A photography of Confident business male and female team discussing a project, A male siting on chair have laptop in front

GCP, GLP, and GMP: A guide to GxP compliance in life sciences

April 23, 2026

If your time is short

GCP, GLP, and GMP cover three sequential stages of bringing a product to market: clinical trials, non-clinical laboratory studies, and manufacturing.
GCP protects the safety, rights, and well-being of clinical trial participants, and safeguards the integrity of the data they generate.
GLP governs non-clinical laboratory studies. No human subjects are involved. The focus is reliable, reproducible, traceable safety data.
GMP governs the manufacturing, packaging, and processing of finished pharmaceutical products. Without it, a drug can’t reach the market.
All three frameworks feed into regulatory submissions. Gaps in one can compromise the integrity of the whole dossier.
Inspection readiness is a continuous posture, not a last-minute sprint. Strong SOPs, documentation hygiene, and regular mock audits are what make it work.

If you work in pharmaceutical, biotech, MedTech, or in vitro diagnostic development, GxP compliance shapes every stage of what you do. Good Clinical Practice (GCP), Good Laboratory Practice (GLP), and Good Manufacturing Practice (GMP) are the three pillars of that compliance.

This guide breaks down what each one covers, how they fit together, and how to stay audit-ready across all three.

Good Clinical Practice (GCP)

GCP governs how clinical trials involving human subjects are designed, conducted, recorded, and reported. The priority is clear: the safety, rights, and well-being of trial participants, alongside the integrity of the data their participation generates.

The primary regulatory anchor is ICH E6. ICH E6(R3) was adopted on January 6, 2025, with the FDA issuing final guidance in September 2025 and the EMA adopting it effective July 23, 2025. The update shifts GCP from a rigid, checklist-driven model to a flexible, principle-based framework that supports decentralized trials, digital tools, and risk-based quality management.

Auditors and inspectors pay particular attention to:

Informed consent documentation and processes
Protocol adherence and the handling of deviations
Investigator Site Files (ISFs) and Trial Master Files (TMFs)
Case report forms (CRFs) and source data verification
Adverse event and serious adverse event (SAE) reporting
Oversight by Institutional Review Boards (IRBs) and Ethics Committees

Sponsors carry responsibility for overall trial design and quality, investigators for site-level execution, and monitors for ongoing verification. Protocol compliance isn’t just a data quality issue. Deviations can expose participants to unanticipated risks and render collected data unusable for regulatory purposes.

Good Laboratory Practice (GLP)

GLP governs non-clinical laboratory studies, including toxicology and pharmacokinetics, that establish the initial safety profile of a candidate before human testing begins. No human subjects are involved. The focus is the reliability, reproducibility, and traceability of the safety data submitted to regulators.

The OECD Principles of Good Laboratory Practice are the globally accepted standard, enabling Mutual Acceptance of Data (MAD) across OECD member countries for non-clinical safety submissions. In the United States, FDA 21 CFR Part 58 sets the corresponding GLP requirements.

Auditors focus on:

The study plan and whether execution matched it
Raw data traceability, whether in laboratory notebooks or electronic laboratory information management systems (LIMS)
Test substance receipt, storage, characterization, and disposal
Equipment qualification and calibration records
Study Director oversight and Quality Assurance Unit (QAU) independence
Final reports with formal QA statements confirming GLP compliance

Facility design matters, too. Separate areas for test system housing, substance storage, and analytical work help prevent cross-contamination and mix-ups. Non-clinical safety studies that fail GLP requirements can’t be submitted as part of a regulatory dossier, which is why getting laboratory practice right upfront is worth the investment.

Good Manufacturing Practice (GMP)

GMP governs the safe manufacturing, packaging, and processing of pharmaceutical products. It ensures drugs reach patients with the strength, purity, and quality sponsors claim for them. Without appropriate clearances, a drug can’t be brought to market.

In the United States, FDA 21 CFR Parts 210 and 211 set the core GMP requirements for finished pharmaceuticals. In Europe, EudraLex Volume 4 is the governing framework, and the revised EMA Annex 1 has intensified scrutiny of cleanroom controls and contamination control strategies for sterile manufacturing.

Auditors concentrate on:

Batch records and master manufacturing records
Cleanroom classifications, environmental monitoring, and contamination prevention
Equipment qualification (IQ, OQ, PQ), calibration, and maintenance
Supplier qualification and raw material testing
Deviation handling, change control, and CAPA effectiveness
Training records under 21 CFR 211.25(a)

Enforcement is intensifying. In 2025, the FDA issued 303 warning letters to drug and biologics manufacturers, a 59% increase on the prior fiscal year, with recurring deficiencies in component testing, quality unit oversight, and process validation. The Qualified Person (QP) bears ultimate responsibility for certifying each batch meets specifications before release.

How the three frameworks fit together

GCP, GLP, and GMP aren’t siloed. They form a sequential, interdependent continuum across the full drug development lifecycle. GLP non-clinical studies define the safety profile of a candidate molecule.

That evidence shapes the design of GCP clinical trials, which test safety and efficacy in humans using GMP-manufactured investigational products. Post-approval, GMP sustains product quality while pharmacovigilance monitors ongoing safety.

Each phase feeds the next. GLP findings shape trial protocols. GCP results inform commercial manufacturing specifications. GMP compliance sustains marketed product quality and feeds real-world safety data back to regulators.

This is why a marketing authorization application is evaluated against all three frameworks collectively. Across all three, the same quality tools apply: SOPs that codify processes, audit trails that document every action, change control that manages modifications, and the ALCOA+ principles (Attributable, Legible, Contemporaneous, Original, Accurate, Complete, Consistent, Enduring, and Available) that underpin data integrity.

Preparing for a GxP inspection

Inspection readiness isn’t a sprint the week before an inspector arrives. It’s a continuous posture. A few practical steps make the biggest difference:

Review your audit history. Past audit findings and prior FDA or EMA inspection outcomes are the best starting point for predicting what comes next.
Audit your SOPs against practice. Floor-level shortcuts drift from written procedures. Regular internal audits catch that drift.
Run regular mock audits. Cross-functional teams simulating an external inspection consistently surface gaps before they become findings.
Keep documentation inspection-ready every day. TMFs, batch records, training records, and deviation logs should be current, complete, and retrievable on demand.
Train for the conversation. FDA’s 2025 inspections frequently cited training deficiencies under 21 CFR 211.25(a). Personnel should be prepared to answer auditor questions accurately and confidently.
Close CAPAs and verify effectiveness. Open CAPAs that were never verified are a red flag for any auditor reviewing your system.

Final thoughts

GCP, GLP, and GMP are demanding, but they’re also what give patients and regulators confidence in the medicines that reach the market. Understanding how each one works, and how they fit together, turns compliance from a reactive scramble into a steady operational discipline.

The teams that treat GxP as a way of operating, rather than a performance staged for auditors, are the ones that move faster, enter markets with confidence, and spend less time fighting fires.

Working through a GxP challenge? Apotech’s global team supports pharmaceutical, biotech, MedTech, and in vitro diagnostic companies across regulatory strategy through comprehensive GxP audits.

Our GxP audits include the following services: