Why Supplier Qualification Matters Before IND
The FDA’s expectation for cell therapy IND submissions is clear: sponsors must demonstrate control over their starting material supply chain. A supplier change mid-development triggers comparability studies. A supplier who can’t produce adequate quality documentation creates a CMC review deficiency. Qualifying your starting material supplier before IND-enabling studies is not optional — it’s the foundation your manufacturing comparability documentation will be built on.
Most sponsors underinvest in supplier qualification at the discovery stage and pay for it later. The 25-point checklist below covers every dimension that matters for IND readiness. Use it for initial evaluation, annual re-qualification, or when a program transitions from RUO to GMP.
The 25-Point Audit Checklist
Section 1: Regulatory and Compliance Infrastructure (Points 1–5)
- 21 CFR 1271 registration status. Is the supplier registered with the FDA as a Human Cells, Tissues, and Cellular and Tissue-Based Products (HCT/P) establishment? Request their establishment registration number. Unregistered suppliers cannot provide material for IND-regulated manufacturing.
- GMP vs. GTP compliance scope. Does the supplier operate under Good Manufacturing Practice (21 CFR 210/211) or Good Tissue Practice (21 CFR 1271)? For IND starting material, the applicable standard depends on the intended use. Confirm the supplier’s written compliance position and how it maps to your program’s regulatory requirements.
- FDA inspection history. When was the facility last inspected? What was the outcome? Any 483 observations or Warning Letters in the last five years should be reviewed for scope and resolution status.
- SOPs for GMP production and quality control. Request the title list of relevant SOPs (not the full documents). Evaluate coverage of: collection procedures, processing steps, release testing, deviation management, change control, and CAPA. Gaps indicate underdeveloped quality systems.
- Quality Agreement availability. Will the supplier execute a Quality Agreement defining responsibilities, change notification requirements, and batch record access? Suppliers without a Quality Agreement process are not ready for GMP supply relationships.
Section 2: Donor Qualification and Testing (Points 6–10)
- Donor eligibility testing panel. What infectious disease markers are tested on each donor? Minimum expectation for HCT/P: HIV-1/2 antibody, HBsAg, HBc antibody, HCV antibody, HTLV-I/II, syphilis. Confirm the testing laboratory is CLIA-certified or equivalent.
- Donor screening criteria. What medical history criteria are applied? Ask specifically about medication washout requirements (anticoagulants, immunosuppressants, corticosteroids) and how recent illness, vaccination, and travel history are handled. Inconsistent donor screening is a source of lot-to-lot variability that’s hard to trace.
- Disease-state donor annotation standards. For disease-state collections, what clinical annotation is provided? Minimum expectation: confirmed diagnosis, disease activity criteria at time of collection, relevant medication history, disease duration. Annotation quality directly determines the scientific value of the material.
- HLA typing availability. Is HLA typing available on donors? What loci are typed (Class I A/B/C, Class II DR/DQ/DP)? Is typing performed at low-resolution or high-resolution level? High-resolution typing is required for allogeneic cell therapy programs where HLA matching matters.
- KIR genotyping availability. For NK cell therapy programs: does the supplier offer KIR genotyping? KIR haplotype (KIR A vs. KIR B) determines NK cell alloreactive potential and is a critical selection parameter for donor selection in allogeneic NK programs.
Section 3: Collection and Processing Standards (Points 11–16)
- Apheresis collection infrastructure. Where are collections performed? Are collection sites owned or contracted third-party? For owned sites, what is the processing-to-shipment time? For third-party networks, how is collection quality monitored and what are the contractual quality standards?
- Receipt-to-processing time. For fresh product: how long does the material sit between collection and processing initiation? Published data shows significant PBMC phenotype changes within 6–18 hours of room-temperature hold. Request data on their typical receipt-to-processing interval.
- Processing facility certification. Is the processing facility ISO-certified? What class cleanroom is used for cell processing? For GMP applications, ISO Class 7 (minimum) for open processing steps is expected. Request the facility qualification documentation summary.
- Cryopreservation protocol standardization. What cryoprotectant formulation is used? What controlled-rate freeze profile? What is the minimum validated post-thaw viability specification? Ask for post-thaw viability data from the last 50 lots, not just the specification minimum.
- Cold chain management and shipper validation. How is temperature excursion during shipping monitored? Are shippers validated for the required temperature range over the maximum transit time? What is the protocol when a shipper records an excursion?
- Lot-to-lot consistency data. Can the supplier provide historical lot data showing viability, cell count, and subset distribution across multiple lots? Mean and standard deviation across 50+ lots tells you more about actual consistency than any specification document.
Section 4: Release Testing and Documentation (Points 17–21)
- Certificate of Analysis scope. What parameters appear on the standard CoA? Minimum for research-grade: total nucleated cell count, post-thaw viability, CD3/CD4/CD8/CD19/CD56/CD14 subset percentages. For GMP: add sterility, mycoplasma, endotoxin, appearance, and identity testing.
- Sterility testing method and turnaround. Is sterility testing performed by USP <71> culture method or rapid method equivalent? What is the release timeline relative to sterility result availability? Suppliers who release product before sterility results are available transfer that risk to you.
- Mycoplasma testing. Is mycoplasma testing part of the standard GMP release panel? What method — PCR or culture? Culture-based mycoplasma testing takes 28 days; PCR is faster but must be validated. Confirm the validation status of the method used.
- Batch records and traceability. What batch record package is provided with each lot? Can the supplier provide full chain-of-custody documentation from donor to delivered product? Regulatory agencies expect to trace starting material through every processing step.
- Deviation and OOS investigation records. What is the supplier’s process when an out-of-specification (OOS) result occurs? Do they investigate before releasing, or release and notify? Request a sample deviation investigation report (with proprietary details redacted).
Section 5: Supply Reliability and Business Continuity (Points 22–25)
- Donor pool depth and refresh rate. How many active donors are in the supplier’s healthy donor pool? What is the annual refresh rate (new qualifications vs. attritions)? A shallow pool creates supply risk if a high-demand donor retires or becomes ineligible.
- Same-donor continuity from RUO to GMP. Can the supplier provide material from the same donor across both RUO research and GMP manufacturing? Donor-switch comparability studies cost time and money. Same-donor continuity eliminates this risk.
- Lead time and scheduling reliability. What is the standard lead time for fresh collections? For cryopreserved inventory? What is the fill rate on orders — percentage of orders delivered on time and in full? Request 12-month fill rate data.
- Business continuity and disaster recovery. Does the supplier have a documented business continuity plan covering collection disruption, processing facility downtime, and supply chain interruption? For programs approaching IND-enabling studies, supplier continuity risk should be part of the CMC risk assessment.
Scoring and Decision Framework
Not every criterion carries equal weight. For early discovery programs, regulatory compliance (Section 1) and donor qualification (Section 2) are the minimum bar. As you approach IND-enabling studies, all 25 points are in scope.
A supplier who scores well on sections 1–3 but can’t provide lot-to-lot consistency data (Point 16) or has never executed a Quality Agreement (Point 5) is not ready for a GMP supply relationship, regardless of catalog price or convenience.
Use this checklist as a document request list when initiating supplier qualification, not just as an interview guide. The documents either exist or they don’t. Qualitative assurances without documentation are not part of a defensible quality system.
How OrganaBio Addresses Each Section
OrganaBio operates under 21 CFR 1271 as an FDA-registered HCT/P establishment, with GMP-compliant apheresis collection and cell processing infrastructure. Quality Agreement execution is standard for GMP supply relationships. Batch records covering full chain-of-custody from collection through delivery are available.
For program-specific qualification, OrganaBio’s quality team supports supplier audit requests including facility questionnaires, SOP title lists, CoA samples, and qualification documentation packages. Contact OrganaBio’s scientific team to initiate the supplier qualification process for your program.
Source from OrganaBio
FDA-registered. ISO 7 cGMP. Ships anywhere in the US.
Request a Supplier Audit PackagecGMP ManufacturingFrequently Asked Questions
What are the five most critical items on a cell therapy starting material supplier audit?
In order of regulatory consequence: (1) FDA registration status — verify the specific facility’s registration number is current in FDA’s HCT/P establishment registration database, not just the company’s general registration. (2) Donor eligibility determination documentation — ask to see a completed determination for a recent lot, including the infectious disease test results and the eligibility conclusion. (3) Batch record completeness — review an actual released batch record to verify all in-process and release steps are documented, reviewed, and approved. (4) Deviation management — ask to see the deviation log and a closed deviation to assess how the supplier identifies, investigates, and resolves quality events. (5) Processing speed documentation — ask for time-stamped COA data showing collection date/time and first processing step date/time across a sample of recent lots.
How do I verify a supplier’s FDA registration status before or during an audit?
The FDA maintains a public database of registered HCT/P establishments at fda.gov/BiologicsBloodVaccines. You can search by establishment name, location, or registration number. Registration is renewed annually — an establishment that was registered two years ago may not be current. During an audit, ask the supplier to provide their current FDA registration certificate and verify the certificate date and the specific facility address matches where material is being collected and processed. A parent company may be registered at one address while material is processed at a different facility — each processing site requires its own registration. This distinction matters because FDA inspects facilities, not companies.
What should a quality agreement with a GMP starting material supplier include, at minimum?
Minimum required elements: scope (specific products, grades, facilities, and permitted uses covered by the agreement); donor eligibility determination responsibilities (who performs testing, what tests are required, who reviews and approves the determination); lot release criteria and acceptance specifications (the exact parameters and limits that must be met before a lot is released to you); deviation notification procedures (timelines and methods for notifying you when OOS results or deviations occur); change control provisions (what changes require your review or approval before implementation); audit rights (your right to conduct on-site or remote audits of the facility and quality records); record retention (how long the supplier retains batch records and donor eligibility documentation); and escalation contacts for supply or quality issues. Without an executed quality agreement, you cannot consider a supplier qualified for GMP-grade material regardless of their documentation quality.
What questions during an on-site audit reveal real quality culture versus paper compliance?
Ask to walk through a batch record that had a deviation — not a clean run. Watch how the quality team describes the deviation: do they explain what actually happened, why, and how they know it won’t recur? Or do they describe the correction in procedural language without discussing root cause? Ask who is authorized to release a lot and what happens when that person disagrees with the manufacturing team. Ask what the last FDA inspection finding was and what they did in response. Ask to see training records for the people who actually processed the lot you are using — not general training completion rates. The answers to these questions reveal whether the quality system is operational or performative. Paper compliance produces clean binders. Real quality culture produces employees who know what the deviations were.
What is the difference between a supplier audit and supplier qualification, and when is each required?
Supplier qualification is the formal process of establishing that a supplier meets your quality requirements — including capability assessment, quality agreement execution, and a documented decision to approve the supplier for your program. An audit is a tool within supplier qualification (and ongoing supplier management) used to gather evidence that the supplier’s quality system is operating as described. Qualification is required before any GMP-grade starting material from a new supplier enters clinical manufacturing. An initial audit is typically part of qualification. Ongoing surveillance audits should occur on a risk-based schedule — typically every 1-3 years depending on the supplier’s risk profile, deviation history, and criticality to your supply chain. A supplier who passes an audit but never has a formal qualification document on file is not qualified for GMP use — the audit is evidence, not the approval.
