CQV stands for Commissioning, Qualification, and Validation — the structured process of verifying that facilities, utilities, equipment, and systems are correctly installed, function as designed, and consistently support manufacturing processes that meet product quality requirements. Commissioning confirms engineering readiness, qualification provides documented GMP evidence of fitness for use, and validation confirms the overall process produces consistent, quality output. Together they bridge project engineering and ongoing GMP operations.
Commissioning is an engineering activity, governed by Good Engineering Practice (GEP), that verifies a system is installed and operates according to design specifications — it applies to all systems, GxP-relevant or not. Qualification is the GMP-documented subset of that verification specifically required for systems with direct or indirect impact on product quality, patient safety, or data integrity. Under risk-based approaches like ASTM E2500, robust commissioning data can be leveraged to satisfy qualification requirements rather than duplicating tests.
Qualification establishes documented evidence that specific equipment, utilities, or facilities are installed correctly and operate as intended — it is equipment- and system-focused. Validation establishes documented evidence that a process consistently produces a product meeting predetermined specifications — it is process-focused and typically depends on qualified equipment as a prerequisite. In practice, qualification answers "does the equipment work as designed," while validation answers "does the process consistently deliver the intended product."
These are the four traditional qualification stages: Design Qualification (DQ) confirms the proposed design meets user and regulatory requirements before procurement; Installation Qualification (IQ) verifies equipment is installed correctly per specifications; Operational Qualification (OQ) confirms the equipment functions as intended across its operating ranges; Performance Qualification (PQ) demonstrates consistent performance under actual or simulated production conditions. Each stage builds on documented evidence from the one before it.
Design Qualification is documented verification that the proposed design of equipment, a facility, or a system meets user requirements and applicable regulatory and GMP standards, performed before procurement or construction begins. DQ reviews specifications, drawings, and vendor documentation against the User Requirements Specification (URS) to catch design gaps early, when changes are far less costly than discovering them during installation or operational testing later in the project.
A URS is the foundational document that defines what a piece of equipment, system, or facility must do — functional, operational, regulatory, and quality requirements — written from the user's perspective before design begins. Every later CQV stage traces back to the URS: design qualification confirms the design meets it, and operational and performance qualification confirm the built system actually satisfies it. A vague or incomplete URS is one of the most common sources of qualification rework.
FAT is testing performed at the equipment manufacturer's facility before shipment, verifying the system functions correctly in a controlled environment and catching defects before costly installation. SAT is testing performed after the equipment arrives and is installed at the actual production site, confirming it still performs correctly under real site conditions — power, utilities, integration with other systems. Well-executed FAT data can often reduce duplicate testing during subsequent IQ and OQ.
ASTM E2500 is a risk-based standard guide for specifying, designing, and verifying pharmaceutical manufacturing systems and equipment, first issued in 2007 and significantly revised as E2500-25. The update aligns the guide with ICH Q9(R1), ICH Q10, EU GMP Annexes 1 and 15, and the ISPE Baseline Guide Vol. 5 Second Edition, and introduces Critical Design Elements (CDEs) that link system design directly to critical process parameters, sharpening the connection between qualification and process control strategy.
Good Engineering Practice is the set of established engineering methods and standards applied throughout design, procurement, construction, and commissioning to ensure a system is built correctly — independent of GMP requirements. GEP underpins the entire CQV process: a system commissioned under rigorous GEP provides reliable documented evidence that, combined with a risk and impact assessment, can satisfy a substantial portion of qualification requirements without separately repeating the same tests.
An impact assessment is a documented, risk-based evaluation that determines whether a system, utility, or piece of equipment has a direct, indirect, or no impact on product quality, patient safety, or data integrity. This classification determines the qualification scope: direct-impact systems require full DQ/IQ/OQ/PQ, indirect-impact systems may need only IQ/OQ, and no-impact systems may rely on commissioning alone. Skipping or poorly documenting this step is a frequent driver of over- or under-qualification.
A direct-impact system has components or functions that contact the product, control a critical process parameter, or directly create GxP records, and therefore requires full qualification. An indirect-impact system supports a direct-impact system without itself touching product or critical parameters — for example, a building management system monitoring, but not controlling, ambient conditions. Indirect-impact systems typically require commissioning plus a reduced qualification scope rather than the full DQ/IQ/OQ/PQ sequence.
Responsibility is shared and overlapping by design. Engineering typically leads commissioning under GEP; the validation function leads qualification protocol execution; and Quality Assurance reviews and approves the risk assessments, protocols, and final reports that establish GMP acceptability. Cross-functional ownership prevents CQV from becoming a documentation exercise disconnected from real engineering risk — a structure increasingly formalized through integrated C&Q teams rather than siloed handoffs.
EU GMP Annex 15 is the European guideline governing qualification and validation, last substantially updated in 2015. A joint EMA/PIC/S concept paper opened for public consultation in February 2026, outlining a planned update to reflect current industry practice, including alignment with the revised Annex 11 on computerized systems and modern risk-based qualification approaches such as ASTM E2500. Organizations should monitor this revision closely, as it will directly affect CQV documentation expectations across the EU and PIC/S member states.
Requalification is triggered by events that could affect a system's validated state: major equipment modifications, relocation, extended periods of disuse, repeated process deviations linked to the equipment, utility or facility changes affecting its operating environment, and scheduled periodic review intervals defined in the validation master plan. The scope of requalification should be risk-based and proportionate to the actual change — a calibration update rarely requires the same scope as a control system upgrade.
The V-model maps each specification stage on the left side — user requirements, functional specification, design specification — to a corresponding verification stage on the right side — PQ, OQ, IQ — descending to installation at the base. It visually enforces traceability: every requirement defined during design must be demonstrably tested during qualification. The V-model is widely used in both equipment CQV and computer system validation to structure documentation and prevent untested requirements from being missed.
CQV traditionally refers to physical facilities, utilities, and equipment — HVAC, clean utilities, process vessels, packaging lines — while CSV addresses the software and automated systems that control or monitor them, such as SCADA, MES, and building management systems. In practice the two overlap heavily on modern equipment, since most equipment now includes embedded software and automation requiring both physical qualification and software validation as part of a single, coordinated qualification package.
Utility qualification follows the same DQ/IQ/OQ/PQ structure as process equipment but focuses on parameters that affect the manufacturing environment: HVAC qualification verifies air changes, pressure differentials, temperature, and humidity control; water system qualification verifies purification, storage, and distribution maintain required chemical and microbial quality through multi-phase testing, often spanning a full year to capture seasonal variation before routine monitoring begins.
Yes, the same risk-based principles apply, but execution is typically split across two locations: FAT and much of the qualification testing happen at the skid vendor's facility before shipment, with SAT and integration testing confirming performance after installation at the production site. This approach can significantly compress on-site qualification timelines, provided FAT documentation is rigorous enough for the receiving site's quality team to formally accept and leverage it.
A complete CQV package typically includes the Validation Master Plan, User Requirements Specification, risk and impact assessments, Design Qualification report, commissioning test records, IQ/OQ/PQ protocols and executed reports with raw data, a Requirements Traceability Matrix linking requirements to test evidence, deviation and discrepancy records with resolutions, and a final qualification or validation summary report that formally releases the system for GMP use.
Risk-based CQV, as formalized in ASTM E2500, concentrates rigorous testing on functions and parameters with genuine product quality or patient safety impact while leveraging vendor and commissioning data for lower-risk functions instead of re-testing everything to the same depth. This proportionate effort reduces redundant protocol execution and documentation volume without reducing assurance, because the testing that remains is targeted precisely at what actually determines whether the system is fit for its intended use.
CQV qualifies the equipment and systems a process runs on; process validation confirms the process itself, executed on that qualified equipment, consistently produces product meeting specifications across normal operating ranges. Process validation's three stages — process design, process qualification, and continued process verification — assume the underlying equipment and utilities have already completed CQV. Attempting process validation on unqualified equipment invalidates the data, since equipment variability cannot be separated from process variability.
Automation systems controlling or monitoring GxP-critical parameters are qualified alongside the equipment they control, typically following a parallel software validation lifecycle — requirements, configuration verification, and functional testing — integrated into the same IQ/OQ/PQ protocols or executed as a coordinated companion package. Recipe and parameter configuration, alarm management, and audit trail functionality usually receive focused testing, since misconfigured automation logic is a common root cause of process deviations after go-live.
CQV establishes the initial qualified state of equipment and systems; validation lifecycle management keeps that state current through periodic review, change-triggered requalification, and calibration and maintenance tracking. Without an active lifecycle process, qualified systems silently drift out of their validated state through routine changes, software patches, or component replacement. Centralized digital tracking of qualification status, due dates, and change history is how organizations maintain audit-ready evidence long after the original CQV project closes.