A useful quality agreement is not a ceremonial appendix to a supply contract. It is the operating map for how the product owner, authorization holder, contract giver, contract acceptor, testing laboratory and other responsible parties will keep a medicine and its evidence under control.
1. Begin with the principle that responsibility is not outsourced
FDA's quality-agreement guidance states that parties in contract drug manufacturing can use written quality agreements to define and document manufacturing activities and CGMP responsibilities. It also makes clear that such an agreement does not relieve either party of its applicable responsibilities. EU GMP Chapter 7 similarly expects outsourced activities to be correctly defined, agreed and controlled. [1] [2]
China's Drug Administration Law requires the marketing authorization holder to audit the quality management system of a contracted manufacturer and to sign agreements covering delegated manufacture and quality. The current NMPA contract-manufacturing announcement further requires both parties to fulfil their contract and quality-agreement obligations. [3] [4]
The practical rule is simple: the agreement may allocate activities, but it cannot make a responsible organization stop exercising oversight.
2. Define five verbs for every critical activity
For each activity, the agreement should answer five questions: who performs it, who reviews the evidence, who approves the decision, who must be notified, and who retains the authoritative record. A RACI-style matrix can help, but narrative detail is still needed where timing, escalation or market-specific duties matter.
3. Cover the complete responsibility matrix
| Domain | What the agreement should define |
|---|---|
| Governance | Named quality contacts, decision authority, meeting rhythm, escalation route, emergency availability and controlled language. |
| Product and process | Ownership and approval of specifications, master documents, control strategy, manufacturing instructions and technical knowledge. |
| Materials and suppliers | Supplier qualification, approved sources, sampling, testing, status control, release and change notification. |
| Facilities and validation | Qualification, cleaning, process validation, computerized systems, utilities, maintenance and continued verification. |
| Records and data | Original records, metadata, audit trails, access, review, retention, copies, translations, backups and data-integrity investigations. |
| Batch disposition | Manufacture, testing, record review, certification or release support, rejection, rework and destruction. |
| Events and CAPA | Deviation, OOS/OOT, atypical results, investigation leadership, root cause, impact assessment, CAPA approval and effectiveness checks. |
| Change control | Which changes require prior approval, regulatory impact assessment, validation, market notification and inventory transition. |
| Stability and samples | Protocol, storage, testing, trending, reference/retention samples, alert handling and shelf-life decisions. |
| Complaints and recalls | Intake, investigation, medical or quality assessment, health-authority reporting, recall decisions, execution and effectiveness. |
| Audits and inspections | Audit rights, frequency, access to records, response timelines, regulatory inspection notification and observation management. |
| Subcontracting | Activities that may be further outsourced, prior approval, qualification and flow-down of quality obligations. |
| Continuity and termination | Shortage escalation, disaster recovery, data access, transfer assistance, inventory and record custody after termination. |
4. Separate quality terms from commercial terms—but reconcile them
Price, payment, liability caps, exclusivity and commercial forecasts normally belong in the commercial agreement. Quality decisions, evidence, approval rights and notification timelines belong in the quality agreement. The two documents must not contradict each other. For example, a shipping target cannot override batch disposition, and termination language cannot remove access to required records or investigation support.
5. Set measurable notification and decision timelines
Words such as “promptly” or “as appropriate” are often too vague for critical events. Define timeframes for serious deviations, potential product defects, data-integrity concerns, regulatory contact, supply interruption and proposed changes. State which clock applies, who can extend it and how unresolved issues escalate.
6. Test the agreement with scenarios before go-live
Run short tabletop exercises: an OOS result appears before a planned shipment; a primary-packaging supplier changes a site; a data system becomes unavailable; a complaint suggests a serious quality defect; an inspector requests records held by the other party. If the team cannot identify the decision owner, evidence route and notification deadline, the agreement is not yet operational.
7. Review it across the product lifecycle
ICH Q10 treats outsourced activities as part of the pharmaceutical quality system. The agreement should therefore be reviewed at planned intervals and after material changes: new market, new dosage form or strength, site or equipment change, ownership change, recurring deviation, inspection outcome, new subcontractor, regulatory variation or transfer of authorization. [5]
Frequently asked questions
Is a quality agreement the same as a commercial manufacturing agreement?
No. They should be coordinated, but the quality agreement focuses on quality-critical activities, evidence, decisions and communication.
Can the contract manufacturer release the product?
The answer depends on the role, market and applicable law. The agreement should distinguish site testing and batch-disposition activities from the final legal release or certification responsibility.
Should every SOP be copied into the agreement?
No. The agreement should identify governing systems, interfaces and approval rights. Detailed methods can remain in controlled procedures referenced by the agreement.
When should the quality agreement be signed?
Early enough to influence technical transfer, validation, data exchange and regulatory planning—before quality-critical execution begins.
How often should it be reviewed?
Use a defined periodic review and event-driven review after material changes, significant events or new regulatory obligations.
Authoritative sources
- U.S. FDA — Contract Manufacturing Arrangements for Drugs: Quality Agreements
- European Commission — EU GMP Chapter 7: Outsourced Activities
- NMPA — Announcement on Strengthening Supervision and Administration of Contract Manufacturing of Drugs (No. 134, 2025)
- NMPA — Drug Administration Law of the People's Republic of China
- ICH Q10 — Pharmaceutical Quality System
This article is an industry perspective for general business discussion. It is not legal, regulatory or medical advice. Project requirements must be confirmed with the responsible parties and applicable authorities.