1What a LIMS does.
A QC laboratory decides whether materials and products meet their specifications. Under 21 CFR 211.84, each lot of components, drug product containers and closures is withheld from use until it has been sampled, tested or examined and released by the quality control unit. Under 211.165, each batch of drug product needs a laboratory determination that it conforms to its final specifications, including the identity and strength of each active ingredient, before release.¹ A laboratory information management system (LIMS) keeps the records of that work: which samples arrived, which tests apply, what each test found, who did it and who reviewed it.
GMP does not require a LIMS. It requires the laboratory records and controls, and FDA says paper and electronic record-keeping systems “are subject to the same requirements”.² What a LIMS adds is control at the point of entry. FDA gives a LIMS as an example of a system that “can be designed to automatically save after each entry”, which it compares to recording each entry indelibly, at the time, on a paper record.²
2What it is used for in a QC lab.
Each part of a QC laboratory’s work has a record that the regulations describe. A LIMS is configured to capture those records as the work runs.¹³
| Work | What the record must show | Where it is required |
|---|---|---|
| Sample receipt | The material, lot, container, date sampled and who sampled it; the sample’s source, quantity, lot and the dates it was taken and received | 21 CFR 211.84(c)(5), 211.194(a)(1); EU GMP 6.11 to 6.13 |
| Specifications and methods | Specifications, sampling plans and test procedures approved by the quality control unit; methods validated, or verified by a laboratory that did not validate them | 211.160(a), 211.165(e); EU GMP 6.15 |
| Results and calculations | Complete data from each test, including graphs, charts and spectra, every calculation, and the result compared with its standard | 211.194(a)(4) to (6); EU GMP 6.16, 6.17 |
| Review and approval | The analyst’s initials or signature and date, a second person’s review of the original records, and a clear statement of approval or rejection | 211.194(a)(7) and (8); EU GMP 6.17 |
| Trends and out- | Results recorded so that they can be trended, with out-of-trend and out- | EU GMP 6.7, 6.9 and 6.16 |
| Stability | A written programme with sample sizes, test intervals, storage conditions and methods, and complete records of all stability testing | 211.166, 211.194(e); EU GMP 6.26 to 6.30 |
| Reference standards and reagents | Records of testing and standardisation, and labels with preparation, opening and expiry dates | 211.194(c); EU GMP 6.19 to 6.21 |
| Instruments | Calibration at suitable intervals under a written programme, with records of it | 211.160(b)(4), 211.194(d) |
Environmental monitoring sits in the same records. EU GMP lists “data from environmental (air, water and other utilities) monitoring, where required” among the documents the QC department should have readily available, and names environmental controls among the data to record so that trends can be evaluated.³
3What the rules expect of the system.
A LIMS used for these records is “computer or related systems” under 21 CFR 211.68. Changes to records may be made only by authorised personnel, input and output must be checked for accuracy, and backup data must be exact, complete and secure.⁴ When the electronic records are the ones relied on, Part 11 applies: the system is validated, access is limited to authorised individuals, time-stamped audit trails record operator entries and actions that create, modify or delete records, and signed records show the signer’s name, the date and time and the meaning of the signature.⁵⁶ In the EU, Annex 11 asks for validation and qualified infrastructure, built-in checks on data exchanged with other systems, regular audit trail review and controlled configuration changes.⁷
FDA’s data integrity guidance sets out what that means in practice. Each CGMP workflow on the system is validated for its intended use. Access to change specifications, methods or data is restricted by technical means where possible, and the system administrator is independent of the people responsible for the record content. Shared logins do not meet the requirement for actions to be attributable to a person. Audit trails are reviewed with the record they belong to, and where 211.22 requires data review before batch release, the audit trail review happens then too.²
Two points shape how a LIMS is set up. If chromatography is reprocessed, each result is kept for review, not only the final one. And some instrument records are dynamic: a printout of an FT-IR spectral file that can be reprocessed does not count as the original record or a true copy.² A result in the LIMS therefore needs to point to the original data, wherever that is kept.
4What a LIMS does not decide.
The quality control unit has “the responsibility and authority to approve or reject” components, in-process materials and drug products, and it reviews all production and control records before a batch is released or distributed.¹ In the EU, finished product assessment covers production conditions, in-process results, the manufacturing documentation, compliance with the specification and examination of the finished pack, not the test results alone.³ Where a computerised system records certification and batch release, Annex 11 says it should allow only Qualified Persons to certify the batches and should identify them, using an electronic signature.⁷
A result outside its limit stays in the record. FDA says invalidating a result needs “a valid, documented, scientifically sound justification”, and even then the batch record given to the quality unit includes the original data with the investigation that justified invalidating it.²
5How it runs in Seal.
Seal’s LIMS registers each sample with its material, batch, collection point and required tests, and assigns the method and specification versions before execution. Each result is evaluated against the specification version assigned to it and keeps that version when the specification changes. A result outside its limit opens an investigation linked to its source, method and specification, and manufacturing and inventory use the authorised disposition from the same record rather than a copy of the result. The QC laboratory blueprint takes incoming, in-process, environmental, stability and finished-product samples through one controlled intake to a CoA generated from the approved results.
Neil, Seal’s AI agent, turns an approved method or specification into a proposed test workflow, which your team checks against the source and releases under change control. The LIMS comparison sets out what to check when choosing.
References
- 121 CFR Part 211, Current Good Manufacturing Practice for Finished Pharmaceuticals, sections 211.22, 211.84, 211.160, 211.165, 211.166, 211.192 and 211.194, eCFR. https:/
/ www. ecfr. gov/ current/ title- 21/ chapter- I/ subchapter- C/ part- 211 (read 6 November 2026) - 2Data Integrity and Compliance With Drug CGMP: Questions and Answers, Guidance for Industry, FDA, December 2018, questions 2, 3, 4, 5, 7, 8, 10, 12 and 14. https:/
/ www. fda. gov/ media/ 119267/ download (read 6 November 2026) - 3EudraLex Volume 4, Chapter 6: Quality Control, European Commission, in operation from 1 October 2014, sections 6.3, 6.7, 6.9, 6.11 to 6.21 and 6.26 to 6.30. https:/
/ health. ec. europa. eu/ system/ files/ 2016- 11/ 2014- 11_ vol4_ chapter_ 6_ 0. pdf (read 6 November 2026) - 421 CFR 211.68, Automatic, mechanical, and electronic equipment, eCFR. https:/
/ www. ecfr. gov/ current/ title- 21/ section- 211. 68 (read 6 November 2026) - 5Guidance for Industry: Part 11, Electronic Records; Electronic Signatures, Scope and Application, FDA, August 2003, section III.B. https:/
/ www. fda. gov/ media/ 75414/ download (read 6 November 2026) - 621 CFR Part 11, Electronic Records; Electronic Signatures, sections 11.10 and 11.50, eCFR. https:/
/ www. ecfr. gov/ current/ title- 21/ chapter- I/ subchapter- A/ part- 11 (read 6 November 2026) - 7EudraLex Volume 4, Annex 11: Computerised Systems, European Commission, in operation from 30 June 2011, principle and sections 1, 4, 5, 9, 10 and 15. https:/
/ health. ec. europa. eu/ system/ files/ 2016- 11/ annex11_ 01- 2011_ en_ 0. pdf (read 6 November 2026)
AQuestions and answers
Does GMP require a LIMS?
No. GMP requires complete, reviewed laboratory records and controls over them, and FDA applies the same requirements whether the records are on paper or electronic. A LIMS is one way to meet them, with controls at the point of entry such as saving each entry as it is made.
Does a LIMS have to be validated?
Yes, when it holds GMP records. It is validated for its intended use, which FDA says means each CGMP workflow, not only the platform. The extent of validation follows a documented risk assessment, and qualifying the platform alone does not show that your configured workflows and calculations are correct.
Does a LIMS replace the chromatography data system?
Not on its own. Original electronic data from instruments, such as reprocessable chromatograms and spectra, must be kept as original records or true copies with their metadata, and a result typed or transferred into the LIMS does not replace them. Decide which system keeps the original and link the LIMS result to it.
Who releases a batch, the LIMS or a person?
A person. In the US the quality control unit approves or rejects each batch after reviewing its records. In the EU a Qualified Person certifies it, and a system that records the certification should allow only Qualified Persons to do so and record who did it with an electronic signature.