What does cGMP-compliant mean for a stem cell lab?
Current Good Manufacturing Practice (cGMP) is the body of regulation that governs how human drugs and biological products are manufactured. For a stem cell lab it covers the entire chain from raw materials to release of finished product, and it is a standard for the lab that makes the cells, not a credential a clinic holds.
If you're comparing clinics, you've seen cGMP in nearly every clinic's marketing. Here's what the term refers to, and how to tell the difference between a manufacturer and a clinic with a centrifuge.
Three questions to ask a clinicWhat does cGMP stand for?
- Current
- Up-to-date. The standard is revised as the science and the regulators do. Yesterday's cGMP is not today's cGMP.
- Good
- Meets the bar. Specifications, deviations, dispositions: every step is judged against an explicit definition of acceptable.
- Manufacturing
- A drug, not a service. Regulates how the product is made (facility, process, testing, traceability), not the clinical act.
- Practice
- Not policy. Documented, audited, executed every day, every batch, every operator. The system, not the slogan.
In the U.S. it is codified in 21 CFR Parts 210 and 211 (drugs) and Part 1271 (human cells and tissues). In other jurisdictions, parallel frameworks apply: EudraLex Volume 4 in the EU, PIC/S internationally, COFEPRIS regulation in Mexico. Each country writes its own version.
Clinics aren't cGMP. Labs that make their product are.
What cGMP regulates: the entire chain from raw materials to release of finished product.
- Facility design
- Air handling
- Equipment qualification
- Personnel training
- Documentation
- Quality control testing
- Quality assurance review
- Deviation handling
- Stability
- Traceability
- Storage
- Distribution
What cGMP is not: a sticker you put on a centrifuge.
Inside a cGMP cleanroom
A cGMP cell-therapy facility is built around classified cleanrooms. The classification system rates particle counts per cubic meter of air. The room where cells are actually handled in open processes is typically ISO Class 5 (Grade A in the EU system), under 3,520 particles ≥0.5 μm per cubic meter, achieved with HEPA-filtered laminar flow.
Air gets cleaner as you move inward.
Four concentric grades. Pressure flows outward. D pushes into the corridor, A is positive-pressure relative to B. Particles cannot drift toward the cells.
| Grade | What happens there | Particles per cubic meter |
|---|---|---|
| Grade A ISO Class 5 | Critical zone where cells are handled in open processes. HEPA-filtered laminar flow. | < 3,520 / m³ |
| Grade B ISO 5 at rest | Immediate background around the Grade A workstation. Tighter spec at rest, monitored in operation. | < 3,520 / m³ |
| Grade C ISO Class 7 | Less-critical operations, gowning vestibules, prep work. One step looser on particle count. | < 352,000 / m³ |
| Grade D ISO Class 8 | Warehouse-adjacent, materials staging. The lowest pressure of the four grades. | < 3,520,000 / m³ |
Read moreShow less
Adjacent rooms step up in classification: Grade B (the room around the Grade A workstation), then Grade C (gowning, less critical operations), then Grade D (warehouse-adjacent). Pressure cascades flow from cleaner to dirtier so contamination cannot drift inward. Each transition has interlocked airlocks. HVAC systems are validated and continuously monitored.
None of this happens accidentally. A real cleanroom is a piece of engineering: structural shell, sealed surfaces, HEPA banks, differential-pressure sensors, particle counters, environmental monitoring program. It is built to spec, qualified through a documented IQ/OQ/PQ process, requalified periodically, and inspected.
A practical tell
If a clinic processes cells in the same room where it treats patients, it is not a cGMP facility. If "the lab" is a corner of the office with a biosafety cabinet, it is not a cGMP facility. A cGMP cell manufacturing suite is physically separate, dedicated infrastructure with its own air system, gowning protocol, and material flow.
How is each batch documented?
Every step that happens to a batch of cells is governed by a Standard Operating Procedure. The SOP specifies what is done, by whom, with what materials, at what temperature, for how long, with what equipment, and how each step is documented. Operators sign in real time. A second operator reviews. Deviations are flagged, investigated, and adjudicated.
This isn't paperwork for paperwork's sake. The product is invisible: you can't look at a vial of cells and know whether anything went wrong. The documentation is how a batch is reconstructed: who touched what, when, with what, to produce what outcome. Every batch is traceable end to end.
What gets captured for every batch.
Seven streams of data, generated as the batch is produced, reviewed independently, and bound into a single record.
- Raw materialsEvery reagent, every media, every supplement: lot numbers, qualification status, expiry.Traceable
- EquipmentEvery incubator, biosafety cabinet, centrifuge: calibration status, qualification, asset ID.Qualified
- Operator signaturesFirst and second initials at every critical step. Performed by one, reviewed by another.Two-person
Read moreShow less
- Process parametersTime, temperature, speed, atmospheric conditions captured at each step.Logged
- Environmental monitoringAir particle counts, surface contact plates, settle plates for the run.Real-time
- In-process testingCell counts and viability at each passage; morphology checks.Per passage
- Deviation logAnything that didn't go to spec: the investigation, the impact assessment, the disposition.Adjudicated
Who tests the cells before release?
Quality Control is the laboratory function that tests each batch before it can be released to a patient. QC sits organizationally apart from manufacturing: different reporting line, different leadership, to remove pressure to pass borderline results. QC's job is to run the assays the regulatory file specifies and report the result to Quality Assurance.
The data goes into a Certificate of Analysis (CoA) for each batch. Without a passing CoA, the batch cannot be released. A clinic that uses a cGMP product should be able to show you the CoA for the batch your dose came from. More on the full testing panel.
Release panel: sample specifications
No vial leaves the facility without a passing result on every required line. A Certificate of Analysis records each one and binds the batch to its data.
Read moreShow less
| Assay | Method | Spec | Status |
|---|---|---|---|
| Sterility | USP <71> · direct inoculation · 14-day observation | No growth | Required |
| Mycoplasma | PCR / culture · USP <63> | Negative | Required |
| Endotoxin | LAL assay · USP <85> | < 0.5 EU/mL | Required |
| Identity | Flow cytometry · CD73⁺ CD90⁺ CD105⁺ · CD45⁻ CD34⁻ CD14⁻ CD19⁻ HLA-DR⁻ | ISCT criteria | Required |
| Viability | Post-thaw, right before treatment | ≥ 95% | Required |
| Potency | IDO induction or T-cell suppression assay | Pass | Required |
The release gate
Quality Assurance is the function that decides whether a batch is released. QA reviews the batch record, the QC results, the environmental monitoring, any deviations, the equipment qualification status, the analyst qualification status. If anything is missing, out of spec, or unresolved, QA does not sign the release.
This is the firewall between "the process produced cells" and "the cells reach a patient." In serious operations QA is a separate department, often with veto authority. The QA signature on a batch release is the document a regulator looks for first.
From analysis to signed release.
Three independent functions. No vial moves to the next step until the prior one is closed.
QC · Analysis
Runs the panel
- Sterility, mycoplasma, endotoxin
- Identity, viability
- Potency
- Generates raw data → CoA
QA · Review
Reviews everything
- Batch record completeness
- QC data vs. spec
- Environmental monitoring
- Deviations + dispositions
Release · Decision
Signs or rejects
- Pass: batch released to clinic
- Fail: batch quarantined
- OOS investigation triggered
- Patient receives identified vial
Read moreShow less
What QA also owns
Beyond batch release: deviation investigation, CAPA (corrective and preventive action), change control, internal audit, vendor qualification, training records, document control. The quality system is the connective tissue holding everything else together. Without it, "cGMP-compliant" is a poster on the wall.
Who works in a cGMP lab?
A cGMP cell manufacturing operation requires specific roles. Many are full-time. None can be done by the same person.
Read moreShow less
Manufacturing side
Process operators
- Process scientistsDevelop and own the manufacturing recipe
- Manufacturing operatorsTrained to specific SOPs, certified per task
- Cleanroom techniciansGowning, environmental monitoring
- Materials managerControlled receipt and storage of raw materials
- EngineeringEquipment qualification, maintenance, calibration
Quality side
Quality team
- QC analystsRun the release panel; qualified per assay
- QC supervisorOversees lab, reviews data, manages calibrations
- QA reviewerIndependent review of batch records before release
- QA manager / headSigns releases, owns the quality system
- Regulatory affairsFilings, audits, regulator communication
A "clinic with a lab" can have one or two of these roles. A cGMP operation has all of them, separately staffed, with documented training and competency records.
How is cGMP compliance verified?
Self-described cGMP compliance is worthless on its own. The standard is verified by external inspection. Three layers commonly apply:
-
Regulator
Federal authority
Periodic on-site inspection. Licensure depends on outcome. Findings can shut a facility down.
COFEPRIS · MX, FDA · US, MHRA · UK, AIFA · IT
-
Accreditation
Third-party body
Voluntary. Signals seriousness beyond the minimum regulatory bar. Periodic audits maintain status.
AABB, FACT, ISO 13485
-
Sponsor audit
Filing partner
When a CMO makes cells for a sponsor pursuing approval, the sponsor audits its supplier. Often the most rigorous review.
Sponsor QA, Pre-license, For-cause
cGMP is infrastructure, not a sticker.
A real cGMP operation has a classified cleanroom, a dedicated quality system, a documented batch record, an external-inspected release panel, and a separately-staffed QA function. A clinic does not have these. The lab that makes its product does, or it doesn't.
If a clinic claims "cGMP" but cannot show you a CoA for the specific batch your dose came from, the claim is decorative. Real cGMP produces documentation as a side effect of operating; it cannot be retrofitted onto a process that doesn't have it.
-
Ask for the CoA
Every batch generates a Certificate of Analysis. Your dose came from a specific batch. The CoA should be retrievable.
-
Ask who signed release
A named QA function: not the clinic, not the doctor, not the marketing page. A cGMP operation has a QA head with a signature.
-
Ask about the last inspection
Date, regulator, outcome. The answers should arrive quickly. Hesitation or vagueness is the answer.
Read on
-
Counts, viability, dose.
How dose is actually measured. Why "millions" is not a clinical unit.
-
The testing panel.
Every assay run on a batch before it reaches a patient, in detail.
-
"Stem cells" aren't the same thing twice.
The cornerstone page. The fact pattern this entire section unpacks.
Still weighing your options?
Take a free two-minute self-assessment. Ten short questions about your situation, goals, and timing, and you get a result matched to where you actually are. Educational only, and it helps our team understand whether regenerative care is a reasonable fit for you.
Free Self-Assessment → Free case review, no cost, no obligation.