Validation and commissioning is the documented, evidence-based process of proving that a piece of process equipment or a system was built correctly and consistently does what it is supposed to do. It runs through commissioning (functional checkout of the installed system), then qualification — Design Qualification (DQ), Installation Qualification (IQ), Operational Qualification (OQ), and Performance Qualification (PQ) — so an FDA-regulated facility can release the system for cGMP use. Paul Industries provides validation and commissioning as part of the physical build, so the same team that fabricates and installs your process piping, high-purity water, or CIP/SIP system also writes the protocols and generates the proof, with more than 30 years of cGMP/FDA-compliant experience across the United States.

Request a Project Quote   or call 201-450-8280

What it isDocumented proof that equipment is installed, operates & performs to spec
Who it’s forcGMP pharma, biotech, cosmetic, nutraceutical & food/beverage plants
ScopeC&Q strategy → DQ → commissioning → IQ → OQ → PQ → final report
ApproachRisk-based (ASTM E2500) · requirements traceability · GAMP 5
StandardscGMP / 21 CFR 211 · 21 CFR Part 11 · ASTM E2500 · ISPE guidance
Service areaNationwide (all 50 states)

How validation and commissioning works

Validation is not a single test at the end of a project — it is a sequence that starts with defining what the system must do and ends with documented evidence that it does it. First, user requirements and functional specifications describe the intended use. Commissioning then verifies the installed system is complete and functional: utilities are connected, instruments respond, and the system runs. Qualification follows, formally documenting that installation, operation, and performance meet the pre-approved acceptance criteria under cGMP controls.

Under a modern risk-based approach (ASTM E2500 and ISPE guidance), engineering and commissioning activities are leveraged into qualification wherever quality risk is low, so effort concentrates on the attributes that actually affect product quality and patient safety. Throughout, a requirements traceability matrix links each user requirement to its specification, the test that verifies it, and the result. Deviations found during testing are documented, investigated, and resolved before the system is released. Paul Industries builds validation into the project from design forward, so protocols, drawings, weld records, and calibration data are ready when qualification begins rather than reconstructed afterward.

IQ vs OQ vs PQ

The three core qualification stages each prove a different thing, and they are executed in sequence — you cannot meaningfully run OQ until IQ is complete, or PQ until OQ passes. Together they build the documented chain of evidence a regulator expects.

IQ vs OQ vs PQ
IQ (Installation)OQ (Operational)PQ (Performance)
What it provesSystem is installed correctly per specs & drawingsSystem operates across its full intended rangeSystem consistently performs in real-world use
Typical activitiesVerify components, materials, welds, utilities, instrument install & calibration statusFunction tests, alarms & interlocks, operating limits, control-loop & setpoint checksRepeated runs at normal conditions, sampling, process challenge over time
Key questionWas it built & installed right?Does it do what it should across its range?Does it reliably deliver the result, run after run?
DeliverableExecuted IQ protocol + as-built documentationExecuted OQ protocol + functional test recordsExecuted PQ protocol + performance/trend data

Commissioning vs qualification

Commissioning and qualification are often blurred together, but they serve different purposes and carry different documentation requirements. Commissioning is a good-engineering-practice checkout that applies to essentially every system; qualification is the regulated, quality-approved subset that applies to systems with direct impact on product quality. A risk-based C&Q program keeps the two coordinated so verified engineering work is not needlessly repeated.

Commissioning vs qualification
CommissioningQualification
PurposeVerify the system is installed & functions as engineeredDocument that a quality-impacting system meets cGMP requirements
BasisGood Engineering PracticecGMP / regulatory expectation
Applies toMost systems & utilitiesDirect-impact (quality-critical) systems
DocumentationEngineering test & checkout recordsPre-approved protocols (IQ/OQ/PQ) & QA-approved reports
ApprovalEngineering / project teamQuality Assurance

Our validation & commissioning services

Because Paul Industries designs, fabricates, and installs the systems we validate, we can close the gap between construction and qualification — the team that builds the system also documents and proves it:

  • C&Q strategy & planning — validation master plan input, risk assessments, and a risk-based (ASTM E2500) commissioning-and-qualification approach.
  • Design Qualification (DQ) — documented verification that the proposed design meets user requirements and cGMP intent before fabrication.
  • Commissioning — functional checkout of installed systems: utility tie-ins, instrument response, run-in, and punch-list resolution.
  • IQ / OQ / PQ protocols & execution — protocol authoring, execution, and reporting for installation, operation, and performance.
  • Requirements traceability — a traceability matrix linking each requirement to its specification, test, and result.
  • Calibration & instrument documentation — verification of instrument calibration status and records referenced by the IQ.
  • Deviation management — documenting, investigating, and resolving test deviations before release.
  • Re-validation & periodic review — requalification after changes and support for periodic-review cycles that keep systems in a validated state.

Industries we serve

We commission and qualify systems for pharmaceutical and biotech drug manufacturing (including WFI loops, bioreactor suites, and CIP/SIP skids), cosmetic and personal-care production, nutraceutical facilities, and food & beverage plants where sanitary standards and documented control apply. Each industry has its own regulatory expectations and documentation depth, and we scale the protocols and acceptance criteria to the criticality of the system and its impact on product quality.

Standards & compliance

cGMP / 21 CFR 211
FDA current Good Manufacturing Practice requirements that make validation mandatory — equipment must be qualified and its qualification documented before it is used to make regulated product.
GAMP 5 (Good Automated Manufacturing Practice)
The ISPE framework for validating automated and computerized systems, using a risk- and category-based approach so validation effort matches system complexity and risk.
ASTM E2500
The standard for a risk- and science-based approach to the specification, design, and verification of manufacturing systems — the basis for leveraging good engineering and commissioning work into qualification.
ISPE guidance (Baseline Guides / C&Q)
Industry-consensus good practice for commissioning and qualification that operationalizes the risk-based model regulators expect to see applied.
21 CFR Part 11 (data integrity)
FDA requirements for electronic records and electronic signatures — the reason instrument data, protocols, and results must be attributable, legible, contemporaneous, original, and accurate (ALCOA).

Why Paul Industries

On most projects the firm that builds the system and the firm that validates it are different companies, which creates a documentation gap: the validation team has to reconstruct as-built conditions, chase down weld and calibration records, and interpret a design they did not create. Because Paul Industries self-performs design, sanitary-piping fabrication, installation, and validation, one team owns the system from user requirement to executed PQ. The traceability matrix, weld and material documentation, calibration records, and qualification protocols are generated as the system is built, not assembled after the fact. With more than three decades delivering process-equipment and high-purity systems across the United States, every weld, cycle, and test is documented for cGMP traceability. Where public project references are limited by client confidentiality, we provide capability statements and validation deliverables on request.

Frequently asked questions

What is contained in an IQ, OQ, and PQ protocol?
An IQ protocol verifies correct installation against design, materials, welds, instruments, and utilities. An OQ protocol tests operation across defined ranges, alarms, and interlocks. A PQ protocol demonstrates sustained performance under actual process conditions. Each defines acceptance criteria, test steps, and documented results.
What is Design Qualification (DQ) and when is it needed?
DQ documents that the proposed design meets user requirements and regulatory expectations before fabrication. It links user requirement specifications to design and provides the foundation for IQ, OQ, and PQ. DQ is most valuable on new or custom systems where design decisions must be justified.
What triggers requalification or revalidation?
Common triggers include significant modifications or expansions, relocation, changes to critical components or control systems, out-of-trend performance, changes in process or product, or periodic review intervals defined in the quality system. A risk assessment determines whether full or partial requalification is required.
Is cleaning validation part of your services?
Cleaning validation demonstrates that cleaning and CIP processes consistently remove residues to acceptance limits. Paul Industries builds CIP/SIP systems and supports their qualification. Cleaning validation is documented with sampling, analytical limits, and repeat runs, tying equipment design to the cleaning process it must support.
Where does computer system validation fit in?
Automated water systems, CIP/SIP skids, and autoclaves include control systems whose functions and data integrity must be verified within OQ, using a risk-based approach consistent with 21 CFR 211 expectations. Control-system testing confirms alarms, interlocks, security, and records behave as specified alongside the mechanical qualification.
How long does validation take?
Timelines vary by system. IQ and OQ can run days to weeks depending on complexity, while PQ length is process-driven; water PQ typically spans several weeks to capture operational variation. Autoclave and CIP PQ involve repeat runs. A schedule is set once scope and acceptance criteria are defined.
What drives validation cost?
Cost drivers include system complexity, number of instruments and use points, protocol volume, PQ duration and number of runs, sampling and analytical load, documentation depth, and whether protocols are written from scratch. Risk-based scoping focuses effort on critical attributes and avoids unnecessary testing.
Can you validate systems you did not build?
Yes. Paul Industries provides validation and commissioning for existing equipment and systems built by others, including water systems, autoclaves, CIP/SIP, and cleanrooms. An assessment defines the current state, gaps, and the qualification scope needed to bring the system to a documented, compliant condition.
What is a risk-based approach to validation?
A risk-based approach, aligned with ASTM E2500, focuses qualification effort on the attributes and components most critical to product quality and patient safety. Critical aspects receive rigorous testing; lower-risk items receive proportionate verification. This concentrates resources where they matter and produces a defensible, efficient program.
What documentation and turnover package results from validation?
The package typically includes DQ where applicable, executed IQ/OQ/PQ protocols with results and deviations, material and weld traceability, instrument calibration records, drawings, and a validation summary report. This turnover package supports 21 CFR 211 and EU GMP expectations and is inspection-ready.
What are the PQ phases for a water system?
Water PQ is commonly run in phases: an intensive phase with heavy daily sampling at all use points to establish control, a second phase confirming consistency, and a longer routine phase capturing seasonal and operational variation. Together they demonstrate the system reliably meets USP quality.
How is temperature mapping performed for autoclaves?
Autoclave qualification uses temperature mapping with calibrated sensors placed throughout the chamber and load to confirm uniform heat distribution and penetration to the coldest point. Empty-chamber and loaded studies, with repeat cycles, demonstrate the cycle consistently achieves sterilization conditions as part of OQ and PQ.
Do you write validation protocols, or only execute them?
Both. Paul Industries can author IQ, OQ, and PQ protocols tailored to the system and its acceptance criteria, then execute them, or execute client-supplied protocols. As a single-source contractor, protocol authorship stays connected to the design and installation it verifies.
What is the difference between commissioning and qualification in practice?
Commissioning is the engineering process of installing, checking, and starting up a system so it functions as designed. Qualification is the documented, regulated verification (IQ/OQ/PQ) that it meets cGMP requirements. Under ASTM E2500, commissioning activities can be leveraged to support qualification, reducing duplicate testing.
Which systems do you validate?
Paul Industries validates the systems it builds and services: high-purity water, sanitary piping, cleanrooms, CIP/SIP, bioreactors, tanks, autoclaves, filtration, heat exchangers, chillers, and clean steam. Validation is offered as part of turnkey delivery or as a standalone service on existing equipment.
Do you provide validation and commissioning nationwide?
Yes. Paul Industries delivers IQ/OQ/PQ, commissioning, and qualification services in all 50 states from its Kilmarnock, Virginia headquarters, for pharma, biotech, cosmetic, nutraceutical, and food and beverage facilities. Call 201-450-8280 to discuss a validation scope.
What’s the difference between IQ, OQ, and PQ?
IQ (Installation Qualification) documents that the system was installed correctly per specifications and drawings; OQ (Operational Qualification) proves it operates as intended across its full range, including alarms, interlocks, and limits; and PQ (Performance Qualification) demonstrates it consistently performs in real-world use through repeated runs and sampling. They are executed in sequence, and together they form the documented chain of evidence that the system is fit for cGMP use.
What is commissioning vs qualification?
Commissioning is a good-engineering-practice checkout that verifies a system is installed and functions as engineered, and it applies to most systems. Qualification is the regulated, QA-approved subset — DQ/IQ/OQ/PQ — that formally documents cGMP compliance for systems with direct impact on product quality. A risk-based C&Q program (ASTM E2500) coordinates the two so verified engineering and commissioning work is leveraged into qualification rather than repeated.
Do you validate systems you didn’t install?
Yes. While our strongest value is validating systems we also design and build — because the documentation is generated as the system is constructed — we also commission and qualify existing or third-party-installed systems. In those cases we start by verifying as-built conditions, drawings, welds, and calibration status, then build the traceability and protocols from there.
How long does validation take?
It depends on the system’s complexity and criticality. A single skid or piece of equipment may be commissioned and qualified in a few weeks, while a large system with extensive automation and a multi-phase PQ — such as a high-purity water loop — can run several weeks to a few months. Building validation in from design and prefabricating documentation shortens the on-site timeline, which we plan around your production schedule.
Do you handle re-validation and periodic review?
Yes. We support requalification after changes, repairs, or relocations, and we provide the documentation needed for periodic-review cycles that keep systems in a validated state. Change control that affects a qualified system typically drives a risk-based decision on what must be re-tested, and we help scope and execute that work.
Which states do you serve?
We are Virginia-based and provide validation and commissioning nationwide.

Get a validation & commissioning quote

Tell us about your system, its criticality, and where it is in its lifecycle — a Paul Industries engineer will follow up to discuss C&Q strategy, protocols, and timeline.

Request a Project Quote or call 201-450-8280

Service needed *

Related resources

IQ/OQ/PQ validation services, provided nationwide

Paul Industries provides IQ/OQ/PQ validation and commissioning as a service — whether as part of a single-source design-build-validate project or as standalone protocol execution on existing systems. Because we build the same systems we qualify, our validation team understands the engineering behind every test, which means cleaner turnover packages and fewer deviations at IQ.

Systems we validate

  • High-purity water systems — USP Purified Water and WFI, tested to USP <643> (TOC), <645> (conductivity), and <1231>
  • Sanitary process piping — ASME BPE loops with weld and passivation documentation
  • Cleanrooms — qualified to ISO 14644 and EU GMP Annex 1
  • Autoclaves & sterilizers, CIP/SIP systems, tanks, bioreactors, and clean steam

Risk-based commissioning and qualification

We support risk-based C&Q under ASTM E2500 and ISPE Baseline Guides, concentrating verification effort on the attributes that affect product quality and patient safety, aligned to 21 CFR 211. Every engagement produces the documentation your quality unit and inspectors expect: validation plans, IQ/OQ/PQ protocols with executed test scripts, deviation handling, traceability matrices, and summary reports. Compare delivery models in single-source turnkey vs multiple vendors, or request a quote.