Medical Device Process Validation: IQ OQ PQ Explained

Why Process Validation Is Non-Negotiable

Process validation is one of the most consistently inspected areas in FDA medical device inspections and ISO 13485 audits. The requirement exists because certain manufacturing processes cannot be fully verified by inspection of finished products alone — the product must be inspected destructively, or the performance characteristic cannot be economically tested on every unit, or the defect would not be detectable until the device is in clinical use.

FDA's QMSR §820.75 (and the predecessor QSR §820.75) requires that where the results of a process cannot be fully verified by subsequent inspection and test, the process must be validated. ISO 13485:2016 Clause 7.5.6 expresses the same requirement in process-based terms: processes whose output cannot be fully verified by subsequent monitoring or measurement must be validated.

Common processes that require validation in medical device manufacturing include sterilization (the primary example — you cannot test sterility on every unit), welding and bonding (particularly for implantable devices where joint integrity cannot be confirmed by nondestructive inspection), injection molding of critical dimensions, cleanroom environments, sterile filling operations, and software used in manufacturing control. Even if your process seems obvious, if the output cannot be fully verified by inspection, you need validation.

Understanding IQ, OQ, and PQ

The IQ/OQ/PQ framework is the standard three-phase approach to process validation, widely used in medical device and pharmaceutical manufacturing. Each phase has a distinct purpose and scope.

Installation Qualification (IQ) verifies that the process equipment and supporting utilities are installed correctly and in accordance with manufacturer specifications and your facility requirements. IQ confirms that you have what you said you would have, installed the way it should be installed.

IQ documentation typically includes: equipment identification (model, serial number, manufacturer), verification that equipment matches purchase specifications, documentation of utility connections and their specifications, confirmation that safety devices are present and functional, and documentation of calibration status for measurement instruments. IQ is completed before any operational testing begins.

Operational Qualification (OQ) verifies that the equipment operates within defined operational parameters across its full working range. OQ tests the process at its limits and at its normal operating setpoints, demonstrating that the process parameters are appropriate and that the equipment behaves predictably across the operating range.

OQ documentation includes: defined operating parameters and their acceptable ranges, test protocols for each parameter, results demonstrating performance at worst-case conditions (worst-case high and worst-case low), and confirmed SOPs for operating the equipment. OQ is performed using representative materials or process surrogates — not necessarily production product, but equivalent materials that challenge the process the same way.

Performance Qualification (PQ) verifies that the process consistently produces acceptable output when operating under actual or simulated production conditions with actual production personnel and materials. PQ is the phase where you confirm that everything works together under real conditions.

PQ documentation includes: multiple production runs (typically a minimum of three, though the number must be justified based on process knowledge), acceptance criteria for the output, statistical analysis demonstrating process capability, and confirmation that the output meets all relevant specifications. PQ is performed with production materials, production personnel, and production procedures.

Writing Validation Protocols: What Must Be Defined Before You Start

Process validation protocols must be written, reviewed, and approved before validation activities begin. This is a fundamental requirement — writing the protocol after collecting data to fit the results is not validation; it is reverse engineering, and it is a serious quality system violation that FDA investigators will identify.

Protocol elements: Every validation protocol must include: the purpose and scope of the validation, identification of the process and equipment being validated, description of the validation approach (IQ, OQ, PQ, or combined), defined acceptance criteria for each test, sampling plan (number of samples, sampling frequency, sampling location), test methods (reference to standard test procedures or description of custom procedures), and review and approval signatures.

Pre-approved acceptance criteria are the most critical element. Acceptance criteria must be defined before testing begins, based on the device specifications and risk management requirements. Acceptance criteria must be objective and measurable — not "acceptable visual appearance" but specific defect classifications with defined pass/fail criteria, or specific performance ranges.

Challenge conditions in OQ: OQ worst-case conditions must be defined based on knowledge of the process variables. Worst case is not necessarily the extremes of the operating range — it is the conditions that are most likely to produce out-of-specification output. For a sterilization cycle, worst case might be minimum cycle time and minimum temperature at the coldest load position. Identifying worst case requires process understanding, typically supported by development data or a formal Design of Experiments (DoE).

Validation Documentation: The Validation Master Plan and Summary Reports

Process validation documentation has a standard hierarchy that FDA investigators will look for: Validation Master Plan → Validation Protocols → Validation Reports → Ongoing Monitoring Data.

Validation Master Plan (VMP): A high-level document that describes your overall validation approach, defines the processes that require validation, and outlines the validation program schedule and responsibilities. Not every regulatory framework explicitly requires a VMP, but having one demonstrates a systematic validation program rather than ad-hoc responses to individual process needs.

Validation Summary Reports: After each validation phase (IQ, OQ, PQ), a summary report documents what was tested, what the results were, any deviations from the protocol and their disposition, and the final conclusion (validated or not validated). The report must directly reference the pre-approved acceptance criteria and clearly document how each criterion was met.

Deviations during validation: Deviations from the validation protocol during execution must be documented in real time, not after the fact. Minor deviations may be addressed through protocol amendments. Significant deviations — those that could affect the validity of the results — may require that affected test activities be repeated. Undocumented deviations that are discovered during FDA inspection can invalidate the entire validation.

Validation lifecycle management: Validation is not a one-time activity. Validated processes must be maintained in their validated state through change control — any change to the process, equipment, materials, or facility may require revalidation. Your validation change control procedure must define what types of changes trigger revalidation, and at what level (IQ, OQ, PQ, or all three).

Revalidation Requirements: When to Revalidate

Process revalidation is required when changes occur that could affect the validated state of the process, or when ongoing monitoring data indicates the process is not operating within its validated parameters. Proactive revalidation planning is an indicator of a mature quality system; reactive revalidation triggered by a process failure or FDA observation is a sign of an immature one.

Changes that typically trigger revalidation assessment: Equipment replacement or major repair, changes to raw material specifications (particularly for sterilization, where packaging material changes affect sterilant penetration), changes to process parameters (even within the documented operating range, if the change was not anticipated in the original validation), relocation of equipment or the manufacturing process to a new facility, and personnel changes (for processes where operator technique is a critical parameter).

Ongoing process monitoring: Validated processes must be monitored to confirm that they remain in their validated state. Statistical process control (SPC) charts for critical process parameters, periodic review of in-process test results, and trend analysis of finished goods testing results are common monitoring approaches. When monitoring data trends toward the acceptance boundary, this is an early warning to investigate and intervene before a process goes out of its validated state.

Periodic revalidation: Some processes (particularly sterilization) require periodic revalidation independent of changes — for example, annual requalification of sterilizer cycle performance. The frequency and scope of periodic revalidation should be defined in your validation procedures based on process risk, process stability, and regulatory guidance for the specific process type.