Naga MounikaDrug Product · Validation · CMC
Menu
Working document

Quality Agreement Gap Assessment

A plug-and-play element-by-element comparison of a live CDMO quality agreement against FDA's recommended elements and the EU GMP Chapter 7 no-silent-subcontracting rule, with a filled specimen showing a missing major-deviation notification clock.

Document typeMatrix
Topic areaCDMO Governance
LevelIntermediate
UpdatedSeptember 2026
How to use this document

Copy the template below into your quality system. Replace every <<FILL: ...>> placeholder with your company, system, and process specifics, then route it through your own document control, review, and approval. The filled specimen shows one worked example; adapt the numbers and scope to your operation and verify each cited regulation or standard against the current source before you rely on it.

This is a generic, originally worded starting point. It contains no confidential, proprietary, or employer material, it is drafted with AI assistance and reviewed, it is not legal or compliance advice, and adopting it does not by itself create or prove compliance. See the Disclaimer and Terms.

This is a ready-to-use comparison for checking a live quality agreement against the elements FDA’s 2016 quality agreement guidance recommends and the EU GMP Chapter 7 no-silent-subcontracting expectation. Replace every <<FILL: ...>> placeholder. Run this on a defined cadence and whenever the network changes shape, not only at signature. A filled specimen follows.

Document control header

FieldEntry
Quality agreement assessed<<FILL: title, party, effective date>>
Assessment date<<FILL>>
Assessor<<FILL>>
Trigger<<FILL: scheduled cadence / network change / post-event review>>

Element-by-element comparison

Recommended elementPresent in the agreementOperationally lived, not just on paperGap / notes
Manufacturing activities allocated by party<<FILL: yes/no>><<FILL: yes/no>><<FILL>>
Batch disposition authority named explicitly<<FILL>><<FILL>><<FILL>>
Deviation notification timeline, critical severity<<FILL>><<FILL>><<FILL>>
Deviation notification timeline, major severity<<FILL>><<FILL>><<FILL>>
Deviation notification timeline, minor severity<<FILL>><<FILL>><<FILL>>
Change notification requirements and lead time<<FILL>><<FILL>><<FILL>>
Audit rights, including for-cause audit triggers<<FILL>><<FILL>><<FILL>>
No subcontracting without sponsor’s prior written approval (EU GMP Chapter 7)<<FILL>><<FILL>><<FILL>>
CAPA effectiveness verification expectation stated, not just corrective action closure<<FILL>><<FILL>><<FILL>>
Escalation path to partner’s quality leadership named<<FILL>><<FILL>><<FILL>>
Reference and retention sample custody, retention period, and format named explicitly<<FILL>><<FILL>><<FILL>>
Review and amendment cycle for the agreement itself<<FILL>><<FILL>><<FILL>>

Reference and retention sample custody is worth checking on its own line rather than assuming it is implicit in “manufacturing activities allocated by party.” The European Commission published an updated Annex 19 (Reference and Retention Samples) to EudraLex Volume 4 on 24 June 2026, and PIC/S folded the same revision into its own GMP Guide effective 24 September 2026. Two changes matter for a CDMO relationship specifically: a sample may now be kept as a photograph or other digital record instead of a physical unit, if the arrangement meets conditions the annex sets out, and the annex now speaks more directly to who holds a sample when a product passes through more than one distributor before reaching the patient. Where a CDMO holds retention samples on the sponsor’s behalf, the agreement should name which party holds them, in what format, and for how long, and that naming should be checked against the current annex rather than carried forward from a quality agreement drafted before the 2026 update existed.

Findings and disposition

#FindingSeverityOwnerDue dateStatus
<<FILL>><<FILL>><<FILL: document gap / operational gap>><<FILL>><<FILL>><<FILL>>

Score each finding as a document gap, the agreement’s text needs an amendment, or an operational gap, the text is adequate but the practice does not match it. An operational gap is the more serious class: amending the agreement’s language does not close it.

Approvals

RoleNameSignatureDate
Supply chain quality lead<<FILL>>
Quality Assurance<<FILL>>

Filled specimen

Acme Therapeutics ran this assessment on its quality agreement with CMO Alpha two years after signature, triggered by CMO Alpha’s onboarding of a fourth-party analytical lab.

Recommended elementPresentOperationally livedGap / notes
Manufacturing activities allocated by partyYesYesNo gap
Batch disposition authority named explicitlyYesYesNo gap
Deviation notification timeline, critical severityYes, 24 hours from confirmationYes, verified against 12 months of notification log dataNo gap
Deviation notification timeline, major severityNo, agreement is silentN/AFinding: no defined clock for a major deviation; site has been using informal notice with no consistent lag
Deviation notification timeline, minor severityYes, included in monthly summaryYesNo gap
Change notification requirements and lead timeYes, 30 daysPartially, two changes in the past year were notified with under 10 days’ leadFinding: stated lead time not consistently met; raise as a rung 3 pattern per the escalation ladder
Audit rights, including for-cause audit triggersYesNever exercised in two yearsNo document gap; note for the CDMO oversight review whether that silence itself is a finding
No subcontracting without sponsor’s prior written approvalYes, general clauseNo, CMO Alpha’s onboarding of a fourth-party analytical lab was not submitted for prior approvalFinding: subcontracting clause exists but was not followed; open with CMO Alpha’s quality lead
CAPA effectiveness verification expectation statedYesYesNo gap
Escalation path to partner’s quality leadership namedYesYesNo gap
Reference and retention sample custody, retention period, and format named explicitlyYes, CMO Alpha holds physical samples for the regulatory-required periodYesNo document gap; note for next amendment whether the agreement should be updated to reference the 2026 digital/photographic retention sample provision now that it exists, even though the parties do not plan to adopt it yet
Review and amendment cycle for the agreement itselfNo, agreement has no stated review cadenceN/AFinding: add a periodic review clause at next amendment

Findings and disposition

#FindingSeverityOwnerDue dateStatus
1No defined notification clock for a major deviationDocument gapSupply chain quality lead<<FILL: date>>Open, draft amendment language in progress
2Change notification lead time not consistently metOperational gapSupply chain quality lead<<FILL: date>>Open, raised at next joint quality review
3Fourth-party lab subcontracted without prior written approvalOperational gapSupply chain quality lead + CMO Alpha quality head<<FILL: date>>Open, retroactive review of the lab’s qualification status requested
4No review cadence stated for the agreement itselfDocument gapSupply chain quality lead<<FILL: date>>Open, propose annual review clause at next amendment

Findings 1 and 4 close by amending the agreement’s text. Finding 3 does not close by amendment alone; it requires confirming the fourth-party lab itself meets the qualification standard the agreement would have required had it been submitted for approval, the more serious operational-gap class this assessment exists to surface.

Common inspection findings this assessment prevents

  • A quality agreement that reads complete at signature and has never been checked against its own recommended elements since, so a gap is discovered only when an event falls into it.
  • A notification timeline defined for critical deviations with no equivalent for major ones, leaving a real gap in practice that neither party notices until it costs a delayed notification.
  • Subcontracting that occurred without the sponsor’s prior written approval because no one checked the agreement’s own clause against what the network actually did.
Add this site to your home screen Full screen, works offline, one tap from your home screen.