A practical framework for assessing, building and sustaining pharmaceutical-grade quality systems in licensed cannabis manufacturing operations. Covers the ten dimensions of GMP readiness, common gaps and a structured four-phase approach to achieving and maintaining compliance.
Enter your email to receive the complete formatted PDF of this publication.
Pharmaceutical-grade quality in cannabis manufacturing is not achieved through documentation alone. It requires a systematic, risk-based approach that aligns people, processes, facilities and systems with EU GMP requirements before the first batch is manufactured — and sustains that alignment through continuous monitoring, review and improvement.
This white paper provides a practical framework for cannabis manufacturers at any stage of the GMP journey — from facilities planning their first GMP implementation to established operators preparing for inspection or seeking to address identified gaps.
The most common cause of GMP inspection failure in pharmaceutical cannabis facilities is not absence of documentation — it is the gap between written procedures and actual practice. Closing this gap requires structured assessment, targeted training and sustained management commitment.
Medical cannabis products sold in European markets as authorised medicinal products must be manufactured in accordance with EU GMP as set out in EudraLex Volume 4. The specific requirements applicable depend on the nature of the product and the manufacturing step.
Cannabis starting material cultivated to supply GMP manufacturers must meet Good Agricultural and Collection Practice (GACP) requirements. The GACP-to-GMP handover point — typically the point at which the dried plant material enters the licensed GMP facility — represents one of the most important compliance boundaries in the supply chain.
Once material enters the GMP facility, EU GMP Parts I and II apply depending on whether the product is a finished medicinal product or an active substance. For most cannabis oil extracts and finished preparations, Part I applies. For extracts intended as active pharmaceutical ingredients (APIs), Part II (ICH Q7) is the relevant standard.
Additionally, EU GMP Annex 1 (2022) applies to any cannabis product manufactured under aseptic or controlled contamination conditions, and Annex 11 applies wherever computerised systems are used in GMP operations — which in practice means almost every modern cannabis manufacturing facility.
GMP readiness is best understood not as a binary pass/fail condition but as a maturity profile across multiple dimensions. A facility may have excellent documentation but immature contamination control. Another may have strong facility qualification but weak supplier management. Identifying the specific profile of strengths and gaps is the necessary starting point for any remediation programme.
The ECI GMP Readiness Framework assesses readiness across ten dimensions:
Based on analysis of publicly available pharmaceutical inspection reports and regulatory guidance, the following gaps are most frequently identified in cannabis manufacturing operations at or approaching GMP certification:
EU GMP Annex 1 (2022) Clause 4.4 requires a formal, documented Contamination Control Strategy for all medicinal product manufacturers. For cannabis operators, the CCS must address both the contamination risks specific to cannabis processing — including microbiological risk from plant material, cross-contamination between THC and CBD product streams, solvent residues and degradation products including CBN — as well as the standard contamination control requirements applicable to all pharmaceutical manufacturing.
Many cannabis facilities entering GMP have not produced a formal CCS. Where a CCS exists, it frequently lacks the risk-based FMEA that the 2022 revision requires, or fails to address cannabis-specific contamination pathways such as THC-to-CBD cross-contamination and its pharmacological significance.
Cleaning validation in cannabis manufacturing presents specific challenges not present in conventional pharmaceutical manufacturing. The most significant is the requirement to set scientifically justified, health-based cleaning limits for cannabinoid carry-over between batches on shared equipment.
For THC residues on equipment subsequently used for CBD products, the acceptance limit must reflect the pharmacological activity of THC — the threshold at which intoxication occurs — rather than a generic toxicological limit. This typically results in significantly more stringent limits than those applied in conventional pharmaceutical cleaning validation, and may drive equipment dedication decisions where shared equipment cannot be cleaned to the required limit.
Alert and action limits in many cannabis facility environmental monitoring programmes are set by reference to EU GMP grade limits rather than derived from the facility-specific baseline established during EMPQ. This approach does not meet current EU GMP expectations and will be challenged during inspection.
Alert limits should be set at approximately 50% of the grade limit, derived from facility-specific historical data collected during the EMPQ baseline phase. Action limits should be set below the grade limit but above the alert limit. Both must be formally derived, documented and approved.
The GACP-to-GMP handover point is frequently inadequately defined in cannabis QMS documentation. Where the handover point is not formally established, neither the GACP supplier nor the GMP manufacturer can demonstrate full traceability of the starting material, and the GMP manufacturer cannot demonstrate that incoming material testing is sufficient to assure material quality.
Achieving and maintaining GMP readiness requires a structured programme that moves through four phases:
A systematic assessment of current state against EU GMP requirements produces a prioritised gap profile. The ECI GMP Readiness Index provides a free 45-question baseline assessment. For facilities at an advanced stage of preparation, a full documented gap assessment against specific EU GMP requirements is recommended.
Gap findings must be prioritised by risk — critical findings that would prevent GMP certification or that present immediate patient safety risk must be addressed before lower-priority gaps. A formal remediation plan with defined owners, actions and completion dates provides the management framework for the programme.
Remediation actions range from documentation updates (lowest effort, lowest risk) through SOP revision and retraining, to facility modification, equipment procurement and full validation programmes (highest effort, highest risk). Implementation sequencing should reflect both priority and dependency — validation activities cannot begin until facility qualification is complete; environmental monitoring cannot be conducted against validated limits until EMPQ is complete.
Completion of remediation actions must be verified before inspection readiness can be confirmed. Verification includes not only document review but operational checks — does the revised SOP reflect actual practice? Are operators trained and competent? Are records being generated as required? A pre-inspection audit against the specific EU GMP clauses relevant to the facility provides the final verification step.
Subscribe for new publications, regulatory commentary and industry intelligence — published monthly.