A quality agreement is the written document that defines which party performs which GMP activity when a sponsor uses a contract manufacturing organization or a contract testing laboratory. It is not the supply agreement. The supply agreement sets price, volume, forecasting, liability and term. The quality agreement sets responsibilities for manufacture, testing, release, change control, deviations and records. Both documents describe the same relationship, and they have to say compatible things about it.
FDA guidance on contract manufacturing arrangements for drugs is direct on the central point: the owner remains responsible for the quality of the drug regardless of who performs the work, and the parties should define their respective GMP responsibilities in a written quality agreement. The guidance also treats quality and commercial terms as separate matters, so the quality agreement stays focused on GMP activities rather than pricing and business arrangements. EU GMP expectations for outsourced activities point in the same direction.
The practical failure is not drafting. It is maintenance. The quality agreement is negotiated by QA and stored in a quality system. The supply agreement is negotiated by legal and stored in a contract system. Each is amended on its own cycle, by people who do not see the other document, and after a few years the two disagree about scope, subcontracting and notification periods.
What a quality agreement has to settle
Inspection findings against outsourced manufacturing tend to trace back to responsibilities that were described loosely, or described in one document and contradicted in another. Five areas carry most of that risk.
- Scope and sites, the specific products, dosage forms, unit operations and named facilities covered, so there is no argument about whether a new presentation falls inside the agreement.
- Responsibility allocation, an activity by activity matrix covering manufacture, testing, specification setting, batch record review, product disposition and stability, with one accountable party for each line.
- Change control notification, which categories of change require prior written approval from the sponsor rather than notification after the fact, and the notice period for each category.
- Deviation and OOS reporting, the window within which the contract facility must report a deviation, an out of specification result or a confirmed complaint, and who leads the investigation.
- Audit and inspection rights, routine audit frequency, for cause access, and the obligation to notify the sponsor of a regulatory inspection or a finding that touches the sponsor's product.
Notification windows deserve attention because they are the terms most often copied from a template and never tested. A window that nobody can meet is worse than a longer window that is honored, because the pattern of late notifications becomes a documented failure to follow your own agreement. Set the period against the contract facility's actual investigation practice, then hold it.
Take one contract facility and read the quality agreement beside the supply agreement. Check four things: the list of approved sites, the subcontracting consent language, the change notification period and the record retention period. If the two documents differ on any of them, you have found the answer to why quality and procurement disagree about what the supplier owes.
Where the two documents come apart
Drift has structural causes, not careless ones. Understanding the mechanism tells you which controls to put in place, and most of them are about linkage and obligation tracking rather than about better drafting.
- Two systems of record. Quality agreements sit in the quality management system while commercial terms sit in legal systems, so no single view shows what a given supplier owes you.
- Different amendment cycles. A supply agreement renewal rarely triggers a quality agreement review, and a site addition rarely triggers a commercial amendment.
- Subcontracting consent. The quality agreement may prohibit onward subcontracting without written consent while the supply agreement permits assignment or use of affiliates, which creates an unqualified site in the chain.
- Data integrity expectations. Electronic records supporting release must meet 21 CFR Part 11 expectations for validation, audit trails and access control, and those terms are often absent from the commercial paper entirely.
- Record retention. Retention and access after termination, including batch records and raw analytical data, has to be stated in both documents and has to match.
A governance roadmap for external manufacturing
Step 1, Inventory facilities and paper together
List every contract facility, the products and unit operations each performs, and the quality agreement and commercial agreement that govern it. Record effective dates, expiry and amendment history for both. Most external manufacturing groups find at least one active facility running on an expired quality agreement, or on one signed for a product that has since changed.
Step 2, Rebuild the responsibility matrix
Work through GMP activities line by line and assign one accountable party to each, with the other party's supporting role noted. Cover incoming material qualification, in process control, analytical testing, batch record review, product disposition, stability, complaints and recall. Anything marked as shared needs a named decision maker, because shared accountability is how investigations stall.
Step 3, Set notification windows you can honor
Agree reporting periods for deviations, out of specification results, confirmed complaints, regulatory inspections and proposed changes. Test each period against how the facility actually operates before signing. Then instrument it, so a late notification is visible as a compliance event rather than surfacing months later during an audit of the relationship.
Step 4, Link the quality agreement to the commercial agreement
Hold both documents against one supplier record with a stated relationship, so any amendment to one raises a review task on the other. The same discipline applies to research contracts, where protocol changes drive budget amendments, a pattern covered in the clinical trial agreement guide. Linkage is what makes drift detectable.
Step 5, Track obligations, not documents
Extract the commitments inside both agreements into tracked obligations with owners, due dates and evidence requirements: annual product review, audit cycles, stability reporting, change notifications, retention. Documents sit still while obligations recur, and recurring commitments are what inspectors sample, as set out in obligation management for life sciences.
One view of every contract facility
See quality agreements, supply agreements and their recurring obligations tracked against a single supplier record with full history.
Inspection readiness
An investigator asking about an outsourced product will work from the document to the evidence. Expect requests for the current quality agreement with its approval signatures, the responsibility matrix, the change notifications received for that product and how each was assessed, the deviation reports and their closure, the audit reports and the corrective actions. Being able to produce that set quickly, with dates that reconcile to the agreement terms, is a different capability from having the agreement on file, and computerized systems holding that evidence carry their own expectations under the 21 CFR Part 11 audit checklist.
Responsibility allocation at a glance
Allocation varies by product and by relationship, so treat the table below as a common pattern to negotiate against rather than as a template. The column that matters most in practice is the last one, because an allocation you cannot evidence is an allocation you cannot defend.
| Responsibility area | Typical sponsor role | Typical contract facility role | Evidence to retain |
|---|---|---|---|
| Specifications and methods | Sets and approves specifications and test methods | Executes methods, reports results, requests changes | Approved specification versions, method transfer reports |
| Product disposition | Final release decision for the market | Batch record review and certificate of analysis | Batch records, disposition decisions, release signatures |
| Change control | Approves changes affecting registered details | Raises changes, implements after approval | Change requests, impact assessments, approvals with dates |
| Deviations and OOS | Reviews and concurs on product impact | Investigates, determines root cause, reports in window | Investigation reports, notification timestamps, CAPA records |
| Subcontracting | Grants or withholds written consent | Qualifies and oversees any approved subcontractor | Consent records, subcontractor audit reports |
Quality agreement management works when the document is treated as a live control rather than a signed formality. That means an owner for every facility relationship, a scheduled review that looks at the quality agreement and the commercial agreement together, notification windows that are measured rather than assumed, and obligations tracked with the evidence attached. Sponsors that run it this way spend inspection time explaining their oversight. Sponsors that do not spend it reconstructing which version of the agreement was in force.
For related guidance, see The quality leader’s guide to CMO quality agreements, Quality agreement tracking for sponsors and CDMOs and Quality agreement obligations, who tracks what in GxP.
