All services

EU GMP supplier qualification

For importers and distributors of medical cannabis

As an importer you have to check that the active substance was made under GMP and has stayed under control since. We audit your suppliers and run the programme that keeps them qualified, from the first audit to the annual review.

What you receive

  • An audit report with each finding graded critical, major or minor, with its evidence and the requirement behind it
  • The risk class of each supplier and the date of its requalification
  • Our review of the supplier’s CAPA, when in scope

What we do

  • Initial and requalification audits
  • For-cause audits
  • Remote audits
  • GMP certificate and SMF review
  • Supplier risk classification
  • Audit programme management
  • Requalification planning
  • CAPA follow-up and verification
  • Annual programme review
  • Quality and technical agreements

How it runs

  1. 01

    Audit Scoping

    With you, we settle why the supplier needs an audit, then the scope, the criteria, the sites, the dates and what you need to receive.

  2. 02

    Supplier Documentation Review

    You share what you already hold, and we request the supplier’s PQS documentation, audit history and data, so the audit looks where the risk is.

  3. 03

    Audit Planning

    We turn the agreed scope into an audit plan and settle the agenda, interviews, sampling and access with the supplier.

  4. 04

    Audit Execution

    At the supplier’s site, we assess systems and processes, interview staff, sample records and collect objective evidence.

  5. 05

    Conclusions & Reporting

    We present our conclusions to the supplier, classify each finding and issue the final report on which you base your qualification decision.

  6. 06

    CAPA Follow-Up

    If the follow-up is in scope, we review the supplier’s CAPA response and evidence and tell you whether the supplier has closed each finding.

Questions about this service

  • Yes. If you have your own procedures, checklists and report format, we run the audit against them and deliver the report in your format. If you do not, we use ours and hand them over with the report.

  • We agree the criteria with you in the scoping call and write them into the audit plan. They can be EU GMP and its annexes, GACP, the relevant GxP, your own quality agreement, or a combination of them. We assess only against criteria agreed in advance.

  • Yes, once you have introduced us. We send requests, the agenda and documents through one channel agreed with you, and we copy you on every request and document we send the supplier.

  • We classify each finding as critical, major or minor, state the objective evidence behind it and the requirement it refers to, and present it to the supplier at the closing meeting, before we issue the report.

  • We fix the date with you in the scoping call and write it into the audit plan alongside the deliverables, before the audit starts. If the report has to fit a qualification schedule, raise it in that call.

  • Yes, when it is in scope. We review the supplier’s corrective actions and the evidence behind them, and tell you which findings the supplier has closed and which remain open.

  • We record it in the report as a limitation of scope, against the part of the audit it affected. The report states what we could not assess and why, so you decide on what we saw.