Media fill software.

An aseptic process simulation is a designed challenge to the actual aseptic operating system: people, line, barriers, interventions, transfers, holds, speeds, shifts, container paths, inspection and incubation. It is how a site validates the aseptic process itself.¹

Seal connects the qualified process configuration, risk assessment, coverage matrix, protocol, participants, executed interventions, environmental monitoring, units, incubation, inspection, growth promotion, investigation and requalification. The conclusion shows exactly what was challenged and what remains unproven. Annex 1 is a primary reference for APS design, execution, investigation and its relationship to the contamination control strategy.²

1The qualified process defines what the simulation must challenge.

The starting model covers formulation and filtration where applicable, equipment assembly, transfers of sterilised items, filling, lyophiliser loading and unloading, sealing, barriers, personnel roles, container-closure families, hold times, line speeds, campaign duration and routine interventions. Each APS resolves to the effective equipment, procedures, recipes and layouts. A successful run against a retired configuration cannot qualify the current line.

Risk selects the worst cases. The plan records each variable, its contamination mechanism, routine range, worst-case direction, interactions, the challenge selected and the rationale.³ The slowest and fastest speeds can create different risks, and the largest container is not automatically the only worst case. Bracketing and matrixing state what is represented and why; unsupported equivalence stays visible as a gap instead of disappearing inside a protocol narrative.

1.1Why teams choose Seal for media fills

The question an inspector asks of a media-fill programme is which operators, interventions and configurations are still qualified. When media fills are planned in a protocol, executed on paper and summarised in a report, that answer comes from spreadsheets. Seal keeps the qualified process, the coverage matrix and each run’s interventions, participants, units and results on the platform where routine batches run, with each run recorded against the coverage it demonstrates. A line change, a new intervention or a contaminated unit shows exactly which coverage it reopens and which commercial batches fall in scope.

2Coverage is managed across runs, not remembered afterwards.

Lines, shifts, operators, roles, interventions, container formats, durations, campaign positions, hold times and lyophilisation paths form a living coverage matrix. A planned run shows which obligations it will satisfy and which remain open. A failed simulation or a change reopens only the coverage it affects.

The programme can therefore answer a direct question: is this operator, this intervention or this configuration currently represented by acceptable evidence?

3Interventions and participants are part of the design.

Each inherent or corrective intervention defines its location, reason, routine frequency, aseptic risk, tools, personnel, duration and monitoring. The protocol schedules a representative number and distribution without inventing unnecessary contamination risk. During the run, actual start and end, operator, line state, first-air exposure and the unit range filled around it stay connected. “Interventions performed” is not accepted without showing which ones, how often and by whom.

Operators carry their qualified roles, gowning status, intervention capabilities, prior APS participation and required frequency. The plan assigns meaningful activity rather than adding a name to the record. Failed participation, a contaminated unit linked to an operator’s activity, expired qualification or a role change can restrict permitted work and start a targeted requalification path.

4The run mirrors routine execution and its real exposure.

Media preparation, setup, sterilised components, line clearance, connections, filling, interventions, stoppages, sampling, rejects and closure run under a controlled record, with deliberate differences from commercial manufacture identified and justified. Automation remains authoritative for machine events; Seal aligns them with human work, media units, monitoring and protocol expectations.

The simulation accounts for maximum run length, breaks, shift changes, idle periods, replenishment, adjustments, stoppages, aseptic holds and the longest permitted interval between critical states. Planned and actual clocks both stay visible. Finishing early leaves a condition uncovered unless the protocol already defines an acceptable basis.

Environmental monitoring belongs to the same timeline. Active air, settle plates, surfaces, personnel samples, particles, pressure and alarms attach to the simulated operation and its interventions. Expected, collected, missed and adverse samples define completeness, and an acceptable unit count does not erase a monitoring gap or an organism that challenges the contamination-control rationale.

5Every unit is reconciled, incubated and inspected by state.

Each container, or a bounded range, carries its fill event, intervention association, rejection reason, incubation condition, inspection and final state. Units removed under routine-equivalent conditions stay distinguishable from unexplained losses, and the arithmetic and physical disposition must agree before a conclusion.

Swipe to see the full diagram →

Incubators, loading maps, media lots, temperatures, times, transfers and excursions stay connected to the units, so an excursion identifies the exact population affected, and any extension, restart or rejection requires approved rationale. Inspection defines the method, qualification, turbidity criteria, second checks and escalation of suspect units; a suspect unit cannot be silently recorded as negative. Growth promotion is a dependency rather than an attachment: a failed or invalid result holds the conclusion and scopes the affected media and runs.

6A contaminated unit opens a broad, immediate response.

The investigation starts with the unit’s identity, incubation and inspection history, organism, fill time, neighbouring units, intervention window, people, environment, equipment, materials, prior APS and the commercial batches produced since the last successful evidence.⁴ Containment and production restrictions can apply before root cause is known, and related batches remain in scope until evidence supports narrowing.

The case records whether the failure implicates a person, an intervention, a line, a shift, a configuration, a procedure, the barrier, the monitoring design or the whole aseptic process. CAPA, retraining, maintenance, repeat simulations and restart each keep their prerequisites. An isolated successful rerun does not close the original concern; the conclusion addresses root cause, affected production, restored controls and requalification coverage.

7Changes recalculate coverage.

A line modification, new container, speed range, additional shift, staffing model, intervention, barrier change, hold extension or longer campaign identifies the risk variables and APS obligations it touches. “Media fill required” is not a generic task on the change: the change states which configurations and conditions must be challenged, and whether before or after implementation.

Filling controls, particle counters, monitoring instruments, incubators and automated inspection keep their native events and raw data. Seal owns the simulation definition, coverage logic, governed execution, unit population, investigation, qualification state and restart decision. If a site needs only an electronic protocol, a document system can store one. Seal matters when the site must continuously know what the successful APS qualifies, what a change invalidates and which production a failure can affect.

8Prove one worst-case campaign simulation.

Start with one line across two shifts at maximum duration, with representative container families, slow and fast operation, a planned stoppage, replenishment, a shift change, routine and corrective interventions, full unit reconciliation, incubation, inspection and growth promotion.

Include an absent operator, a missed intervention, a missing unit, an incubator excursion, a turbid suspect, a positive unit, an environmental isolate and a post-run line change. The programme is ready when every conclusion names the exact operating envelope it supports.