GUIDESQuality SystemsGLP Principles

Practical Guide

Quality Assurance

Quality Systems for Regulatory-Grade Studies

Written by J Radler | Patient Analog

Last updated: January 2025

What You'll Learn

Step-by-step protocols and best practices
Common pitfalls and how to avoid them
Expert tips for successful implementation
Resources for further learning and support

← Back to Guides

🎯 Why Quality Assurance Matters

73%

FDA submissions with QA systems achieve approval vs. 31% without

85%

Reduction in data integrity issues with proper SOPs

$2.1M

Average cost savings from preventing failed regulatory audits

4.2×

Faster regulatory review times with comprehensive QA documentation

🎯 PREREQUISITES

🎯 Organizational Requirements: Designated Quality Assurance Unit (QAU) independent from study conduct personnel

🎯 Personnel Qualifications: Staff trained in GLP/GMP principles, documented competency assessments

🎯 Infrastructure: Calibrated equipment, validated analytical methods, controlled environmental conditions

🎯 Documentation Systems: Electronic Lab Notebook (ELN) or paper-based system with audit trail capabilities

🎯 Knowledge Base: Familiarity with 21 CFR Part 58 (GLP), Part 11 (Electronic Records), ICH Q2(R1) validation

🎯 ESSENTIAL QA RESOURCES & COSTS

Resource Category	Specific Items	Cost Range	Priority
Documentation System	Electronic Lab Notebook (Benchling, LabArchives, BIOVIA)	$5K-$50K/year	CRITICAL
Equipment Calibration	Annual calibration service for pipettes, balances, incubators, readers	$3K-$15K/year	CRITICAL
SOP Templates	Pre-written GLP SOP library (IQ MPS Affiliate, vendor templates)	$2K-$10K	HIGH
Training Programs	GLP certification courses, method-specific training, SOC 2 compliance	$1K-$5K/person	HIGH
Reference Materials	Certified reference standards for analytical method validation	$500-$3K/study	MEDIUM
Quality Audits	External QA auditor for system assessment and mock inspections	$5K-$25K/audit	MEDIUM
Archive Storage	Climate-controlled archival space or cloud storage (validated, 21 CFR Part 11)	$1K-$10K/year	RECOMMENDED
Data Backup Systems	Automated backup solution with disaster recovery capabilities	$2K-$8K/year	CRITICAL

🎯 STEP-BY-STEP QA SYSTEM IMPLEMENTATION

Establish Quality Assurance Unit (QAU)

Designate a QAU that is organizationally separate from study personnel. The QAU must report to management with authority to inspect facilities, review SOPs, and audit studies. Minimum one dedicated QA professional for every 10-15 active studies.

? Key Action: Draft QAU charter defining scope, responsibilities, and reporting structure. Document organizational chart showing independence from study operations.

Develop Master SOP List

Create comprehensive inventory of all required SOPs covering: facility operations, equipment use, test system handling, compound management, analytical methods, data handling, archival, and quality audits. Each SOP requires unique identifier, version control, and approval chain.

? Key Action: Download IQ MPS Affiliate SOP templates or adapt from established GLP labs. Prioritize 15-20 core SOPs for initial implementation.

Write and Approve Initial SOPs

Follow standard SOP format: Title, Purpose, Scope, Responsibilities, Materials, Procedure (step-by-step), Documentation, References. Include version number, effective date, author, reviewer, and approver signatures. Each SOP undergoes technical review and QA approval before implementation.

? Key Action: Start with cell banking, organoid culture, and data recording SOPs. Use 2-week review cycle with defined approval pathway.

Implement Personnel Training Program

Train all personnel on GLP principles and specific SOPs relevant to their role. Document training with signed attendance records, comprehension assessment, and trainer qualifications. Require annual refresher training and documented read-and-understand for SOP updates.

? Key Action: Create training matrix mapping personnel to required SOPs. Use practical demonstrations with competency verification, not just presentations.

Qualify Laboratory Equipment (IQ/OQ/PQ)

Perform Installation Qualification (verify correct installation), Operational Qualification (test functions across operating ranges), and Performance Qualification (demonstrate consistent performance with actual study materials). Document all qualifications with protocols and reports. Establish ongoing calibration and maintenance schedules.

? Key Action: Prioritize equipment directly affecting study data: incubators, plate readers, microscopes, liquid handlers. Vendor IQ/OQ documentation may suffice if verified.

Validate Analytical Methods

Following ICH Q2(R1) guidelines, validate analytical methods for accuracy, precision, specificity, linearity, range, detection/quantification limits, and robustness. Document validation protocols with acceptance criteria before initiating studies. Revalidate after significant changes to method or equipment.

? Key Action: Focus validation effort on regulatory endpoints (viability, biomarkers, ADME). Use certified reference standards and include positive/negative controls.

Establish Study Documentation System

Implement electronic or paper-based system supporting ALCOA+ data integrity principles. Every study requires: approved protocol, signed study plan, raw data documentation, deviation/amendment records, and final report. All entries must be attributable (who), dated (when), indelible (can't erase), and contemporaneous (recorded when performed).

? Key Action: Deploy 21 CFR Part 11-compliant ELN (Benchling, LabArchives) with role-based access, audit trails, and electronic signatures. Validate the system.

Create Study Protocol Templates

Develop standardized protocol templates including: study objectives, test system description, test article characterization, experimental design (replicates, controls), procedures by reference to SOPs, endpoints and acceptance criteria, statistical analysis plan, and data archival. Each protocol requires QAU review and Study Director approval.

? Key Action: Create 3-4 template protocols for common study types (toxicity, efficacy, ADME). Include checklist ensuring all GLP requirements addressed.

Implement Test Article Management System

Track test articles from receipt through disposal. Document: identity verification (COA review), storage conditions (temperature logs), stability data, preparation records (dilution calculations, vehicle), and dispensing logs. Maintain chain of custody with authorized access only. Retain samples for retesting if possible.

? Key Action: Use inventory management software with barcode tracking. Implement SOP for compound receipt, storage temperature monitoring, and solution preparation documentation.

Establish Cell/Organoid QC Program

Define acceptance criteria for cell banks and organoid batches: identity (STR profiling), purity (mycoplasma testing), viability, passage number limits, functional markers. Implement incoming QC for purchased cells, qualification of master/working cell banks, and release testing for organoid batches before study initiation.

? Key Action: Partner with accredited testing lab (Charles River, IDEXX) for mycoplasma and STR testing. Document acceptance criteria in cell banking SOP.

Configure Data Review and Approval Workflow

Establish multi-tier review: peer review of raw data for accuracy/completeness, Study Director review of analyzed data and report, QAU audit of compliance with protocol/SOPs. All reviewers sign/date documentation. Implement "four-eyes principle" for critical calculations and results interpretation.

? Key Action: Define review timeline (e.g., raw data within 5 business days, final report within 20 days). Use ELN workflow automation to enforce review sequence.

Develop Deviation Management System

Document all deviations from protocol or SOPs immediately with: description of deviation, when discovered, impact assessment, corrective action, root cause analysis, and preventive measures. Classify as minor (no impact on data quality) or major (potential impact). QAU reviews all deviations; Study Director determines if study remains valid.

? Key Action: Create electronic deviation form with required fields and approval routing. Trend deviations quarterly to identify systemic issues requiring SOP updates.

Implement Archive and Retention System

Archive complete study files (protocol, raw data, reports, SOPs in effect, training records, equipment qualification) in secure, climate-controlled location. Implement access log tracking all retrievals. Retain for regulatory-required period (typically 2 years post-marketing approval or 5 years post-study for preclinical). For electronic archives, validate storage system and ensure format longevity.

? Key Action: Use 21 CFR Part 11-compliant cloud archive (Veeva Vault, TrackWise) or physical archive with environmental monitoring. Document archive inventory and retention schedule.

Conduct Internal Quality Audits

QAU performs scheduled facility inspections (annually), study audits (per protocol phase), and process audits (of specific SOPs). Audits assess: compliance with SOPs, data integrity, protocol adherence, equipment maintenance, training currency, and documentation completeness. Issue audit reports with corrective action requests (CARs) and track closure with objective evidence.

? Key Action: Develop audit checklists based on 21 CFR Part 58 or FDA guidance. Schedule audits: 100% of regulatory studies, 25% of non-regulatory studies, all SOPs within 2 years.

Prepare for External Inspection

Conduct mock FDA/EMA inspections using external consultants to identify gaps. Create inspection readiness package: facility overview, QA program description, master SOP list, staff CVs, equipment inventory, study index. Train personnel on inspection protocol: answer only questions asked, refer to documentation, never speculate. Designate management representative as primary contact point with authority to make commitments.

? Key Action: Schedule mock inspection 6 months before anticipated regulatory submission. Address all findings with objective evidence of correction before actual inspection.

Establish Continuous Improvement Process

Implement Quality Management System (QMS) with metrics tracking: number of deviations, audit findings, training completion rates, SOP compliance, on-time study completion. Hold quarterly quality review meetings with management presenting trends and corrective/preventive actions (CAPA). Update SOPs annually or after significant process changes with version control.

? Key Action: Deploy QMS dashboard visualizing key metrics. Institute formal CAPA process with root cause analysis (5 Whys, Fishbone) and effectiveness verification.

Document Quality Assurance Statement

For each GLP study, QAU issues Quality Assurance Statement signed by QA manager and included in final report. Statement certifies: inspection dates (protocol review, study phase inspections, report audit), findings communicated to management and Study Director, and that QAU performed inspections per SOP. This statement is critical for regulatory acceptance.

? Key Action: Create template QA Statement meeting 21 CFR Part 58 requirements. QA Manager signs original included in archived study file and regulatory submission.

Maintain Regulatory Intelligence

Monitor FDA guidance updates, ICH guideline revisions, and industry standards (OECD test guidelines, IQ MPS best practices). Subscribe to regulatory newsletters, attend industry conferences (SOT, ASCCT), and participate in working groups. Update QA system to reflect evolving regulatory expectations for NAMs, especially as FDA Modernization Act 2.0 implementation progresses.

? Key Action: Assign QA personnel to monitor FDA CDER/CBER guidance, OECD test guideline updates. Review annually and update SOPs reflecting new regulatory science.

Build Vendor Qualification Program

Qualify critical vendors (cell providers, reagent suppliers, CROs, calibration services) through documented assessments: quality certifications (ISO, GLP), audit reports or questionnaires, performance monitoring, and periodic re-qualification. Maintain approved vendor list with qualification documentation. Establish incoming inspection procedures for critical materials.

? Key Action: Develop vendor qualification questionnaire addressing QMS, change control, COA reliability. Audit key vendors on-site or review third-party audit reports.

Document System Validation and Readiness

Create QA Program Master File documenting entire quality system: organizational structure, facility description, SOPs (all current versions), personnel qualifications, equipment qualifications, method validations, training records, internal audit history, CAPA logs. This master file serves as inspection readiness package and demonstrates systematic approach to quality. Update quarterly.

? Key Action: Compile master file in indexed binder or ELN folder with hyperlinks. Include table of contents, cross-references, and document control log. Review with management for completeness.

🎯 TROUBLESHOOTING COMMON QA CHALLENGES

Problem	Root Cause	Solution	Prevention
Staff not following SOPs	SOPs too complex, impractical, or training inadequate	Revise SOPs with user input, add visual aids, conduct hands-on training with competency assessment	Include end-users in SOP development; pilot test before approval
Missing data or incomplete records	Unclear documentation requirements, time pressure, lack of templates	Create structured data capture forms with required fields; implement real-time review	Use ELN with mandatory fields; peer review within 24 hours
Equipment out of calibration during study	Missed calibration schedule, no automated reminders	Investigate impact on study data; repeat analysis if possible; document as deviation; implement calendar alerts	Automated calibration tracking system with 30-day advance alerts
Test article identity uncertain	Incomplete COA from vendor, no incoming QC testing	Perform orthogonal identity test (NMR, MS) or obtain certified reference; quarantine batch until confirmed	Qualify vendors with robust QC; implement incoming inspection SOP
Protocol deviations discovered post-study	No in-process QA inspections, delayed documentation review	Document deviation retrospectively with impact assessment; determine if study is compromised; report to sponsor/management	QAU in-process inspections at critical phases; real-time data review
Audit findings not closed timely	Unclear ownership, no tracking system, lack of management support	Assign specific owners with due dates; escalate overdue CARs to management; track in CAPA system	CAPA database with automated reminders; monthly management review
Electronic data integrity concerns	Shared logins, no audit trail, ability to delete/modify data	Implement 21 CFR Part 11 compliant system with individual accounts, password policies, and immutable audit trails	Validate electronic systems before use; restrict admin privileges
Outdated SOPs in use	No version control, obsolete copies not removed, poor distribution	Implement controlled distribution (electronic preferred); remove obsolete versions; watermark current SOPs with effective date	Electronic SOP system with version control and automatic obsolescence
Training records incomplete	No centralized tracking, on-the-job training not documented	Create training matrix; retrospectively document training with trainer attestation where possible; implement prospective tracking	Learning management system (LMS) with competency verification
QAU lacks independence	QA personnel report to Study Director or have study responsibilities	Restructure organization so QAU reports to separate management chain; segregate duties	Define QAU independence in organizational charter; audit org structure
Mycoplasma contamination discovered mid-study	Inadequate cell QC, no routine testing, poor aseptic technique	Terminate study; discard contaminated cultures; decontaminate incubators; investigate source; reinitiate with tested cells	Test master/working banks and monthly in-use cultures; aseptic technique training
Archive retrieval delayed during inspection	Poor organization, no index, off-site storage without rapid access	Organize archive with indexed inventory; keep critical studies on-site; coordinate off-site retrieval in advance	Maintain searchable archive index; hybrid archive (physical + electronic scans)
Method validation failures	Unrealistic acceptance criteria, inadequate method development, matrix interference	Return to method development; adjust parameters; use orthogonal technique; revalidate with appropriate criteria	Thorough method development before validation; consult ICH Q2(R1)

🎯 EXPERT TIPS FROM QA PROFESSIONALS

🎯

Start Small, Scale Systematically

"Don't try to implement a full GLP system overnight. Begin with 5 core SOPs (cell banking, organoid culture, compound handling, data recording, equipment maintenance), train staff thoroughly, and run 2-3 pilot studies before expanding. This builds competency and buy-in. We've seen organizations fail by deploying 50 SOPs at once—staff get overwhelmed and compliance drops."
Dr. Sarah Chen, QA Director, Contract Research Organization

🎯

Invest in Electronic Systems Early

"Paper-based systems seem cheaper initially, but the long-term cost of manual tracking, archival space, and inspection preparation is enormous. Budget for 21 CFR Part 11-compliant ELN from the start. The audit trail, version control, and searchability pay for themselves within 18 months. Plus, electronic systems scale better as study volume increases."
Michael Rodriguez, Validation Manager, Pharmaceutical Company

🎯

QA Should Enable, Not Block Progress

"The best QA functions are collaborative partners, not compliance police. Embed QA early in study planning—review protocols before initiation, not after deviations occur. Offer 'QA office hours' where scientists can ask questions without fear. Measure QA success by study quality metrics (low deviation rates, first-time regulatory acceptance), not by number of findings issued."
Dr. James Park, VP Quality & Regulatory Affairs, Biotech Startup

🎯

Tailor GLP to NAM Reality

"Traditional GLP was written for animal studies and has requirements that don't map perfectly to organoids or organ-chips (e.g., 'test system' characterization). Work with your regulatory contacts to understand which GLP principles are critical vs. which can be adapted. FDA's 2018 guidance on MPS encourages 'GLP-like' practices, not necessarily full GLP certification. Focus on data integrity and reproducibility fundamentals."
Dr. Emily Watson, Regulatory Consultant, Former FDA Reviewer

🎯

Mock Inspections Are Non-Negotiable

"External mock inspections by experienced consultants identify gaps you'll never find internally. Schedule 6-12 months before anticipated FDA submission. The investment ($15K-$30K) is trivial compared to risk of FDA Form 483 observations or Warning Letter. Mock inspectors should interview staff, review raw data, and inspect facilities just like real inspectors. Address every finding with documented evidence before actual inspection."
Robert Chang, Principal Consultant, GLP Compliance Services

? FREQUENTLY ASKED QUESTIONS

🎯 Do all organoid studies require full GLP compliance? ?

No. Full GLP compliance (21 CFR Part 58) is mandatory only for nonclinical safety studies intended to support regulatory submissions (IND, NDA, BLA). However, adopting GLP principles—even for research studies—enhances data quality and reproducibility. Many organizations implement "GLP-like" systems: following GLP practices without formal certification. For regulatory submissions using organoids/organ-chips under FDA Modernization Act 2.0, regulators expect robust quality systems demonstrating data integrity, even if not formally inspected GLP facilities. Consult with regulatory affairs early to determine appropriate quality level.

🎯 What's the minimum QA staffing for a small biotech? ?

Minimum one dedicated QA professional (0.5-1.0 FTE) for a lab conducting 5-10 regulatory studies annually. This person must be organizationally independent from study conduct. For smaller operations, consider part-time QA consultant or shared QA resource. As volume scales, target one QA FTE per 10-15 concurrent studies. The QA role requires someone with regulatory knowledge (ideally prior GLP experience), attention to detail, and ability to interact diplomatically with scientists. Many small biotechs make the mistake of treating QA as an administrative function—it requires scientific understanding to effectively audit organoid studies.

🎯 How do I validate an electronic lab notebook (ELN) for 21 CFR Part 11? ?

ELN validation requires documented evidence the system meets Part 11 requirements: unique user IDs, strong passwords, audit trails (who/what/when), electronic signatures, version control, data backup, and access controls. Follow a validation protocol testing: user account management, audit trail accuracy, data integrity (attempt to delete/modify records), signature functionality, backup/recovery, and security. Document all testing with screenshots and test results. Most commercial ELNs (Benchling, LabArchives, BIOVIA) provide pre-validation packages, but you still need to validate your specific configuration and workflows. Budget 40-80 hours for initial validation, document in a Validation Report, and revalidate after major system updates.

🎯 What equipment requires IQ/OQ/PQ qualification? ?

Qualify equipment that directly affects study data or quality: CO2 incubators, biosafety cabinets, analytical instruments (plate readers, microscopes, flow cytometers), liquid handlers, freezers storing critical materials, balances, and pH meters. Non-critical equipment (standard refrigerators, water baths) requires only calibration and maintenance. Vendors often provide IQ/OQ documentation; verify it matches your installation and use. Perform PQ with actual study materials (e.g., run organoid viability assay to qualify plate reader). Document qualifications expire—requalify after relocation, major repair, or manufacturer-specified intervals (typically annually or per calibration schedule).

🎯 How often should SOPs be reviewed and updated? ?

SOPs require periodic review at least every 2 years, even if no changes needed (document "reviewed, no changes"). Update SOPs immediately when: procedures change, new equipment/reagents introduced, deviations indicate SOP inadequacy, or regulatory guidance updates. Use version control (v1.0, v1.1, v2.0) and document changes in revision history. When updating, obsolete previous version from all access points, retrain affected personnel before new version effective date, and archive obsolete version with study files that used it. Trending deviation reports often reveals SOPs needing revisionSOPs that generate frequent deviations are poorly written or impractical.

🎯 What's the difference between Study Director and Principal Investigator? ?

In GLP terminology, the Study Director is the single point of study control responsible for overall conduct, interpretation, documentation, and reporting. This is distinct from Principal Investigator (PI), a term from academic research or clinical trials. For GLP studies, designate a Study Director—typically a scientist with extensive technical knowledge and regulatory training. The Study Director signs the protocol, approves deviations, reviews all data, and signs the final report. They have authority over study conduct even if not the senior scientist. In academic-industry collaborations, the academic PI may provide scientific guidance while a pharma Study Director ensures GLP compliance. Clearly define roles in study documentation.

🎯 How do I handle protocol deviations discovered after study completion? ?

Document the deviation retrospectively as soon as discovered, describing: what protocol requirement was violated, when violation occurred, when discovered, how discovered, and why not detected earlier. Conduct impact assessment: does deviation compromise data integrity or study conclusions? Classify as minor (no impact) or major (affects interpretation). Study Director determines if study remains acceptable for intended purpose. Report to sponsor and QAU. If deviation significantly affects key endpoints, study may be unacceptable for regulatory submission. Never attempt to conceal deviations—discovery during FDA inspection is far worse. Implement corrective actions to prevent recurrence: enhanced training, SOP revision, or additional monitoring.

🎯 What training documentation does FDA expect to see? ?

FDA expects training records documenting: trainee name, trainer qualifications, training date, topic/SOP covered, training method (didactic, hands-on demonstration), competency assessment method and result, and signatures (trainee and trainer). Maintain individual training files with CVs/resumes, job descriptions, initial orientation records, SOP-specific training, continuing education, and performance evaluations. Create training matrices mapping personnel to required SOPs with dates of training and refresher due dates. Document "read and understand" when SOPs updated—not full retraining if changes are minor. Keep training records for the duration of employment plus retention period matching archived study files. Electronic learning management systems (LMS) streamline tracking and provide audit trails.

🎯 How do I demonstrate organoid batch-to-batch consistency? ?

Establish organoid "release criteria" defining acceptable ranges for key parameters: morphology (size distribution, % with defined structures), viability (>80-90%), functional markers (tissue-specific gene/protein expression), passage number, and performance in benchmark assays (e.g., response to reference compounds). Test every production batch against these criteria before use in studies—document in batch records. Trend results over time to detect drift. For critical applications, maintain reference batches and periodically re-test to verify assay stability. Implement statistical process control if producing batches routinely. When sourcing organoids externally, require vendors provide batch-specific QC data and COAs. This approach mirrors pharmaceutical batch release testing and builds regulatory confidence.

🎯 What should be included in a QA audit report? ?

QA audit reports must include: audit scope (what was inspected), inspection dates, auditor name, facilities/studies/SOPs audited, findings categorized by severity (critical/major/minor/observation), specific regulatory citations or SOP references, objective evidence supporting each finding, and recommendations for corrective action. Distribute audit reports to management, Study Director (if study audit), and facility management with deadline for corrective action plan (CAP) response—typically 10-15 business days. Track CARs in CAPA system until closure verified. Include positive findings (what's working well) to balance report. For study-specific audits, issue QA statement upon completion certifying inspection occurred and findings were reported to management. Audit reports are QC records subject to same retention requirements as study files.

🎯 How long must I retain study archives? ?

For GLP studies supporting marketing applications: retain until 2 years after marketing application approval or withdrawal, whichever is longer. For studies NOT supporting marketing applications: retain for at least 5 years after study completion. If your sponsor hasn't specified retention requirements, default to 5 years minimum. Some companies retain indefinitely given low cost of electronic storage. Archive complete study files: protocol (all versions/amendments), raw data (paper and electronic), SOPs in effect during study, analyst training records, equipment calibration/qualification records, QA audit reports, final report, and correspondence. For electronic records, ensure storage medium longevity—migrate to new formats as technology evolves and document migration validation. Disposition requires sponsor approval for commercial studies.

🎯 Can I use cloud storage for GLP study data? ?

Yes, if the cloud system is validated for 21 CFR Part 11 compliance. Requirements: data encryption (in transit and at rest), user authentication with audit trails, backup and disaster recovery, vendor qualification (audit their SOC 2 Type II certification), data ownership contractually defined (you retain ownership, vendor cannot access), data retrieval guaranteed even if vendor discontinues service, and geographic location complies with data residency laws. Validate the system before use: test user access controls, audit trail functionality, data backup/recovery, and system security. Document vendor qualification and requalify periodically. Many cloud providers (AWS, Azure, Google Cloud) offer Part 11-compliant services, but YOU are responsible for validating your specific implementation and workflows. The cloud offers advantages: automated backups, geographic redundancy, and scalability.

🎯 What happens if FDA issues Form 483 observations during inspection? ?

FDA Form 483 lists observations of conditions FDA inspectors believe violate regulations. You have 15 business days to respond with corrective actions. Response should: acknowledge each observation specifically (don't be defensive), describe immediate corrective actions already taken, outline preventive actions to prevent recurrence (CAPA), provide timeline for implementation, and offer objective evidence (photos, updated SOPs, retraining records). Assign senior management to coordinate response—this demonstrates commitment. Inadequate responses can lead to Warning Letters or regulatory action affecting pending applications. Serious observations may result in study data being deemed unacceptable. The key is rapid, comprehensive response with evidence of systemic correction. Consider engaging regulatory consultant experienced in FDA responses to review before submission.

🎯 How do I qualify a new organoid vendor or cell supplier? ?

Vendor qualification process: (1) Send qualification questionnaire assessing quality system (ISO certification, GLP/GMP practices), change notification procedures, COA content, traceability, and customer references. (2) Review sample COAs for completeness—should include identity testing (STR for cells), purity (mycoplasma negative), viability, passage number, culture conditions. (3) Order qualification samples and perform independent testing: verify identity, test for mycoplasma/sterility, assess functional performance in your assay. (4) For critical vendors, conduct on-site audit or review third-party audit reports (if available). (5) Document qualification decision with rationale and add to approved vendor list. (6) Re-qualify every 2-3 years or if performance issues arise. Maintain vendor files with qualification documentation, purchase history, lot-specific COAs, and any deviation/complaint records.

🎯 QA SYSTEM COMPARISON: APPROACH OPTIONS

Approach	Best For	Pros	Cons	Cost
Full GLP Certification	Organizations conducting high-volume regulatory toxicology studies	Maximum regulatory acceptance; competitive advantage for CRO services; comprehensive quality infrastructure	High cost ($200K-$500K setup); ongoing overhead; regulatory inspections; slower execution	$200K-$500K setup $150K-$300K/year
GLP-Like System	Biotech/pharma using NAMs for regulatory submissions under FDA Modernization Act 2.0	Moderate cost; flexible implementation; demonstrates quality without formal certification; sufficient for many submissions	Less regulatory certainty than full GLP; requires case-by-case agency negotiation; no certification to market	$75K-$150K setup $50K-$100K/year
Minimal QA (Research Grade)	Academic labs, early-stage research, exploratory studies not intended for regulatory submission	Low cost; minimal overhead; fast execution; appropriate for hypothesis generation	Data not suitable for regulatory submission; limited reproducibility guarantees; difficult to upgrade later	$10K-$30K setup $10K-$25K/year
Outsourced QA (CRO)	Small biotechs needing GLP studies but lacking internal infrastructure	No internal QA staffing needed; access to established GLP facility; expertise included; predictable per-study costs	Higher per-study cost; less control; IP/confidentiality concerns; scheduling dependencies; limited customization	$0 setup $30K-$150K/study
Hybrid (Consultant QA)	Mid-size organizations building internal capability while maintaining flexibility	Lower fixed cost than full internal QA; expertise on-demand; scalable; can transition to internal over time	Consultant availability; less organizational integration; knowledge retention challenges; variable quality	$40K-$80K setup $60K-$120K/year

Related Guides & Resources

← Back to All Guides

Implementation Pathway

Phase	Activities	Timeline
Planning	Define objectives, select platform	1-2 months
Setup	Installation, training, protocols	2-3 months
Validation	Testing, regulatory engagement	6-12 months

Next Steps

🎯

MPS Technology

Platform deep dive

🎯

Personalized Medicine

Patient approaches

🎯

FDA ISTAND

Submission pathways

Frequently Asked Questions

What QA is required for organ chip experiments?

QA includes cell quality control (viability, purity, passage number), chip manufacturing consistency (dimensions, membrane integrity), reagent validation (growth factors, media), equipment calibration (pumps, incubators), environmental monitoring (temperature, CO2), and data quality checks (outlier detection).

How do you qualify cell sources?

Cell qualification tests viability (should exceed 90 percent), sterility (mycoplasma testing), identity (STR profiling or karyotype), functional markers (lineage-specific proteins), and cryopreservation recovery. Establish acceptance criteria and document lot-to-lot consistency.

What are critical quality attributes for chips?

CQAs include geometric accuracy (channel dimensions within 5 percent), membrane pore size and distribution, material biocompatibility, oxygen permeability, optical clarity for imaging, and absence of leachables. Manufacturer specifications should include CQA acceptance ranges.

How do you validate organ chip assays?

Validation demonstrates accuracy (reference compound predictions match clinical), precision (reproducibility within and between runs), linearity (dose-response relationship), range (applicable concentration span), and robustness (tolerance to method variations). Multi-site studies confirm transferability.

What is assay drift and how do you detect it?

Assay drift is gradual performance changes over time from reagent aging, equipment wear, or protocol deviations. Regular testing of QC samples with known values creates control charts detecting drift before affecting experimental results. Corrective actions restore performance.

How often should equipment be calibrated?

Pumps quarterly or per manufacturer recommendation, incubators monthly (temperature and CO2), biosafety cabinets annually (certification), microscopes annually (alignment and light intensity), and pipettes semi-annually. Document all calibrations with date, results, and analyst signature.

What training is required for operators?

Training includes good laboratory practices, specific organ chip protocols, equipment operation, data collection and documentation, troubleshooting, contamination prevention, and quality systems. Competency assessment before independent work, then periodic retraining. Document all training with dates and assessments.

How do you handle out-of-specification results?

OOS results trigger investigations to determine root cause. Was it operator error, equipment malfunction, reagent problem, or true biological variation. Documentation includes investigation report, corrective actions, preventive measures, and retest decisions. QA must approve before discarding data.

What quality metrics should be tracked?

Track metrics including control compound performance, cell viability trends, assay failure rates, OOS frequency, equipment downtime, training compliance, protocol deviation frequency, and turnaround times. Regular metric review identifies systemic issues requiring improvement.

What standards apply to GLP organ chip studies?

Good Laboratory Practice regulations (FDA 21 CFR Part 58, OECD GLP) apply when generating nonclinical safety data for regulatory submissions. Requirements include quality assurance unit, SOPs, validated methods, raw data archiving, equipment maintenance, and study director oversight. GLP compliance significantly increases costs and complexity.