Certification Scheme

The Certification Scheme can only be undertaken by a Registered EXCiPACT Certification Body employing a Registered EXCiPACT Auditor. The certification process is summarised in the following eight steps:

Step 1

Supplier selects a Certification Body from the approved list and provides them with information to issue a cost quotation, audit timetable and duration for a 3-year certification audit. This reflects the supplier’s audit scope and the organisational and operational complexity of the specified site.

Step 2

Supplier and Certification Body sign an Agreement for a 3-year certification audit of a specified site that covers its scope, audit standard(s), audit duration, audit schedule, surveillance audits and an auditor from the approved list.

Step 3

Stage 1 Audit: Auditor reviews supplier’s on-site documentation against the audit standard(s) and writes to the supplier to identify nonconformities and agrees the time needed for them to be resolved before the Stage 2 detailed on-site audit commences.

Step 4

Stage 2 Audit: Auditor undertakes a full on-site site inspection against the audit standard(s) and submits a report to include any major nonconformities to the Certification Body’s Independent Certification Board (ICB) for review and a certification decision.

Step 5

ICB makes the certification decision and issues the certificate and audit report to the supplier. EXCiPACT issues an invoice to the supplier for the Certification Fee and on receipt adds the supplier’s details to the approved list of suppliers on their website and may issue a press release.

Step 6

The certificate is valid for 3 years and surveillance audits are held at least annually to address all Scheme requirements including inter alia internal audits, actions on previous nonconformities, complaints, and QMS effectiveness. Written reports are sent to the supplier after each audit.

Step 7

A recertification audit takes place at the supplier’s request before the date of expiration of the latest certificate to confirm the continued conformity to the current EXCiPACT standard(s).

Step 8

If the supplier makes any changes to the scope of their certificate, or to the management and ownership, or becomes aware of legal proceedings with respect to product safety or legality, or of a product recall, they must immediately inform the Certification Body who will take appropriate action.

The detailed process may vary with each Registered EXCiPACT Certification Body.

Developed by excipient suppliers and users, the Scheme’s core objectives are (i) to demonstrate a safe, reliable, transparent pharmaceutical supply chain, and (ii) to reduce the audit burden, costs and resources for manufacturers, distributors and users of pharmaceutical excipients without compromising quality. The Scheme comprises the following components:

  1. GMP standard for excipients as an annex to ISO 9001:2015
  2. GDP standard for excipients as an annex to ISO 9001:2015
  3. Certifying Body competency qualification as an annex to ISO 17021-1:2015
  4. Auditor competency qualification as an annex to ISO 17021-1:2015.

Full details are published as "EXCiPACT Certification Standards for Pharmaceutical Excipient Suppliers: Good Manufacturing Practices, Good Distribution Practices – Requirements for Auditor Competency and Third Party Audit Organisations Providing Certification of the Management System 2017" available either as a pocket-size booklet from info@excipact.org or by downloading here.

This publication updates the original 2012 version by alignment with recent changes in the ISO 9001, ISO 17021 and ISO 19011 standards. To view the 2012 version please click here.

The Scheme enables all pharmaceutical excipient suppliers to demonstrate commitment to GMP and GDP in the manufacture and supply of their products. This reduces the audit burden for the suppliers and their customers without compromising quality. The Scheme is being accepted within both industry and regulators and has already been used in place of hundreds of direct customer audits. Only EXCiPACT Registered third party Certification Bodies and Registered Auditors are cited on this website. The timescale from a supplier/Certification Body first contact to certification can be six months. Lists of our Certificate Holders, Certification Bodies and their Auditors can be found on the drop down items below The Certification Scheme.

Certification Body Registration Requirements

Those organisations interested in becoming a registered EXCiPACT Certification Body should contact EXCiPACT asbl via info@excipact.org or click here in the first instance.

Auditor Registration Requirements

Interested in becoming an EXCiPACT Registered Auditor? Please refer to the EXCiPACT Auditor Registration Scheme document  then complete the Application Form  and send it together with your Curriculum Vitae, copy of IRCA Registration and Certificate or copy of your Audit Log to: EXCiPACT asbl Secretariat, Rue du Luxembourg 16B, B-1000, Brussels, Belgium, e-mail to info@excipact.org or click here