A contract manufacturing organization takes on a new client — a Canadian drug sponsor with a solid oral dosage form at the commercial manufacturing stage. The sponsor’s quality agreement assigns batch release testing to the CMO. Within weeks, the CMO’s quality team discovers that their existing testing program was designed around their previous client’s specifications, and several elements do not align with the new product’s regulatory requirements or Health Canada’s current expectations for CMO quality systems.
This scenario is more common than it should be. CMOs often inherit quality testing frameworks that were built incrementally, client by client, without a coherent architecture that satisfies Health Canada’s requirements across all activities. This article is for CMO quality and regulatory teams who want to build — or audit — a quality testing program that is both operationally effective and inspection-ready.
Under the Food and Drug Regulations, Part C, Division 2, every drug establishment performing testing activities must maintain a quality control function that is independent from production. For CMOs, this independence requirement applies regardless of whether the CMO also performs manufacturing, packaging, or labelling. The QC function must have the authority to approve or reject raw materials, in-process samples, and finished products, and that authority must be documented in the quality system.
Health Canada’s expectations for CMO quality testing programs are informed by several regulatory and guidance documents:
The practical implication is that a CMO’s quality testing program must address not just the technical aspects of testing (methods, instruments, specifications) but also the systemic aspects: how data is generated, reviewed, and retained; how deviations and OOS results are investigated; and how the program is maintained over time through change control and periodic review.
Every analytical method used for batch release or stability testing must be validated before use. Health Canada expects validation to be performed in accordance with ICH Q2(R1), Validation of Analytical Procedures: Text and Methodology. The validation package must demonstrate that the method is specific, linear, accurate, precise (both repeatability and intermediate precision), and robust for the intended application.
For CMOs, a common gap is the transfer of methods from a sponsor or from a reference laboratory. Method transfer is not the same as method validation. A transfer study must demonstrate that the receiving laboratory (the CMO) can reproduce the method’s performance characteristics within defined acceptance criteria. The transfer protocol and results must be documented and approved before the method is used for batch release.
Testing results are only as reliable as the reference standards and reagents used. Health Canada expects that reference standards are traceable to a recognized pharmacopoeia — the United States Pharmacopeia (USP), the British Pharmacopoeia (BP), or the European Pharmacopoeia (Ph. Eur.) — where applicable. For substances not covered by a compendial monograph, a working reference standard must be characterized and assigned a potency or purity value through a documented procedure.
Reagents must be sourced from qualified suppliers, received against specifications, and stored under appropriate conditions. Expiry dates must be tracked and enforced. We have seen inspection findings related to reagents used beyond their expiry or stored outside their specified temperature range — findings that call into question the validity of all results generated with those reagents.
All instruments used in testing must be qualified (Installation Qualification, Operational Qualification, and Performance Qualification where applicable) and maintained on a calibration schedule. Calibration records must be traceable to national or international measurement standards. Out-of-calibration instruments must be taken out of service immediately, and any results generated with an out-of-calibration instrument must be assessed for impact.
For computerized systems — including chromatography data systems (CDS), laboratory information management systems (LIMS), and balance software — Health Canada expects validation in accordance with applicable guidance (GAMP 5 is widely referenced). Audit trail functionality must be enabled and reviewed as part of routine data review.
Finished product specifications must be established based on the approved drug submission (New Drug Submission, Abbreviated New Drug Submission, or equivalent). The CMO must test against these specifications and must not release a batch that fails to meet any specification without a documented deviation investigation and, where required, notification to the sponsor and Health Canada.
The batch release process must be documented in a batch record or equivalent. The QC reviewer must sign off on all testing results before release. Electronic signatures, where used, must comply with data integrity requirements.
Health Canada expects a written OOS investigation procedure that distinguishes between laboratory error and genuine product failure. The investigation must follow a two-phase approach: Phase 1 (laboratory investigation to determine if an assignable cause exists for the OOS result) and Phase 2 (full investigation including manufacturing review if Phase 1 does not identify an assignable cause). The conclusion of the investigation must be scientifically defensible and documented.
Invalidating an OOS result requires documented evidence of an assignable laboratory error. An OOS result cannot be invalidated simply because a retest or additional samples pass — the original result must be explained.
CMOs performing stability testing on behalf of sponsors must conduct studies in accordance with ICH Q1A(R2) and store samples under conditions appropriate for the intended market (Canadian climate zone conditions apply). Stability chambers must be qualified and monitored, with temperature and humidity excursions documented and assessed for impact on the study.
A written quality agreement between the sponsor and the CMO is not explicitly required by Division 2, but it is considered a best practice and is expected by Health Canada inspectors. The quality agreement should clearly define:
Ambiguity in the quality agreement is a source of compliance risk. We recommend reviewing the quality agreement whenever the scope of services changes.
Building a compliant CMO quality testing program is an ongoing process, not a one-time project. Requirements may vary depending on the drug class, dosage form, and the specific activities in scope. We recommend periodic internal audits and, where resources allow, mock inspections to identify gaps before a Health Canada inspection.
At Androxa, we partner with CMOs to assess and strengthen quality testing programs against Health Canada’s current expectations. Visit testing-lab.ca to learn more about our quality consulting services.