EU GMP Annex 1: The 2022 Sterile Manufacturing Revision Explained

EudraLex Volume 4, Annex 1, "Manufacture of Sterile Medicinal Products," is the EU GMP annex governing how sterile drug products, biologics, and investigational medicinal products are manufactured. The current version is a substantial 2022 rewrite of the previous 2008/2017-vintage annex — the first ground-up revision in over a decade, jointly developed by the European Commission (PIC/S and WHO participated as co-authors, which is why the same text has been adopted well beyond the EU). The revised Principles and most annex provisions became applicable on 25 August 2023, with a small number of specific provisions — most notably Point 8.123 on single-use systems — given a longer transition to 25 August 2024. Both dates have now passed: the 2022 text is simply what Annex 1 is today, not a pending change.

This guide covers the parts of the revision that actually changed day-to-day practice in a sterile facility: the contamination control strategy, the "first air" principle and what it means for Grade A air supply, the shift in how environmental monitoring is expected to run, and the new expectations around aseptic process simulation (media fill).

Why the 2022 revision mattered more than a normal annex update

Most EudraLex annex revisions tighten wording around an existing framework. Annex 1 (2022) did something broader: it replaced a document organized mostly around fixed numeric limits (a room is Grade A because its particle counts are below X) with one organized around a documented, risk-based strategy that a facility must build, justify, and continuously maintain. The clearest sign of that shift is that the word "strategy" now appears throughout the annex, and the single biggest new requirement — the Contamination Control Strategy — did not exist as a defined, mandatory deliverable in the prior version at all.

Three other structural changes matter for context before the specifics below:

• The annex now applies its principles to any manufacturing step where microbial, particulate, or pyrogen contamination could affect a sterile product’s safety — not only the classic aseptic-fill unit operations, which pulls more of a facility’s upstream and support processes into scope than before.
• Quality risk management (see CASRAI’s ICH Q9 overview) is no longer a background reference; it is the explicit method by which a facility is expected to justify monitoring frequencies, alert/action limits, and gowning/personnel qualification intervals, all tied back into the CCS.
• Barrier technology — restricted access barrier systems (RABS) and isolators — moved from "an option worth considering" to language the annex now expects manufacturers to actively evaluate and justify not using for new facilities and major retrofits, on contamination-risk grounds.

The Contamination Control Strategy (CCS)

The CCS is the annex’s central new deliverable: a documented, facility-wide description of the planned and implemented controls for microbial, particulate, and endotoxin/pyrogen contamination, covering design, procedural, technical, and organizational controls, and how those controls are monitored and continuously assessed for effectiveness. It is not a single static document filed away after an inspection — the annex expects it to be a living reference that is reviewed and updated as a facility’s processes, equipment, or risk understanding change, and it is meant to be the thread that ties together documents that used to live independently: environmental monitoring programs, gowning qualification, cleaning and disinfection validation, utility qualification (water, gases, HVAC), personnel training, and aseptic process simulation design all now need to trace back to the same CCS and its underlying risk assessments.

In practice, this is the piece of the revision that created the most transition work for existing sterile manufacturers: most facilities already had all of the individual programs the CCS references, but few had them expressed as one coherent, cross-referenced risk document. An inspector working from the 2022 annex will typically ask to see the CCS itself first, then trace specific monitoring or qualification decisions back to what it says — a facility that can show only the individual downstream programs, without the strategy document connecting them, is missing the annex’s central expectation.

"First air" and why it drives everything about Grade A design

First air is air that has passed through the terminal HEPA filtration of a unidirectional airflow (UDAF) system without any obstruction before it reaches an exposed product, container, or closure. The annex’s core aseptic-processing principle is that critical exposed items — an open vial, a stopper in the process of being seated, an open ampoule — must always be exposed to first air, and that nothing (an operator’s hand, equipment, another component, a poorly positioned probe) should ever be allowed to interrupt that airflow between the HEPA filter and the exposed item.

The 2022 revision treats first air as a design and behavioral principle to be demonstrated, not just a background airflow assumption. That shows up in two concrete ways:

• Interventions are now explicitly risk-classified. The annex distinguishes routine interventions (planned, rehearsed, part of normal operation) from corrective interventions (unplanned, responding to a problem), and expects both categories — not just routine ones — to be defined, risk-assessed, and represented in aseptic process simulation. A corrective intervention that momentarily disrupts first air is exactly the kind of event the annex wants a facility to have already anticipated and rehearsed, not discovered for the first time during a real batch.
• Smoke studies (airflow visualization) are expected to demonstrate first air is actually achieved at the critical zone under both static and dynamic (in-operation, with personnel and equipment present) conditions, not merely that unidirectional airflow exists somewhere in the room.

Grade A air supply: a wider zone, less prescriptive velocity

The prior version of Annex 1 was widely read as tying Grade A specifically to the immediate point of fill, with a commonly cited (though not universally applied) target airflow velocity around 0.45 m/s. The 2022 revision changes both halves of that.

Scope. Grade A protection is now expected to extend across the entire critical zone of an aseptic operation — which, depending on the process, can mean the full length of an open filling line, not only the needles or fill point themselves. Facilities are expected to identify every point in a process where a sterile product or its exposed contact surfaces could be compromised, and apply Grade A (or an equivalent closed/restricted-access alternative) across that whole zone, rather than around a single fixed location.

Velocity. The annex no longer states a single hard numeric airflow velocity as a compliance target. Instead, it requires that a facility demonstrate, through qualification (typically smoke studies plus airflow visualization under dynamic conditions) that the airflow pattern actually protects the critical zone and maintains first air — a specific velocity is one input into that demonstration, not the pass/fail criterion on its own. This is a deliberate move away from a single number that had been shown, in practice, to be either too conservative or insufficient depending on the actual equipment and room geometry; a facility now has to show the airflow works for its specific configuration, not just that a meter reads a target figure.

See CASRAI’s cleanroom classification guide for how Grade A/B/C/D map onto the ISO 14644-1 classes referenced throughout the annex, and the cGMP facility requirements guide for how this fits into overall facility design and qualification.

Environmental and process monitoring: more continuous, more risk-justified

Annex 1 (2022) pushes environmental monitoring (EM) toward continuous or near-continuous coverage of Grade A zones during the full duration of critical processing, including line setup and any open-door interventions, rather than periodic spot checks alone. Key expectations:

• Grade A viable and non-viable particle monitoring is expected for the entire critical processing duration, using methods (continuous particle counters, settle plates left open for the process duration, active air sampling at defined intervals) that together give a representative picture of the whole operation, not just a snapshot.
• Grade B monitoring is expected at a frequency and method justified by the CCS and the risk that a Grade B excursion poses to the adjoining Grade A zone, rather than a fixed schedule applied uniformly across all Grade B rooms regardless of what happens in them.
• Alert and action limits are set per the facility’s own historical trend data and risk assessment, escalating through a defined investigation and CAPA process on an excursion — the annex expects trending over time to be an active quality function, not a filing exercise after each result comes back in spec.
• Rapid and alternative microbiological methods (RMM) are explicitly encouraged where they reduce the contamination risk introduced by manual sampling itself (an operator opening a settle plate is itself an intervention), and the annex sets out a validation pathway for adopting them in place of classical growth-based methods.

CASRAI’s pharmaceutical environmental monitoring guide covers the practical program design (sampling plans, limit-setting, trending) this section of Annex 1 expects to see documented.

Aseptic process simulation (media fill): what the annex now expects

Annex 1 uses the term aseptic process simulation (APS) throughout in place of the older, narrower "media fill," reflecting that the exercise is meant to simulate the entire aseptic process — not just the fill step — using a microbiological growth medium (or a placebo plus subsequent growth-medium fill, depending on process) in place of the real product.

• Initial validation: a new aseptic process, line, or shift pattern is validated with an initial series of consecutive successful APS runs before routine production begins — the long-standing industry convention (also reflected in FDA and PIC/S aseptic processing guidance) is three consecutive successful runs per process/line/shift, and Annex 1 does not relax that expectation.
• Ongoing revalidation: APS is repeated periodically once a process is in routine use, at a frequency the facility must justify through its CCS and risk assessment rather than apply as an unexamined fixed calendar rule — in practice, most facilities still land on approximately twice yearly per aseptic process/line/shift combination, which remains the widely followed industry benchmark, but Annex 1’s framing is that the interval itself needs a documented risk basis, not just a default.
• Worst-case representation: the APS design must incorporate the routine and corrective interventions identified in the facility’s own intervention risk assessment (see the first-air section above), container/closure configurations, and batch duration/fill-speed combinations that represent the greatest contamination risk actually seen in real production — a simulation that only rehearses the easy case does not satisfy the requirement.
• Investigation on any positive: a single contaminated unit in an APS run triggers a documented investigation into root cause and the potential impact on batches manufactured since the last successful simulation, tying directly back into the CCS’s contamination-control logic rather than being treated as an isolated one-off failure.

USP <797> (see CASRAI’s USP 797 guide) covers the analogous compounding-side validation for pharmacy sterile compounding rather than industrial manufacture; the two frameworks share the same underlying aseptic-technique logic but apply to different settings and are not interchangeable compliance paths.

Practical gap-check for an existing facility

For a facility already operating under the pre-2022 annex, the highest-value places to check alignment are:

1. Does a single CCS document exist that cross-references EM, gowning, cleaning/disinfection, utilities, personnel qualification, and APS design, with a defined review cycle — or do those programs still exist only as separate, unlinked documents?
2. Has the facility’s Grade A zone been re-mapped against the full critical zone of each aseptic line, rather than assumed to still match wherever it was originally drawn around the fill point?
3. Are routine and corrective interventions formally listed and risk-classified, and does the current APS protocol actually rehearse the corrective ones, not only the routine ones?
4. Is the APS revalidation interval documented as a risk-based decision tied to the CCS, rather than carried forward as an unexamined twice-a-year default with no accompanying rationale?
5. Has barrier technology (RABS/isolator) been formally evaluated and documented for the facility’s higher-risk operations, even if the ultimate decision is to continue with conventional cleanroom processing?

See CASRAI’s GMP audit checklist for a broader facility-audit framework these points slot into, and the Annex 11/Annex 15 computerised system validation guide for the parallel documentation-and-validation expectations that apply to the equipment and monitoring systems supporting a Grade A operation.

Frequently asked questions

What is a Contamination Control Strategy under EU GMP Annex 1?

A documented, facility-wide description of the design, procedural, technical, and organizational controls a sterile manufacturer has in place against microbial, particulate, and pyrogen contamination, plus how those controls are monitored and reassessed for effectiveness. It is the central new deliverable introduced by the 2022 Annex 1 revision and is meant to be the single risk-based reference that environmental monitoring, gowning, cleaning, utility qualification, and aseptic process simulation all trace back to.

What does "first air" mean in a cleanroom?

First air is air that has passed through terminal HEPA filtration without any obstruction before reaching an exposed product, container, or closure. Nothing — an operator’s hand, equipment, or a component — should interrupt that airflow path between the filter and the critical exposed item; maintaining first air at every point of the critical zone is the core aseptic-processing principle Annex 1 (2022) builds Grade A design and qualification around.

Does Annex 1 still require a 0.45 m/s airflow velocity for Grade A?

No. The 2022 revision removed the single prescriptive velocity figure as a hard pass/fail target. A facility must instead demonstrate, through qualification such as smoke studies and airflow visualization under dynamic conditions, that its actual airflow pattern protects the critical zone and maintains first air — velocity is one input into that demonstration rather than the compliance criterion on its own.

How often must aseptic process simulation (media fill) be performed?

Annex 1 requires the revalidation interval to be justified through the facility’s risk assessment and Contamination Control Strategy rather than fixed by the annex itself, but roughly twice yearly per aseptic process/line/shift combination remains the widely followed industry benchmark, on top of an initial validation series (conventionally three consecutive successful runs) before a new process, line, or shift pattern goes into routine production.

When did the 2022 Annex 1 revision take effect?

The revised Principles and the great majority of annex provisions became applicable on 25 August 2023. A small number of specific provisions — most notably Point 8.123, covering single-use systems — were given a longer transition, becoming applicable on 25 August 2024. Both dates have passed, so the 2022 text is simply the current, operative Annex 1.