GMP documentation is the complete system of written records that pharmaceutical and other regulated manufacturers use to prove every product was made correctly, consistently, and safely. GMP stands for Good Manufacturing Practice, and the documentation side is often summed up with a simple rule: if it wasn’t documented, it didn’t happen. These records cover everything from raw material testing to final product release, and regulatory agencies like the FDA and the European Commission require them by law.
Why Documentation Is Central to GMP
Documentation serves two purposes at once. First, it gives workers clear, approved instructions so that every batch of a product is made the same way. Second, it creates a traceable history proving that those instructions were actually followed. When a regulator shows up for an inspection, or when a product defect needs to be traced back to its source, the paper trail (or electronic trail) is the primary evidence.
The FDA’s current Good Manufacturing Practice regulations, found in 21 CFR Part 211, dedicate an entire subpart to records and reports. They require that batch production records include the identity of every person who performed or supervised each significant step, the weight of every component used, in-process test results, equipment identification, yield calculations, and labeling records. The intent is that anyone could pick up a batch record months or years later and reconstruct exactly what happened during production.
The ALCOA+ Principles
Regulators worldwide judge documentation quality against a framework called ALCOA+, which defines what “good data” looks like. The core ALCOA principles require that every record be:
- Attributable: Every entry can be traced back to a specific person.
- Legible: The data is clear and readable.
- Contemporaneous: Information is recorded at the time it happens, not filled in later.
- Original: The record is the first capture of the data, or a verified true copy.
- Accurate: The data reflects exactly what was observed.
The “plus” adds three more expectations: records must be complete (nothing omitted), consistent (entries follow a logical, chronological order), enduring (stored for the full retention period required by regulators), and available (accessible whenever needed for review or audit). These principles apply equally to handwritten paper records and electronic systems.
Types of GMP Documents
A GMP facility typically maintains several layers of documentation, each serving a different function.
The quality manual sits at the top. It’s a company-wide document describing which regulations the organization follows and how its quality system is structured. Below that are policies, which outline the company’s general approach to areas like security, documentation practices, and personnel responsibilities, without getting into step-by-step detail.
Standard operating procedures (SOPs) are the workhorses of any GMP system. These provide detailed, step-by-step instructions for operational tasks: how to clean a mixing vessel, how to handle a temperature excursion, how to calibrate a scale. SOPs ensure that different operators performing the same task get the same result.
Specifications define the standards a material or product must meet before it can be used or released for sale. A quality control lab tests raw materials and finished products, then compares results against these specifications to make a pass-or-fail determination.
Test methods give the quality control team their own set of step-by-step instructions for performing those tests, whether that’s checking the potency of an ingredient or monitoring the environment inside a cleanroom.
Logbooks are bound records used to track equipment-related activities. Under FDA rules, major equipment must have a written log that records the date and time of each use, the product and lot number processed, and all cleaning, maintenance, and calibration activities. These logs make it possible to trace what ran through a piece of equipment before and after any given batch.
Master Records vs. Batch Records
Two of the most important documents in manufacturing are the master production record and the batch production record, and they work as a pair.
The master production record is the template. It contains the complete procedure for manufacturing a specific product: the formula, processing steps, theoretical yield, assay requirements, and labeling. FDA regulations require that a master record be prepared, dated, and signed by one person, then independently checked, dated, and signed by a second person. This dual-verification step is designed to catch errors before they’re built into every future batch.
The batch production record is a copy of that master record, filled out in real time during the production of a single batch. It becomes the complete history of that batch. Operators document each significant step as it happens, recording component weights, equipment used, in-process test results, packaging inspections, and actual yield compared to theoretical yield. Every person who performs or checks a significant step must be identified in the record.
How Corrections Must Be Made
Mistakes on paper records happen, but how they’re corrected matters enormously. The FDA’s documentation guidance is explicit: never use white-out, never erase, never write over an entry. The original information must always remain readable.
The correct method is straightforward. The person who made the error draws a single line through the mistake, writes the corrected information next to it, then adds their initials and the date of the correction, not the date the original error was made. If there isn’t enough space next to the entry, a footnote system is used: the person marks the error with a circled number, then writes the correction and the reason for the change in an open area on the same page, referencing that same number. Back-dating or post-dating corrections is never allowed.
These rules exist to preserve the integrity of the record. An auditor who sees a crossed-out entry with an initialed correction can follow the logic. An auditor who sees white-out has no way of knowing what was underneath, or why it was hidden.
Electronic Records and Audit Trails
Many GMP facilities have moved from paper to electronic systems, but digital records come with their own regulatory requirements. In the U.S., 21 CFR Part 11 sets the rules for electronic records and electronic signatures.
The regulation distinguishes between closed systems, where the people responsible for the records also control who can access the system, and open systems, where they don’t. Most pharmaceutical companies operate closed systems. These must use secure, computer-generated, time-stamped audit trails that automatically record who made an entry, when, and what was changed. Just like paper corrections, electronic changes cannot obscure previously recorded information.
Electronic signatures must be unique to a single individual and can never be reused or reassigned to someone else. Signatures that aren’t based on biometrics (like a fingerprint) must use at least two distinct identification components, typically a user ID and a password. These controls exist to guarantee that an electronic signature carries the same legal weight as a handwritten one.
How Long Records Must Be Kept
The FDA requires that any production, control, or distribution record associated with a batch be retained for at least one year after the batch’s expiration date. For certain over-the-counter drugs that are exempt from expiration dating, the retention period is three years after the batch is distributed.
The European Union has its own documentation framework under EudraLex Volume 4, Chapter 4, which similarly requires manufacturers to maintain records for defined periods. Regardless of jurisdiction, the principle is the same: records must remain intact and accessible long enough that regulators can investigate any product quality issue that surfaces after the product reaches consumers.
What Happens When Documentation Fails
Poor documentation is one of the most common findings in FDA warning letters and inspection reports. Missing signatures, incomplete batch records, undocumented deviations, and sloppy corrections can all trigger regulatory action. In serious cases, a facility can be shut down or its products recalled, not necessarily because the product itself was defective, but because the documentation couldn’t prove it wasn’t.
This is why GMP documentation is treated as seriously as the manufacturing process itself. A perfectly made product with incomplete records is, from a regulatory standpoint, indistinguishable from a product that may have been made incorrectly. The records are the proof, and without them, there is no proof.