All blueprints

503B outsourcing facility software, built for CGMP rather than pharmacy.

503B outsourcing facility software: guided batch records, environmental monitoring and beyond-use dating on the same records as laboratory testing and quality, in place of pharmacy tools and paper.

Illustration of a seal beside a production line of sealed vials.
503B Outsourcing Facility Management Software

Figure 1. An illustrative batch record exception: at step 09 of batch RX-0892, a pH result of 7.30 against a 6.80–7.20 range is retained unchanged and linked to formula MF-0042 v2.1 and source reading PH-008 for assessment.

Summary

The problem
Outsourcing facilities are held to CGMP, but many still run on paper batch records, spreadsheet environmental-monitoring logs and word-processed procedures. Records that do not connect mean manual compilation before every inspection or customer audit.
Seal’s approach
Batch records, environmental monitoring, BUD rules, testing, training and quality events share one platform. Configured controls such as component scans, qualification checks and HD room assignment act during execution, and release waits for the required results.
What changes
An excursion can be assessed against the batches made in the affected area, and the basis for each beyond-use date stays linked to the product. Inspectors and customers see records that already exist.
Where to start
One master formula, the cleanroom where it is compounded and its monitoring plan. Book a demo.

1Outsourcing facilities are held to manufacturing standards.

In 2012, a fungal meningitis outbreak traced to contaminated injections from a compounding pharmacy killed 64 people. In response, Congress created the 503B designation: outsourcing facilities that compound without patient-specific prescriptions, subject to CGMP requirements and FDA inspection.¹ The expectations became those of drug manufacturing. Many facilities' systems did not change with them.

Many 503B facilities still run on paper batch records, spreadsheet environmental-monitoring logs and word-processed procedures, tools built for pharmacy practice. CGMP asks for batch production records that document each significant step,² environmental monitoring with trending and limits, qualified and calibrated equipment, trained and assessed personnel, a quality system with deviations, CAPA and change control, and stability evidence for beyond-use dating. Added to pharmacy workflows, those requirements tend to produce parallel records that do not connect and a manual compilation before every inspection.

CGMP expectation compared with common pharmacy tools
Area
Common pharmacy tool
CGMP expectation
Batch records
Paper forms / wet signatures
Record for each batch / each significant step
Environmental monitoring
Spreadsheet log / weekly review
Scheduled sampling / trending / alert and action limits
Equipment
Calibration stickers
Qualification / calibration / maintenance records
Personnel
Training binders
Role-based training / media fills / garbing qualification
Quality system
Word-processed deviation forms
Deviations / CAPA / change control
Beyond-use dating
Dates from pharmacy references
Stability programme supporting each date
Where the records diverge
Added to pharmacy tools, these expectations tend to produce parallel records that are compiled by hand before an inspection.
Figure 2. Pharmaceutical manufacturing expectations compared with the paper and spreadsheet tools many outsourcing facilities use

With batch records, environmental monitoring, testing, training and quality events on one platform, a batch can be reviewed with the evidence around it and a control can act while the work is running.

1.1Why teams choose Seal for 503B outsourcing facilities

When an inspector or a customer auditor asks for a batch’s CGMP evidence, many outsourcing facilities assemble it by hand from pharmacy software, paper batch records and spreadsheet monitoring logs. Seal keeps the batch record, the cleanroom’s monitoring, the BUD basis and the quality events on one platform, each tied to the batch it concerns, and a revised master formula or monitoring plan applies to batches started after it takes effect. The facility works to manufacturing standards in the record it already uses, and its procedures can change without losing the history of batches made under the old ones.

2Make the batch record the place the work happens.

Blank fields and unexplained corrections on paper records become questions during inspection. An electronic batch record should expose an exception rather than make it disappear. In Figure 1, a pH of 7.30 against a 6.80–7.20 range is retained unchanged, flagged and linked to its formula version and source reading for assessment.

Operators follow the approved steps in sequence, and required fields must be completed before they proceed. Barcode scans check ingredient, lot and quantity, so a wrong component or expired lot is blocked at the point of use. Yields, concentrations and dilution factors are calculated from verified formulas, data are captured as the work happens rather than transcribed at the end of a shift, and critical steps carry electronic signatures recording who signed, when and with what meaning.³

Master formulas are controlled records. Each change goes through change control with its rationale, approval and effective date. A batch starts from the current approved version and keeps it: a later formula version does not rewrite an existing batch.

Formula MF-0042 v2.1 initiates batch RX-0892, which retains the formula version, scanned lots and execution evidence through review, with release pending QA
Figure 3. Formula MF-0042 v2.1 initiates batch RX-0892, which retains the formula version, scanned lots and execution evidence through review, with release pending QA

3Run environmental monitoring as a programme.

Sterile compounding depends on environmental control.⁴ ISO 5 primary engineering controls, ISO 7 buffer rooms and ISO 8 ante rooms need viable and non-viable particle monitoring, temperature, humidity, pressure differentials, surface sampling and personnel monitoring. Many facilities collect these data but review them late: counts go into a spreadsheet reviewed weekly, and by the time a count exceeds the action limit, the conditions behind it may have existed for some time.

Seal schedules sampling from the monitoring plan, so technicians see what is due and overdue. Results plot on trend charts as they are entered. Alert and action limits are defined by location and sample type: a result at the alert limit raises a notification, and a result beyond the action limit opens an investigation. Because environmental data link to batch records, an excursion can be assessed against the batches made in the affected area during the event.

Sampling locations, schedules, trending and alert and action limits, linked to the locations and work an excursion affects
Figure 4. Sampling locations, schedules, trending and alert and action limits, linked to the locations and work an excursion affects

Cleaning belongs to the same programme. Classified-area cleaning tasks are scheduled and tracked, the configured rotation prompts for the correct agent, including sporicidal treatment, and surface sampling results link to the cleaning events they verify.

4Keep the basis for each beyond-use date with the product.

Every product an outsourcing facility releases carries an expiration date, and CGMP requires a written stability programme whose results determine storage conditions and expiration dates.⁵ FDA’s draft CGMP guidance for outsourcing facilities describes when it generally does not intend to take action on a beyond-use date used as the expiration date: a default BUD for small aggregate batches, or a BUD supported by limited stability testing, with container-closure integrity tested on samples aged to the proposed date before release.⁶ An investigator asking how the BUD was set for a particular product will expect the stability data, container-closure evidence and documented rationale behind it.

Seal makes that basis part of the product definition: the default that applies, or the stability and container-closure studies that support a longer date, linked rather than kept in a binder. When a batch is compounded, its BUD is calculated from that definition and the storage condition and checked against the expiry dates of the components used, without transcription.

BUD from the product definition / basis linked
Product
Vancomycin 25 mg/mL / aseptically processed
Storage condition
Refrigerated / 2–8 °C
Container-closure integrity
CCI-2024-008 / aged to 45 days
Stability study
STB-2024-012 / 45-day data
Beyond-use date
45 days
Supported by STB-2024-012 and CCI-2024-008; checked against component expiry dates
Applied to batch RX-2024-0892
Compounded 15 March 2024, BUD 29 April 2024. The basis stays linked to the stability and closure studies.
Figure 5. An illustrative BUD rule: aseptically processed vancomycin 25 mg/mL, stored refrigerated, with a 45-day date supported by stability study STB-2024-012 and container-closure study CCI-2024-008, applied to batch RX-2024-0892

The same product definition records whether the product is a hazardous drug and the release tests it requires, such as USP <71> sterility and <85> bacterial endotoxins testing. Release waits until the required results are complete and passing, and the formula, batch records, environmental data, test results and BUD justification for a product can be retrieved together.

5Enforce the separation for hazardous drugs.

Many outsourcing facilities compound hazardous drugs such as antineoplastics and hormones. CGMP is the governing standard; where a state or customer expects it, USP <800> adds containment practices such as negative-pressure rooms, closed-system transfer devices, enhanced PPE, surface decontamination and medical surveillance. Failures occur where the separation between hazardous and non-hazardous work is left to memory.

Seal flags hazardous drugs at the formula level and can block an HD batch from starting outside a designated negative-pressure room. Operators confirm the required PPE as part of the batch record. HD rooms have their own cleaning procedures, a spill record guides containment and clean-up and links to the batch and people involved, and personnel who handle hazardous drugs are tracked against their surveillance due dates.

6Keep personnel qualification current and enforced.

Aseptic compounding requires qualified people, and media fills, garbing qualification and aseptic technique assessments are repeated periodically. Current qualifications and upcoming requalifications are visible by person and activity, and required training is defined by role. Someone without a current qualification can be blocked from signing a controlled aseptic step.

An operator with current media fill and garbing qualifications may execute aseptic steps on one batch, while a colleague whose media fill has expired is blocked on another
Figure 6. An operator with current media fill and garbing qualifications may execute aseptic steps on one batch, while a colleague whose media fill has expired is blocked on another

7Show customers and inspectors the records the work produced.

Outsourcing facilities supply what the conventional supply chain does not: products in shortage, discontinued products and doses too small for manufacturers to make. Health-system buyers audit their 503B suppliers before relying on them. Environmental trends, batch records, deviation history and CAPA effectiveness come from the records the facility already runs on. Quality agreements and customer-specific requirements link to the customer and its orders, and distribution records show which customers received which lots, supporting notification and recall.

FDA inspection works the same way. Complete batch records with their signatures and deviations, environmental data with trend analysis, training and media fill results, and CAPAs with evidence that effectiveness was verified already exist, organised as the work happened, instead of being compiled while the investigator waits.

8Begin with one formula and its cleanroom.

Bring one master formula, the cleanroom where it is compounded and its monitoring plan. Configure the batch record, environmental monitoring, BUD rule and personnel qualifications around that product, and train staff on realistic scenarios before go-live.

Exercise the exception paths as well as the normal run: an out-of-limit result, an expired component lot, an operator whose media fill has lapsed and an excursion during compounding. Then migrate further master formulas and component inventory with their versions preserved.

References

  1. 1FDA, Information for Outsourcing Facilities: under section 503B of the Federal Food, Drug, and Cosmetic Act, outsourcing facilities that compound sterile drugs must comply with CGMP requirements and are inspected by FDA on a risk-based schedule. FDA
  2. 221 CFR 211.188, Batch production and control records: batch production and control records must be prepared for each batch with complete information, documenting that each significant step was accomplished. eCFR
  3. 321 CFR 11.50, Signature manifestations: signed electronic records must show the printed name of the signer, the date and time of signing, and the meaning of the signature (such as review, approval, responsibility or authorship). eCFR
  4. 421 CFR 211.113, Control of microbiological contamination: written procedures must be established and followed to prevent microbiological contamination, including validation of all aseptic and sterilisation processes for sterile products. eCFR
  5. 521 CFR 211.166, Stability testing: a written stability testing program must be followed, and its results used to determine storage conditions and expiration dates. eCFR
  6. 6FDA, Current Good Manufacturing Practice—Guidance for Human Drug Compounding Outsourcing Facilities Under Section 503B of the FD&C Act, draft guidance for industry, Revision 2 (January 2020), section III.K and Appendix B: a stability program under 21 CFR 211.166 determines expiration dates; FDA describes default BUDs for small aggregate batches and BUDs based on limited stability testing, and container-closure integrity testing on samples aged to the proposed BUD before release. FDA

AOperating model

Included in this blueprint

  • Electronic batch records
  • Environmental monitoring
  • Sterility testing
  • Deviation management
  • Document control
  • Training and qualification
  • Component inventory
  • Equipment management
  • CAPA management

Connected across Seal

BCapabilities

Table B.1. What the 503B Outsourcing Facility Management blueprint covers. Linked capabilities are blueprints of their own.
CapabilityWhat it covers
Electronic batch recordsGuided execution of compounding procedures with configured checks. Components are verified by scan, calculations use verified formulas and data are captured as the work happens.
Environmental monitoringScheduled sampling, with results trended as they are entered against alert and action limits. A result beyond the action limit opens an investigation.
Sterility testingUSP <71> sterility and USP <85> endotoxin testing linked to batches. Release waits for the required passing results.
Deviation managementOut-of-spec results and process deviations captured at point of occurrence. Investigation workflows with root cause analysis and CAPA.
Document controlMaster formulas, procedures and specifications under version control. Changes go through controlled review and approval workflows.
Training and qualificationMedia fill tracking, garbing qualification, competency assessments. Unqualified personnel blocked from controlled steps.
Component inventoryTrack APIs, excipients and containers with lot traceability. Barcode verification at the point of use blocks a wrong component or expired lot.
Equipment managementCleanroom equipment qualification, calibration scheduling and maintenance records.
CAPA managementCorrective and preventive actions with effectiveness verification. Link CAPAs to deviations, complaints and audit findings.

CConnected records

Entity hierarchy
What it records
Kind
Master Formula
Controlled compounding formula with ingredients and process.
entity
Sterile Injectable
Sterile formulation compounded under aseptic controls.
template
Hazardous Drug
Hazardous drug formulation with containment controls.
template
Batch Record
Electronic record of a compounding batch.
entity
RX-2024-0847
Compounded batch of injectable product.
record
Component
Ingredient or container used in compounding.
entity
EM Sample
Environmental monitoring sample with results.
entity
Cleanroom
ISO classified compounding area.
entity
ISO 5 PEC-01
Primary engineering control for aseptic compounding.
record
Personnel Qualification
Media fill or competency assessment.
entity
Media Fill Test
Aseptic technique qualification.
template
Beyond-Use Date
Calculated expiration for compounded product.
entity
Figure C.1. Record types, templates and the relationships between them in this blueprint.

DQuestions and answers

Is this different from pharmacy software?

Yes. Pharmacy systems are built around prescriptions and dispensing. An outsourcing facility is held to CGMP, so it needs batch records, environmental monitoring, deviation and CAPA management, training and stability evidence that connect to each batch. Seal keeps those records on one platform.

Where do USP <797> and <800> fit?

CGMP is the governing standard for an outsourcing facility. Where a state or customer expects USP <797> or <800> practices, such as cleaning rotations, garbing or hazardous-drug containment, they can be configured as steps, checks and training requirements in the same records.

What about hazardous drugs?

Products can be flagged as hazardous drugs at the formula level. An HD batch can be blocked from starting outside a designated negative-pressure room, operators confirm PPE in the batch record, and HD cleaning, spill records and medical surveillance due dates are tracked alongside the sterile compounding controls.

How does beyond-use dating work?

Each product definition records the basis for its date: a default BUD where it applies, or the stability and container-closure studies that support a longer date. When a batch is compounded, the BUD is calculated from that definition and the storage condition and checked against component expiry dates.

Can we track media fills and personnel qualification?

Yes. Qualification requirements such as media fills, garbing assessments and aseptic technique evaluations are defined by role, with completion and expiry dates. Configure aseptic steps to require a current operator qualification before signature.

How does environmental monitoring fit with batch records?

Sampling locations, frequencies and alert and action limits are defined in the monitoring plan, and results plot on trend charts as they are entered. A result beyond the action limit opens an investigation, and because the data link to batch records, the batches made in the affected area can be assessed.

What happens during an FDA inspection?

Batch records, environmental trends, training records, deviation history and CAPA effectiveness checks already sit on one platform, so the investigator can review them with their source and history instead of waiting for them to be compiled.

How long does implementation take?

Implementation time depends on your formulations, cleanroom layout and workflows. Start with one formula and its records, configure it together and train staff on representative scenarios before go-live.

Can we import existing formulas and data?

Yes. Master formulas and component inventory can be migrated with their versions preserved, followed by the historical records you need for continuity.

How do you handle state board of pharmacy requirements?

State requirements vary and apply alongside FDA requirements. State-specific steps, documentation or product restrictions can be configured as part of the relevant formulas, batch records and procedures.

What about customer audits from health systems?

Customer audits can draw on the facility’s connected qualification and batch evidence. Seal holds environmental trends, batch records, training files and CAPA history on one platform, so the documentation an auditor requests can be retrieved with its source and history.

How do you handle recalls or market withdrawals?

Distribution records show which customers received which lots. Affected customers can be identified from those records to support notification and recall.

Can we track customer-specific requirements?

Yes. Quality agreements and customer-specific specifications or documentation requirements link to the customer and its orders.

See your process in Seal.

Bring a procedure or a recurring problem. See how your team can use neil to build the workflow, investigate the results and improve the next version.

Book a demo