A pass box looks like a simple enclosure with two interlocked doors, but whether it belongs in a Grade A/B transfer path depends on what the material is, what condition it must arrive in, and what the contamination control strategy (CCS) around it is designed to prevent. Choosing the box before answering those questions tends to produce equipment that satisfies a specification sheet without closing the actual transfer risk. The more useful starting point is the transfer itself: what crosses the boundary, in what state, and what has to be true on the far side before the critical zone is considered protected.

Transfer Risks to Capture in the CCS Before Equipment Selection

Every material transfer between grades carries a set of risks that exist independently of which pass box is eventually installed. The material has a status when it enters the boundary — it may be unprocessed, partially treated, sterile, or awaiting a decontamination step — and that status determines what the transfer sequence must still accomplish before the material is acceptable on the destination side. If the material already carries the required bioburden reduction when it reaches the boundary, the transfer step’s job is to preserve that state. If it does not, the transfer step itself has to deliver part of the reduction, which changes what the equipment inside the boundary must do rather than simply enable.

The grade difference between origin and destination is the second risk driver. Where the two sides sit close together in cleanliness classification, the transfer’s job is mainly to prevent cross-contamination and maintain pressure relationships. Where the difference is larger, the transfer sequence has to actively establish a barrier against the lower grade re-entering the higher one, and the margin for procedural error narrows. This is where Anexo 1 de las PCF de la UE becomes directly relevant: its scope covers contamination control strategy, Grade A/B airlock interlocking, and controlled material transfer or disinfection within EU sterile-manufacturing operations, and a CCS built around those expectations treats the transfer boundary as part of the controlled environment rather than a separate utility item.

Outer-surface treatment is a distinct risk that is easy to assume is already solved. A material can be sterile internally while its outer wrapping or container surface carries contamination from the lower-grade side; the transfer step has to address that surface condition specifically, and what “addressed” means depends on the material’s construction and the destination grade’s tolerance for residual bioburden on surfaces that will later contact the critical zone.

Door sequence and the point at which critical-zone protection begins are related but separate. The sequence defines how the two doors are permitted to operate relative to each other; the protection point defines where, in that sequence, the transfer has delivered what the critical zone needs. A project team that defines the door sequence without also fixing the protection point risks building an interlock that is mechanically correct but does not align with when contamination control actually needs to be in force. These four risk elements — material status, grade boundary, surface treatment, and the sequence-to-protection relationship — are what the CCS needs to capture before any equipment family is selected, because they determine what the equipment must do, not just how it must be built.

Mapping Material Status, Grade Boundaries, and Door Sequence

Once the risk elements are identified, they need to be arranged as a flow rather than a list, because each one only means something in relation to where it sits in the sequence. A transfer-flow map puts material status, the origin and destination grades, the outer-surface treatment step, the door sequence, and the start of critical-zone protection in the order the material actually moves through them, so that a reviewer can see where one condition depends on another instead of treating them as independent specifications.

The value of mapping rather than listing shows up when conditions interact. A material with a favorable status (already decontaminated, stable, inert packaging) crossing a modest grade boundary may need little more than a controlled door sequence and a defined hold period. A material with an unfavorable status — moisture-sensitive, not yet surface-treated, or arriving in packaging that was handled in a lower-grade space — crossing a larger grade boundary needs the map to show where the surface treatment occurs relative to the door sequence, because treating it too late in the sequence leaves a window where untreated material sits inside a boundary that is supposed to already be protecting the critical zone.

The door sequence itself is not a fixed property of the pass box; it is a project decision that the map has to justify. Where the transfer only needs to prevent two doors opening simultaneously, a simple mechanical or electrical interlock reflects the sequence. Where the transfer also needs a treatment or hold step to complete before the inner door can open, the sequence has to encode that dependency, and the map is what shows the design team why the interlock needs that additional condition rather than a simpler one.

The start of critical-zone protection is the field in the map that ties the others together. It marks the point past which the destination side’s contamination control assumptions apply to the material. If that point is placed too early in the flow — before surface treatment is actually complete — the destination grade is being asked to tolerate a risk it was not designed for. If it is placed appropriately late, the map shows that every preceding step (status, grade crossing, surface treatment, door sequence) has to be completed before that point is reached, which is what makes the map a design input rather than a documentation exercise.

Selecting Static, Dynamic, or VHP Functions for the Intended Transfer

With the transfer flow mapped, the function of the pass box becomes a question of which category can deliver what the map requires at the point where critical-zone protection begins. Static pass boxes, offered as static pass box / transfer hatches, control the opening between two spaces mechanically — typically through a door interlock that prevents both sides from being open together — without themselves providing an air-handling or decontamination function. Where the transfer-flow map shows that material status and surface treatment are already resolved before the material reaches the boundary, and the grade difference is one a simple interlocked opening can support, a static function may be sufficient to preserve what has already been achieved.

Cajas de paso dinámicas add a controlled airflow element to the enclosure, which becomes relevant where the map shows that pressure cascade or particulate control needs to be actively maintained during the transfer itself, not just assumed from the surrounding rooms. The distinction matters because a dynamic function is answering a different question than a static one: a static function asks “can the two sides be prevented from connecting directly,” while a dynamic function asks “can the space between them be actively controlled while material is present.” A transfer-flow map that shows no active control requirement between the door operations does not, on its own, justify the added complexity of a dynamic function; a map that shows the boundary needs to maintain its own controlled condition during the hold period points toward one.

VHP pass boxes, offered as vaporized hydrogen peroxide (VHP) pass box / VHP chamber, add a decontamination cycle to the transfer step itself. This function becomes relevant specifically where the map shows that material status or outer-surface treatment is not resolved before the material reaches the boundary — where the transfer step itself has to deliver a reduction in bioburden rather than simply preserve an already-acceptable state. Selecting a VHP function because the grade boundary is large, without confirming that the map actually requires an in-transfer decontamination step, risks specifying capability the transfer does not need; selecting a static or dynamic function when the map shows unresolved surface contamination risks the opposite error.

The three categories are not interchangeable, and the map is what shows which one matches the transfer rather than the grade boundary alone. A project with a large grade difference but fully pre-treated material may still be served by a dynamic function; a project with a modest grade difference but unresolved surface status may still require a VHP function. The function selection follows from what the map shows is still needed at the boundary, not from the grade numbers by themselves.

Defining Interlocks, Disinfection Steps, Loads, Alarms, and Recovery

Selecting a function category establishes what kind of pass box is appropriate; it does not yet establish how that pass box is required to behave in operation, and that behavior has to be written into the user requirement rather than assumed from the equipment’s general capability. Interlock behavior is the first element, and it has to trace directly back to the door sequence established in the transfer-flow map — not just “prevent both doors opening together” in general terms, but the specific sequence and any conditional holds the map identified as necessary before the inner door is permitted to open.

Load arrangement is a project-specific operating condition that affects how the transfer actually performs in use. How material is arranged inside the chamber affects airflow distribution in a dynamic function and affects vapor distribution and contact in a VHP function; a transfer plan that specifies the function correctly but leaves load arrangement undefined risks a transfer that works in isolated tests but not under the loading conditions the facility actually uses.

Cleaning or disinfection steps need explicit definition because, as the practitioner view on transfer hatches makes clear, a pass-through hatch controls an opening between spaces but does not, by itself, establish sterilization or acceptable transfer disinfection. This matters most where the function selected is static or dynamic rather than VHP: the enclosure may create a controlled boundary, but any disinfection the transfer relies on has to be defined as a procedural step the user requirement specifies, not inferred from the equipment’s presence.

Hold conditions define the boundary at which the transfer is permitted to proceed versus paused, and they need a project-specific basis rather than a generic rule, because what triggers a hold in one transfer (an incomplete treatment cycle, an unconfirmed door position) may not be relevant in another. Alarm response has to connect to the same transfer sequence: an alarm during a Ciclo VHP calls for a different response than an alarm during a simple door-interlock fault, and the user requirement should specify which response applies to which condition rather than a single generic alarm behavior. Recovery evidence is what the project carries forward into qualification — documentation that, after an alarm or hold condition, the transfer resumed or was reinitiated in a way that is traceable. EudraLex Volume 4 Annex 15 supports URS and DQ traceability across the validation lifecycle, meaning each of these elements, once defined in the user requirement, needs to be traceable through to the qualification evidence the project produces — the requirement does not stand alone as a paper exercise.

Connecting the Pass Box to Adjacent-Room and Operator Controls

A pass box does not function as an isolated unit; it sits at the junction of two rooms and under the control of an operator sequence, and the transfer’s actual contamination control depends on how those three elements relate, not on the pass box’s specification in isolation. The pass-through opening itself is only ever as controlled as the interlock and procedural steps that govern it — repeating the earlier point, controlling the opening does not by itself establish sterilization or acceptable transfer disinfection, which means the opening’s control has to be evaluated together with whatever disinfection or treatment step the transfer relies on, not as a substitute for it.

The origin and destination rooms contribute their own contamination control independent of the pass box, and the CCS has to capture how that room-level control relates to the grade boundary the pass box sits across. Where the rooms on both sides maintain consistent pressure cascades and the pass box’s interlock is reliable, the boundary functions as intended. Where either room’s control assumptions change — a maintenance condition, a different operating mode — the pass box’s function needs to be re-evaluated against the room conditions actually present, because the equipment’s own capability has not changed but the environment it is protecting against has. This is the basis for qualifying the equipment boundary together with the surrounding room controls rather than treating the pass box as a standalone qualified item.

The operator transfer sequence is where outer-surface treatment and door sequence actually get executed, and it is only as reliable as the training and procedure behind it. A sequence that exists correctly on paper but is not consistently followed at the point of use reintroduces the same risk the equipment was selected to close. Linking the sequence to the point where critical-zone protection begins means the operator procedure has to make that point explicit — not just “follow the steps,” but “the critical zone is not protected until this step is complete,” so the procedure carries the same logic the transfer-flow map established.

When a facility is working through which pass-box function and interface arrangement fits a specific transfer, the project information assembled in the flow map and user requirement — material status, grade boundaries, door sequence, interlock and disinfection requirements — is what a supplier such as YOUTH needs in order to review the configuration against the equipment families available, including static, dynamic, and VHP pass box options, rather than proposing a function based on the grade boundary alone.

Qualification Evidence That Closes the Grade A/B Transfer Path

The transfer-flow map, the user requirement, and the selected function only close the Grade A/B transfer path if each element can be traced forward into qualification evidence, because a requirement that cannot be verified does not actually establish that the transfer performs as intended. The transfer-flow map’s content — material status, origin and destination grades, outer-surface treatment, door sequence, and the start of critical-zone protection — defines the path that needs control in the first place; without it, there is no basis for judging whether a later qualification result is actually relevant to the risk the transfer presents.

The user requirement’s elements — interlock behavior, load arrangement, cleaning or disinfection steps, hold conditions, alarm response, and recovery evidence — convert that mapped path into testable requirements. Design qualification then has to show that the selected pass-box function, its equipment boundary, and its relationship to the facility CCS actually address what the user requirement specified, which is where a mismatch between a selected function and the transfer’s real requirement (for example, a static function where unresolved surface treatment needed a VHP cycle) would surface, if the traceability is actually followed through rather than assumed.

Project qualification evidence is what finally closes the chain: evidence for the transfer path itself, the surrounding room controls, and recovery after any hold or alarm condition. EudraLex Annex 15 supports URS-to-DQ traceability across this lifecycle, but it does not fix what the qualification stages or acceptance criteria must be for a given project — those remain dependent on the specific transfer, the grades involved, and the CCS the facility has built around them. A project team should treat this as the open question that qualification planning has to answer directly: what acceptance criteria apply to this transfer, at this grade boundary, under this CCS, is not something a general reference can supply, and confirming it is what allows the evidence chain — from map to requirement to design to qualification — to actually demonstrate that the Grade A/B transfer path is controlled rather than merely documented.

Preguntas frecuentes

Q: Can a pass box alone make a Grade A/B transfer acceptable?
A: No. A pass-through hatch controls the opening between spaces, but it does not by itself establish sterilization or acceptable transfer disinfection. Define the outer-surface treatment, door sequence, cleaning or disinfection steps, and the point where critical-zone protection begins, then carry those requirements into qualification.

Q: Should the team choose a static, dynamic, or VHP function before mapping the transfer?
A: Start with the transfer flow, then select the function that supports it. Record the material status, origin and destination grades, load arrangement, outer-surface treatment, intended door sequence, and start of critical-zone protection; link the selected function and equipment boundary to the facility contamination control strategy.

Q: What should happen if an alarm or hold condition interrupts the transfer?
A: The user requirement should define when the transfer is held, the required alarm response, and the evidence needed before recovery. Qualification should trace those rules to the intended door sequence and grade-boundary transfer so that restart follows project-defined evidence.

Q: Is qualifying the pass box by itself enough?
A: No. The evidence chain should cover the transfer path, pass-box equipment boundary, surrounding room controls, and operator sequence together. Trace this from the transfer-flow map through the user requirement and design qualification into project-specific qualification evidence; acceptance criteria remain project-dependent.

Q: Does EU GMP Annex 1 provide a universal VHP cycle or biosafety transfer rule?
A: No. It supports contamination-control planning for Grade A/B transfers, but it does not supply a universal biosafety rule or VHP cycle recipe. Define project-specific cleaning or disinfection steps, loads, hold conditions, acceptance criteria, and recovery evidence, then verify them through qualification.