FOREWORD:
21 CFR Part 11 is a core regulation issued by the U.S. FDA for regulated industries, including pharmaceuticals, medical devices, and biological products. It establishes the legal framework that electronic records and electronic signatures are equivalent to paper records and handwritten signatures. Its primary objective is to ensure data integrity, authenticity, and traceability.
As critical equipment in pharmaceutical manufacturing, liquid filling and capping machines directly generate and retain key data such as filling volume, capping torque, and batch traceability. Their compliance determines the quality of the entire life cycle management of electronic records and is an essential prerequisite for enterprises to pass FDA inspections and achieve global market access.
This white paper focuses on pharmaceutical liquid filling and capping machines, interprets core regulatory requirements, equipment compliance capabilities, implementation paths, risk prevention, and international alignment, providing a full-process guide for enterprises to achieve compliance.
1 CORE OF 21 CFR PART 11:
1.1 Scope and Core Objectives
Applicable scenarios: Regulated records created, modified, maintained, transmitted, archived, and retrieved electronically in FDA-regulated industries, including batch records, critical process parameter records, operator logs, and alarm records.
Core objectives: Ensure electronic records are trustworthy and reliable, prevent data tampering, unauthorized access, and record loss, enable full-process traceability, and meet FDA on-site audit and data review requirements.
Exceptions: Electronic records for non-regulated purposes, electronic data only used as supplements to paper records, and internal non-regulated records not submitted to the FDA.
| Regulation Clause | Core Requirement | Implementation Points for Filling/Capping Machines |
| §11.10(a)(h) System Validation | Ensure accuracy, reliability, consistent performance, and ability to identify invalid or altered records | Complete IQ, OQ, PQ; verify filling accuracy, torque consistency, and data recording with validated samples |
| §11.10(e) Audit Trail | Generate tamper-proof, time-stamped logs recording all operations | Automatically log parameter changes, login/logout, batch start/stop, alarms; logs are non-erasable and non-editable with encrypted storage |
| §11.10(f)(g) Access Control | Restrict system access to authorized personnel with role-based permissions | Three-level access: Operator, Administrator, Auditor; operators cannot modify parameters |
| §11.10(k) Record Retention | Complete, retrievable electronic record retention | Dual backup (local + cloud); export to CSV/PDF; retention ≥ shelf life + 1 year (typically ≥ 5 years) |
| §11.50 Electronic Signatures | Bind signatures to records with uniqueness and non-repudiation | Link operator accounts to electronic signatures; critical actions require signature confirmation with time stamps |
2 . CORE COMPLIANCE CAPABILITY OF PHARMA MACHINES
2.1 Basic Hardware and Software Requirements
2.1.1 Hardware Capabilities
High-precision filling: Volumetric or gravimetric dosing; accuracy ±0.5% for injections, ±1% for oral liquids.
Precise torque control: Adjustable torque 0.1–5 N·m; capping yield ≥ 99.9%.
Industrial stability: IP65 or higher protection, suitable for cleanroom environments, 24/7 operation.
Data communication: Ethernet, RS485, supporting integration with MES, LIMS, and SCADA systems.
2.1.2 Software Compliance Functions
Tamper-proof audit trail： Automatically records operator ID, time, filling volume, torque, speed, status, alarms, and maintenance.
Encrypted storage using SHA-256; manual deletion or modification is prohibited.
Multi-level user management： Operator: start/stop only
Administrator: parameter configuration, user management
Auditor: log review only
Data integrity
Original data cannot be overwritten; all changes are versioned and logged.
Data verification via MD5 or SHA-256.
Validation support: IQ/OQ/PQ templates, test cases, calibration standards.
Multi-language and system compatibility
2.2 Compliance in Core Application Scenarios
2.2.1 Sterile Liquid Filling (Injections, Biologics)
Records environmental conditions (temperature, humidity), filling parameters, and torque per container.
Automatically rejects non-conforming units with reason and time stamp.
Associates vial barcodes with batch data for full traceability.
2.2.2 Non-Sterile Liquid Filling (Oral Liquids, Syrups)
Records format changeover parameters and CIP/SIP cycles.
Generates electronic batch records (EBR) with full production details.
2.2.3 High-Viscosity Liquid Filling (Ointments, Gels)
Uses piston or screw dosing with real-time parameter logging.
Logs alarms, jams, and deviations with complete investigation trails.
3 COMPLIANCE IMPLEMENTATION PATH
3.1 Pre-Implementation Planning
Define scope, regulated data points, and retention periods.Select Part 11-native equipment with FAT support.
Conduct risk assessment for data integrity and access control
3.2 System Validation (DQ–IQ–OQ–PQ)
| Phase | Core Task | Execution for Filling/Capping Machines | Deliverables |
| DQ Design Qualification | Verify design meets URS and compliance | URS review, FMEA, GAMP 5 classification | DQ Report, URS, FMEA |
| IQ Installation Qualification | Verify correct installation and environment | Check model, SN, software version, calibration | IQ Report, calibration certificates |
| OQ Operational Qualification | Verify functional performance | Test accuracy, torque, alarms, logs, permissions | OQ Report, test records |
| PQ Performance Qualification | Validate in real production | 3 consecutive batches, Cpk ≥ 1.33, recovery test | PQ Report, process capability data |
| Change Control | Validate after upgrades or adjustments | Re-test relevant functions, update documentation | Change request, validation report |
3.3 Daily Compliance Operation
- Regular user permission reviews and access audits.
- Monthly/quarterly audit log reviews.
- Daily automated backup and periodic recovery testing.
- Scheduled calibration and maintenance with documented records.
- Personnel training on ALCOA+ and Part 11 requirements.
| Risk Category | Manifestations | Mitigation Measures |
| Audit Trail Risk | Tampering, deletion, incomplete logs | Encrypted logs, automatic backup, no manual edit rights |
| Access Control Risk | Unauthorized login, shared accounts | Unique accounts, role-based access, periodic audits |
| Data Integrity Risk | Altered or lost filling data | Encrypted transmission, original data lock, checksum verification |
| Validation Risk | Incomplete IQ/OQ/PQ or documentation | Full lifecycle validation, change control, document control |
| Retention Risk | Insufficient storage duration | Archiving system, long-term secure storage, audit-ready retrieval |
5 Case Study
Compliance Upgrade for Injection Filling at a Biopharmaceutical Company
A leading biopharmaceutical enterprise needed to meet FDA 21 CFR Part 11 and EU GMP Annex 11 for sterile injection filling. Challenges included incomplete data, missing audit trails, and uncontrolled permissions.
6. Solutions
- Deployed Part 11-compliant sterile filling and capping lines.
- Completed full DQ/IQ/OQ/PQ validation.
- Implemented three-level authorization and electronic signatures.
- Established redundant data backup with 7-year retention.
7. Results
- Successfully passed FDA and EU GMP audits.
- Improved production efficiency and quality stability.
- Achieved full batch traceability and data integrity.
