Process Validation is documented evidence that a manufacturing process, operated within defined parameters, consistently produces output meeting predetermined specifications. Medical device makers validate any process whose result cannot be fully verified by later inspection or test, such as sterilization, injection molding, or welding, through installation, operational, and performance qualification.
What is Process Validation?
Process Validation answers a narrow question with wide consequences: can this process be trusted to produce a conforming product every time it runs, without inspecting every unit? Verification checks the output. Validation qualifies the process that made it.
The distinction matters because some processes are, in the regulatory phrase, special processes. Their results cannot be confirmed by downstream inspection without destroying the product or waiting for a field failure. Sterilization, sterile barrier sealing, reflow soldering, laser welding, adhesive bonding, injection molding, and cleaning sit in this category. Process Validation begins during design transfer and continues through the commercial life of the device.
Why Process Validation matters in medical device manufacturing
Patients carry the cost of an unvalidated process. A pouch seal that passes visual inspection but was sealed at a drifting temperature can breach in distribution. A weld that looks acceptable can fatigue in a year. Such failures escape verification because the output hides the defect.
Regulators treat this as a core system requirement. Under the FDA Quality Management System Regulation (QMSR), effective February 2, 2026, 21 CFR Part 820 incorporates ISO 13485:2016 by reference, placing process validation under clause 7.5.6 and sterile process validation under clause 7.5.7. The prior 21 CFR 820.75 language is retired, though the expectation is unchanged. EU MDR 2017/745 reaches the same requirement through its quality management system obligations.
Inadequate validation of special processes is a recurring inspection finding. Remediation usually means halting shipment and reassessing every batch made since the last valid qualification.
How Process Validation works: IQ, OQ, and PQ
Most device manufacturers follow GHTF/SG3/N99-10:2004 (Edition 2), the Global Harmonization Task Force guidance CDRH adopted as its reference document for device process validation. It remains the working standard, even though IMDRF replaced the GHTF in 2011.
Three qualification stages follow a decision and a plan.
- Validation decision. Determine whether process output can be fully verified by routine inspection and test. If not, or if verification is destructive, the process must be validated. Document the rationale either way.
- Validation master plan and protocols. Define scope, critical process parameters, acceptance criteria, sample sizes with statistical rationale, and roles. PFMEA output determines which parameters count as critical.
- Installation Qualification (IQ). Establish by objective evidence that equipment, utilities, and software are installed as specified. Calibration, software version, and environmental conditions are captured here.
- Operational Qualification (OQ). Challenge the process across the edges of its operating window. OQ establishes control limits and action levels by running worst-case parameter combinations.
- Performance Qualification (PQ). Run the process under normal conditions, with production personnel and materials, typically across at least three runs covering different operators, material lots, and shifts.
Maintaining the validated state is the part teams underestimate. Statistical process control, periodic review, and revalidation triggers written into change control keep the qualification alive. Some processes carry method standards that override the generic sequence: ISO 11135 for ethylene oxide, ISO 11137 for radiation sterilization, ISO 11607-2 for sterile barrier sealing.
Common challenges and best practices
Validating everything is a common overcorrection, and it drains the engineering hours that a high-risk process needs. Start from the ISO 14971 risk file and the PFMEA, then classify each process honestly.
The most frequent technical error is running OQ at nominal settings. A qualification that exercises only the center of the operating window proves nothing about the edges, and production drifts toward the edges. Challenge conditions belong in the protocol before approval, not after a run fails.
Sample sizes chosen without statistical rationale are the next finding down the list. An auditor will ask why thirty units, and “thirty is what we always use” is not an answer. Tie sample size to a stated confidence and reliability level.
Watch software too. Equipment control software, MES logic, and automated inspection systems fall under clause 7.5.6. Teams validate the molding press and forget to check the vision system’s output.
Treat revalidation triggers as design inputs. A change to resin supplier, tooling, or equipment location can invalidate a qualification. Structured Change Control with defined thresholds keeps the burden proportionate.
How SJML helps with Process Validation
Syrma Johari MedTech runs process validation (IQ, OQ, PQ) as part of manufacturing under an ISO 13485-certified quality system, aligned to FDA 21 CFR Part 820, EU MDR and IVDR, and MDSAP expectations. Validation work covers medical PCBA and SMT lines, injection and blow molding, precision metal fabrication, cable harness assembly, system integration, and sterile and non-sterile packaging and labeling. PFMEA, PPAP, and DfX reviews feed the validation decision during design transfer, and SAP-integrated MES supports lot traceability. Regulatory sustenance teams support change governance so revalidation stays proportionate.
Talk to SJML’s manufacturing team →
Frequently asked questions
Verification confirms that a specific output meets specifications, usually by inspecting or testing the product. Process Validation qualifies the process itself, proving through IQ, OQ, and PQ that it consistently produces conforming output. Verification applies when every unit can be checked economically and non destructively. Validation applies when it cannot, as with sterilization.
Any process whose output cannot be fully verified by routine inspection and test must be validated. Common examples include sterilization, sterile barrier sealing, injection molding, reflow soldering, laser welding, adhesive bonding, coating, and cleaning. The decision belongs in a documented rationale tied to the PFMEA and the ISO 14971 risk file, not to habit.
Yes. The QMSR, effective February 2, 2026, incorporates ISO 13485:2016 into 21 CFR Part 820 by reference. Process validation requirements now sit in clause 7.5.6, with sterile process and sterile barrier validation in clause 7.5.7. The former 820.75 text is gone, but the obligation and the evidence an FDA investigator expects are substantially unchanged.
Revalidation is triggered by change: new or relocated equipment, tooling modification, material or supplier change, altered process parameters, cleanroom reclassification, or software updates to production systems. Adverse trends in statistical process control, scrap rates, or complaints also prompt review. Define these thresholds inside change control so the decision runs against written criteria rather than judgment in the moment.
Related terms
- Design Transfer
- Change Control
- Design Verification
- PFMEA
- Good Manufacturing Practice (GMP)
