A photography of Confident business male and female team discussing a project, A male siting on chair have laptop in front

What is a GMP Audit? A Complete Guide For Regulated Industries

April 23, 2026

If your time is short

A GMP audit is a systematic review of your operations to confirm you’re meeting Good Manufacturing Practice (GMP) requirements.
It typically assesses all or any of five quality subsystems: production, materials, facilities and equipment, packaging and labeling, and laboratory controls.
Audits can be internal, external (regulatory or third-party), or supplier-focused. Each follows the same arc: plan, open, collect evidence, document, close.
Preparation makes or breaks the experience. Review past findings, line up your SOPs, run a pre-audit check, and make sure documentation is easy to retrieve.
The most common mistakes are operational: missing documentation, unprepared staff, and the wrong equipment or the wrong people on site.
The strongest organizations treat GMP as a daily discipline, not a performance staged for auditors.

The GMP audit is among the most critical checks on your company’s ability to manufacture and distribute a regulated product, from pharmaceuticals to medical devices to food. A good audit gives you two things at once: a big-picture view of how well you’re complying with GMP regulations, and a fine-grained look at where you need to improve.

Preparing for one can feel nerve-wracking. The audit itself can feel intimidating. But if you know what to expect and set yourself up the right way, the whole process goes much more smoothly. This guide breaks it down.

What is a GMP audit?

A GMP audit is a process in which an external or internal individual or team verifies that a manufacturer is following its documented Good Manufacturing Practices. Think of it like a financial audit, except the auditors are inspecting production processes for adherence to quality controls rather than reviewing financial records. The ultimate goal is simple: ensure that products are safe, consistent, and fit for purpose. Same product, same quality, every time.

Audits can be conducted by private companies, third-party certification bodies, or government regulators like the FDA, EMA, or WHO. Either way, the scope is typically built around the five core subsystems of a GMP quality system, all or any of which may be assessed during an audit:

Production
Materials
Facilities and equipment
Packaging and labeling
Laboratory controls

What’s involved in the GMP audit process?

At a high level, a typical GMP audit follows the same arc regardless of the auditor or the industry:

The auditor plans the audit, defining scope, objectives, and criteria.
The audit team and facility hold an opening meeting to confirm logistics and expectations.
The auditor collects facts and evidence: reviewing documents and records, interviewing personnel, making firsthand observations.
The auditor documents relevant information from each area they investigate.
At the end of each phase, the auditor prepares a written report capturing findings, evidence, and non-conformances.

The first phase is about gathering information. Auditors collect data on site or remotely, interviewing operators, managers, and QA personnel, and reviewing records like batch record sheets, checklists, and deviation logs. This initial assessment shapes the more detailed audit plan that follows.

The second phase is the substance of the audit. Auditors observe operations during a facility walkthrough, collect supporting documentation, conduct interviews, review batch data, and evaluate evidence related to critical control points like stability testing and environmental monitoring.

Anything observed on the floor is cross-referenced against what’s documented on paper, and any gap between the two becomes a finding. For sterile manufacturing, the revised EMA Annex 1 requirements have raised the bar on cleanroom controls and contamination strategies.

The resulting audit report should be clear, concise, and easy to understand. It should include a summary of findings, a list of non-conformances classified by severity, supporting evidence, and recommendations for corrective action.

How to prepare for a GMP audit

Preparation makes or breaks the experience. A few concrete steps make the biggest difference:

Review past audit and FDA inspection results, including activities outsourced to contract manufacturers and suppliers.
Review the SOPs relevant to the audit scope so you can see where written procedures meet actual practice.
Run a pre-audit check with the team members who’ll be involved on the day. Confirm everyone knows their role, and test any equipment auditors may need to see.
Set up a specific agenda with timelines, personnel, and the documents or records you’ll need to retrieve.
Make sure every document subject to assessment is easy to locate. Nothing undermines confidence faster than watching someone hunt for a batch record.
Maintain standing checklists for GMP-critical activities like equipment maintenance, cleaning schedules, and training records. That keeps you audit-ready rather than audit-panicked.

It also helps to make sure everyone in your organization knows the regulatory landscape they’re operating in. Key references include:

21 CFR Part 210: Current Good Manufacturing Practice in manufacturing, processing, packing, or holding of drugs
21 CFR Part 211: Current Good Manufacturing Practice for finished pharmaceuticals
21 CFR Part 212: Current Good Manufacturing Practice for positron emission tomography drugs
21 CFR Part 600: Biological products, general
21 CFR Part 820: Quality system regulation for medical devices
EudraLex Volume 4: EU GMP guidelines for pharmaceuticals

Hosting the audit

When auditors arrive, a few practical details make the day easier for everyone:

Have the right documentation ready. Every official document should be in order and presentable on request. If anything needs updating before the auditor arrives, handle it early.
Make sure a point person is available throughout. Auditors shouldn’t have to wait or chase someone down, and whoever’s hosting needs enough authority to answer questions or coordinate access.
Stock a dedicated audit room. Your “war room” should include the organizational chart, facility layout, Quality System Manual, relevant SOPs, staff training records, and any documentation likely to come up. Having everything in one place reduces stress on both sides.

Common mistakes

Audits go sideways for a handful of repeated reasons:

Not being prepared. A nerve-wracking audit usually points to a facility that hadn’t done the groundwork.
Not understanding the GMP regulations or the audit process itself.
Documentation that’s incomplete, inconsistent with observed practice, or hard to retrieve.
The wrong people in the room, whether that’s staff who weren’t briefed or management who isn’t engaged.
Equipment that isn’t calibrated, tested, or available when auditors want to see it in operation.

Training deficiencies under 21 CFR 211.25(a) continue to appear with notable frequency across FDA inspections. Competency has to be documented, verifiable, and current, not implied.

Best practices

The strongest GMP audit performers do a few things consistently:

Make sure staff know an audit is coming and understand what’s expected of them.
Invest in training and audit-response preparation before the day arrives.
Schedule a team meeting before any external assessment so everyone is aligned on roles, escalation, and communication.
Brief staff on what auditors look for, and how to answer questions accurately without over-explaining.
Run regular mock audits to surface issues before they become findings.
Follow through on CAPAs and verify effectiveness, not just closure.

Final thoughts

A GMP audit is a core part of any mature quality program. Done well, it gives customers and regulators confidence that your products meet the quality, safety, and regulatory standards they’re supposed to. Done without preparation, it becomes a scramble.

The good news: an audit doesn’t have to be nerve-wracking. Follow the practices above, prepare thoughtfully, and treat quality as a daily discipline rather than an occasional performance. The audit will reflect the work you’ve already done.

Working through a GMP challenge? Apotech’s global team supports pharmaceutical, biotech, MedTech, and in vitro diagnostic companies across regulatory strategy through comprehensive GxP audits.

Our GxP audits include the following services: