedule sanitary tubing inspection sensibly starts from what drives each check, sets the interval from that driver, and writes down what gets recorded, because in a cGMP or food-safety plant an inspection without a record did not happen.

What sets each interval

Three things set an inspection interval on hygienic tubing, and none of them is a number copied from a manual. The first is the standard: ASME BPE states the weld inspection scope at installation, ASTM A967 defines how passivation is verified, and 21 CFR 211.67 and 21 CFR 117 require that equipment be maintained and cleaned on a written schedule with records. The second is the event: a modification, a repair, a temperature excursion or a failed water sample triggers an inspection regardless of the calendar. The third is history: the plant’s own log of what was found last time and how fast it changed. An interval that comes from the standard is fixed; one that comes from history tightens or relaxes as the data accumulates. Both belong in the program, and the record should say which one applied.

At installation and after every modification

ASME BPE requires 100 percent visual examination of the outside of accessible welds and borescope examination of the inside of a minimum of 20 percent of the welds, sampled so that every welder, size and procedure is represented. Pharmaceutical owners commonly raise the inside examination to 100 percent, and the specification should say so. Weld coupons are run at the start of each shift, when the tube heat or size changes, and after any change to the weld program or equipment; each coupon is cut and examined for penetration, bead profile and discoloration and logged against the schedule it validated. After a modification the same rules apply to every tie-in and repair weld, and the borescope record for those welds is added to the original weld map as an addendum with its own date. A repair weld that is inspected less carefully than the original run is the one most likely to be the source of the next problem. Weld records are described further on our orbital welding services page.

In service: gaskets, rouge, passivation and geometry

Gaskets are inspected every time a hygienic clamp union is opened, for compression set, cracking, discoloration and intrusion into the bore, and the material, lot and cycle count are logged. The replacement count per service class comes from that log, not from a datasheet. Rouge on hot WFI and clean steam systems is monitored by trend: visual checks at every opening with photographs against the same reference points, wipe tests on accessible surfaces, and the water quality program’s own data. A change in rate is the alarm, not the presence of a light film. Our rouge and derouging guide covers the classes and what each means.

Passivation is verified again whenever the passive layer could have been disturbed: after any weld repair, after derouging, after mechanical cleaning or grinding, when the rouge trend accelerates, and at the interval the validation lifecycle review sets for the system. The check is a ferroxyl or copper sulfate test at defined locations, a water-break test, or a chromium to iron ratio on a coupon where the specification asks for it, documented as a passivation report. Geometry is checked after every modification: branch dead legs measured against the L/D limit, sample valves and instrument tees compared with the as-built P&ID, and slope surveyed with a digital level wherever supports were touched or equipment added, followed by a drain test.

Outside the tube: insulation, supports and corrosion under insulation

Austenitic stainless tubing under wet insulation is exposed to chloride stress corrosion cracking, most actively on lines that run warm, roughly in the band between 50 °C and 150 °C, which describes every hot WFI loop and clean steam line. The insulation itself is checked at specification for chloride content, and the jacketing is the barrier in service. The external inspection looks for damaged or open jacketing, staining at low points and penetrations, wet insulation at valve bodies and supports, and evidence of water ingress at hangers. Where those signs appear, insulation is removed in sections and the tube is examined visually and by dye penetrant at welds and supports. The interval is driven by jacket condition and by any wetting event, such as a leak, a washdown or a roof failure, rather than by the calendar. Supports and hangers are walked down after every modification and whenever vibration or movement is reported, because a support that has shifted changes the slope.

The sanitary tubing inspection schedule

The table sets out each item with the driver that fixes its interval, the method and the record. Intervals are conditional by design: the driver column is the schedule.

Borescope vs weld coupon

The two weld checks answer different questions and neither replaces the other. A borescope examines the inside of the actual production weld, in place, and finds what that weld has: lack of penetration, a concave or sunken root, misalignment, discoloration beyond the acceptable band, porosity. It cannot be run on every weld in every configuration, which is why the standard sets a percentage. A weld coupon is a sacrificial joint made on the same tube with the same program, cut and sectioned so the full cross-section can be seen. It proves the program produces a sound weld under the conditions of that shift and that heat of tube; it says nothing about a specific production weld. A program that borescopes but skips coupons cannot explain why a weld failed; one that runs coupons but does not borescope has proven the machine and not the line. The differences between orbital and manual welds in this context are on our orbital vs manual welding page.

What to require from an inspection provider

A contractor offering tubing inspection in a regulated plant should be able to show, before the job, a weld map and borescope record from a previous project with welds identified on the video; a coupon log tied to a weld schedule; a written procedure for rouge assessment that names the classes and the reference points; a passivation report format with test locations and results; and a slope survey format with readings per run. Ask which ASME BPE edition the procedures reference. Ask how findings are classified and how a finding turns into a repair scope, and whether the same contractor can perform the repair, the repassivation and the follow-up inspection so that accountability for the surface stays in one place. Ask what the turnover package contains and whether it is formatted to file directly into the plant’s maintenance and validation records. A provider who inspects but cannot repair leaves the plant with a list and no closure.

What Paul Industries does

Paul Industries installs hygienic tubing and inspects it: borescope examination to the percentage the specification sets, coupons on every shift, weld maps and logs in the turnover package, and the same records added as addenda after every modification we make. In service we offer sanitary tubing inspection as part of preventive maintenance and service contracts: gasket inspection and replacement with a per-joint log, rouge assessment against photographed reference points, passivation verification and repassivation to ASTM A967, dead-leg and slope surveys after modifications, and external checks for corrosion under insulation with the jacket restored afterwards. Because we self-perform welding, passivation and derouging, a finding becomes a repair scope with one contractor and one record.

Standards referenced: ASME BPE · ASTM A967 · 21 CFR 211 · 21 CFR 117 · 3-A · PMO · ISPE Baseline Guide

Frequently asked questions

What does a sanitary tubing inspection cover that a standard pipe inspection does not?

The inside surface. A standard pipe inspection is concerned with strength, leaks and external corrosion. A sanitary tubing inspection adds borescope examination of weld roots, gasket condition and intrusion at clamp unions, rouge on product-contact surfaces, the state of the passive layer, dead-leg geometry and slope, because those are what determine whether the line can be cleaned and whether product is at risk.

How do I schedule sanitary tubing inspection around production?

Tie each item to an event the plant already plans. Gasket and rouge checks happen at every opening, so they ride on existing maintenance. Borescope work on repair welds happens inside the modification outage. Passivation verification follows any surface disturbance. Slope and dead-leg surveys follow support or equipment work. Only corrosion-under-insulation checks need dedicated access, and those are scheduled from jacket condition and wetting events.

Does ASME BPE state how many welds must be borescoped after a modification?

The standard's minimum of 20 percent applies to the welds made, sampled across welders, sizes and procedures. For a modification with a handful of tie-in and repair welds, the practical answer is all of them, because a small population cannot be sampled meaningfully and repair welds are the highest-risk joints on the line. The owner's specification should state 100 percent for modifications.

How many weld coupons are needed on a shift?

ASME BPE ties coupons to events rather than a count: one at the start of each shift, and another whenever the tube heat, the size, the weld program or the equipment changes. On a shift with several size changes that means several coupons. Each is sectioned, examined and logged against the schedule it validated, so that any later weld can be traced to a coupon made under the same conditions.

When should hygienic clamp gaskets be inspected?

At every opening of the joint, without exception, and the finding recorded with the gasket material, lot and cycle count. The inspection looks for compression set, cracks, discoloration, swelling and intrusion into the bore. Replacement counts per service class are then set from that history rather than from a datasheet, and tightened when the log shows failures arriving earlier than expected.

What triggers a passivation check on tubing that is already in service?

Any event that could have removed or damaged the passive layer: a weld repair, a derouging campaign, mechanical cleaning or grinding, a chemical excursion, or a change in the rouge trend. Beyond events, the validation lifecycle review sets a periodic check for critical systems such as WFI loops. The verification is documented as a passivation report per ASTM A967 with test locations and results.

How is rouge monitored on a hot WFI loop between shutdowns?

By trend rather than by a single look. Reference points such as spray balls, tank domes, sample valves and heat exchanger heads are photographed at every opening under the same lighting, wipe tests are taken on accessible surfaces, and the water system's own data are reviewed for particulate or iron. A rising rate, a change in color toward blue or black, or a spread to new locations is the trigger for assessment.

Do dead legs need re-measuring if the piping has not changed?

Rarely, but the piping changes more often than the drawings do. Instrument swaps, a new sample valve, a relocated drain or a valve replaced with a longer body all alter branch length. A periodic walkdown of the as-built P&ID against the installed line, and a measurement wherever a discrepancy appears, catches what the modification paperwork missed. Every formal modification triggers a measurement of the branches it touched.

How is slope checked on installed sanitary tubing?

With a digital level along each run, reading per span between supports, compared with the slope designation on the drawing, followed by a drain test to confirm that the line empties to the low point. The survey is repeated wherever supports have been moved, equipment added or the line reworked, and whenever a drainage problem is reported, since a single shifted hanger can create a pocket.

Why does insulated stainless tubing need an external inspection?

Because austenitic stainless under wet, chloride-bearing insulation is exposed to stress corrosion cracking, most actively on warm lines, which describes hot WFI and clean steam. The failure is invisible until the jacket comes off. The external check looks for damaged jacketing, staining at low points and penetrations, and wet insulation at valves and supports, then removes insulation in sections where those signs appear.

What records does an auditor expect from a tubing inspection program?

A written schedule that names the driver for each item, and then the records: weld maps and borescope files with addenda per modification, coupon logs, a gasket log per joint, a rouge log with images and class, passivation reports with test locations, marked-up as-built drawings for dead legs, slope surveys, external inspection reports, and the deviation or change control references for anything found. Each record is dated and signed.

Can the inside of a weld be borescoped without cutting the line?

Usually, on a system with removable clamp unions, valves and spool pieces. The borescope enters at an opened joint and reaches the welds within its working length, which covers most tube runs. Welds deep in a continuous run beyond reach, or behind fixed equipment, are the reason the installation-phase examination matters: it is the only time every weld is accessible.

Does food and dairy tubing need the same inspection schedule as pharmaceutical tubing?

The items are the same and the documentation is lighter. Food plants under 21 CFR 117 and dairies under the Pasteurized Milk Ordinance and 3-A Sanitary Standards inspect welds, gaskets, drainability and dead legs because cleanability is what the inspector checks, but they rarely require borescope video or coupon logs to pharmaceutical depth. Rouge monitoring matters less because few food lines run hot deionized water.

Who should own the sanitary tubing inspection schedule, maintenance or quality?

Maintenance executes it and quality owns the requirement. The schedule lives in the maintenance system so that it triggers work orders, but the intervals, the acceptance criteria and the record formats are approved by quality, and findings on product-contact surfaces flow into deviation and change control. A schedule owned only by maintenance drifts; one owned only by quality never gets executed.

Related: Preventive Maintenance & Service Contracts · Service Contracts & Maintenance Programs · Sanitary Piping Standards & Types of Sanitary Pipe · What Is Sanitary Piping & ASME BPE? · Sanitary Process Piping Installation (ASME BPE) · Dead Legs in Hygienic Piping: The L/D Rule Explained (2D vs 3D vs 6D) · Request a quote