Pharma quality agreement tracking across the manufacturing network

Responsibility matrices are agreed at qualification and then diverge from practice, usually without anyone noticing until an inspector asks who releases the batch.

What does quality agreement tracking cover in pharmaceutical manufacturing?

Quality agreement tracking keeps the GMP responsibility allocation between a marketing authorization holder and its contract manufacturing, packaging and testing partners current and evidenced. It maintains the responsibility matrix for each activity, links the quality agreement to its commercial supply agreement, tracks change notification and deviation reporting duties with defined windows, schedules audits and requalification, and produces the documentation trail an inspector expects when asking which party is accountable for a specific GMP activity.

Last updated: September 11, 2026 · Reviewed by the Aavenir Life Sciences & Pharma practice

Key takeaways

  • ✓The responsibility matrix is the operative content of a quality agreement, and it is the part that drifts fastest from practice.
  • ✓Quality agreements and commercial supply agreements must stay consistent, which requires linking them rather than filing them separately.
  • ✓Change notification windows are obligations with dates, so they belong in a tracked register rather than in a document.
  • ✓Audit and requalification schedules are the evidence an inspection asks for, and they are commonly the weakest part of the file.

A quality agreement is the document that allocates GMP responsibilities between a marketing authorization holder and the external parties that manufacture, package, label or test its product. It is required practice across regulated markets, it is reviewed in inspections, and it is one of the few commercial documents where a gap translates directly into a compliance finding rather than a cost.

It is also a document that ages badly. The responsibility matrix is negotiated during qualification, when both parties are attentive and the scope is fresh. Two years later the contract manufacturer has changed a supplier of an excipient, moved an analytical method to a different site, and taken on a subcontractor for secondary packaging. The matrix on file still describes the original arrangement.

This datasheet describes what a working quality agreement tracking capability maintains, how it connects to the commercial supply agreement, and what it produces when an inspector asks who is accountable for a specific activity.

What the tracking layer maintains

Quality agreement tracking is less about storing the document than about keeping a set of structured facts current and evidenced. The following are the records that inspections and internal quality reviews consistently ask for.

  • Responsibility matrix by activity, which party performs, which approves and which is notified, at the level of individual GMP activities rather than broad categories
  • Agreement linkage, an explicit link between each quality agreement and the commercial supply agreement it accompanies, including amendment history for both
  • Change notification obligations, the categories of change requiring notification or prior approval, with the contracted notice window and the current status of each open notification
  • Deviation and complaint duties, reporting routes, timelines and escalation thresholds for deviations, out-of-specification results and product complaints
  • Audit and requalification schedule, the contracted audit frequency, last audit date, open findings and next scheduled requalification for each site and activity

The responsibility matrix is where most of the operational value sits. Held as structured records rather than as a table inside a document, it can be queried, which means a quality lead can answer who is responsible for a specific activity across the whole network in a single view, rather than opening forty agreements and reading tables.

Divergence is the normal state, not the exception

Manufacturing networks change continuously. Sites add subcontractors, methods transfer, suppliers are requalified. The question is not whether the responsibility matrix will diverge from practice but how quickly the divergence is detected. A tracked change notification obligation with a defined window is what turns that from an inspection finding into routine maintenance.

How the quality agreement connects to commercial terms

Quality agreements and supply agreements are usually negotiated by different functions, signed at different times, and stored in different systems. That separation is the source of a recurring class of problem.

  • Inconsistent amendment. A commercial amendment that changes scope, volume or site can leave the quality agreement describing an arrangement that no longer exists.
  • Conflicting termination terms. Supply agreements and quality agreements frequently carry different notice periods, which becomes acute during an exit when GMP responsibilities must continue past commercial termination.
  • Divergent audit rights. Audit provisions appear in both documents and are often drafted independently, producing two different frequencies and scopes for the same relationship.
  • Subcontractor flow-down gaps. The commercial agreement may permit subcontracting that the quality agreement does not address, leaving the responsibility allocation silent on a party actually performing GMP work.
  • Retention mismatches. Records retention obligations under the quality agreement commonly outlast the commercial relationship, and need to survive termination expressly.

A five-step rollout across the manufacturing network

Step 1, Inventory agreements and pair them

Build a list of every external party performing GMP activity, and pair each quality agreement with its commercial supply agreement. Unpaired quality agreements and supply agreements with no corresponding quality agreement are both findings waiting to happen, and the inventory is usually the step that surfaces them.

Step 2, Extract the responsibility matrix

Convert the matrix in each agreement into structured records at activity level. This is effortful the first time and is what makes every subsequent query possible. Use a single activity taxonomy across the network so that agreements from different eras and different negotiating teams become comparable.

Step 3, Load notification and reporting obligations

Capture change notification categories, notice windows, deviation reporting timelines and complaint routes as tracked obligations with owners. Attach the contracted window to each so that an open notification can be measured against it rather than assessed by memory.

Step 4, Schedule audits and requalification

Load contracted audit frequency, last completed date and open findings for every site and activity. Overdue audits against a contracted frequency are among the most straightforward findings for an inspector to establish, and among the easiest to prevent.

Step 5, Report the network, not the document

Produce a single view of responsibility coverage, open notifications against window, audit status and agreement-pair consistency across all partners. This is the artifact that supports both internal quality review and inspection readiness.

See responsibility allocation across the whole network

Aavenir holds quality agreement terms as structured records, links them to the governing supply agreements, and tracks notification and audit obligations with owners and dates.

Book a demo

What this produces during an inspection

The practical test of a quality agreement program is what can be produced on request. An inspector asking who is responsible for a given activity at a given site expects a definitive answer supported by a current, signed agreement, not a search through a document store. A tracked responsibility matrix answers that in one query and shows the amendment history behind it. The same structure answers the follow-up questions that usually come next: whether the contracted audit frequency has been met, whether open change notifications are within their windows, and whether the quality and supply agreements describe the same arrangement. Organizations that already run structured GxP audit evidence through their contract platform find this is an extension of work already done rather than a separate program. The difference an inspector notices is response time. A team that produces a current responsibility matrix, its amendment trail and the matching audit record within minutes is demonstrating a controlled process, while a team that needs a day to assemble the same facts is demonstrating that the control exists on paper rather than in operation.

Quality agreement coverage by partner type

Not every external party needs the same depth of agreement. Scope should follow the GMP activity performed, and the table below reflects the coverage that regulated manufacturers typically maintain.

Partner typeCore matrix contentTypical audit cadence
Contract manufacturer, drug productManufacture, in-process control, batch release, deviation handlingEvery one to two years, risk-based
API manufacturerSynthesis, impurity control, specification change, stabilityEvery two to three years, risk-based
Contract testing laboratoryMethod validation, OOS handling, data integrity, result reportingEvery two years, or on method transfer
Packaging and labelingArtwork control, serialization, reconciliation, market releaseEvery two to three years
Storage and distributionTemperature control, deviation reporting, traceability, recall supportEvery two to three years

Quality agreements are among the few commercial documents that a regulator will read in detail. Keeping them accurate is not a records management preference, it is the evidence that GMP responsibilities are allocated, understood and being performed by the party that agreed to perform them. Holding the responsibility matrix as structured data, linking it to the commercial agreement it accompanies, and tracking notification and audit duties through obligation management turns that evidence from something assembled under pressure into something available on demand. It also makes the routine work cheaper, since the quality lead reviewing partner coverage each quarter is reading a report rather than reopening forty agreements.

For related guidance, see The quality leader’s guide to CMO quality agreements, Quality agreement tracking for sponsors and CDMOs and Quality agreement obligations, who tracks what in GxP.

FAQ

Quality agreement questions, answered

What is a pharmaceutical quality agreement? +
A quality agreement is a written agreement that defines and allocates GMP responsibilities between a marketing authorization holder and an external party performing manufacturing, packaging, labeling, testing, storage or distribution activities. Its operative content is the responsibility matrix, which records for each activity which party performs it, which approves it and which must be notified.
How does a quality agreement differ from a supply agreement? +
A supply agreement governs the commercial relationship, covering price, volume, forecasting, liability and term. A quality agreement governs GMP responsibilities and does not normally address commercial matters. The two are separate documents and should cross-reference each other, because an amendment to one that is not reflected in the other creates an inconsistency an inspector can find.
Who should own the quality agreement internally? +
Quality assurance owns the content, since the responsibility allocation is a GMP matter rather than a commercial one. Procurement or legal typically owns the process of getting it signed and keeping it paired with the supply agreement. Problems generally arise where quality owns the document but has no visibility of commercial amendments that change scope or site.
What changes require notification under a quality agreement? +
Notification categories are negotiated, but commonly include changes to manufacturing site, process, equipment, analytical method, specification, raw material supplier, subcontracting arrangements and key quality personnel. The agreement should state which changes require notification only and which require prior written approval, together with the notice window for each.
How often should contract manufacturing sites be audited? +
Audit frequency is risk-based rather than fixed, and is set in the agreement. Manufacturers of drug product and sterile operations generally warrant the shortest intervals, with testing laboratories, packaging and distribution partners on longer cycles. What matters for compliance is that the contracted frequency is met and that overdue audits are visible before an inspection finds them.
Do quality agreement obligations survive termination? +
Several should, and they need to be expressed as surviving. Records retention, support for regulatory inspections relating to product already supplied, complaint and recall cooperation, and stability data obligations commonly outlast the commercial relationship. Where the supply agreement and quality agreement carry different termination notice periods, the gap should be resolved deliberately rather than left to be discovered during an exit.

Keep GMP responsibility current across every partner

Aavenir maintains quality agreement responsibility matrices as structured records, linked to supply agreements, with notification and audit obligations tracked by owner and date.

  • ✓Responsibility matrix queryable across the network
  • ✓Change notification tracked against contracted windows
  • ✓Standalone or native on ServiceNow