21 CFR Parts 210 and 211 — Current Good Manufacturing Practice for Drugs and Finished Pharmaceuticals

What the authority record establishes

Parts 210 and 211 establish current good manufacturing practice requirements for drug manufacture, processing, packing, and holding, including organization, facilities, equipment, components, production controls, laboratory controls, records, reports, returned products, and complaints.

Binding for drug manufacturing operations and products within scope

The exact official title, issuing body, jurisdiction, version or application record, and linked source define the scope of this page. Readers should not transfer the authority's status to a commercial product or infer transaction-, patient-, system-, site-, or organization-specific applicability from this summary.

Why it matters to this market

eQMS products organize records supporting drug CGMP processes, but software boundaries must align with manufacturing, laboratory, ERP, MES, and supplier systems. A feature list alone cannot establish that regulated processes are controlled.

Affected operating stages

• Quality Organization And Procedures
• Materials And Supplier Control
• Manufacturing And Process Control
• Laboratory Control
• Batch And Record Review
• Complaints, Investigations, And CAPA
• Retention And Inspection

Capabilities to examine

Controlled Documents

Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for controlled documents.

Training Management

Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for training management.

Quality Events And Deviations

Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for quality events and deviations.

CAPA

Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for CAPA.

Change Control

Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for change control.

Audit And Inspection Management

Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for audit and inspection management.

Supplier Quality

Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for supplier quality.

Complaints And Post-Market Quality

Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for complaints and post-market quality.

Quality Risk Management

Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for quality risk management.

Analytics And Management Review

Ask how the system or service identifies the controlling source and version, applies customer-specific interpretation, handles exceptions, preserves human judgment, and retains evidence for analytics and management review.

Affected buyer audiences

• pharmaceutical and biotechnology manufacturers
• contract development and manufacturing organizations
• quality assurance and quality control
• manufacturing and laboratory operations
• supplier and material quality teams

Implementation questions

• Which entities, products, populations, transactions, systems, sites, or jurisdictions are actually within scope?
• What is binding, what is guidance, and what is a technical or consensus standard?
• Which publication, adoption, effective, application, transition, and enforcement dates differ?
• Who owns legal, clinical, quality, regulatory, policy, or operational interpretation?
• How will a source revision affect open work and historical decisions?

Interpretation boundary

The regulation defines CGMP obligations, not a commercial eQMS specification. Buyers must map their own records and controls to applicable sections and connected systems.