This is a ready-to-use controlled register for GxP material, component, and service suppliers, the single reference procurement, receiving, and QA check before an order is placed or a lot is accepted.
It covers materials and services generally; for GxP software suppliers specifically, use the approved supplier list for GxP software, which carries fields this register does not (product version, GAMP category, CSA reliance level). Replace every <<FILL: ...>> placeholder with your own specifics. A filled specimen follows. This is general guidance to adapt to your own supplier qualification program and verify, not legal or regulatory advice.
1. Purpose and ownership
The AVL is a controlled document, not a working spreadsheet anyone can edit. Only suppliers on this register, within the scope stated for them, may supply GxP materials or services. Ownership sits with <<FILL: role, e.g. Head of Quality Assurance>>. Procurement may request an addition, a scope change, or a removal; only the document owner or a delegate executes the change.
2. Field list
| Field | Format | Required | Who enters it | When |
|---|---|---|---|---|
| Supplier name | Text | Yes | QA | On qualification |
| Site address | Text | Yes | QA | On qualification |
| Quality contact | Name, email | Yes | QA | On qualification, updated on change |
| Material or service (grade) | Text | Yes | QA | On qualification |
| Risk tier | 1, 2, or 3 | Yes | QA | On qualification, per the supplier risk tier classification |
| Qualification status | Approved, Conditional, Suspended, Disqualified | Yes | QA | On qualification, updated on any status change |
| Qualified by / method | Text (e.g. audit, questionnaire, CoC review) | Yes | QA | On qualification |
| Qualification date | Date | Yes | QA | On qualification |
| Next scheduled review | Date | Yes | QA | On qualification, updated at each review |
| Quality agreement reference | Document number or N/A | Conditional (required for Tier 1 and 2) | QA | On execution |
| Change history | Date, changed by, reason | Yes | QA | Every edit |
3. Instructions
- Add a supplier only after a completed qualification record exists (questionnaire, documentation review, audit where required, quality agreement where required, QA approval). Do not add a supplier on the strength of a purchase order already placed.
- State the scope precisely: the specific material and grade, or the specific service, and the specific site. A supplier approved for one site or one grade is not approved for another without a separate scope entry.
- Record every edit in the change history, including the reason. An AVL with no change history cannot demonstrate what it said on the date a specific lot was purchased.
- Reconcile this register against actual purchase orders and receiving records on a defined schedule,
<<FILL: e.g. quarterly>>, and investigate any off-list purchase found, rather than silently correcting the record. - When a supplier’s status changes to Suspended or Disqualified, update this register the same day the decision is made; do not let the register lag the actual decision.
4. Retention
Retain this register, including every prior version and the full change history, for <<FILL: retention period, e.g. the life of the product plus regulatory minimum>>, per the records retention schedule. Retain superseded versions in a retrievable form so a specific historical entry can be reconstructed on request.
5. Register
| Supplier / site | Material or service (grade) | Tier | Status | Qualified by / method | Qualified | Next review | Quality agreement ref |
|---|---|---|---|---|---|---|---|
<<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> |
<<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> |
6. Change history
| Date | Row affected | Change | Reason | Changed by |
|---|---|---|---|---|
<<FILL>> | <<FILL>> | <<FILL: added / scope changed / status changed / removed>> | <<FILL>> | <<FILL>> |
Filled specimen
The following shows four illustrative register rows, so you can see the level of detail expected. The suppliers, sites, people, and reference numbers are invented for illustration; replace them with your own.
| Supplier / site | Material or service (grade) | Tier | Status | Qualified by / method | Qualified | Next review | Quality agreement ref |
|---|---|---|---|---|---|---|---|
| Acme Fine Chemicals, Site B (Cork, IE) | Microcrystalline cellulose, NF/Ph.Eur. | 2 | Approved | Audit + QA review (QA-J. Reyes) | 2024-03-12 | 2027-03 | QAG-2024-018 |
| Northstar Bioservices (Durham, US) | Sterility testing, USP 71 | 1 | Approved | On-site audit (Lead auditor A. Khan) | 2024-09-02 | 2026-09 | QAG-2024-041 |
| Vector Reagents Ltd (Basel, CH) | Recombinant trypsin, GMP grade | 1 | Conditional | Audit + CAR open (CAR-2025-041) | 2025-01-20 | 2025-07 (re-check) | QAG-2025-006 |
| Old Mill Packaging (former) | Folding cartons | 2 | Disqualified | Repeated mixed-lot defects (DV-2025-118) | n/a | Removed 2025-04 | Terminated |
Change history extract
| Date | Row affected | Change | Reason | Changed by |
|---|---|---|---|---|
| 2025-04-18 | Old Mill Packaging | Status changed Approved to Disqualified | Repeated mixed-lot packaging defects, root cause not resolved after two SCARs (DV-2025-118) | R. Gomez, QA |
| 2025-01-20 | Vector Reagents Ltd | Status changed Approved to Conditional | CAR-2025-041 opened for an out-of-trend endotoxin result; enhanced monitoring in place pending closure | R. Gomez, QA |
Common inspection findings this register prevents
- A “current” AVL that does not match what receiving and purchasing records actually show.
- No change history, so an inspector cannot confirm what the register said on the date a specific lot was bought.
- A disqualified supplier’s row left in an “Approved” state because the register was not updated the day the decision was made.
- Procurement editing the register directly, bypassing QA ownership.
How to adapt this register
- Set your document owner and reconciliation schedule.
- If your system is electronic (a QMS module or a validated spreadsheet with access controls), map these fields onto it and confirm the electronic system itself meets your audit trail requirements; do not run a parallel manual register once the electronic one is live.
- Align the tier values here with your supplier risk tier classification assessment so the two records agree.