Annex 1 is a set of European Union guidelines that governs how sterile medicinal products must be manufactured. Published as a supplement to the EU Good Manufacturing Practice (GMP) Guide, it lays out the specific requirements for preventing contamination during the production of injectable drugs, eye drops, and other products that must be completely free of microorganisms and particles. The most recent revision was published on 25 August 2022 and became enforceable on 25 August 2023.
While Annex 1 is an EU regulation, its influence extends globally. Manufacturers worldwide who supply sterile products to European markets must comply, and many non-EU regulators reference its standards. For anyone working in pharmaceutical manufacturing, quality assurance, or regulatory affairs, understanding Annex 1 is essential.
Why Annex 1 Was Revised
The previous version of Annex 1 dated back to 2008, with some sections unchanged since the early 1990s. Over that period, sterile manufacturing technology evolved significantly. Barrier systems like isolators became common, rapid microbiological methods emerged, and the industry developed a more sophisticated understanding of contamination risks. The 2022 revision brought the guideline in line with modern manufacturing practices and introduced several new concepts, most notably the Contamination Control Strategy.
The revision also placed much greater emphasis on quality risk management, requiring manufacturers to use systematic, science-based processes to identify, evaluate, and control risks to product quality. Rather than simply following a checklist, companies now need to demonstrate that their decisions about facility design, equipment, and processes are grounded in a thorough understanding of where contamination risks actually come from.
The Contamination Control Strategy
The single biggest addition in the 2022 revision is the requirement for a formal Contamination Control Strategy, or CCS. Annex 1 defines this as “a planned set of controls for microorganisms, endotoxin/pyrogen and particles, derived from current product and process understanding that assures process performance and product quality.”
In practical terms, a CCS is a comprehensive document that connects every contamination-related control in a facility into one coherent framework. It covers the design of buildings and equipment, how personnel are trained and gowned, operating procedures, environmental monitoring programs, and finished product testing. Annex 1 lists sixteen specific elements that must be included. The CCS is not a one-time exercise. It functions as a living document that evolves as a company gains new data and process understanding, treating contamination control as a lifecycle approach rather than a static set of rules.
Cleanroom Grades and Air Quality
Annex 1 classifies manufacturing environments into four grades (A, B, C, and D), each with specific limits on the number of airborne particles allowed. Grade A is the most stringent and represents the zone where the most critical operations take place, such as filling vials or making aseptic connections. Grade D is the least controlled and is used for less critical steps in the manufacturing process.
For each grade, the guideline sets maximum permitted concentrations of particles at two size thresholds: 0.5 micrometers and 5 micrometers. These limits are defined for two states. “At rest” means the room is fully operational with equipment running but no personnel present. “In operation” means production is actively underway with staff working inside the room. The in-operation limits are naturally more lenient because people are the single largest source of particle contamination in a cleanroom.
For classification purposes, the guideline references the international standard ISO 14644-1, aligning EU requirements with globally recognized cleanroom testing methods. Notably, the 2022 revision removed the hard particle limits for the largest particles in Grade A and Grade B at-rest conditions, instead leaving manufacturers to set those limits based on their own contamination control strategy and historical data.
Barrier Systems: Isolators and RABS
One of the clearest shifts in the 2022 revision is the expectation that manufacturers use physical barrier technologies to separate operators from the product during aseptic processing. The two main types are isolators (fully enclosed units with their own controlled atmosphere) and Restricted Access Barrier Systems, known as RABS (semi-enclosed barriers integrated into a cleanroom).
Annex 1 does not outright ban traditional open cleanrooms for aseptic processing, but it strongly favors barrier systems. Any manufacturer choosing not to use isolators or RABS must now provide a rational justification for that decision. This represents a significant change from the 2008 version, where open cleanroom processing was treated as equally acceptable.
The requirements for each barrier type differ in important ways. Isolators must use an automated decontamination process with a sporicidal agent in gaseous, aerosolized, or vaporized form to ensure thorough microbial decontamination of the interior. RABS require the routine application of a sporicidal agent through a validated method that has been demonstrated to create a suitable environment for aseptic processing.
Disinfection and Cleaning Validation
Annex 1 imposes detailed requirements on how cleanrooms and equipment are disinfected. Manufacturers must use more than one type of disinfecting agent, chosen so that their different mechanisms of action together cover all bacteria and fungi. Beyond routine disinfection, the guideline requires the periodic use of a sporicidal agent, which is a chemical capable of killing bacterial spores (the most resistant form of microbial contamination).
Every disinfection process must be formally validated. Validation studies need to demonstrate that the chosen disinfectants actually work under the specific conditions in which they are used, not just in a laboratory setting. These studies must also support the expiry dates assigned to prepared disinfectant solutions, ensuring they remain effective throughout their shelf life after mixing.
Quality Risk Management
Risk management runs through the entire 2022 revision as a foundational principle. Rather than prescribing identical controls for every situation, Annex 1 expects manufacturers to assess risks scientifically and tailor their controls accordingly. Two core principles apply: every risk evaluation should ultimately link back to protecting the patient, and the level of effort and documentation should match the severity of the risk involved.
This does not mean companies can use risk assessment to justify cutting corners. The guideline is explicit that resource constraints should never be used to justify less rigorous risk management. Higher levels of uncertainty or complexity demand more formal, structured approaches. Decision-makers within a company are expected to take direct responsibility for coordinating risk management across departments and to minimize subjectivity in the process.
The formality of risk management exists on a spectrum. Some decisions require structured analysis with formal documentation of every option considered. Others can be handled through simpler, rule-based approaches that rely on established standards rather than a fresh risk assessment each time. The key is that the overall approach is defined within the company’s quality system and applied consistently.
Who Must Comply
Annex 1 applies to every manufacturer of sterile medicinal products that operates within the EU or exports sterile products to the EU market. This includes producers of injectable drugs, infusion solutions, ophthalmic preparations, and any other dosage form required to be sterile. It also extends to the sterile manufacturing of active pharmaceutical ingredients when those are processed in aseptic conditions.
The full guideline took effect on 25 August 2023, with one exception: section 8.123, which addresses a specific technical requirement, was given an extended deadline of 25 August 2024. Companies that were already operating under the 2008 version needed to perform a gap analysis, update their contamination control strategies, and in many cases invest in facility upgrades and new equipment to meet the revised standards.