What Is Process Validation?

Process validation is the collection and evaluation of documented evidence, from process design through commercial production, establishing scientific proof that a manufacturing process consistently produces product meeting its predetermined specifications and quality attributes. Under FDA’s current guidance it is treated as a lifecycle activity organized into three stages: Process Design, Process Qualification, and Continued Process Verification. It is a core cGMP requirement in FDA-regulated industries such as pharmaceuticals and biotechnology.

Short definitionDocumented evidence a process consistently makes product to spec
Where it’s usedPharma · biotech · cosmetic · nutraceutical · food & beverage
Key standardFDA Process Validation Guidance (2011) · 21 CFR 211 · ICH Q8/Q9/Q10
Related equipmentProcess skids, tanks, sanitary piping, CIP/SIP systems
Why it mattersProves product quality is built in, not tested in

What process validation means

Process validation answers a regulator’s central question: can you prove that your process will make good product every time, not just on the day it was tested? Rather than relying on end-product testing alone to catch defects, validation demonstrates that quality is designed and built into the process itself. The evidence is documented and objective, so that a third party reviewing the records can reach the same conclusion the manufacturer did.

The U.S. FDA defines process validation as the collection and evaluation of data, from the process design stage through commercial production, which establishes scientific evidence that a process is capable of consistently delivering quality product. This framing is deliberately broad: validation is not a single test event but an ongoing program spanning a product’s commercial life. It ties together development knowledge, formal qualification runs, and routine monitoring into one continuous chain of evidence.

Two concepts sit at the center of the exercise. A Critical Quality Attribute (CQA) is a physical, chemical, biological, or microbiological property that must be within an appropriate limit to assure the desired product quality. A Critical Process Parameter (CPP) is a process input whose variability affects a CQA and therefore must be monitored or controlled. Validation is largely the work of understanding how CPPs influence CQAs and then proving the process holds those relationships in check at commercial scale.

The FDA three-stage lifecycle

FDA’s 2011 guidance organizes process validation into three sequential stages that together form a lifecycle. Stage 1, Process Design, defines the commercial process based on knowledge gained through development and scale-up studies; this is where CQAs and CPPs are identified and a control strategy is built. Stage 2, Process Qualification, evaluates whether the designed process is capable of reproducible commercial manufacturing and includes qualification of the facility, utilities, and equipment as well as Process Performance Qualification (PPQ) runs. Stage 3, Continued Process Verification, provides ongoing assurance during routine production that the process remains in a state of control.

The lifecycle model replaced the older mindset of validating a process once with a fixed number of batches and considering the job finished. Under the current approach, the knowledge generated in each stage feeds the next, and information from routine production can trigger a return to earlier stages if the process drifts or is changed.

The three stages of process validation under the FDA lifecycle model
StageGoalKey activitiesOutput
Stage 1 — Process DesignDefine a commercial process capable of consistent qualityDevelopment and scale-up studies; identify CQAs and CPPs; establish a control strategy; risk assessmentDefined process and documented control strategy
Stage 2 — Process QualificationConfirm the process is reproducible at commercial scaleFacility, utility and equipment qualification; Process Performance Qualification (PPQ) runsApproved, qualified process ready for routine production
Stage 3 — Continued Process VerificationAssure the process stays in control during routine productionOngoing data collection and trending; monitoring of CPPs and CQAs; periodic reviewContinuing evidence of a validated state of control

How it relates to equipment qualification (IQ/OQ/PQ)

Process validation and equipment qualification are related but distinct. Equipment qualification asks whether a specific piece of equipment or a system was installed correctly and operates and performs as intended, and it is documented through Installation Qualification (IQ), Operational Qualification (OQ), and Performance Qualification (PQ). Process validation asks a larger question: whether the whole manufacturing process, running on qualified equipment, consistently yields product that meets its specifications.

Qualified equipment is a prerequisite for process validation, not a substitute for it. In the lifecycle model, IQ/OQ/PQ of the facility, utilities, and equipment falls within Stage 2 (Process Qualification) and provides the foundation on which the Process Performance Qualification runs are performed. You cannot credibly validate a process on equipment whose installation, operation, and performance have not first been established. Paul Industries builds and installs the sanitary process skids, tanks, and piping systems that carry this qualification evidence, and supports validation and commissioning so that equipment and process documentation align.

Standards & references

FDA Process Validation: General Principles and Practices (2011)
The FDA guidance that established the three-stage lifecycle approach — Process Design, Process Qualification, and Continued Process Verification — for pharmaceutical and biologic manufacturing.
21 CFR Parts 210 & 211 (cGMP)
The U.S. Current Good Manufacturing Practice regulations for finished pharmaceuticals; validation is a means of meeting the requirement that processes be controlled and reproducible.
ICH Q8 (Pharmaceutical Development)
Introduces Quality by Design, the design space concept, and identification of CQAs and CPPs that underpin Stage 1 process design.
ICH Q9 (Quality Risk Management)
Provides the risk-assessment framework used to prioritize which parameters and attributes are critical and how to focus validation effort.
ICH Q10 (Pharmaceutical Quality System)
Describes the quality system model that sustains continual improvement and supports Continued Process Verification across a product’s lifecycle.

Process validation is a core cGMP requirement — see our overview of what cGMP (current good manufacturing practice) means.

Standards referenced: 21 CFR 211 · FDA process validation guidance · ASME BPE

Related: What Is an FDA 483? Observations and Response Explained · Pharmaceutical CIP and SIP Systems (Validated) · Pharmaceutical Commissioning and Qualification · Validation Cost: What IQ, OQ and PQ Actually Cost to Execute

Commissioning vs qualification, and why the boundary is a commercial decision

Commissioning is engineering work that proves a system was built and functions as it was engineered. Qualification is the portion of that work a quality unit reviews and approves because it bears on product quality. The same physical test can sit on either side of the line, and which side it lands on changes what it costs by a multiple: a qualification test needs a pre-approved protocol, trained executors, formal deviation handling and a quality signature on the result.

ASTM E2500 gave that boundary a structure. Testing performed once under good engineering practice can be accepted as verification instead of being repeated inside a protocol, provided the critical aspects were identified from a documented risk assessment first, and provided the documentation standard and the competence of the people executing it were agreed in advance.

The condition is the whole point, and it is the part projects skip. Leveraging works when quality agrees to it in writing before execution. It does not work when a completed vendor test is presented afterwards and quality is invited to accept it. The predictable outcome in that case is the most expensive one available: the test is performed twice, the second time under protocol, and the second run finds nothing the first did not.

None of this reduces the requirement. It relocates the evidence, and it only relocates evidence that was generated to a standard somebody defined ahead of time.

Figures that show validation is a project, not a document

Validation reads like paperwork until it is priced. Our facility cost breakdown for turnkey GMP projects records a water system three phase qualification at $58,000 to $480,000, and notes that the figure scales with how many points of use exist rather than with system capacity. Media fills for aseptic qualification are recorded at $150,000 to $600,000, covering three initial runs plus periodic requalification afterwards.

Two structural facts sit inside those ranges. The first is that they are driven by counts rather than by size: points of use, product changeovers, GxP computerised systems, filling lines. A designer who adds sampling locations or a business that adds products to a shared train has raised the validation line without touching the equipment.

The second is that none of these amounts appear on an equipment quotation, and a capital request assembled from vendor pricing will be short by whatever the qualification campaign costs. Budgeting validation as a percentage added at the end produces the familiar late project squeeze, where the pressure to reduce sampling arrives precisely when the data set needs to be strongest.

What to require in a Stage 2 process qualification package

Stage 2 succeeds or fails on what is assembled before the runs start. Require all of it:

  • Critical quality attributes and critical process parameters listed with the development data or risk assessment that designated each one. A parameter called critical without a basis cannot be defended, and one left off cannot be explained later.
  • Proven acceptable ranges recorded separately from the normal operating range, with the studies that established each, so an excursion can be judged against a boundary that actually exists.
  • A sampling plan with a stated statistical rationale covering sample count, position within the batch, and the confidence that count supports. Three batches is a convention, not a rationale.
  • Equipment qualification closed and referenced rather than running in parallel, with every open punch item listed and assessed for product impact.
  • Analytical method validation complete under ICH Q2 for every method used to judge the runs, since a qualification batch measured by an unvalidated method has not been measured.
  • Cleaning validation status for the train, stating whether the campaign used the worst case product and the worst case dirty hold time, or whether those remain to be covered.
  • The continued process verification plan written before Stage 2 closes, naming the parameters to be trended, the control rules that signal a shift, and who reviews them at what interval.
  • Every deviation and change raised during the runs, closed with an explicit assessment of whether the run remains representative of the commercial process.
  • A comparison of the qualified process against the intended commercial process: batch size, equipment train, hold times and any parameter that differs, stated rather than buried.
  • An agreed list of which future changes trigger requalification and at what depth, settled with quality now instead of argued after the change is made.

Frequently asked questions

Why is process validation important?
Validation gives objective proof that a process will consistently deliver product of the required quality, protecting patients and satisfying FDA cGMP expectations. Without it, a facility is relying on inspection alone. Validation shifts assurance upstream into the process itself, reducing failures, recalls, and audit findings.
What are the three stages of process validation?
The FDA lifecycle model has three stages: Stage 1 Process Design, defining the process from development and scale-up; Stage 2 Process Qualification, confirming the facility, utilities, equipment, and process perform (including IQ/OQ/PQ); and Stage 3 Continued Process Verification, monitoring the process in routine production to ensure it stays in control.
What is the difference between validation and qualification?
Qualification proves individual equipment and systems are installed, operate, and perform correctly. Validation is the broader effort proving the entire process reliably yields a compliant product. Equipment qualification is one input; process validation ties equipment, materials, methods, and controls together into documented, repeatable assurance.
Does the FDA require process validation?

Yes, though it regulates the outcome rather than prescribing a method. 21 CFR 211 requires that processes be validated and that equipment be suitable, cleanable and maintained, and FDA process validation guidance frames it in three stages: process design, process qualification, and continued process verification through the product lifecycle. The practical consequence is that validation is not a one-off exercise completed at startup; continued verification means monitoring and periodic review for as long as the process runs.

What equipment typically requires process validation?
High-purity water systems, CIP/SIP skids, autoclaves, bioreactors, cleanrooms, clean steam generators, filtration, and other systems whose function affects product quality all require qualification within process validation. Paul Industries designs, builds, installs, and validates these systems as one accountable party. Call 201-450-8280.
How long does process validation take?
It depends on scope. Equipment qualification can run several weeks, and performance qualification for a water loop often requires multiple weeks of sampling. Full process validation is a lifecycle activity that continues into routine production through ongoing verification rather than ending at a single milestone.
What is a validation master plan?
A Validation Master Plan (VMP) is the top-level document that defines the scope, approach, responsibilities, and schedule for validating a facility or project. It lists the systems to be qualified, the strategy for each, and how the effort ties together, giving auditors a roadmap of the overall program.
What causes a process validation to fail?
Common causes include inadequate process understanding from Stage 1, poorly written acceptance criteria, uncalibrated instruments, installation errors caught late, insufficient PQ runs, and weak documentation practices. Many failures trace back to skipping design work or treating validation as paperwork rather than genuine engineering evidence.
What is the role of risk assessment in validation?
Risk assessment focuses validation effort where product quality and patient safety are most affected. It justifies how many PQ runs are needed, which parameters are critical, and where controls belong. A documented, science-based risk approach is now central to how the FDA expects validation to be scoped.
What documentation does process validation produce?
Validation generates a validation master plan, user requirement and design specifications, qualification protocols and executed records, calibration and material certifications, deviation reports, and summary reports, plus ongoing monitoring data in Stage 3. Together these form the traceable evidence an inspector reviews.
Can process validation be done on an existing legacy system?
Yes. Legacy or previously unvalidated systems can be validated retrospectively or, more commonly, qualified prospectively after assessment, gathering current documentation, calibrating instruments, and executing IQ/OQ/PQ. Paul Industries can assess an installed system and build the package it lacks. Call 201-450-8280.
What is process performance qualification (PPQ)?
Process Performance Qualification is the point in Stage 2 where the commercial-scale process is run to confirm it consistently produces acceptable product. It combines the qualified facility, utilities, and equipment with the actual process and materials, demonstrating end-to-end that the process performs as designed before routine production.
Who should perform process validation, the builder or a third party?
Either can, but using the firm that designed and built the system keeps knowledge and accountability in one place. As a single-source contractor, Paul Industries validates the systems it fabricates and installs, avoiding gaps between a builder’s intent and a separate validator’s interpretation.
How do you start a process validation project?
Start by defining requirements and scope, typically in a validation master plan, then design or assess the systems, execute qualification, and establish ongoing verification. Paul Industries can take a project from design and fabrication through installation and validation as one accountable partner. Call 201-450-8280 to scope your project.
What is process validation?
Process validation is the collection and evaluation of documented evidence, from process design through commercial production, that establishes scientific proof a manufacturing process consistently produces product meeting its predetermined specifications. It is a core cGMP requirement in FDA-regulated industries and is managed as an ongoing lifecycle rather than a one-time test.
What are the 3 stages of process validation?
Under FDA’s lifecycle guidance the three stages are Stage 1 Process Design, which defines the commercial process from development knowledge; Stage 2 Process Qualification, which confirms the process is reproducible at commercial scale and includes equipment qualification and PPQ runs; and Stage 3 Continued Process Verification, which provides ongoing assurance that the process stays in a state of control during routine production.
How is process validation different from equipment qualification?
Equipment qualification (IQ/OQ/PQ) confirms that a specific piece of equipment or system is installed correctly and operates and performs as intended. Process validation confirms that the entire manufacturing process, running on that qualified equipment, consistently produces product meeting specifications. Qualified equipment is a prerequisite for process validation, not a replacement for it.
What is PPQ?
PPQ stands for Process Performance Qualification, the second element of Stage 2 in the FDA lifecycle model. It consists of confirmatory runs performed on qualified facility, utility, and equipment, using trained personnel and approved procedures, to demonstrate that the commercial-scale process reproducibly delivers product meeting its predetermined specifications before routine distribution begins.
What is continued process verification?
Continued Process Verification is Stage 3 of the FDA lifecycle model. It is the ongoing collection and trending of data from routine commercial production, including monitoring of critical process parameters and quality attributes, to provide continuing assurance that the process remains in a validated state of control and to detect any drift that requires action.
What is prior knowledge and how is it used in validation?

Existing data from development, from similar products or processes, and from the literature, used to support the process design and to justify the qualification approach. Documented prior knowledge is what allows a smaller qualification effort to be defensible.

What is a critical quality attribute?

A physical, chemical, biological or microbiological property that must be within a limit or range to ensure the required product quality. Identifying them correctly is what makes the rest of the validation meaningful, because everything else is defined relative to them.

What is a critical process parameter?

A process parameter whose variability affects a critical quality attribute, and which therefore has to be controlled within a proven range. The link from parameter to attribute has to be demonstrated rather than assumed.

What is a design space?

The multidimensional combination of input variables and process parameters demonstrated to provide assurance of quality. Working within it is not considered a change, which is what makes establishing one commercially valuable.

How does equipment qualification relate to process validation?

Equipment qualification establishes that the systems are installed and function correctly, which is a prerequisite. Process validation then demonstrates the process running on that equipment reproducibly delivers the product. Attempting the second without the first produces evidence that cannot be relied on.

What is a process capability index used for?

It expresses how much margin a process has between its natural variation and its specification limits, which turns a qualitative sense of control into a number that can be trended. Falling capability signals drift before any single result goes out of specification.

What does the FDA guidance on process validation require?
The process validation FDA guidance, Process Validation: General Principles and Practices (January 2011), replaced the older three-batch habit with a lifecycle model in three stages: Stage 1 Process Design, where the commercial process is defined from development and scale-up knowledge; Stage 2 Process Qualification, where the facility, utilities and equipment are qualified and a Process Performance Qualification (PPQ) confirms the process is reproducible; and Stage 3 Continued Process Verification, ongoing monitoring during routine production. It applies to human and veterinary drugs, biologics and APIs, and it expects the number of PPQ batches to be justified rather than defaulted to three.
What is process qualification vs process validation?
Process qualification is one stage inside process validation, not a synonym for it. Under the FDA lifecycle model, process validation is the whole body of evidence that a process consistently delivers quality product, from design through routine monitoring. Process qualification (Stage 2) is the part that proves the designed process works at commercial scale: equipment and utility qualification (IQ/OQ, often grouped as commissioning and qualification) followed by the PPQ runs. A facility can have qualified equipment and still not have a validated process.
How does process validation in the pharmaceutical industry differ from process validation for medical devices?
For process validation, pharmaceutical manufacturers follow the FDA 2011 guidance and ICH Q8 to Q11, with the three-stage lifecycle and a strong emphasis on critical process parameters, critical quality attributes and statistical evidence from PPQ batches. Process validation for a medical device is governed by 21 CFR 820.75 (now aligned with ISO 13485 under the Quality Management System Regulation) and the GHTF guidance, and applies specifically to processes whose output cannot be fully verified by inspection and test, for example sterilization, sealing, welding and molding. So pharma process validation is mandatory for every commercial manufacturing process; process validation medical device programs are triggered by whether the output can be verified. In short, process validation in pharmaceutical industry practice is universal, and in device manufacturing it is selective.
What are the process validation steps in a typical protocol?
A process validation protocol written for Stage 2 usually contains: the process description and flow diagram; the equipment and utility qualification status it relies on; the critical process parameters and their proven acceptable ranges; the critical quality attributes and acceptance criteria; the sampling plan (where, how often, how many); the number of PPQ batches and the rationale; the handling of deviations; and the pre-approved criteria for declaring the process validated. The process validation steps then follow the protocol in order, with the report closing out each criterion. GMP process validation in manufacturing also expects a change-control link so any later change to equipment, materials or parameters triggers a review of the validated state.
Related

See also Bioreactor Cost, What Is a Bioreactor, FDA 483 Water System Remediation, High-Purity Water Filtration and What Documentation Should a Sanitary Piping Contractor Hand Over.

Need validated process equipment built or serviced?

Paul Industries designs, installs, and validates process-equipment and sanitary-piping systems for manufacturers nationwide.

Request a Project Quote or call 201-450-8280

Service needed *

By submitting, you agree to be contacted by Paul Industries LLC about your project. We do not share your information.

Where the three-stage lifecycle actually comes from in law

The three-stage lifecycle is described in FDA guidance, and guidance is not binding. The obligation underneath it is, and it runs through the statute into the regulation. Section 501(a)(2)(B) of the Federal Food, Drug, and Cosmetic Act deems a drug adulterated if the methods, facilities or controls used in its manufacture do not conform to current good manufacturing practice. That is the legal hook: validation is not a document you produce for an auditor, it is part of what stops the product being adulterated as a matter of law.

Lifecycle stageWhat happensBinding requirement it satisfies
Stage 1 – Process DesignDefine the commercial process from development knowledge and establish a control strategy21 CFR 211.100(a) – written procedures for production and process control, designed to assure identity, strength, quality and purity
Stage 2 – Process QualificationConfirm the facility, utilities and equipment are fit, then demonstrate the process performs reproducibly211.63, 211.65, 211.67 and 211.68 for the equipment; 211.110(a) for in-process controls; 211.113(b) where the product is sterile
Stage 3 – Continued Process VerificationMonitor the process in routine production to confirm it stays in a state of control211.180(e) – annual review of records for each product; 211.110(b) – in-process specifications derived from prior acceptable runs
Underpinning all threeLaboratory controls and the records that evidence everything above211.160(b) scientifically sound specifications; 211.188 batch records; 211.192 production record review; 211.194 laboratory records

Reading it this way changes what Stage 3 is for. Continued process verification is frequently treated as optional monitoring that ends when the validation report is signed. 211.180(e) is not optional, and it requires an annual review of records to determine whether specifications or procedures need changing. A validation program that stops at Stage 2 has satisfied guidance and left a binding requirement unaddressed.

Equipment qualification is a subset, not a synonym

The two are routinely conflated, including in specifications. Process validation demonstrates that a process reproducibly delivers a product meeting its predetermined attributes. Equipment qualification demonstrates that a specific item of equipment is suitable, installed correctly and operating within its range. Qualified equipment is a precondition for a valid process; it is not evidence that the process itself is validated.

The practical distinction shows up in scope. Equipment qualification lives under 211.63 to 211.72 – design, construction, cleaning, automatic controls and filters. Process validation lives under 211.100 to 211.115 – written procedures, in-process controls, and control of microbiological contamination. A contractor can deliver the first in full and leave the second entirely to the manufacturer, which is normally the correct division of responsibility and should be stated as such in the contract rather than assumed.

The number of qualification runs is not fixed at three

Widely believed, and not in the regulation. Nothing in 21 CFR 211 specifies three batches, and the 2011 guidance deliberately moved away from a fixed number toward a justification based on understanding of variability. The practical test is whether the number of runs supports a statistical claim about the process, which depends on how variable the process is and how much prior knowledge exists from Stage 1.

This matters commercially as well as scientifically. Three runs on a highly variable process produces a validation report that will not survive its first out-of-specification result, while insisting on three runs for a well-characterized process on qualified equipment can be an expensive ritual. Either position is defensible if the protocol argues it; neither is defensible if the protocol simply assumes it.