How to Conduct a Supplier Audit of Pharmaceutical Equipment Manufacturers: A Complete GMP Guide

Di dalam manufaktur farmasi, memastikan equipment suppliers meet GMP standards is as critical as vetting raw material vendors. A thorough supplier audit helps pharmaceutical companies verify an equipment manufacturer’s quality systems, dokumentasi, and processes, reducing the risk of defective or noncompliant machines entering production. Regulatory guidance (FDA, Ema, SAYA, SIAPA) emphasizes a risk-based supplier quality program: perform supplier qualification audits for critical vendors, review their quality management system and compliance history, and follow up with corrective actions and approvals. This article explains why and when to audit equipment suppliers, outlines a step-by-step audit process (with a flowchart), provides an equipment-focused audit checklist, compares on-site vs. remote audits, and shows how FAT/SAT and IR/WH/PQ fit into supplier qualification. Tables summarize audit types and risk levels, and practical advice (with real-world examples and regulatory citations) will help procurement, QA and engineering teams execute successful audits. Pendeknya, a structured audit program—supported by dokumentasi yang komprehensif from a GMP-savvy supplier—ensures your new machines arrive “audit-ready” for IQ/OQ qualification and GMP use.

Why Audit Your Equipment Suppliers?

In regulated pharma, nothing can be left to chance. Even if a machine is well-built, any quality lapse at the supplier (poor QMS, undocumented changes, uncalibrated instruments, dll.) can compromise your product. Because drug manufacturers are ultimately responsible for final product quality and compliance, regulators expect them to audit critical suppliers. Misalnya, FDA’s ICH Q10 guidance notes that contract-givers “should be responsible for assessing the suitability and competence” of suppliers, and all quality-related activities must be defined in written agreements. Dalam praktiknya, this means auditing equipment vendors to ensure they follow GMP-like controls. Seperti yang dijelaskan oleh salah satu pakar industri, supplier audits are regular inspections that improve the raw materials, peralatan, and supplies a company receives…and help achieve compliance with strict regulatory requirements.

Key reasons to audit equipment suppliers include:

• Jaminan kualitas: Audit findings can catch issues early (misalnya. undocumented machine designs, lack of validation support) before they affect your process. Regular audits help maintain kualitas produk yang konsisten and prevent costly delays or recalls.
• Kepatuhan Pengaturan: Both FDA and EU GMP explicitly call for equipment qualification and supplier controls. FDA 21 CFR 211.25 dan Lampiran GMP UE 15, misalnya, mandate that critical equipment be qualified before use. Auditing ensures suppliers deliver machines with necessary GMP documentation (like FAT/SAT and calibration records) so you can meet these regulations.
• Risk Management: Using a risk-based approach means focusing audits on the most critical suppliers. High-risk vendors (misalnya. makers of sterile-grade filling machines) get thorough audits, while low-risk ones may be assessed less intensively. This aligns with FDA Q10, which recommends a risk-based supplier program that includes audits tailored by supplier criticality.
• Supplier Partnership: Audits aren’t just policing; they’re also opportunities to collaborate. A capable supplier can demonstrate robust QA practices, help you write URS (user requirements), and support FAT or validation, ultimately smoothing downstream processes. As one trade article notes, “the right supplier supports your validation process and helps ensure your system remains consistent over time”.

“A supplier audit is an independent assessment of a supplier’s processes or products against benchmarked criteria… meant to uncover opportunities to improve a product, proses, atau sistem,” explains a quality industry source. Di bidang farmasi, this means checking that your equipment vendor’s quality manual, mengubah kendali, CAPA, and documentation all meet GMP expectations. A solid audit program (initial and periodic) helps verify that equipment will function safely under GMP conditions.

When and What to Audit

Audits should be planned at key stages. Typical timings include:

• Initial (Kualifikasi) Audit: Before approving a new equipment supplier, perform a full audit. This is part of supplier qualification. It verifies that the vendor’s QMS and processes can meet your needs from the start.
• Periodic (Surveillance) Audits: Audits scheduled (Misalnya, annually or biennially) to ensure ongoing compliance. High-risk suppliers get more frequent reviews. FDA guidance explicitly recommends periodic supplier audits as part of ongoing monitoring.
• For-Cause Audits: Triggered by problems. Misalnya, if a machine arrives with missing documentation, or after a major change at the supplier (new management, major redesign), or in response to a compliance issue (warning letter, CAPA failure).
• Follow-Up Audits: After an audit finds nonconformities, a follow-up audit checks that corrective actions were completed.
• Remote Assessments: Kadang-kadang, an audit may be done remotely (via video calls, documentation review, virtual tour), especially as a stop-gap. EMA notes that remote or ‘paper-based’ assessments can help in a risk-based strategy, Tetapi cannot replace on-site audits for critical suppliers (lihat tabel di bawah).

The table below summarizes common audit types and their purposes:

Dalam semua kasus, use a risk-based approach to decide scope. High-risk suppliers (critical equipment) warrant deeper, on-site audits, while low-risk ones may only need desk reviews or sampling. EMA’s Q&A reminds us that even if a supplier has a GMP certificate or inspection report, the manufacturer’s legal responsibility isn’t met until it conducts its own audit program. Dengan kata lain, use external assessments to inform your priority list, but trust – and verify – through your own audits.

Risk-Based Supplier Risk Matrix

A simple risk matrix helps categorize suppliers and guide audit frequency. Misalnya:

This risk assessment should consider dampak (how critical is the equipment to product safety/quality?) Dan likelihood (has the supplier had past issues? new design? complex technology?). Misalnya, a new capsule-filling line in a sterile drug plant is high-impact (direct contact, presisi tinggi), so it stays in the high-risk category and demands full audits. Sebaliknya, a simple conveyor that never contacts product directly might be low-risk – a remote audit or questionnaire may suffice initially, with on-site checks only if the risk level changes.

Step-by-Step Audit Process

Below is a high-level flowchart of the audit process, followed by details on each step:

Each step is outlined below:

1. Pre-Qualification & Penilaian Risiko: Before scheduling any audit, gather basic information on the supplier. Review their certifications (ISO 9001, ISO 13485, CE markings, dll.), regulatory history, financial stability, and whether they’ve supplied similar machines before. Define the audit scope and objectives based on risk. For high-risk machines, aim for a full on-site audit; for lower-risk items, a partial or remote audit may suffice. Create a checklist or supplier questionnaire upfront to cover key topics (see next step).
2. Document Review & Supplier Questionnaire: Request and review critical documentation in advance. This usually includes the supplier’s Quality Manual, organizational chart, SOPs for design control, mengubah kendali, kalibrasi, pemeliharaan, and their CAPA processes. Obtain copies of recent validation protocols (LEMAK/SAT/IQ/OQ), calibration certificates for major instruments, and evidence of staff training programs. Also get past audit reports or any regulatory inspection reports if available. Sering, a simple pre-audit questionnaire can help confirm which documents exist and highlight any glaring gaps. Document review helps the audit team tailor on-site questions and saves time at the factory.
3. Audit Planning & Checklists: Form an audit team with appropriate expertise (QA/validation engineers, technical specialists, maybe a third-party GMP auditor if needed). Develop a detailed audit plan: confirm dates, personnel to interview, areas and machines to inspect, and document references. Create or adapt audit checklists covering GMP-related topics (see next section for checklist items). Ensure auditors have protective gear (misalnya. lab coats, safety shoes) ready. Pre-communicate the agenda with the supplier.
4. On-Site (or Remote) Audit: Conduct the audit. If on-site, inspect the supplier’s facilities, observe production and testing, and interview their staff. Typical audit activities include:
5. Opening Meeting: Introduce the audit team, review scope and objectives, and confirm logistics.

6. Facility Tour: Walk through manufacturing areas. Check for cleanliness, proper segregation of production stages, equipment maintenance logs, and how sensitive equipment is handled (misalnya. whether there is dust control, clean utilities, dll.).
7. Quality System Audit: Using the checklists, systematically review the supplier’s Quality Management System. Example focus areas:
   • Organization & Personil: Are responsibilities (for QA, QC, rekayasa, melayani) clearly defined? Are personnel trained and qualified for their roles?
   • Document Control: Are procedures and forms properly controlled? Can they show master documents vs. master copies vs. change logs?
   • Ubah Kontrol: How does the supplier approve design or process changes? Are any past changes (misalnya. to the machine design or software) documented and approved?
   • Pemeliharaan Peralatan & Kalibrasi: Are maintenance schedules followed? Check calibration certificates for critical machines. Lack of calibration is a common finding.
   • Production/Assembly Processes: Observe how machines are assembled, welded, or painted. Are stainless parts properly cleaned? (Sebagai salah satu catatan panduan, pharmaceutical machines should use 316L SS with proper polishing and passivation.)
   • Kontrol kualitas & Pengujian: Review how the supplier tests each machine (misalnya. pressure tests, tes kebocoran, functional tests). Confirm test equipment is calibrated. Verify protocols exist for FAT (Uji Penerimaan Pabrik) and SAT (Tes Penerimaan Situs).
   • Documented Procedures: Check that key processes (welding, pembersihan, software testing) have written SOPs and are followed.
   • Change Management: Ask about recent any deviations or nonconformities, and how corrective actions were handled.
   • Equipment Validation Support: Confirm the supplier provides IQ/OQ templates and participates in FAT/SAT. Jinlu notes that experienced suppliers deliver machines with complete FAT/SAT/IQ/OQ protocols to streamline your validation.
8. Collecting Evidence: Auditors should gather objective evidence: interview notes, photos (if allowed), and copies of reviewed documents. Note any observations that relate to GMP compliance.
9. Wrap-Up Meeting: Before leaving, hold a closing meeting to verbally present major observations. Agree on the timeline for the final audit report and CAPA plans.

If conducting a remote audit, focus on document review, live video walkthroughs, and interviews. As EMA notes, remote audits can inform your audit program, but they are not as thorough as on-site inspections for high-risk suppliers. Always aim to do full on-site audits for truly critical equipment.

1. Audit Report & Findings: Compile a written report summarizing the audit scope, findings (nonconformities and observations), and evidence. Use clear language to describe each issue. Classify findings by severity (major vs. minor) jika memungkinkan. Misalnya, a missing calibration certificate for a critical sensor is a major finding; a missing data entry on a checklist might be minor. Include photos or document excerpts as needed (ensuring no sensitive info is shared). The report should reference specific GMP or design requirements behind each finding. Provide the supplier a reasonable deadline to submit corrective action plans (CAPAs) for each issue.
2. CAPA Verification: Review the supplier’s CAPA responses. Verify that corrective actions are adequate and implemented. This may require follow-up (misalnya. reviewing updated documents, re-testing a machine, or even a quick re-audit of the issue area). Document that each finding is closed before approving the supplier. If critical issues are not resolved, you may require additional audits.
3. Supplier Approval & Ongoing Monitoring: Once corrective actions are verified, make a formal approval decision. Misalnya, add the supplier to your Approved Vendor List (with any restrictions noted), or classify them as qualified under certain conditions. Communicate the decision to procurement and QA. Update internal records (misalnya. supplier risk rating, next audit date). Then continue to monitor supplier performance – track delivered machine quality, late deliveries, service issues, dll.. High-risk suppliers should be re-audited more frequently, as indicated by FDA: “high-risk suppliers… may require more frequent audits… based on a risk assessment”.

Pharmaceutical Equipment Audit Checklist

Below is a condensed checklist of key areas and sample questions to consider during an equipment supplier audit. (Adapt this to your specific machine and risk level.)

• Sistem Manajemen Mutu (SMM):
  • Is the supplier ISO 9001 (atau 13485) certified? Inspect the certificate validity.
  • Review their Quality Manual and organizational chart. Are QA/QC roles clearly defined?
  • How is document control handled? Check if procedures have revision history and approvals.
  • Examine records of internal audits and management reviews. Are issues followed up?
  • Pelatihan: Are personnel trained on GMP/standards relevant to pharmaceutical equipment?
• Kepatuhan Pengaturan:
  • Does the supplier understand FDA/EU GMP? (Look for a quality policy or training records.)
  • Check relevant certifications: CE mark, Ul, FDA 510(k) (for medical device equipment), dll..
  • Equipment Design: Are materials 316L SS or other pharma-grade materials, with proper polishing?
  • Ask if the supplier’s machines have design features requested in your URS (misalnya. bersih di tempatnya, laminar flow compatibility).
• Desain & Ubah Kontrol:
  • Do they have a formal design control process? (Review a sample machine’s design spec vs. output.)
  • How are design changes documented and approved? Look at a recent change order log.
  • Check if engineering drawings match the delivered machine (welds, sensor, cable routes, dll.).
• Produksi & Assembly Processes:
  • Observe production flow: does it match written procedures? (misalnya. sequence of welding, painting, perakitan)
  • Verify cleanliness of welding and finishing: no paint overspray on critical surfaces, welds are smooth.
  • Check for segregation of parts (part labeling, nomor seri) to maintain traceability.
  • Inspect spare parts handling and stores (are critical spares logged and controlled?).
• Kontrol kualitas & Pengujian:
  • Review Factory Acceptance Test (GEMUK) protokol. Were FAT tests defined for all critical functions?
  • Check calibration logs for test equipment (pressure gauges, pengukur aliran, dll.). Expired calibrations are a common audit finding.
  • Inspect any machine-specific test records (misalnya. motor run-time, temperature calibration) to confirm pass criteria were met.
  • Ensure there is a Site Acceptance Test (DUDUK) plan for re-verifying functions after installation.
• Ketertelusuran & Dokumentasi:
  • Are material certificates and welding certificates available for contact parts? (For highly regulated products, traceability per ASME BPE or FDA guidance is expected.)
  • Ensure there are Master Validation Plans for IQ/OQ/PQ on file and templates for protocols.
  • Check if each delivered machine has a DQ/IQ/OQ package, including wiring diagrams, mechanical drawings, and calibration data.
• CAPA & Perbaikan berkelanjutan:
  • Look at past nonconformance reports or CAPA logs. How effectively were problems investigated and resolved?
  • Verify that any repeat issues are being analyzed for root cause (misalnya. recurring leak failure, repeated calibration errors).
• Facilities & Peralatan:
  • Tour the supplier’s site: Are manufacturing areas climate-controlled as claimed? (Some equipment requires specific environments.)
  • Check maintenance records for major production equipment (pabrik, lathes, welders). Breakdowns or poor maintenance could affect machine quality.
  • Evaluate safety and housekeeping – while not directly GMP, a messy shop floor may signal poor discipline.
• Melayani & Mendukung:
  • Ask about the supplier’s service infrastructure: Do they have a local service team or spare parts warehouse?
  • How do they handle updates or upgrades? (SOPs for software updates, hardware retrofits).

This checklist is a starting point. Tailor it to the specific equipment: Misalnya, a blister packer audit would focus on heater calibration, date coders, and film handling, while a capsule filler audit would emphasize dose accuracy checks and capsule lock verification. The goal is to assess both what’s on paper (prosedur, records) Dan what happens on the floor (observed practice).

Common Audit Findings

When auditing equipment suppliers, some of the most frequently observed issues include:

• Dokumentasi Tidak Lengkap: Missing SOPs for critical processes (misalnya. painting, electrical testing), or incomplete FAT records.
• Calibration Gaps: Devices (gauges, sensor, timbangan) used in testing not calibrated or calibration expired.
• Poor Change Control: Modifications to a machine design not properly authorized or documented (misalnya. a new sensor added without updating drawings).
• Training Records: Lack of evidence that assembly or QA personnel received relevant training on GMP or equipment-specific procedures.
• CAPA Ineffectiveness: Repeated failures (misalnya. multiple breakdowns of a component) with no trending or preventive measures.
• Facility Issues: Unauthorized personnel in restricted areas, or raw materials stored near finished machines.
• Integritas Data: Audit trails or logs not printed or saved (Jinlu notes the importance of confirming logs and audit trails during validation).

If you encounter any of these, work with the supplier to develop corrective plans. Properly closing out audit findings is crucial before final approval. Always record action items and follow up – a supplier is not qualified until all critical CAPAs are verified.

On-Site vs. Remote Audits

Umumnya, on-site audits remain the gold standard, especially for high-risk or newly qualified suppliers. Regulators note that remote “paper-based” audits do not fully replace the assurance of being on-site. Namun, remote audits can be useful (Misalnya, as a temporary measure if travel is restricted) and can efficiently review the supplier’s quality records. A hybrid approach is common: use remote audits for basic documentation review, then schedule an on-site visit for the final deep-dive, or alternate between on-site and remote for routine checks.

Uji Penerimaan Pabrik (GEMUK), Tes Penerimaan Situs (DUDUK) and IQ/OQ

Equipment audits should pay special attention to validation documentation. Sebelum membeli, confirm that the supplier has a robust FAT procedure. A complete FAT verifies the machine works to your URS under controlled conditions. During the audit, review the supplier’s past FAT reports for similar machines: check that test criteria and results are clearly documented and meet specifications. Also ensure a formal SAT plan will be executed after installation. These acceptance tests are critical for qualification.

Juga, ensure the supplier provides full IQ/OQ support. Jinlu’s experience shows that trustworthy vendors deliver machines “with full IQ/OQ/PQ support and turn-key validation services”. Dalam praktiknya, this means they should give you IQ checklists, OQ test scripts, and example PQ protocols for your review. The vendor often performs the FAT and can assist with IQ by pre-aligning and installing the machine under controlled conditions. But remember: itu buyer’s QA team is ultimately responsible for completing on-site IQ/OQ/PQ. Your audit should confirm the supplier has trained staff or contractors available to support validation and will supply necessary reports, gambar, and calibration records.

Ask direct questions, Misalnya: “Do you have a FAT protocol based on our URS?”, “Will you witness the IQ/OQ tests on site, and provide validated documentation afterwards?”. A good supplier will be prepared with templates and will treat this as routine – it’s part of GMP readiness.

Common Buyer Questions (Checklist Highlights)

During the audit (or pre-audit discussions), buyers often ask suppliers:

• Kepatuhan Pengaturan: Can you demonstrate compliance to GMP or ISO standards? Do you have a quality certificate or registration?
• Dokumentasi: Will you supply complete machine documentation (manual, gambar, FAT/SAT reports, IQ/OQ templates)?
• Pengalaman: Have you supplied this machine model to other pharma plants? Can you provide references or case studies?
• Ubah Kontrol: How do you handle changes requested after order (misalnya. URS updates)?
• Spare Parts/Service: What is your spare parts plan and service response time? Do you have local service engineers?
• Dukungan setelah penjualan: Do you assist with installation and qualification? Do you offer training for my operators?
• Quality History: Can you share recent audit reports, NCMR (nonconformance) logs or CAPA statistics? Any recalls or warning letters?

The answers to these help gauge the supplier’s maturity. Misalnya, an experienced supplier should readily show QA certificates (ISO 9001/13485) and have no trouble detailing their validation process. If a supplier hesitates or deflects these questions, it could indicate gaps in their system.

CAPA and Approval

After auditing and collecting responses, the final step is supplier approval. Once all audit findings are closed or otherwise resolved, formally approve the supplier in your quality system. This may include setting them up on an Approved Vendor List and specifying any conditions (Misalnya, “Initial orders require my QA sign-off after SAT”). Communicate this approval to procurement and project teams, so they know the supplier is qualified. Ensure the supplier understands any remaining expectations (like providing updated CAPA evidence or performance metrics in future reports).

Even after approval, continue monitoring. Keep tracking key supplier metrics (on-time delivery, field issues, audit scores). Integrate new FDA or EMA requirements as they come (if regulations change, you may need to re-audit or ask for new documentation). Intinya, the audit program doesn’t stop at approval—it becomes part of your ongoing quality assurance for every piece of critical equipment.

Kesimpulan

A structured supplier audit program is an investment in product safety and regulatory confidence. By methodically checking an equipment manufacturer’s quality system, dokumentasi, and processes—guided by GMP principles—you minimize surprises and ensure only compliant machines enter your line. Ingat: joint accountability adalah kuncinya. The supplier should bring GMP-ready machines with complete FAT/SAT/IQ/OQ packages, but your company must verify them before production. A risk-based approach focuses effort where it matters, and any findings must lead to CAPAs and final approval decisions.

Dan Jeinlu memetik, we understand the rigor of GMP audits: our packaging machines are designed and documented to meet those needs. Each machine is delivered with a full validation kit (FAT/SAT/IQ/OQ protocols) to streamline your qualification. By choosing a supplier experienced in pharma compliance, you simplify audits and keep your projects on track.

Ready to audit with confidence? Hubungi Pengepakan Jinlu for pharma-grade equipment that comes audit-ready. Our team can help define your URS, run FATs, and provide turnkey IQ/OQ/PQ documentation so your supplier audit and qualification go smoothly.

FAQ aktif Supplier Audit in Pharmaceutical Manufacturing

Referensi：
1.ICH Q10 Pharmaceutical quality system – Scientific guideline — Badan Obat Eropa
2.Q10 Pharmaceutical Quality System — KITA. Badan Pengawas Obat dan Makanan
3.EudraLex – Volume 4 – Praktik manufaktur yang bagus (GMP) pedoman — European Commission
4.VDI 6306 – Supplier Audits in the Pharmaceutical Industry – VDI Verein Deutscher Ingenieure e.V.