Pharmaceutical maintenance isn't just about equipment uptime — every PM, every calibration, every corrective work order sits inside a regulatory record system that MHRA, EMA and FDA inspectors will interrogate against ALCOA+ principles and EU GMP Annex 11. A single audit-trail gap on a critical utility PM can trigger an inspection observation that halts batch release. Oxmaint gives pharma engineering, maintenance and quality teams one platform for GMP-aligned preventive maintenance, calibration workflow, work orders and complete audit trails against every asset. Book a demo to see GMP maintenance workflows in action.
GMP MAINTENANCE · AUDIT-READY BY DESIGN
Every PM, every calibration, every signature — traceable to ALCOA+
21 CFR 11
Electronic records & signatures — the FDA baseline for regulated CMMS
Annex 11
EU GMP computerised systems — expanded July 2025 draft (5 → 19 pages)
MHRA GxP
UK data integrity guidance — ALCOA+ as system behaviour, not slogan
The 9 Principles of ALCOA+ — Every Maintenance Record Gets Judged Against These
ALCOA+ is the framework every UK, EU and US regulator uses to evaluate pharmaceutical data. Originally 5 principles (Attributable, Legible, Contemporaneous, Original, Accurate), it was expanded to 9 with Complete, Consistent, Enduring and Available. Every PM record, every calibration certificate and every corrective work order in a GMP facility must satisfy all 9 — or the record fails the audit. The grid below shows what each principle means for maintenance data specifically.
A
Attributable
Every entry linked to the identified user who made it — unique login, no shared accounts.
L
Legible
Records readable and permanent — no illegible handwriting, no pencil, no white-out.
C
Contemporaneous
Data recorded at the time the activity is performed — no retroactive back-dating.
O
Original
First-capture data (or certified true copy) preserved — no transcription of source records.
A
Accurate
Reflects the actual observation or measurement — no rounding, no adjustment, no manipulation.
C
Complete
All data captured — including deviations, aborted runs and failed measurements.
C
Consistent
Chronological, timestamped, sequenced correctly across every record system.
E
Enduring
Retained for the required period on durable media — no expiring formats, no lost archives.
A
Available
Retrievable throughout retention lifecycle — accessible on request during any inspection.
The '+' principles (Complete · Consistent · Enduring · Available) were added by MHRA guidance to close the most common inspection gaps identified in FDA warning letters and MHRA findings across UK and EU pharma sites.
The Regulation Stack — Where Maintenance Data Meets Compliance
UK and European pharma maintenance operates against a layered regulatory framework where each layer has specific expectations for how maintenance and calibration records must be captured, stored and reviewed. A CMMS supporting GMP maintenance must map cleanly to every layer — not just one. The stack below shows the frameworks that govern maintenance data in UK and EU facilities.
TOP
EU GMP Annex 11 · Computerised Systems
Requires validated systems, controlled access, audit trails and ALCOA+ data integrity. Applies to any CMMS used in GMP operations. July 2025 draft expansion from 5 to 19 pages tightened cloud & AI expectations.
2
MHRA GxP Data Integrity Guidance
UK-specific guidance defining ALCOA and the '+' extensions. Frames data integrity as system behaviour required continuously — not a periodic audit checkpoint. Applies UK-wide post-Brexit alongside Annex 11.
3
21 CFR Part 11 · Electronic Records & Signatures
FDA baseline for electronic records and signatures — applies to any UK/EU site exporting to the US. Requires user identity binding, timestamped audit trail, and enforced access controls.
4
GAMP 5 · Validation Framework
Risk-based CMMS validation category (typically Category 4 for configured CMMS). Determines validation package scope — user requirements, functional specs, IQ/OQ/PQ protocols and change control.
5
WHO TRS 1010 Annex 4 · Data Integrity
Global reference guidance used by inspectors worldwide. Reinforces ALCOA+ and defines audit trail review as a routine QA task, not an inspection-only response.
The Calibration Lifecycle — Where Maintenance and Quality Overlap
Calibration is where CMMS meets quality management — every calibration record generates a QA-controlled document that determines whether the instrument can be used for GMP-critical measurement. Miss a due date and the instrument becomes "out of calibration" — any batch record it contributed to becomes suspect. The cycle below shows how calibration flows through the platform from schedule to QA approval.
1
Schedule
Interval-based renewal calendar. 60-day, 30-day, 7-day advance alerts by instrument criticality.
2
Perform
Technician executes procedure on mobile with real-time capture. Results attributable to individual user ID.
3
QA Review
Quality reviewer opens record with full audit trail visible. Sign-off electronic, 21 CFR 11 compliant.
4
Approve & Release
Instrument status flips to "approved" — released for GMP use until next due date.
5
Archive & Retain
Full record preserved for retention period. Retrievable during inspection with complete history.
Every step generates ALCOA+ compliant records. No data is deleted; every change is logged with user, timestamp and reason. Sign up free to explore the calibration workflow.
See GMP Maintenance & Calibration Live
Walk through GMP-configured asset trees, calibration workflow with QA sign-off, audit-trail review dashboards and inspection-ready evidence packages — configured against your site's SOP structure. Thirty minutes with the Oxmaint team.
Asset Coverage Across GMP Manufacturing Environments
Pharma maintenance spans a wide asset landscape: sterile fill/finish equipment, tablet compression and coating lines, granulation, blister packaging, cleanroom HVAC handling ISO 5 to ISO 8 environments, WFI (water for injection) systems, clean steam and compressed gas utilities, cold-chain storage, and lyophilisers. Each has its own PM logic, calibration profile and validation status. Oxmaint carries GMP-specific templates for each equipment class with pre-configured PM logic, spare BOMs and criticality tags. Sign up free to explore pharma asset templates.
Expert Perspective — What MHRA Inspectors Actually Look At
Inspectors don't audit CMMS data by browsing — they interrogate. "Show me every PM performed on HVAC-04 in the last 18 months. Now show me the audit trail. Now show me who signed off, when, and why the sign-off happened 6 days after the PM was completed." Every gap in that chain becomes an observation. The pharma sites that pass MHRA inspection cleanly are the ones whose maintenance system was architected around ALCOA+ from day one — where every field is attributable, every change is logged, every calibration record ties back to a QA sign-off, and the whole history retrieves in under a minute. Retrofitting compliance onto a generic CMMS is expensive and error-prone. Building on a GMP-shaped platform is what actually works.
01
Complete audit trail per record
Every field change, every sign-off, every review captured with user ID, timestamp and reason for change — as MHRA and 21 CFR Part 11 require.
02
No delete · no overwrite
Historical records cannot be removed or edited without traceable change history. Original data preserved; corrections logged as amendments.
03
Role-based access enforced
Individual credentials per user; QA sign-off restricted to authorised reviewers; segregation of duties enforced at system level.
04
Inspection-ready export
Complete evidence packages — PM histories, calibration logs, deviation records — exportable in EU GMP format within hours, not weeks.
Who Uses Oxmaint in Pharmaceutical Manufacturing
The platform is used by the specific operational roles that carry engineering and compliance accountability in UK and European pharma facilities: engineering managers running PPM programmes across manufacturing sites, maintenance managers coordinating GMP-trained technician teams across shifts, reliability engineers building failure-mode libraries and criticality classifications, calibration managers coordinating instrument calibration cycles with QA, validation teams maintaining IQ/OQ/PQ documentation across the asset base, quality teams reviewing maintenance and calibration records during batch release, facilities managers operating cleanroom HVAC and WFI systems under environmental controls, and site heads of engineering reporting reliability metrics to plant leadership. Sign up free to configure roles for your engineering team.
Getting GMP Maintenance Live
Deployment starts with importing your existing asset register, PM calendar and calibration schedule into the Oxmaint GMP module. Each asset is tagged with criticality (product-contact / GMP-critical / non-GMP), applicable SOP references and validation status. GAMP 5 Category 4 validation package is available to support your site's CMMS validation protocol — URS, FS, IQ/OQ/PQ templates aligned to Annex 11 expectations. Site-specific SOP configuration for PM workflows, calibration approval routing and audit trail review typically completes inside 60 days for mid-size sites. Book a walkthrough to see live pharma deployments.
Turn GMP Maintenance Into an Audit-Ready System
Oxmaint gives pharmaceutical engineering, maintenance and quality teams one platform for GMP-aligned preventive maintenance, calibration workflow, work orders and complete audit trails — architected around ALCOA+ from day one.
Frequently Asked Questions
What is a pharmaceutical CMMS and how does it differ from a standard CMMS?
A pharmaceutical CMMS is a maintenance management platform purpose-configured for GMP-regulated environments. Unlike a standard CMMS, it must satisfy EU GMP Annex 11 (computerised systems), 21 CFR Part 11 (electronic records & signatures), MHRA GxP data integrity guidance and GAMP 5 validation expectations. This means comprehensive audit trails on every record change, role-based access control, electronic signatures bound to user credentials, no ability to delete or overwrite records, and complete data integrity through ALCOA+ principles. Standard CMMS platforms typically require significant customisation and validation effort to reach this baseline.
Can Oxmaint support GMP maintenance workflows?
Yes. Oxmaint is architected to support GMP-aligned maintenance workflows — preventive maintenance scheduling with SOP references, calibration cycles with QA review and electronic sign-off, corrective work orders with deviation tracking, and asset criticality tagging for GMP-critical, product-contact and non-GMP assets. Full audit trails capture every record event with user identity, timestamp and reason for change. A GAMP 5 Category 4 validation package is available to support your site's CMMS validation protocol.
How should calibration records be managed in a regulated facility?
Calibration records must satisfy ALCOA+ principles: attributable to individual technicians, contemporaneous with the calibration event, complete including any deviations or failed measurements, and enduring through the retention period. Every record needs QA review and electronic sign-off before the instrument returns to GMP use. Out-of-calibration instruments must be visibly segregated with system-level flags preventing further use in production. Oxmaint handles this workflow end-to-end — schedule, perform, review, approve, archive — with full audit trail preserved for every step.
Can maintenance software provide audit trails that satisfy inspectors?
Yes — and this is a core requirement, not a feature. Every record event in Oxmaint (creation, modification, review, approval, archival) is captured with the user identity, timestamp and reason for change. Historical records cannot be deleted or overwritten. Complete evidence packages — PM histories, calibration logs, deviation records, CAPA evidence — are exportable in EU GMP formats. This satisfies MHRA, EMA and FDA audit trail review expectations and eliminates the multi-week manual assembly burden that typically follows an inspection notice.
Does using a CMMS make a pharmaceutical facility GMP compliant?
No — and any vendor claiming otherwise is misleading you. GMP compliance is a site responsibility that requires SOPs, trained personnel, quality management systems, validation programmes, environmental monitoring, batch record controls and continuous regulatory review — none of which any software can provide on its own. Oxmaint supports GMP maintenance workflows and provides the technical foundation (audit trails, electronic records, ALCOA+ data integrity) that a compliant maintenance operation requires. The site's quality system, procedures and validated processes are what deliver actual compliance.
