When FDA investigators or EU GMP inspectors walk into a cryogenic storage area, they ask the same core questions: Is every tank qualified? Is temperature recorded continuously, with a secure audit trail? Is every alarm answered and documented? Is every change controlled? The differences between FDA and EMA expectations sit mostly in the legal texts, not in the substance.
That matters because the cryostore has become one of the most valuable rooms in a regulated facility. Master and working cell banks, retention samples, clinical trial material and patient-specific cell therapy batches all end up in liquid nitrogen, and many of them cannot be replaced. This guide is a practical inspection checklist for FDA and EMA cryogenic storage audits: what gets checked, where US and EU rules overlap, and which documents the equipment supplier delivers versus what the site must own.
The regulatory basis: US cGMP and EU GMP side by side
Neither the FDA nor the EMA "approves" or "certifies" a cryogenic tank. Both regulators inspect the operator: its procedures, its records and its evidence that the equipment is fit for its intended use.
United States (FDA)
- 21 CFR Part 211: cGMP for finished pharmaceuticals, including §211.68 on automatic, mechanical and electronic equipment
- 21 CFR Part 11: electronic records and electronic signatures
- 21 CFR Part 1271: human cells, tissues and cellular and tissue-based products (HCT/Ps), including storage within established temperature limits, with monitoring and records
- FDA guidance "Data Integrity and Compliance With Drug CGMP" (2018)
European Union (EMA and national competent authorities)
- EU GMP Guide (EudraLex Volume 4), Chapters 3 and 4: premises, equipment and documentation
- EU GMP Annex 15: qualification and validation, from the user requirement specification (URS) through DQ, IQ, OQ and PQ
- EU GMP Annex 11: computerised systems, which covers monitoring software, audit trails and access control
- EU GMP Annex 1: sterile manufacturing and the contamination control strategy
- GMP for ATMPs (EudraLex Volume 4, Part IV): dedicated guidelines for advanced therapy medicinal products
If you supply both markets, design the cryostore once so it satisfies both frameworks. For the general requirements of a GMP cryostore, see our guide to GMP-compliant cryogenic storage for pharmaceutical companies.
The inspection checklist: what investigators actually look at
Inspections tend to follow a similar path. Investigators usually start with qualification status, move on to the data and finish with deviations.
1. Qualification and requalification
- Is there a URS that defines temperature range, capacity, storage phase (vapour or liquid) and alarm functions?
- Are the IQ and OQ reports signed, with every deviation closed?
- Was a PQ performed under real conditions, typically with temperature mapping of the loaded tank?
- Is there a periodic review or requalification after repairs, relocation or modification?
Our article on IQ/OQ validation of cryogenic systems walks through both stages in detail.
2. Temperature monitoring and calibration
- Is temperature recorded continuously, not by spot checks?
- Are probes calibrated against traceable standards at defined intervals?
- Is the probe position justified, for example by mapping results?
- Is the liquid nitrogen level monitored and recorded as well?
3. Alarm handling
An alarm nobody sees counts as no alarm at all. Investigators look for justified alarm limits, an out-of-hours escalation chain, periodic alarm tests and records of who responded and when. Our guide to a centralised cryogenic monitoring system shows how to build that chain across several sites.
4. Deviations, CAPA and change control
- How was each temperature excursion handled, including an impact assessment of the affected material?
- Are corrective and preventive actions (CAPA) tracked through to an effectiveness check?
- Do changes to tanks, software, alarm limits or storage locations go through formal change control?
5. Traceability and contingency
Every sample must map to a unique location: tank, rack, box, position. Investigators also expect a tested contingency plan with backup capacity, an LN₂ reserve and named responsibilities.
Data integrity: where FDA and EMA expectations converge
Data integrity has become a central inspection theme on both sides of the Atlantic. The yardstick is ALCOA+: data must be attributable, legible, contemporaneous, original and accurate, plus complete, consistent, enduring and available.
In a cryostore, that translates into:
- Individual user accounts, never a shared login on the monitoring PC
- An audit trail that records changes to limits, alarm acknowledgements and data with user, timestamp and reason
- Routine audit trail review as a documented step, not just a software feature
- Backup and restore that has been tested and documented
- Paper records, such as LN₂ fill logs, signed clearly and never overwritten
Does 21 CFR Part 11 apply to temperature records?
Yes, whenever electronic temperature records replace GMP paper records or are submitted as evidence to the FDA. The EU equivalent is Annex 11. Both require the computerised system to be validated for its intended use, and that validation is the operator's responsibility even when the supplier provides the groundwork.
FDA vs. EMA: what overlaps and what differs
Where the expectations match
- Equipment qualified before use, with risk-based requalification
- Continuous, calibrated temperature monitoring with documented alarms
- ALCOA+ data integrity, audit trails and access control
- Formal deviation, CAPA and change control processes
Where they differ
- Terminology and structure: the EU uses Annex 15 and the V-model of URS, DQ, IQ, OQ and PQ. The FDA expects equivalent evidence but frames it through 21 CFR 211 and its guidance documents.
- How findings are recorded: the FDA issues observations on Form 483; EU inspectorates write an inspection report with classified deficiencies.
- Cell and tissue products: in the US, 21 CFR Part 1271 explicitly governs HCT/P storage; in the EU, the ATMP GMP guidelines apply alongside the tissues and cells directives.
Supplier vs. site: who delivers which evidence
A blurred line between operator and supplier is a typical weak point in an inspection. A quality agreement and a clear list of deliverables prevent it.
The equipment supplier typically delivers:
- Technical documentation, operating manuals and material certificates
- IQ and OQ protocols and reports, executed by trained technicians
- Calibration certificates for probes and the measurement chain
- A maintenance and service concept, spare parts and emergency support
- Evidence of its own quality management system, such as ISO 13485
The site owns:
- URS, risk assessment and PQ
- SOPs, training and release
- Day-to-day monitoring, alarm response and audit trail review
- Deviations, CAPA, change control and supplier qualification
How these handovers are evidenced across freezing, storage and shipping is covered in our guide to cryogenic cold chain validation.
Inspection-ready cryogenic storage from Consarctic®
Consarctic® is a market-leading German manufacturer of cryogenic systems for the life sciences, delivering cryostores that are built for audits from day one:
- Quality management: certified to ISO 9001:2015 and EN ISO 13485:2016, with manufacturing to GMP requirements
- Qualification: installation with IQ/OQ by certified Consarctic technicians, with GMP-compliant documentation
- Storage: ABV+, ABS+, BSD+ and BSF+ cryogenic tanks for vapour and liquid phase, with an eccentric opening that cuts LN₂ consumption by up to 30 %
- Monitoring: the Consarctic® Monitoring-System with alarm forwarding, and Biolog® software for temperature, event and fill-level data per container
- Freezing and transport: BIOFREEZE® controlled rate freezers with audit-trail-compatible software, and ASR+ dry shippers with integrated data loggers
- Lifecycle: maintenance plus 24/7 emergency service, 365 days a year
More than 1,500 customers in over 30 countries rely on Consarctic®, including Bayer, GSK and Roche. Learn more about qualification, maintenance and support on our Consarctic services page.
Frequently Asked Questions (FAQ)
What does the FDA check on cryogenic tanks?
The FDA inspects the operator rather than the tank itself: equipment qualification, continuous calibrated temperature records, alarm handling, deviations with product impact assessment, 21 CFR Part 11 data integrity and traceability of every sample to its storage location.
Does 21 CFR Part 11 apply to temperature records?
Yes, when electronic temperature data serve as a GMP record. The system then needs an audit trail, access control and validation for its intended use. In the EU, Annex 11 sets comparable requirements.
What must the supplier deliver for qualification?
The supplier normally delivers technical documentation, material certificates, IQ and OQ protocols with reports, and calibration certificates. The URS, risk assessment, PQ and final release remain the operator's responsibility.
Is there such a thing as an FDA-approved cryogenic tank?
No. The FDA does not approve storage equipment used in GMP manufacturing. What counts is that the operator proves the tank is fit for purpose through qualification and runs it under controlled, documented conditions.
Audit readiness starts at the design stage
Sites pass cryogenic storage inspections when qualification, monitoring and data integrity are planned as one system rather than documented after the fact. The good news: the FDA and the EMA want essentially the same things, so a well-designed cryostore satisfies both.
How ready would your cryostore be for an unannounced inspection? Talk to the Consarctic® team. We plan, deliver and qualify cryogenic storage that is ready for inspection.
