Importance of Due Diligence and New Supplier Qualification Audits

As global supply chains grow more complex, the pharmaceutical industry can no longer rely on trust alone or documents verification when selecting new suppliers. Pharmaceutical supply chains extend across APIs, intermediates, excipients, primary/secondary packaging, contract manufacturing (CMOs), contract testing (CTOs), and logistics/GDP providers. Regulators hold the marketing authorization holder (MAH) ultimately responsible for ensuring these parties operate in compliance with GMP/GDP and quality system expectations (21 CFR Parts 210/211; EU GMP Volume 4; ICH Q9/Q10; USP <1083>). Robust due diligence and supplier qualification audits for new suppliers are therefore mandatory to prevent quality defects, data integrity breaches, contamination, recalls, import alerts, and delayed approvals.

These activities are not merely a formality; they serve as the first line of defense against compliance risks, supply disruptions, and data integrity failures. Recognizing fundamental quality and capability concerns during due diligence, along with proper GMP implementation in new supplier qualification audits, facilitates timely and efficient supplier selection or rejection. This proactive approach conserves time, resources, and organizational reputation by addressing issues before it’s too late.

What are Due Diligence and Supplier Qualification Audits?

• Due diligence: A systematic evaluation of a supplier’s compliance history, financial stability, technical capability, and quality systems before onboarding.

• Supplier qualification audits: In-depth assessments often on-site of a supplier’s adherence to GMP and regulatory standards.

How do they differ from routine supplier audits?

• These assessments focus on broader dimensions, including quality, business continuity, and capability, areas often beyond the scope of standard routine audits.
• Early engagement by subject matter experts allows for thorough due diligence, providing greater confidence in the supplier; addressing these aspects during routine audits may be too late.
• Initial qualification audits typically span several days and involve multiple audit team members, ensuring a comprehensive assessment compared to the limited timeframe of routine audits.
• Such audits can identify mandatory site or system requirements, enabling organizations to take necessary actions prior to an initial supplier qualification.
• Suppliers tend to be more collaborative during these evaluations, as they are keen to secure new business. This gives clients the advantage to conduct rigorous assessments before onboarding suppliers.

These processes ensure that suppliers can consistently deliver materials and services that meet regulatory and quality requirements, safeguarding patient health and company reputation.

Why they matter in pharma?

1. Regulatory Compliance: Agencies like FDA, EMA, MHRA etc. mandate robust supplier qualification programs.
2. Risk Mitigation: Prevents contamination, adulteration, and data integrity breaches.
3. Business Continuity: Avoids costly recalls, import alerts, and production shutdowns.
4. Patient Safety: Ensures that every component meets safety and efficacy standards.

Real-World failure we’ve Uncovered:

During such recent audits, we uncovered critical gaps that paper reviews could have missed:

• Facility design issues:A potential CMO had excellent documentation and layouts however, an on-site audit revealed their lack of adequate facility maintenance and controls which are mandatory in GMP to prevent cross contamination.
• The Missing Business Continuity Plan:A critical API supplier passed all desktop questionnaires as due diligence. However, the on-site due diligence uncovered they had no formal Business Continuity Plan and even few very basic requirements about QMS implementation and procedural controls were lacking.
• The Data Integrity Red Flag:A contract lab provided pristine summary reports. However, during on-site audit, we found that analytical data was routinely saved on individual analyst desktops with no controlled network backup or audit trails, raising major concerns about data reliability and traceability. Also, there was a lack of basic IT infrastructure and its validation as mandated by the GMP.

Many such cases show that proper due diligence and supplier qualification audits by specialists help companies select reliable suppliers, avoid wasted resources and delays, and protect their reputation. Conversely, inadequate due diligence and supplier qualification can cause significant harm to a company; here are some of such examples:

Consequences of Failure – Real Word Example from Authority:

Case-1: FDA Warning Letter to AACE Pharmaceuticals (2025):

Ophthalmic drug products manufactured by a Contract Manufacturing Organization (CMO) were released without adequate qualification or oversight. FDA cited failure to evaluate CAPA effectiveness and re-qualified the CMO without verifying GMP compliance. Import alert, product recalls, and mandatory overhaul of supplier qualification procedures.

Case 2: Sichuan Deebio – API Manufacturing Failures (FDA, 2024):

In February 2024, Sichuan Deebio, a major API manufacturer, received an FDA Warning Letter for significant cGMP deviations, including inadequate laboratory controls and ineffective quality unit oversight. These failures highlighted the risks of insufficient supplier qualification and monitoring, especially for critical raw materials like APIs. The enforcement action disrupted supply chains for essential medicines and underscored the need for MAHs to conduct thorough audits and continuous oversight of API suppliers.

Case 3: EMA GDP Non-Compliance – Romania Wholesalers (2024):

In 2024, EMA published GDP non-compliance reports for several Romanian wholesalers who procured medicines from unauthorized sources and failed to maintain proper documentation and traceability. These gaps in supplier qualification and verification created a high risk of falsified medicines entering the legitimate supply chain. EMA’s findings led to regulatory actions, including suspension of licenses and mandatory corrective measures, reinforcing the importance of robust due diligence and GDP compliance for distributors.

Case 4: MHRA – Falsified Medicines via Supplier Qualification Gaps (UK, 2025):

In 2025, MHRA warned that criminals exploited supplier qualification gaps to introduce counterfeit versions of Takeda’s leukemia drug Iclusig (ponatinib) into the EU supply chain. Fraudsters used spoofed identities and fake domains to bypass weak verification processes. MHRA urged companies to go beyond EudraGMDP database checks and perform independent verification of supplier credentials, licenses, and ownership details. This case demonstrated how inadequate due diligence can directly endanger patient safety and brand integrity.

A proper process of due diligence and comprehensive audits for new suppliers would have easily prevented many of these problems. In today’s complex pharmaceutical landscape, due diligence and new supplier qualification audits are not optional, they are strategic enablers of quality, reliability, and patient safety. By identifying these gaps early, organizations protect their supply chain from disruptions, ensure compliance with global regulatory expectations, and build partnerships based on transparency and trust. Ultimately, strong supplier qualification practices safeguard the most important outcome of all consistently delivering safe, effective medicines to patients who depend on them.

At PHARMALANEUK, being a well-known supplier quality auditing consultancy, we specialize in strengthening the supplier qualification ecosystem through a structured, end-to-end approach. Our experienced global auditor network conducts comprehensive due-diligence assessments, from evaluating quality systems and data integrity controls to verifying operational robustness and regulatory compliance. We provide on-site and remote audits, tailored risk-based checklists, and deep-dive investigations that reveal gaps suppliers often overlook. We support organizations with CAPA review, supplier onboarding strategies, and continuous performance monitoring, ensuring that every approved supplier aligns with your quality standards. With PHARMALANEUK, companies gain not just audit reports, but actionable insights that protect their supply chain, reduce compliance risks, and build long-term, trustworthy supplier partnerships.