GMP Facility Requirements: Cleanrooms, HVAC & Compliance

A practical framework for premises, air systems, environmental control, qualification and audit readiness

Which Framework Applies?

The exact applicable framework depends on the product, market and activity. European medicinal-product manufacturers should begin with EudraLex Volume 4, particularly Chapters 1, 3, 4 and 5 and the relevant annexes. Annex 1 adds specific requirements for sterile medicinal products. API manufacturers should also consider ICH Q7. US drug manufacturers work under the applicable FDA current good manufacturing practice regulations.

A facility should map its own legal and quality-system obligations rather than treating this article as a substitute for regulatory advice.

GMP Facility Requirements Checklist

1. Premises Must Fit the Process

EU GMP Chapter 3 states that premises and equipment must be located, designed, constructed, adapted and maintained to suit the operations carried out. Layout should minimize errors and permit effective cleaning and maintenance. The practical starting point is therefore the process map: what enters, where it moves, where it is exposed, which activities create contamination risk and which transitions require segregation or controls.

• Separate incompatible activities and provide adequate space for orderly operations.
• Define personnel, material, waste and equipment flows to reduce crossings and mix-ups.
• Protect production, storage and quality-control areas from uncontrolled access and through-traffic.
• Locate maintenance access so work can be completed without compromising controlled areas.
• Document the rationale for shared or dedicated facilities according to product risk.

2. Surfaces and Construction Must Support Cleaning

Walls, floors, ceilings, penetrations and services should be selected for the required cleaning regime and facility classification. The design should avoid inaccessible ledges, unsealed openings and material combinations that deteriorate under detergents or disinfectants. Clean construction is not enough: the facility needs inspection, repair and cleaning procedures that preserve the intended condition over time.

Where rooms are washed or fogged, drainage, sealing, corrosion resistance and compatibility with the selected agent must be considered during design. Residues and trapped water can create new risks if sanitation is treated as an add-on.

3. HVAC Must Protect the Product and the Process

GMP does not mandate one HVAC design for all facilities. The air system must support the process-specific contamination-control strategy. Depending on the activity, this can include terminal filtration, air-change rates, pressure cascades, temperature, humidity, recovery performance and control of recirculated or exhaust air.

4. Temperature and Humidity Require a Justified Specification

EU GMP Chapter 3 requires lighting, temperature, humidity and ventilation to be appropriate and not adversely affect products or equipment. It does not provide one universal RH range. A defensible specification begins with material stability, product exposure, process performance, electrostatic risk, microbial and condensation risk, operator conditions and equipment limits — see CleanSPOT’s dedicated guide to cleanroom humidity requirements for a fuller treatment of this topic.

Relative humidity changes with temperature, so HVAC design should use dew point or absolute humidity for moisture-load calculations and RH for the controlled room condition. Alert and action limits should account for sensor uncertainty, normal control behavior and the duration and location of an excursion. Tolerances that are tighter than the process needs increase energy use and deviation frequency without necessarily improving quality.

• Calculate winter humidification and summer dehumidification using supply air, ventilation and infiltration.
• Map temperature and RH under representative occupied and operating conditions.
• Place sensors away from doors, direct supply jets, humidifier discharge and local heat sources.
• Compare dew point with cold surfaces to identify condensation risk.
• Trend the complete control cycle instead of relying on occasional spot readings.

5. Cleanrooms Require Classification and Operational Control

A cleanroom is not automatically GMP compliant because it has an ISO classification. ISO 14644-1 classifies air cleanliness by airborne particle concentration. GMP connects facility classification to the manufacturing activity, contamination controls, procedures, qualification and ongoing monitoring. Sterile medicinal-product operations must additionally address the grades, states and activities defined in EU GMP Annex 1.

The room should be qualified both at rest and in operation where the applicable guidance requires it. Classification results, airflow visualization, filter integrity, pressure, recovery and environmental conditions should be reviewed together. A passing particle result does not compensate for weak flows, uncontrolled maintenance or poor cleaning practices.

6. Annex 1 Requires a Contamination Control Strategy

EU GMP Annex 1 is particularly important for sterile products. It expects a facility-wide contamination control strategy that connects design, premises, equipment, personnel, utilities, raw materials, cleaning and disinfection, monitoring and continuous improvement. The CCS is not a single test report; it is the documented logic showing how controls work together and how their effectiveness is reviewed.

Humidity control and room bio-decontamination can support this strategy, but neither replaces validated cleaning, environmental monitoring or process controls — see Sterilization vs. Disinfection for how these processes differ. Any fogging or vaporized-agent process needs a justified cycle, compatible materials, distribution evidence, safety controls and defined acceptance criteria.

7. Utilities Must Remain Fit for Intended Use

Water, compressed gases, steam, vacuum, drainage and other utilities can directly or indirectly affect product quality. Each critical utility needs a specification, suitable construction, qualification, sampling or monitoring and maintenance. Dead legs, stagnation, corrosion, backflow and difficult-to-clean components should be addressed by design.

Ultrasonic humidification deserves explicit water-quality attention because the feed water becomes an aerosol. Reverse-osmosis water helps reduce mineral carryover, but hygienic storage, distribution, drainage, cleaning and microbial controls are still necessary. The equipment and facility water strategy must be assessed as one system.

8. Equipment Requires Lifecycle Qualification

Equipment should be suitable for its intended purpose, constructed from compatible materials and positioned for operation, inspection, cleaning and maintenance. Qualification normally develops from the user requirement specification through design review, installation qualification, operational qualification and, where applicable, performance qualification. The depth of evidence should follow quality risk management.

• Define capacity, accuracy, hygienic design, controls, alarms and data requirements in the URS.
• Verify installation against approved drawings, materials and utility connections.
• Challenge normal operation, alarm conditions, interlocks and recovery behavior.
• Establish calibration, cleaning, preventive maintenance and spare-parts plans.
• Apply change control when software, setpoints, components, layouts or operating ranges change.

9. Environmental Monitoring Must Match the Risk

Environmental monitoring is broader than temperature and humidity. In controlled and sterile environments it can include viable microorganisms, non-viable particles, pressure, airflow-related indicators and physical conditions. Locations, frequencies and limits should come from facility design, process risk, qualification data and historical trends.

Monitoring only becomes useful when the response is defined. Alerts should trigger review before control is lost; actions should initiate documented investigation and impact assessment. Excursions must be evaluated by magnitude, duration, location, process stage and exposed product, not simply by whether one reading crossed a line.

10. Cleaning, Disinfection and Bio-Decontamination Must Be Controlled

Written procedures should define cleaning agents, disinfectants, concentrations, contact times, application methods, sequence, rotation where justified, residues and responsible personnel. Effectiveness should be supported by validation or qualification appropriate to the application. Annex 1 distinguishes cleaning from disinfection and emphasizes prior cleaning where residues could interfere with the disinfectant.

Automated hydrogen-peroxide fogging can improve distribution and repeatability for suitable enclosed spaces, but it must be integrated into the broader sanitation program. Cycle parameters, room sealing, aeration, occupational safety and biological or chemical indicators may all be relevant to validation.

11. BMS and SCADA Records Support Control, Not Compliance by Themselves

A building-management or supervisory control system can centralize environmental values, equipment status, alarms and trends. For GMP-relevant functions, define access levels, time synchronization, backup, data retention, alarm acknowledgement, audit trails and change control. Critical decisions should not depend on undocumented standalone controllers that create monitoring blind spots.

Integration should be tested from the field sensor through the display, alarm, historian and response procedure. The system must show not only that a value was measured, but that the record is reliable and that staff know what to do when it moves outside the approved range.

12. Documentation Makes the Facility Auditable

A well-designed facility can still fail inspection when its operating logic and history are not documented. Drawings, specifications and procedures should reflect the current installation. Operators and maintenance personnel need role-appropriate training. Deviations, corrective and preventive actions, calibration, cleaning, maintenance and changes should be reviewed for recurring patterns.

How CleanSPOT Systems Fit the GMP Facility Strategy

CleanSPOT supplies equipment for use within regulated-facility control strategies. The correct claim is not that a humidifier makes a facility GMP compliant. Compliance depends on the full quality system, installation, qualification, operation and maintenance. Equipment should instead be evaluated for how well it supports the approved requirements and evidence package.

Common GMP Facility Mistakes

• Copying a generic temperature or humidity range without a product-and-process rationale.
• Treating ISO cleanroom classification as proof of complete GMP compliance.
• Selecting HVAC or humidification equipment before calculating seasonal and process loads.
• Placing the controlling sensor beside a supply outlet, door or humidifier discharge.
• Adding fogging equipment without a validated sanitation cycle and aeration plan.
• Failing to coordinate HVAC, humidification, dehumidification and alarm sequences.
• Allowing drawings, software settings or SOPs to drift away from the installed system.
• Using the phrase “GMP certified equipment” without defining the actual certification or conformity basis.

GMP Facility Requirements FAQ

The Engineering Takeaway

GMP facility compliance is a connected system rather than a collection of individually compliant products. Begin with the process and contamination risks, translate them into measurable facility requirements, engineer HVAC and utilities to hold those conditions, and qualify the installation. Monitoring, sanitation, maintenance, documentation and change control then keep the facility in its validated state. CleanSPOT products fit where controlled humidity, hygienic air handling, integrated monitoring or validated fogging forms part of that strategy.

Related reading: Cleanroom Humidity Requirements, Sterilization vs. Disinfection and What Is an AHU?. For full facility design, see CleanSPOT’s pharmaceutical production page.