An API manufacturer supplying a Canadian drug product sponsor receives a supplier audit questionnaire. Among the questions: “Does your quality system comply with ICH Q7?” The manufacturer’s quality director knows the answer is broadly yes — but when pressed to map specific quality system elements to specific ICH Q7 sections, the gaps become apparent. A quality system that was built around domestic requirements may not fully address the international standard that Canadian drug sponsors and Health Canada inspectors expect.
This article is for API manufacturers, CROs performing API-related testing, and CMOs handling API processing who want to understand how ICH Q7 applies in the Canadian context and where compliance gaps most commonly arise.
ICH Q7, formally titled Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients, is a guideline developed through the International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use (ICH). It was finalized in 2000 and has been adopted by regulatory authorities in the ICH member regions, including Canada, the United States, the European Union, and Japan.
In Canada, Health Canada has adopted ICH Q7 as guidance for the manufacture of APIs. While the binding regulatory requirements for drug establishments remain those in Part C, Division 2 of the Food and Drug Regulations, Health Canada inspectors use ICH Q7 as the reference standard when assessing API manufacturing operations. In practice, this means that a facility manufacturing APIs for the Canadian market is expected to comply with ICH Q7, even though it is technically guidance rather than regulation.
ICH Q7 covers the full scope of API manufacturing, from the introduction of starting materials through to the final API. It applies to both chemical synthesis and biological/biotechnological processes, though the latter are addressed in a separate ICH guideline (ICH Q7 focuses primarily on chemically synthesized APIs).
ICH Q7 requires a comprehensive quality management system that encompasses all GMP-relevant activities. The quality unit must be independent of production and must have the authority to approve or reject all materials, intermediates, and APIs. This independence requirement is a recurring inspection finding — quality units that are organizationally subordinate to production, or that lack practical authority to reject materials, do not satisfy ICH Q7.
The quality system must include procedures for change control, deviation management, OOS investigation, and periodic review of quality data. ICH Q7 Section 2.5 specifically requires that quality reviews be conducted at least annually to assess the consistency of the manufacturing process and the quality of the API.
ICH Q7 requires that facilities be designed and maintained to prevent contamination and cross-contamination. For API manufacturers, this includes adequate separation of different manufacturing areas, appropriate HVAC systems, and defined cleaning procedures. The standard does not prescribe specific design parameters — the adequacy of the facility is assessed relative to the risks associated with the API being manufactured.
For manufacturers producing multiple APIs, the risk of cross-contamination between products is a significant concern. ICH Q7 requires that dedicated equipment or validated cleaning procedures be used to prevent carry-over of one API into another. Cleaning validation is expected to demonstrate that residues are reduced to acceptable levels, with limits typically derived from toxicological assessments.
All equipment used in API manufacturing must be qualified and maintained. ICH Q7 requires that equipment be designed, located, and maintained to suit its intended use and to facilitate cleaning and maintenance. Qualification records (IQ, OQ, PQ) must be available for critical equipment.
Computerized systems used in manufacturing or quality control — including process control systems, laboratory instruments, and data management systems — must be validated. ICH Q7 Section 5.4 addresses computerized systems specifically, requiring that data be protected against loss or unauthorized modification. This aligns with Health Canada’s broader data integrity expectations.
ICH Q7 places significant emphasis on documentation. All GMP-relevant activities must be documented contemporaneously, and records must be retained for a defined period — at minimum, one year beyond the expiry date of the API batch, or three years after the batch is completely distributed, whichever is longer.
Data integrity is a critical area. ICH Q7 requires that records be attributable, legible, contemporaneous, original, and accurate (ALCOA). Electronic records must include audit trails that capture who made a change, when, and why. Health Canada inspectors pay close attention to data integrity during API facility inspections, and findings in this area can have serious consequences.
ICH Q7 requires that API manufacturing processes be validated before commercial production begins. Process validation must demonstrate that the process consistently produces an API meeting its specifications. For established processes, a retrospective validation approach may be acceptable, but prospective validation is preferred for new processes.
In-process controls must be defined and documented. Critical process parameters — those that, if varied, could affect the quality of the API — must be identified and controlled within validated ranges. Changes to critical process parameters require change control review and, potentially, revalidation.
All intermediates and APIs must be tested against defined specifications before release. Analytical methods must be validated per ICH Q2(R1). Reference standards must be traceable to recognized pharmacopoeias where available.
For APIs that are subject to pharmacopoeial monographs (USP, BP, Ph. Eur.), the API must meet the monograph requirements. Manufacturers may use alternative methods if they can demonstrate equivalence, but the pharmacopoeial method remains the reference.
ICH Q7 requires that stability studies be conducted to establish retest dates or expiry dates for APIs. Studies should be conducted in accordance with ICH Q1A(R2) and should use samples stored under conditions representative of the intended storage and distribution environment. For APIs intended for the Canadian market, stability conditions should reflect the applicable ICH climate zone.
Based on our experience supporting API manufacturers and their customers, the following gaps appear most frequently:
Quality unit authority: Quality units that lack documented authority to reject materials or stop production do not satisfy ICH Q7 Section 2.2.
Change control scope: Change control procedures that do not capture all GMP-relevant changes — including changes to starting material suppliers, process equipment, and analytical methods — create compliance risk.
Cleaning validation: Cleaning procedures that have not been validated, or that use acceptance limits not derived from toxicological assessments, are a common inspection finding.
Data integrity: Audit trails disabled or not reviewed, shared login credentials, and manual data entry without independent verification are data integrity vulnerabilities that Health Canada inspectors actively look for.
Annual product review: Many facilities conduct annual product reviews but do not document them in a way that satisfies ICH Q7 Section 2.5 — the review must assess specific quality indicators and result in documented conclusions and actions.
ICH Q7 compliance is not a static achievement — it requires ongoing maintenance as processes, equipment, and personnel change. Requirements may vary depending on the API, the manufacturing process, and the markets being served. We recommend periodic gap assessments against the current ICH Q7 text and Health Canada’s inspection expectations.
At Androxa, we provide ICH Q7 gap assessments, method validation, and quality consulting services for API manufacturers and their customers in Canada. Contact our team at testing-lab.ca to discuss your compliance needs.