An FFU sitting on a qualification punch list raises a question that is easy to phrase and hard to close: what, exactly, does Annex 1 require the buyer to prove, and what does it leave to project-specific judgment? The answer determines whether the equipment file, the acceptance protocols, and the installed test plan actually align with what an inspector or auditor will expect to see.
Place the FFU within the facility contamination control strategy
An FFU is one contributor to room-level air cleanliness, not a self-contained compliance unit. It moves filtered air into a defined zone at a controlled rate, and its contribution to the room’s classified state depends on how it is integrated with the room envelope, the air change design, the pressure cascade, and the layout of activities beneath it. Annex 1 addresses contamination control at the facility level, and the guidance ties qualification of cleanrooms and clean-air equipment to a set of installed checks — filter integrity, airflow, pressure, visualization, and recovery — that are evaluated as installed, not as isolated component ratings.
This distinction matters because a change in where the FFU sits within the room’s design changes what “compliant” means for that specific unit. Where an FFU serves a background area with a lower classification target, the installed evidence expected of it will differ from an FFU positioned over a critical zone within a higher-grade space, because the room’s contamination control strategy assigns different risk to each location. The same hardware, installed in two different room contexts, can carry two different qualification burdens.
Buyers sometimes treat an FFU’s factory-rated performance as if it were the answer to a room-level question. It is not. A unit’s rated airflow or filter efficiency describes what the component can do under test conditions; whether that translates into the room performance the facility needs depends on ducting, return path, room leakage, adjacent equipment, and operational activity — none of which the component data addresses on its own. The practical implication is that equipment selection and room design cannot be separated in the qualification file: the FFU’s documented capability has to be read alongside the room’s classification target and the contamination control strategy that assigns the FFU its role. Fan Filter Unit selection should therefore be discussed with the room design already framed, not as a standalone purchase decision.
Translate intended use and operating states into the URS
The user requirements specification is where a facility’s contamination control strategy becomes something design qualification can actually trace. If the URS states only a nominal airflow figure and a filter grade, it gives design qualification very little to check against, because it has not captured how the unit is meant to behave across the conditions it will actually encounter.
Intended use states the need the design must answer — what zone the FFU serves, what activity happens beneath it, and what classification target that zone carries. Operating states matter because an FFU’s qualification-relevant behavior is not identical at rest, during routine operation, and during any state where surrounding conditions change; if the URS describes only one operating condition, later qualification has no basis for evaluating the others, and the gap surfaces only when someone asks why a particular state was never tested.
Interfaces and alarms deserve the same explicit treatment. An FFU rarely operates in isolation — it interacts with building management or monitoring systems, with adjacent room pressure control, and with alarm logic that signals deviation. Where the URS is silent on these interfaces, design qualification cannot confirm that the proposed system actually addresses them, because there is nothing written down to trace against.
Maintainability requirements shape the physical and procedural design in ways that are easy to overlook at the specification stage but expensive to retrofit later — how the unit is accessed, what constitutes a maintainable configuration, and what the facility expects to be able to do without disturbing the qualified state.
Finally, the URS should state what evidence is required and from which stage. Where the requirement specifies that certain evidence must come from installed testing rather than supplier data alone, that expectation needs to be written down before design qualification begins, not discovered afterward.
| URS requirement area | Qualification connection |
|---|---|
| Intended use | States the need that design qualification must trace the proposed system back to. |
| Operating states | Identifies the operating conditions that the requirement and required evidence must cover. |
| Interfaces and alarms | Identifies system interactions and alarm requirements to trace during design qualification. |
| Maintainability | States the maintainability expectation that the proposed design must address. |
| Required evidence | Defines the evidence expected from the selected acceptance and qualification stages. |
Trace design choices and interfaces during design qualification
Design qualification exists to confirm that what has been specified actually gets designed — that each requirement in the URS has a corresponding design decision, and that the decision can be shown to satisfy the requirement. For an FFU, this means tracing the unit’s placement, its airflow arrangement, its control interface, and its alarm logic back to the intended use and operating states the URS defined, rather than accepting the equipment as compliant because it appears in the room layout.
Where the URS specified an operating state that the design does not visibly address — a mode described as a requirement but with no corresponding control logic or interface documented — design qualification is the stage at which that gap should be caught before it propagates into acceptance testing and installed qualification, where it becomes considerably harder and more disruptive to remediate.
Interfaces deserve particular attention at this stage because they involve more than the FFU itself. A monitoring interface, an alarm signal, or a shared control platform links the FFU’s design to systems outside the equipment’s own scope, and design qualification has to confirm that the interface as designed actually delivers what the URS required of it — not merely that a connection exists on paper.
Where a project involves several FFUs serving different zones with different intended uses, design qualification should confirm that each unit’s design corresponds to its own zone’s requirements rather than assuming a uniform specification across the room. A design that satisfies one zone’s operating states does not automatically satisfy another’s, and treating them as interchangeable at this stage risks carrying an unresolved gap into acceptance and installed testing, where the traceability chain becomes far more difficult to reconstruct.
Distinguish factory and site acceptance from IQ, OQ, and PQ
Confusing acceptance testing with qualification is a frequent source of project friction, not because the two are conceptually similar but because they can look similar on a schedule. Factory and site acceptance testing confirm that the equipment, as built and as delivered, meets the specification agreed with the supplier — supplier performance data supports the buyer’s equipment selection, but it does not stand in for evidence generated after the unit is installed in its actual room context. Installation, operational, and performance qualification are the stages that generate that installed evidence, per EudraLex Annex 15’s framework for qualification and validation, which ties IQ, OQ, and PQ evidence back to URS and design qualification traceability.
The distinction changes what a buyer should expect to receive at each stage and when. Where a project treats factory acceptance results as a substitute for operational qualification, the qualification file will show a gap that an inspector is positioned to identify — the equipment was tested, but not tested as installed, in its own room, alongside the systems it interfaces with. Annex 15 keeps these stages distinct precisely because equipment behavior can change between the factory floor and the finished room: ducting, pressure relationships, adjacent activity, and room leakage are all variables that acceptance testing cannot evaluate because they do not yet exist at that stage.
This does not diminish the value of supplier acceptance data. It establishes that the equipment itself, before installation, performs to its documented specification — a necessary condition, but not a sufficient one, for the installed qualification evidence the project ultimately needs. The exact tests and acceptance criteria for IQ, OQ, and PQ are defined by project-specific, approved protocols, which is why the sequence of evidence — selection data, acceptance data, installed qualification data — has to be planned rather than assumed.
| Evidence stage | Supported role | Boundary to retain |
|---|---|---|
| Supplier performance data | Supports equipment selection. | It does not replace installed evidence for the complete room and equipment arrangement. |
| Factory and site acceptance | Provides the project’s factory and site acceptance evidence. | Keep these stages distinct from IQ, OQ, and PQ; approved project protocols define the actual tests and criteria. |
| IQ, OQ, and PQ | Provides project qualification evidence. | The exact stages, tests, and acceptance criteria depend on project circumstances and approved protocols. |
| Installed room and equipment arrangement | Provides evidence for the complete installed arrangement. | Supplier performance data alone does not establish this installed evidence. |
Plan installed filter integrity, airflow, pressure, visualization, and recovery checks
These checks are where the facility’s contamination control strategy meets physical evidence. Filter integrity testing confirms that the installed filter medium and its seal perform as expected once installed in the actual housing, in the actual room — a check that supplier-stage filter data cannot substitute for, because installation itself can introduce conditions the factory test did not encounter. Airflow testing confirms that the unit delivers air at the rate and pattern the design assumed, evaluated in the installed configuration rather than on a test bench.
Pressure testing addresses the room’s relationship to adjacent spaces, which is a room-level property that depends on the FFU’s contribution alongside the envelope, doors, and other air-handling equipment — a reminder that an FFU’s qualification evidence cannot be fully separated from the spaces around it. Visualization studies show whether the airflow pattern actually protects the zones the design intended to protect, surfacing gaps between the design’s airflow theory and its installed behavior. Recovery testing evaluates how the space returns to its qualified state after a disturbance, which speaks directly to the operating states defined earlier in the URS: a space with more demanding operating states may carry different recovery expectations than one with simpler ones.
Which of these checks apply, and with what acceptance criteria, is not fixed by Annex 1 itself — the guidance identifies relevant installed checks without specifying an FFU’s actual test limits, because applicability depends on room grade, equipment function, risk, and the applicable standard for the project. Where a facility serves a higher-risk process, the same category of check may carry a tighter interpretation than it would in a lower-risk area, even though the check’s name and general method remain the same. This is also where earlier project work becomes relevant: a project’s leak testing evidence, gathered at earlier stages, should feed into how installed filter integrity checks are planned rather than being treated as a separate, disconnected exercise.
Approve project-specific protocols, limits, and records before qualification
Before qualification testing begins, the project needs a small set of decisions fixed and formally approved — not because the guidance mandates a specific format, but because qualification without these decisions in place produces evidence that is difficult to defend and hard to reconstruct after the fact.
The first decision is which acceptance and qualification stages apply. A project’s circumstances — room grade, equipment complexity, prior acceptance evidence already available — determine which combination of factory acceptance, site acceptance, IQ, OQ, and PQ stages are needed, and skipping this decision risks either duplicating effort or leaving a traceability gap.
The second is test scope: which of the installed checks — filter integrity, airflow, pressure, visualization, recovery — apply to this particular FFU in this particular room, given its grade, function, and risk. Not every check carries the same weight in every context, and the applicable standard for the project shapes which checks are non-negotiable.
The third is acceptance limits. Annex 1 identifies the categories of check that matter; it does not supply the numeric or qualitative criteria an FFU must meet in a given room. Those criteria come from the project’s own approved protocols, informed by the applicable standard and the room’s classification target — which means the limits have to be agreed and documented before testing starts, not derived afterward from whatever result the test happens to produce.
The fourth is what records will demonstrate this evidence. Supplier performance data supports the selection decision made earlier in the project, but it does not substitute for records generated against the installed arrangement — the records approved for qualification need to show the complete room and equipment system as installed, tested against the limits agreed for this project. Where a project approves these four decisions before testing begins, qualification proceeds against a fixed reference; where any of them is left open, results risk being interpreted differently after the fact than the protocol intended.
| Approval item | Decision to fix before qualification | Evidence boundary |
|---|---|---|
| Applicable stages | Which factory and site acceptance stages and which IQ, OQ, and PQ stages apply to the project. | The exact stage selection depends on project circumstances. |
| Test scope | Which relevant installed filter integrity, airflow, pressure, visualization, and recovery checks apply. | Applicability depends on room grade, equipment function, risk, and the applicable standard. |
| Acceptance limits | The project-specific criteria used for each approved test. | Annex 1 does not define an FFU’s actual test limits by itself. |
| Records and evidence | Which approved records will show the required evidence for the complete installed arrangement. | Supplier data supports selection but does not replace installed evidence. |
Frequently Asked Questions
Q: Does citing EU GMP Annex 1 make an FFU qualified for a GMP cleanroom?
A: No. Annex 1 frames the contamination-control and qualification context, while the project must define the FFU’s intended use, applicable checks, acceptance criteria, and evidence in the URS and approved protocols for the complete installed arrangement.
Q: What should a buyer prepare before comparing FFU proposals for qualification readiness?
A: Prepare the intended use, operating states, room grade, equipment function, interfaces, alarms, maintainability needs, and required evidence. Compare how each proposed system addresses those items and can be traced back to the URS, rather than relying on a general performance claim.
Q: Can supplier performance data or factory and site acceptance replace IQ, OQ, and PQ?
A: No. Supplier data can support equipment selection, and factory or site acceptance can provide stage-specific evidence, but neither replaces the project-defined qualification evidence for the complete installed room and equipment arrangement.
Q: How should the project decide which installed checks apply to the FFU?
A: Select the relevant filter-integrity, airflow, pressure, visualization, and recovery checks according to the room grade, equipment function, project risk, and applicable standard. Record the chosen scope and project-specific acceptance criteria in the approved protocol before testing.
Q: What should be agreed before FFU qualification work begins?
A: Agree the applicable acceptance and qualification stages, test scope, operating states, acceptance limits, and required records. Leaving these decisions open until execution makes results harder to interpret consistently and trace back to the URS.

























