GxP compliance is not a single regulation you either pass or fail. “GxP” is shorthand for a family of “Good … Practice” frameworks — Good Laboratory Practice (GLP), Good Clinical Practice (GCP), Good Manufacturing Practice (GMP), Good Distribution Practice (GDP), and a few narrower siblings — that each govern a different stage of getting a regulated product (usually a drug, biologic, or medical device) from discovery to a patient. The lowercase “x” is a placeholder: swap in the letter for whichever stage of work you actually do, and that is the specific rulebook that applies to you.
The question most people arrive at this page with is not “what does GxP mean” in the abstract — it is which one applies to my work, and does it apply at all. That scope question is what this page answers. For the detailed requirements of a specific framework, see the dedicated guides linked throughout — this page deliberately stays at the orientation level and does not re-cover GCP or GMP in depth.
What the “x” in GxP Stands For
Each GxP framework is a distinct, separately codified set of regulations or guidelines, not a variation on one master document. The most common members of the family:
- GLP – Good Laboratory Practice. Governs the conduct and documentation of nonclinical (preclinical) safety and toxicology studies used to support a regulatory submission. In the US, codified at 21 CFR Part 58.
- GCP – Good Clinical Practice. Governs the design, conduct, recording, and reporting of trials that involve human subjects. Internationally harmonized through ICH E6; see CASRAI’s dedicated GCP guide for the full requirements.
- GMP – Good Manufacturing Practice. Governs the manufacturing, testing, and release of drugs, biologics, and active pharmaceutical ingredients (APIs), including facility, equipment, and batch-record controls. See CASRAI’s dedicated GMP guide; the API-specific version of this guidance is ICH Q7.
- GDP – Good Distribution Practice. Governs the storage, transport, and supply-chain handling of a product after it is manufactured and before it reaches the end user – temperature control, chain-of-custody, and wholesale-distribution documentation.
- GVP – Good Pharmacovigilance Practice. Governs post-market adverse-event monitoring and safety reporting once a product is on the market.
- GAMP – Good Automated Manufacturing Practice. Not a regulation but an industry framework (published by ISPE) for validating the computerized systems used across all of the above. CASRAI covers this in depth in Computer System Validation (CSV): GAMP 5, IQ/OQ/PQ, and 21 CFR Part 11.
Regulators and industry use “GxP” as an umbrella term precisely because a real development program touches several of these in sequence: a compound moves from GLP toxicology studies, into GCP-governed human trials, toward GMP-controlled manufacturing, and finally through GDP-governed distribution and GVP-governed post-market surveillance.
What Every GxP Framework Has in Common
Despite governing different activities, every GxP framework is built from the same handful of underlying expectations. If you understand these, you understand the shared logic of GxP even before you look up the specific rule for your situation:
- Documented procedures. Work is performed against a written, approved standard operating procedure (SOP), not from memory or informal habit. If it isn’t written down, in a GxP context it generally didn’t happen.
- Trained, qualified personnel. Anyone performing GxP-covered work has documented training or qualification specific to that task, kept on file and current.
- Contemporaneous, attributable records. Data is recorded at the time the work is done, attributable to a specific person, and never reconstructed afterward. This is the core of the ALCOA+ data integrity principles (Attributable, Legible, Contemporaneous, Original, Accurate, plus Complete, Consistent, Enduring, Available), which originated in GMP guidance but are now applied across every GxP domain, including GCP-governed clinical data and GLP-governed study records.
- Traceability and audit trail. Every result can be traced back to the raw data, the instrument, the reagent lot, and the person who generated it – on paper via source documentation, or electronically via a validated system with a tamper-evident audit trail under 21 CFR Part 11.
- Change control and deviation management. Planned changes go through a documented review and approval step before they take effect; unplanned deviations from procedure are logged, investigated, and, where the root cause is systemic, followed by a corrective and preventive action (CAPA).
- Independent quality oversight. A quality unit or quality assurance function, organizationally separate from the people doing the work, reviews and releases the records – the same separation-of-duties logic that underlies a formal quality management system (QMS).
This is also why GxP and QMS certification standards overlap without being identical. ISO 13485 (medical device QMS) and ISO 17025 (testing and calibration laboratory competence) are voluntary, certifiable standards audited by an accredited third party. GxP regulations like GLP, GCP, and GMP are legal requirements enforced by a regulator (FDA, EMA, and equivalents) through inspection, with no certificate issued – a facility either passes inspection or receives findings. In practice, many organizations run one quality system that is designed to satisfy both at once.
Which GxP Framework Applies to Which Work
| Framework | Governs | Typical setting | Key US regulation / guidance |
|---|---|---|---|
| GLP | Nonclinical safety and toxicology studies supporting a regulatory submission | Contract research organizations (CROs), pharma/biotech nonclinical safety departments | 21 CFR Part 58 |
| GCP | Design, conduct, and reporting of human clinical trials | Clinical trial sites, sponsors, CROs | ICH E6(R3); 21 CFR Parts 312/812 |
| GMP | Manufacturing, testing, and release of drugs, biologics, and APIs | Pharmaceutical and biotech manufacturing facilities | 21 CFR Parts 210/211; ICH Q7 (APIs) |
| GDP | Storage, transport, and distribution after manufacture | Wholesale distributors, logistics/cold-chain providers | EU GDP guidelines (2013/C 343/01); FDA drug supply chain requirements |
| GVP | Post-market safety monitoring and adverse-event reporting | Pharmacovigilance and drug safety departments | EMA GVP modules; 21 CFR Part 314.80 |
The practical takeaway: identify what stage of a product’s life your work actually falls into – discovery science, nonclinical safety testing, human trials, manufacturing, distribution, or post-market monitoring – and that tells you which framework is relevant. Most individual researchers and labs will only ever need one of these, not all five.
Where Academic and Basic Research Actually Sits
This is the scope question that trips up the most labs. Ordinary academic and basic research is not GxP-regulated. Exploratory bench science, hypothesis-driven investigation, method development, and most sponsored research funded to generate knowledge rather than a regulatory filing all sit outside GLP, GCP, and GMP entirely. A university lab studying a novel compound’s mechanism of action, publishing in a peer-reviewed journal, does not need a GLP-compliant quality system for that work.
The trigger that pulls a project into GxP scope is not the type of institution doing the work – it is what the data is going to be used for:
- A toxicology study intended to support an Investigational New Drug (IND) application must be conducted under GLP, regardless of whether it happens at a university, a CRO, or an industry lab.
- A trial administering an investigational drug or device to human participants, where the results are intended to support a marketing application, must follow GCP – this is also why GCP requirements often apply to academic medical centers running sponsor-backed or investigator-initiated trials, discussed in CASRAI’s GCP guide.
- Producing drug product, biologic, or device components that will be administered to humans or used in a regulatory submission pulls that manufacturing step under GMP, even at small scale (see CASRAI’s GMP guide on phase-appropriate expectations for early-stage academic and translational programs).
In short: it is the regulatory intent of the data – will this go into a submission to FDA, EMA, or an equivalent authority – that determines whether GxP applies, not the researcher’s job title or funding source. Many academic translational and core-facility programs deliberately build a GxP-ready quality system in anticipation of that transition, so that data generated earlier in a project does not have to be repeated once a submission becomes the goal.
How GxP Compliance Gets Implemented in Practice
Regardless of which specific framework applies, moving a lab or program into GxP compliance generally involves the same building blocks:
- A documented quality management system (QMS) defining roles, SOPs, training requirements, and how deviations and CAPAs are handled.
- Validated computerized systems where electronic records or signatures are used – laboratory information management systems (LIMS), electronic lab notebooks, and instrument software all need documented validation (IQ/OQ/PQ) and 21 CFR Part 11-compliant audit trails. See CASRAI’s guide on Computer System Validation (CSV) for the full process, and the related guide on electronic lab notebook validation under GxP specifically.
- Facility and equipment qualification – calibrated instruments, controlled environments where required, and documented maintenance records.
- Personnel training records that can be produced on demand during an inspection or audit, tied to the specific SOP version each person was trained on.
- An internal audit or self-inspection program that finds and corrects gaps before an external regulatory inspection does.
Because GLP, GCP, and GMP each have their own detailed requirements beyond these shared basics, the right next step from here is the framework-specific guide for the work you actually do, not a single generic checklist.
Frequently Asked Questions
Does GxP refer to one specific regulation?
No. GxP is an umbrella term for a family of separately codified frameworks – GLP, GCP, GMP, GDP, GVP, and related guidelines – each covering a different stage of regulated product development. There is no single “GxP regulation” to look up; you need the specific framework that matches your work.
Is GxP the same thing as ISO certification?
No. GxP frameworks are regulatory requirements enforced by an authority like FDA or EMA through inspection. ISO standards such as ISO 13485 or ISO 17025 are voluntary, certifiable quality standards audited by an accredited third party. Many organizations design one quality system that satisfies both simultaneously.
Does a university research lab need to be GxP compliant?
Only if the data it generates is intended to support a regulatory submission (an IND, a marketing application, or similar). Ordinary hypothesis-driven academic research, published in the peer-reviewed literature, is outside GLP, GCP, and GMP scope. Translational and core-facility labs anticipating an eventual submission often adopt GxP-style documentation practices ahead of time.
What is the difference between GLP and GCP?
GLP governs nonclinical (preclinical, non-human) safety and toxicology studies; GCP governs trials conducted in human subjects. A compound typically moves through GLP-governed testing first, and only proceeds to GCP-governed human trials once that nonclinical safety data supports it.
Where does GDP fit into GxP?
GDP (Good Distribution Practice) covers what happens after a product is manufactured – storage, transport, and supply-chain handling – before it reaches a clinical site, pharmacy, or patient. It sits downstream of GMP in the product lifecycle.
