What are the GMP Requirements for Sterile Production according to Annex 1?

The manufacture of sterile medicinal products is one of the most regulated areas of pharmaceutical production. The aim is to provide products that are free from microorganisms and pose no risk to patients. The regulatory requirements in Europe are laid down in the EU GMP guidelines (EudraLex, Volume 4). Annex 1, "Manufacture of Sterile Medicinal Products", specifies the requirements for sterile and aseptic processes and, since its revision on 22/25 August 2022, has been the main reference document for industry and inspectors. Most of the requirements came into force on 25 August 2023; point 8.123 (lyophilisation) has only applied since 25 August 2024.

Regulatory principles of sterile production

Legally, the European GMP system is based on Directive 2003/94/EC, which has been transposed into national law (e.g. AMG and AMWHV in Germany). The detailed requirements can be found in the EU GMP Guidelines, Part I (Basic Requirements for Medicinal Products) and in the supplementary annexes, including Annex 1 for sterile medicinal products. Annex 1 is therefore not an isolated document; it supports the implementation of an overarching PQS and emphasises the use of innovative/risk-based tools in the sense of QRM and PQS (e.g. ICH Q9/Q10 as a conceptual framework). Annex 1 also clarifies that QRM applies to the entire document and that minimum requirements (e.g. frequencies/limits) are historically justified (Section 1, in particular 1.1-1.2).

The revision has been significantly expanded in terms of structure and content. New features include separate chapters on "Scope", "Utilities", "Environmental and Process Monitoring" and a glossary. The new structure follows a clear logic: From basic principles and PQS to personnel, premises, equipment and utilities to production, monitoring and quality control. This has given Annex 1 a more systemic focus.

Annex 1 distinguishes between terminal sterilisation and aseptic manufacturing and requires process/equipment design, qualification/validation and ongoing verification as key measures to contamination prevention (2.1). Terminal sterilisation remains the preferred approach whenever technically/qualitatively feasible (basic rationale in Section 8 "Production and specific technologies"). For aseptic processes, Annex 1 emphasises in particular that sterility assurance is not achieved through monitoring/testing alone, but through design, procedures and monitoring as proof of effectiveness (2.2-2.3: "Monitoring or testing alone does not give assurance of sterility.").

Aseptic manufacturing requires a combination of cleanroom/barrier design, qualified utilities, validated cleaning/disinfection programmes, qualified personnel and robust monitoring. Annex 1 explicitly mentions the use of suitable technologies such as RABS, isolators, robotics, rapid/alternative methods and continuous monitoring as options to be considered (2.1 i). Barrier systems must ensure Grade A conditions in the critical zone; for isolators and RABS, "unidirectional airflow" and "first air protection" in the critical zone are emphasised (4.19-4.20). Humans remain a key contamination risk; Annex 1 therefore requires, among other things, suitable training/qualification systems, rules for disqualification/requalification (e.g. after a failed APS) and requirements for gowning and the integrity of clothing (e.g. 7.6; 7.11 ff.).

Aseptic process simulation (APS or media fill) is used for the periodic revalidation of aseptic processes (9.32). Annex 1 also emphasises that APS is not the primary means of "validating" the aseptic process; sterility assurance must result from process design, PQS/controls, training and evaluation of monitoring data (9.32). The following applies to periodic revalidation: APS should generally be performed twice a year (every 6 months) for each aseptic process, each filling line and each shift. In addition, every operator should participate (9.38). The expected result is "0 contaminated units", which illustrates the high regulatory bar.

New priorities due to the Annex 1 revision?

The revision of Annex 1 came with it a clear paradigm shift. Two holistic concepts are at the centre: Quality Risk Management (QRM) and Contamination Control Strategy (CCS).

QRM is the key to identifying, analysing and minimising contamination risks. Annex 1 explicitly calls for a risk-based approach throughout the entire life cycle. Tools such as HACCP can serve as a suitable methodological basis for this.

Even more fundamental is the introduction of a mandatory Contamination Control Strategy. Section 2.3 of Annex 1 requires the implementation of a facility-wide CCS that identifies all critical control points and evaluates the effectiveness of all technical, organisational and procedural measures. Existing systems do not necessarily have to be replaced, but they must be integrated into the CCS and understood in terms of their interactions.

The CCS advocates a systemic approach: Quality should not be "tested into" a product, but inherently guaranteed through robust, validated processes. Test procedures alone - such as microbiological monitoring - are insufficient, as they are prone to error and only represent random samples. This concept is in line with the quality-by-design principle. In collaboration with many experts, the ECA Guide "How to Develop and Document a Contamination Control Strategy" was created in this context and is freely available on the official ECA Foundation website.

A particularly controversial innovation is the explicit requirement for PUPSIT (Pre-Use Post-Sterilisation Integrity Testing) for sterile-filtered products. PUPSIT requires an integrity testing of the sterile filter before use (after sterilisation) and again after filtration. The aim is to ensure that the filter was intact before the start of the process and that no damage occurred during use (8.87).

From a regulatory perspective, PUPSIT is understood as a measure to increase process reliability, as a post-check alone cannot rule out the possibility that the filter was already defective before the process began. However, Annex 1 allows for exceptions, based on a risk analysis, if PUPSIT is technically impossible or associated with increased risk (e.g. in single-use systems with very small volumes). In such cases, detailed QRM documentation is mandatory.

Annex 1 now also contains a separate chapter on environmental and process monitoring. Monitoring is no longer an isolated quality control measure, but an integral part of CCS (9.1). A scientifically sound risk-based sampling plan with clearly defined alert and action levels is required. In addition to microbiological monitoring (active and passive air sampling, surface swabs, personnel monitoring), physical monitoring (particles, pressure differences, air velocity, temperature, humidity) is also essential. Particular emphasis is placed on a holistic view of trends, recurring events and systemic weaknesses. Monitoring data should be actively incorporated into management reviews and drive continuous improvement (9.9-9.13). Important for practical application: Monitoring and trend data from classified areas should be taken into account in the context of batch certification/release; there must be a written procedure for dealing with out-of-trend or exceeded limits (9.3 and 10.10).

Annex 1 emphasises the importance of suitable barrier systems such as RABS and isolators. Isolators with VHP decontamination offer a higher degree of separation between personnel and product. In addition, the "first air" principle is highlighted: Open product may only be exposed to HEPA-filtered, undisturbed air. Turbulence, unfavourable machine designs or personnel bending over the product are not permitted (4.19-4.20).

In summary, the GMP requirements for sterile production according to Annex 1 revision are more risk-based, systemic and process-oriented. The revision marks a clear shift away from purely test-oriented approaches towards holistic, science-based contamination control. CCS and QRM form the foundation of this new thinking, while PUPSIT and stricter monitoring requirements specify the technical implementation.
For manufacturers, this means that Annex 1 is not a "purely microbiological document" but a strategic guide to controlling contamination risks. Only those who understand processes, competent personnel, technology and qualified/validated systems and CCS as an integrated system will be able to meet regulatory expectations in the long term.