FDA cGMP Cleanroom Requirements
Where cGMP is actually written, what the aseptic processing guidance requires of a cleanroom, and how FDA expectations differ from USP and EU GMP.
Current good manufacturing practice is the FDA framework that governs how drugs and medical devices are made. Unlike USP <797>, cGMP does not hand you a table of room requirements. The regulations state what a facility must achieve, and FDA guidance documents state what the agency expects to see. The numbers that drive cleanroom design live in the guidance, not the regulation.
This page explains where each requirement comes from, gives the air classification table FDA uses for aseptic processing, and shows how cGMP compares to the standards our customers work alongside.
Where cGMP is written
There is no single cGMP document. Which rules apply depends on what you make.
|
Regulation or guidance |
Applies to |
|---|---|
|
21 CFR Part 210 |
General cGMP for manufacturing, processing, packing, or holding of drugs |
|
21 CFR Part 211 |
cGMP for finished pharmaceuticals. This is the core drug regulation, and the one that speaks to buildings and facilities. |
|
21 CFR Part 212 |
cGMP for positron emission tomography drugs |
|
21 CFR Part 820 |
Quality Management System Regulation for medical devices, which replaced the Quality System Regulation |
|
Sterile Drug Products Produced by Aseptic Processing, 2004 |
FDA guidance for industry. The source of the air classification table and the airflow, pressure, and monitoring expectations for aseptic manufacturing. |
|
ICH Q7, Q9, and Q10 |
Active pharmaceutical ingredients, quality risk management, and pharmaceutical quality systems, adopted by FDA as guidance |
For medical device manufacturers, note the change that took effect this year. FDA’s Quality Management System Regulation was published on February 2, 2024 and became effective on February 2, 2026. It amends 21 CFR Part 820 to incorporate ISO 13485:2016 by reference. If your quality system documentation still refers to the Quality System Regulation, it is describing a superseded rule.
What Part 211 says about the building
The regulation is short on numbers and long on outcomes. Four sections do most of the work for facility design.
- 211.42, design and construction features. Requires adequate size, suitable construction, and separate or defined areas to prevent contamination and mix-ups. Subsection (c)(10) sets out the expectations for aseptic processing operations specifically, including air filtration systems, environmental monitoring, and a system for cleaning and disinfecting the room.
- 211.46, ventilation, air filtration, air heating and cooling. Requires adequate ventilation, control of air pressure, microorganisms, dust, humidity, and temperature, and air filtration systems on air supplies to production areas.
- 211.56, sanitation. Requires buildings to be maintained in a clean and sanitary condition, with written procedures assigning responsibility and describing methods, equipment, and materials.
- 211.58, maintenance. Requires buildings to be maintained in a good state of repair.
The regulation never says “ISO 7” or “30 air changes per hour”. It says the environment must be suitable and controlled, and leaves you to demonstrate that it is. That is why the 2004 aseptic processing guidance matters so much: it is where FDA states the numbers it expects.
The FDA air classification table
This is the table from FDA’s 2004 guidance on sterile drug products produced by aseptic processing. It is the reference point for any conversation with an FDA investigator about a sterile manufacturing cleanroom.
|
Clean area classification |
ISO designation |
Particles ≥0.5 µm per m³ |
Microbiological active air action level (CFU per m³) |
Microbiological settle plate action level (CFU per 90 mm plate, 4 hours) |
|---|---|---|---|---|
|
Class 100 |
ISO 5 |
3,520 |
1 |
1 |
|
Class 1,000 |
ISO 6 |
35,200 |
7 |
3 |
|
Class 10,000 |
ISO 7 |
352,000 |
10 |
5 |
|
Class 100,000 |
ISO 8 |
3,520,000 |
100 |
50 |
Particle limits are measured in the operational state. Microbiological values are action levels, not classification limits. Class designations are the withdrawn FED-STD-209E names, retained in the guidance and still in common use.
Two points about this table are worth drawing out, because they are where FDA differs from a purely ISO reading of a room.
- FDA sets microbiological action levels alongside particle limits. ISO 14644-1 classifies only non-viable particles. For an aseptic process, viable contamination is the thing that actually matters, and FDA states expected levels for it.
- Particle limits are stated in the operational state. A room certified at rest has not demonstrated what this table asks for.
Airflow, pressure, and air changes
The 2004 guidance gives the design parameters FDA expects to see in an aseptic processing facility.
- Unidirectional airflow velocity in the ISO 5 critical zone: approximately 0.45 m/s, or 90 feet per minute, measured at the working level, with variation of about ±20% around the target.
- Air changes in supporting rooms: at least 20 air changes per hour is generally acceptable for ISO 8 supporting areas. Higher rates are typical in ISO 7 and cleaner rooms.
- Pressure differential between adjacent rooms of differing classification: at least 10 to 15 Pascals, roughly 0.04 to 0.06 inches of water column, with doors closed.
That pressure expectation is notably higher than USP <797>, which asks for more than 0.02 inches of water column, about 5 Pascals. If you are designing a facility that has to satisfy both, design to the stricter number.
FDA also expects airflow visualization studies, commonly called smoke studies, performed under dynamic conditions and covering the critical zone including operator interventions. In our experience this is where aseptic facilities are most often found wanting, and it is a design problem rather than a procedural one.
Cleanroom design that supports cGMP
Because cGMP is written as an outcome rather than a specification, the burden of proof sits with you. Three design decisions carry most of that burden.
- Material and personnel flow. Part 211.42 asks for separate or defined areas preventing contamination. Unidirectional flow, with clear separation between clean and dirty routes, is the most defensible way to demonstrate it, and it is far cheaper to draw than to retrofit.
- Surfaces and cleanability. Sanitation and maintenance are explicit requirements. Smooth, non-shedding, sealed surfaces that tolerate the disinfectants and sporicides actually used are the practical answer.
- Monitoring and records. Environmental monitoring is not an add-on. Where a facility uses continuous monitoring, the electronic records it produces fall under 21 CFR Part 11, which governs electronic records and electronic signatures. Monitoring system selection is therefore a compliance decision as well as a technical one.
FDA compared to EU GMP and USP
Most organizations we work with have to satisfy more than one of these. The differences are real but manageable, provided you design to the strictest requirement in each category rather than averaging them.
|
FDA cGMP |
EU GMP Annex 1 |
USP <797> |
|
|---|---|---|---|
|
Framework |
Outcome-based regulation plus guidance |
Prescriptive annex with tables |
Prescriptive chapter with tables |
|
Cleanliness naming |
ISO classes and FED-STD-209E class names |
Grades A, B, C, D |
ISO classes |
|
Occupancy states |
Operational |
At rest and in operation |
Dynamic operating conditions |
|
Critical zone airflow |
0.45 m/s ±20% |
0.36 to 0.54 m/s |
Per primary engineering control listing |
|
Room pressure differential |
10 to 15 Pa |
10 Pa minimum |
Greater than 5 Pa |
|
Viable limits |
Action levels by class |
Action limits by grade |
Action levels by classification |
Questions we are asked most often
The regulation does not. The 2004 aseptic processing guidance does, in effect: aseptic operations require ISO 5 in the critical zone where sterile product and containers are exposed, inside an ISO 7 surrounding area at minimum. For non-sterile drug manufacturing, no class is mandated, and the appropriate level of control comes from your own risk assessment.
cGMP. Registered outsourcing facilities under section 503B of the Federal Food, Drug, and Cosmetic Act are held to cGMP rather than USP , and FDA has issued specific guidance for them. This is a meaningful step up in facility, quality system, and documentation expectations, and it is one of the most consequential decisions a compounding organization makes.
21 CFR Part 820, now the Quality Management System Regulation, which incorporates ISO 13485:2016 and took effect on February 2, 2026. It requires a controlled environment where environmental conditions could reasonably affect product quality, but it does not specify an ISO class. The class comes from your product and process risk assessment. ISO 7 and ISO 8 are common for device assembly and packaging.
Through inspection rather than certification. FDA does not issue a cleanroom certificate. An investigator reviews your qualification and validation records, your environmental monitoring data and trends, your smoke studies, your deviation and out-of-specification handling, and your maintenance records. The records are the compliance artifact, so a room that performs well but documents poorly will still be cited.
Any change that could affect the environment: modifications to the room, the air handling, the equipment, the process, or the product. Beyond that, periodic requalification on a defined schedule, with the interval justified by risk and supported by your monitoring data.
Important information
The information on this page is intended for general educational purposes only. It does not constitute legal, regulatory, engineering, or professional advice, and it should not be relied upon as a determination of compliance for any particular facility, application, or jurisdiction.
QleanAir makes reasonable efforts to keep this information current. Standards and regulations change, and we do not guarantee that every figure here reflects the most recent version of every applicable requirement. Before making design, construction, testing, operational, or compliance decisions, consult the current FDA regulations and guidance and seek advice from qualified professionals.
Last reviewed: September 2026.