ICH Q10 Pharmaceutical Quality System: How It Differs from ISO 13485 and When It Applies

ICH Q10 is the International Council for Harmonisation's guideline on the Pharmaceutical Quality System. It describes a comprehensive model for managing quality across the entire pharmaceutical product lifecycle, from development through commercial manufacturing to product discontinuation.

For pharmaceutical companies, ICH Q10 works alongside ICH Q8 (Pharmaceutical Development) and ICH Q9 (Quality Risk Management) to form the ICH Quality Trio, a framework that has shaped how regulators in the US, EU, and Japan evaluate pharmaceutical quality systems.

Understanding ICH Q10 is important for any pharmaceutical quality team, but particularly for those who also operate under ISO 13485 or who manage combination products subject to both pharmaceutical and medical device oversight.

<h2>What ICH Q10 covers</h2>

ICH Q10 describes four pharmaceutical quality system elements that must be in place throughout the product lifecycle:

<ol>
<li><strong>Process performance and product quality monitoring</strong> — Systems to monitor process performance and product quality data, identify sources of variability, and trigger improvement actions when performance shifts</li>
<li><strong>Corrective action and preventive action (CAPA)</strong> — A systematic approach to investigating product and process nonconformances, identifying root causes, and implementing sustainable corrections</li>
<li><strong>Change management</strong> — Systems for evaluating, approving, implementing, and reviewing changes to manufacturing processes, facilities, and equipment</li>
<li><strong>Management review of process performance and product quality</strong> — Regular leadership-level review of quality system performance using defined metrics</li>
</ol>

ICH Q10 also identifies three "enablers": knowledge management, quality risk management (aligned with ICH Q9), and quality culture.

The guideline covers four specific lifecycle stages: pharmaceutical development, technology transfer, commercial manufacturing, and product discontinuation. The requirements for each stage differ in emphasis, but the underlying quality system elements apply throughout.

<h2>ICH Q10 vs. ISO 13485: Key differences</h2>

Both ICH Q10 and ISO 13485 describe quality management system requirements for regulated life sciences manufacturers, but they target different industries and address different regulatory contexts. Understanding the differences helps quality teams operating across both pharmaceutical and medical device product lines avoid duplication and identify genuine gaps.

<h3>Industry scope</h3>

ICH Q10 applies to pharmaceutical manufacturers (small molecule drugs, biologics, APIs, and finished dosage forms). ISO 13485 applies to medical device manufacturers and their supply chains. A company making a drug-device combination product may need to satisfy elements of both.

<h3>Regulatory basis</h3>

ICH Q10 is a guidance document, not a mandatory regulatory requirement. However, FDA, EMA, and the Japanese PMDA have all incorporated its principles into their GMP expectations. An FDA GMP inspection of a pharmaceutical facility will evaluate whether the quality system reflects ICH Q10 principles, even though the regulation being enforced is 21 CFR Parts 210/211, not ICH Q10 itself.

ISO 13485, by contrast, is a certifiable standard. Medical device companies can be audited and certified against it by notified bodies, and EU MDR requires a quality management system that satisfies ISO 13485 requirements.

<h3>Lifecycle orientation</h3>

ICH Q10 places more explicit emphasis on the development-to-commercial transition and on continuous improvement of manufacturing processes throughout the commercial lifecycle. The standard expects that product and process knowledge accumulated during development continues to inform quality activities after launch.

ISO 13485 is more focused on consistent production and delivery of safe, effective devices within a defined quality management framework, with post-market surveillance feeding back into design and process decisions.

<h3>Knowledge management</h3>

ICH Q10 specifically addresses pharmaceutical knowledge management as a system element: the collection, analysis, and use of product and process knowledge to support quality decisions throughout the lifecycle. This is more explicitly articulated in ICH Q10 than in ISO 13485.

<h3>Quality risk management integration</h3>

ICH Q10 explicitly integrates with ICH Q9 (Quality Risk Management), which provides the risk assessment framework for pharmaceutical quality decisions. ISO 13485 references ISO 14971 for risk management in medical device contexts. The underlying concepts overlap, but the specific methods and documentation conventions differ.

<h2>When ICH Q10 applies</h2>

If your organization manufactures pharmaceutical drug products or biological products subject to FDA 21 CFR Parts 210/211, EU GMP, or PMDA guidelines, ICH Q10 provides the quality system model that regulators expect you to follow.

Practically, this means:

<ul>
<li>Pharmaceutical companies with FDA INDs, NDAs, or ANDAs</li>
<li>Biologics manufacturers subject to 21 CFR Part 600–680</li>
<li>Contract manufacturing organizations (CMOs) producing drug products for regulated sponsors</li>
<li>API manufacturers supplying pharmaceutical finished dosage form manufacturers</li>
</ul>

If you are a medical device company without pharmaceutical products in your portfolio, ISO 13485 is the primary standard. ICH Q10 is not directly applicable. However, if you manufacture a combination product with a drug component, you will need to address the pharmaceutical quality elements ICH Q10 describes.

<h2>Key ICH Q10 requirements to build into your QMS</h2>

<h3>Annual product review</h3>

ICH Q10 expects a systematic annual review of each commercial product that assesses process performance, quality data trends, changes made during the year, and complaints or field alerts. The <a href="https://www.cloudtheapp.com/glossary-annual-product-review/">annual product review</a> (also called a Product Quality Review or PQR) is a tangible output of the product quality monitoring system.

<h3>Documented CAPA system with trend analysis</h3>

ICH Q10 expects CAPA to function not just as a reactive tool for individual events but as a mechanism for identifying and addressing systemic trends. Your CAPA system should include trend review of batch failures, deviations, OOS results, and complaints to identify patterns before they escalate.

<h3>Change management with impact assessment</h3>

Changes to manufacturing processes, materials, analytical methods, or facilities require a structured impact assessment that evaluates effects on product quality, validation status, and regulatory filings. ICH Q10 aligns with the process change notification requirements that apply when manufacturing changes must be reported to regulators.

<h3>Management review with quality metrics</h3>

Leadership must conduct periodic reviews of quality system performance using defined metrics. These reviews should cover batch failure rates, OOS investigation outcomes, CAPA status and effectiveness, audit findings, and complaint trends. ICH Q10 expects these reviews to drive improvement decisions, not simply record observations.

<h2>ICH Q10 implementation in practice</h2>

For companies already operating under 21 CFR Parts 210/211 or EU GMP Annex guidelines, most of the structural elements ICH Q10 requires will already be in place. The gaps are usually in integration and data management: CAPA systems that do not systematically mine deviation and complaint data for trends, annual product reviews that are compiled manually from disconnected data sources, or management review meetings that rely on manually prepared reports rather than real-time quality metrics.

An electronic QMS that integrates CAPA, deviation management, complaint handling, change control, and analytics in one platform reduces the manual effort required to demonstrate ICH Q10 compliance and makes the required data connections more reliable.

Cloudtheapp provides a fully validated, AI-powered eQMS with 60+ applications for regulated industries including pharmaceutical, medical device, and biotech. CAPA, change management, deviation management, annual product review, supplier qualification, and analytics are all built into a single system with a complete audit trail.

<a href="https://www.cloudtheapp.com/demo/">Schedule a demo</a> to see how Cloudtheapp supports ICH Q10 pharmaceutical quality system requirements in practice.

<h2>Related reading</h2>

<ul>
<li><a href="https://www.cloudtheapp.com/gmp-compliance-for-pharmaceutical-companies-key-requirements-and-obligations/">GMP Compliance for Pharmaceutical Companies: Key Requirements and Obligations</a></li>
<li><a href="https://www.cloudtheapp.com/pharmaceutical-qms-software-the-complete-guide-to-cgmp-compliance/">Pharmaceutical QMS Software: The Complete Guide to cGMP Compliance</a></li>
<li><a href="https://www.cloudtheapp.com/fda-qmsr-2026-the-complete-guide-to-the-quality-management-system-regulation/">FDA QMSR 2026: The Complete Guide to the Quality Management System Regulation</a></li>
</ul>

Please complete the form to access the Case Study

Please complete the form to access the Case Study

You will receive the webinar link via email once your request has been approved

Sign Up for Cloudtheapp

New to Cloudtheapp?

Access to try Cloudtheapp can be granted after you request a demo to learn how it can transform your operations.

Existing Customer User?

You can proceed with signing up.

New to Cloudtheapp?

Access to try Cloudtheapp can be granted after you request a demo to learn how it can transform your operations.

Existing Customer User?

You can proceed with signing up.

Please complete the form to access the Case Study

Please complete the form to access the Case Study

Please complete the form to access the Case Study

Please complete the form to access the Case Study

Please complete the form to access the Case Study