What API Manufacturing Capabilities Should a Supplier Have?

Assess six evidence categories before qualifying an API supplier: molecule fit, containment, scale, analytical control, change management, and US documentation. A GMP statement alone cannot show whether a supplier’s process, capacity, testing, and records fit your API program.

Use the table below before you request samples, schedule an audit, or sign a quality agreement.

The point is to match the proof to the risk. A peptide supplier does not need the same evidence package as a high-potency small-molecule supplier. A commercial program needs stronger scale and continuity evidence than an early clinical batch.

Which Capabilities Matter for Your Program?

Start with a one-page program brief. State the API name, intended dosage form, annual demand, target batch size, development stage, target market, required specification, and known risks.

Then ask the supplier to map its actual process to that brief. The useful evidence is a process-flow summary, manufacturing site, critical process steps, proposed batch range, release tests, and the site responsible for each activity.

ICH Q11 ties drug-substance manufacture to critical quality attributes, process understanding, and a control strategy. Critical quality attributes are the properties that must stay within limits for the API to perform as intended. ICH Q11 also expects the process description to explain important development changes and their effect on quality.

Treat these as two separate questions:

1. Can the supplier make this molecule?
2. Can the supplier make this molecule at your stage, scale, quality target, and regulatory route?

A platform list answers the first question. Qualification evidence answers the second.

Does Your Molecule Require Dedicated Containment or Special Handling?

Dedicated equipment is a risk-control decision, not a universal requirement. Ask for dedicated or highly controlled operations when the molecule’s potency, toxicology, sensitisation risk, dusting behavior, or cross-contamination risk calls for them.

FDA’s ICH Q7 questions and answers identify appropriate containment controls such as dedicated production areas, closed systems, dedicated HVAC, disposable technologies, and equipment designed for containment and cleaning. FDA Q7 guidance also makes clear that the controls should follow a quality-risk assessment.

Request four items:

• The supplier’s containment risk assessment for your API.
• A material and personnel-flow diagram for the relevant suite.
• Cleaning-validation acceptance criteria and the supporting results.
• The segregation or campaign plan for shared equipment.

A containment claim is useful only when it comes with those records. FDA’s API GMP guidance requires justified cleaning procedures and residue acceptance criteria. FDA Q7 also requires equipment status and cleaning controls to be documented.

Can the Supplier Support Your Required Scale and Batch Cadence?

Reactor volume is not usable capacity. A supplier can have a large reactor and still lack the qualified process, campaign time, purification equipment, release capacity, or raw-material supply needed for your program.

Ask for these six specific facts for your API:

1. The smallest and largest batch sizes run for that product or comparable chemistry.
2. The target batch size proposed for your program.
3. The number of campaigns available each year.
4. The expected release-testing timeline after manufacturing.
5. The planned raw-material and critical-starting-material sources.
6. The continuity plan if the primary train, laboratory, or source is unavailable.

For commercial supply, ask how the supplier will maintain the same process and impurity profile as volume grows. FDA defines process validation as documented evidence that a process operating within established parameters can repeatedly produce material meeting its specifications. FDA Q7 process validation is the standard behind that request.

For a steroid program moving from pilot material to routine supply, use our pilot-to-commercial steroid manufacturing guide alongside the supplier’s own scale-up plan.

What Analytical and Impurity-Control Evidence Should You Request?

Ask for a representative Certificate of Analysis, or COA, early. The COA should identify the API, grade, batch or lot number, release date, tests performed, acceptance limits, and numerical results. FDA describes those COA expectations in its component-testing guidance.

Then request the evidence behind the numbers:

• The current API specification.
• A list of release and stability-indicating methods.
• Method validation or qualification status.
• Representative chromatograms where relevant.
• An impurity-control summary for process-related, residual-solvent, and elemental risks.
• Stability data or protocol for the intended packaging and storage conditions.

For a finished-drug manufacturer, a supplier COA is not the entire control strategy. FDA requires at least one specific identity test for each component batch, even when the manufacturer otherwise accepts a supplier’s report of analysis. The finished-drug manufacturer must also establish the supplier analysis is reliable at appropriate intervals. FDA’s requirement makes incoming testing and supplier qualification part of the same decision.

Peptide buyers should separate HPLC purity from content and suitability for the intended formulation. Our peptide purity versus content guide explains the difference to check in a batch package.

How Do Change Control and Tech Transfer Affect Supply Continuity?

A capable supplier can explain what happens when a raw material, analytical method, facility, equipment train, process step, or specification changes. That explanation belongs in the quality agreement before the first commercial batch.

FDA’s API GMP guidance requires written procedures for identifying, reviewing, approving, and evaluating GMP-relevant changes. FDA Q7 change control also says contract requirements cannot change unless the contract giver is informed and approves the change.

Put these items in the agreement:

• Change categories that require your approval.
• The data package required for a proposed change.
• Deviation, out-of-specification, complaint, and CAPA responsibilities.
• Who approves subcontracting.
• Recall support and batch-traceability responsibilities.
• The transfer and comparability plan for a new site or scale.

ICH Q11 says product and process knowledge should be managed through development, technology transfer, process validation, and change management. ICH Q11 lifecycle management supports asking for the transfer protocol and comparability plan before a new site produces filing or commercial material.

For peptide programs, use the US peptide supply-chain qualification checklist to add storage, shipping, and handoff controls to the supplier review.

What Documentation Should a US Buyer Confirm?

For APIs imported into the United States, begin with the legal manufacturer and physical manufacturing site. Then match the documents to the API’s intended use.

FDA states that foreign establishments manufacturing, repacking, relabeling, or salvaging APIs imported into the US must register with FDA. Those establishments must also list commercially distributed APIs and identify known importers in their registration. FDA’s API import requirements also cover labeling requirements.

Request this package:

1. Legal manufacturer name, full site address, and each subcontracted activity.
2. Current FDA establishment registration and API drug-listing details for US imports.
3. Manufacturer batch number, COA, storage conditions, and transport conditions.
4. Labeling information suitable for the API’s intended US use.
5. A Type II DMF number, availability status, and letter-of-authorization process when your application will reference a DMF.

A Type II DMF can contain confidential drug-substance information. For ANDAs, FDA performs a completeness assessment before listing a Type II API DMF as available for reference. That assessment does not replace the scientific review needed to support an ANDA action. FDA’s DMF guidance explains the distinction.

For a steroid API headed to the US, follow the US steroid supplier qualification guide before you place a commercial order.

Where Aarise Pharmaceuticals Fits

At Aarise Pharmaceuticals, we manufacture and export steroid, peptide, hormone, and general pharmaceutical APIs for generic manufacturers, contract formulators, and pharmaceutical distributors. Our API page states that our Haridwar facility is WHO-GMP and ISO 9001:2015 certified, and that every shipment includes a COA and MSDS. See our API manufacturing page for the product categories and documentation available for your request.

For US buyers, our API supplier guide for generic drug manufacturers is the practical next read after you complete this capability checklist.

FAQs

Does FDA Registration Mean an API Supplier Is FDA Approved?

No. FDA states that establishment registration and drug listing do not mean a product is approved or that FDA has verified the submitted information. FDA registration guidance treats registration as a regulatory record, not a supplier-quality decision. Use it alongside audit evidence, batch records, analytical evidence, and your quality agreement.

Can an API Distributor Subcontract Milling or Micronization?

No, not as a distributor. ICH Q7 explains that a distributor that contracts production steps such as drying, micronization, milling, or sieving becomes a manufacturer for those activities. ICH Q7 Q&A requires those steps to be controlled and described under the applicable manufacturing requirements.

Can a Contract API Manufacturer Subcontract Part of the Work?

Yes, but only when the written agreement specifically permits it and the original contract giver approves the subcontracting before it occurs. ICH Q7 Q&A assigns the agreement a central role in maintaining accountability across the supply chain.

Does ICH Q7 Cover Sterile API Manufacture?

Only up to the point immediately before the API is rendered sterile. FDA’s ICH Q7 guidance says sterilization and aseptic processing follow drug-product GMP requirements. A sterile API program therefore needs a separate review of those controls.