Supplier Change Control: The Quality System Machinery a Research Peptide COA Cannot Replace

Supplier change control is the machinery pharmaceutical quality systems use to guarantee that when anything about a manufacturing arrangement changes, the change is evaluated, approved, documented and communicated to the parties it affects. In the research peptide supply chain, that machinery does not exist. No regulation, contract or quality agreement obliges a peptide manufacturer to tell a research buyer that a synthesis route, a purification step or a raw material supplier changed between one batch and the next, and the certificate of analysis, the only quality document that crosses the transaction, describes a single batch without saying anything about whether the process that produced it is still the process that produced the previous one.

The absence is easy to overlook precisely because it is an absence. A certificate is a visible artifact, so discussion of peptide quality tends to focus on what the certificate contains. The more consequential question is what surrounds the certificate in a regulated setting and is missing in an unregulated one. In pharmaceutical manufacture, a certificate of analysis is the last document in a long chain of obligations: supplier qualification, written quality agreements, formal change evaluation and mandatory downstream notification. Strip those obligations away and the same piece of paper carries a very different amount of information. This article examines the machinery itself, what the guidelines actually require, what the contracts are supposed to say, what quality failure costs when it is measured, and what a research buyer is left with when none of it applies.

The obligation to evaluate, and the obligation to tell

The foundational text is ICH Q7, the internationally harmonised good manufacturing practice guide for active pharmaceutical ingredients. Its Section 13 states the core requirement plainly: a formal change control system should be established to evaluate all changes that may affect the production and control of the intermediate or API. The scope in paragraph 13.11 is broad by design. Written procedures must cover the identification, documentation, review and approval of changes in raw materials, specifications, analytical methods, facilities, support systems, equipment, processing steps, and labelling and packaging materials. Paragraph 13.13 requires proposed changes to be classified, minor or major, so that the level of testing, validation and documentation matches the risk. Paragraph 13.15 adds a closing step that is easy to miss: once a change is implemented, the first batches produced under the changed process must be formally evaluated.

Two provisions matter most for anyone thinking about supply chains. Paragraph 7.14 states that changing the source of supply of critical raw materials should itself be treated according to Section 13. Swapping one vendor of a protected amino acid for a cheaper one is not a procurement decision under Q7. It is a quality event that must pass through the same formal evaluation as a process change. And paragraph 13.17 creates the duty that has no analogue at all in the research market: manufacturers who convert an API into finished products should be notified of changes from established production and process control procedures that can affect the quality of the API. Inside the regulated chain, a significant change is not merely evaluated. It travels. Someone downstream has a right to know, in writing, before the changed material reaches them.

Quality agreements, the contract that carries the duty

Between companies, these duties are carried by a specific instrument. In November 2016 the US Food and Drug Administration finalised its guidance on contract manufacturing arrangements, which defines a quality agreement as a comprehensive written agreement between the parties that establishes each party’s manufacturing activities and how each will comply with current good manufacturing practice. The guidance is unambiguous about where the weight sits. Of all the elements a quality agreement contains, it identifies quality and change control as the most critical pieces.

The change control section of that guidance repays close reading. It recommends that the parties agree in advance which changes require the owner’s review and approval before implementation and which the contract facility may make on its own, and that the agreement spell out how all changes are managed. The list of changes for which reporting expectations should be defined begins with components and their suppliers, then extends through establishment locations, manufacturing processes, testing procedures, major equipment, shipping methods, lot numbering and container closure systems. ICH Q10, the pharmaceutical quality system guideline adopted in June 2008, frames the same obligation at the system level in its Section 2.7: the quality system extends to purchased materials, suppliers must be assessed through audits, material evaluations or qualification, responsibilities and communication processes must be defined in a written agreement, and incoming materials must be monitored to confirm they come from approved sources through the agreed supply chain.

The FDA guidance also illustrates how the machinery fails when it is not exercised. One of its case studies describes an owner whose own written procedure required a site audit of contract facilities every two years, and who never audited the contract laboratory that was quietly reporting passing results for analyses that had failed. The lesson cuts both ways. Paper obligations without follow-through catch nothing, and that is inside a system where regulators can inspect the paper. Where no paper exists, there is nothing to fail to follow.

What quality failure looks like when it is measured

The pharmaceutical system generates data about its own failures, which makes it possible to see what is at stake. In 2019 the FDA Drug Shortages Task Force analysed 163 drugs that entered shortage in the five year period between 2013 and 2017. Sixty two percent of those drugs went into shortage after supply disruptions associated with manufacturing or product quality problems. Another 18 percent entered shortage for unknown reasons, 12 percent followed unanticipated increases in demand, 5 percent followed natural disasters and 3 percent followed product discontinuations. The drugs in the sample were old, with a median time since first approval of almost 35 years, and the report is explicit about why age matters: facilities deteriorate, technology evolves, and suppliers change, so a process that is not continually re-evaluated drifts until it breaks.

The number is worth sitting with. Even with formal change control, mandatory notification and written quality agreements all in force, quality problems remain the dominant measured cause of supply failure, roughly five times the contribution of natural disasters. The machinery does not prevent every failure. What it does is make failure visible, attributable and correctable, because every change and every deviation leaves a record that investigators can walk back through. Subtract the machinery and the failure modes do not go away. They simply stop being recorded, and a buyer discovers a process change the only way left, through the material itself.

Key Research Findings

• ICH Q7 Section 13 requires a formal change control system evaluating all changes that may affect production and control of an API, with written procedures covering raw materials, specifications, analytical methods, facilities, equipment and processing steps, and classification of changes as minor or major (paragraphs 13.10 to 13.13).
• ICH Q7 paragraph 7.14 routes any change in the source of supply of critical raw materials through formal change control, and paragraph 13.17 requires downstream manufacturers to be notified of changes that can affect API quality.
• ICH Q7 paragraph 7.30 permits a supplier’s certificate of analysis to substitute for in-house testing only where the manufacturer operates a system for evaluating suppliers.
• The FDA guidance on contract manufacturing arrangements (November 2016) identifies quality and change control as the most critical elements of a quality agreement, and places components and their suppliers first in the list of changes whose reporting must be agreed between the parties.
• ICH Q10 Section 2.7 (June 2008) extends the pharmaceutical quality system to purchased materials, requiring supplier assessment, written agreements defining communication processes, and monitoring that incoming materials come from approved sources through the agreed supply chain.
• The FDA Drug Shortages Task Force (2019) found that of 163 drugs entering shortage between 2013 and 2017, 62 percent followed supply disruptions associated with manufacturing or product quality problems, against 12 percent for demand increases and 5 percent for natural disasters.

A market with no owner

The FDA guidance vocabulary exposes the structural problem in the research peptide market. The guidance divides the world into owners and contract facilities. The owner’s quality unit carries final responsibility for approving or rejecting product, no matter who physically made or tested it, and the guidance repeats several times that no quality agreement can delegate that responsibility away. The entire framework assumes that some party in the chain is an owner, holds a quality unit, and answers for the product.

Trace a typical research peptide transaction and the owner role is simply vacant. The compound is synthesised in bulk, frequently by an overseas manufacturer several commercial steps removed from the storefront. The vendor is functionally a distributor. The buyer is an individual laboratory with no quality unit and no contractual standing to audit anyone. Nobody in that chain occupies the owner position, which means nobody is party to a quality agreement, which means no change, however consequential, is reportable to anyone. A manufacturer can alter its synthesis route, move production between facilities, subcontract a step, or exchange its own starting material suppliers without creating a single document a buyer could ever see. The headline purity percentage on the next certificate may not move at all while the impurity landscape underneath it changes completely, a problem examined in detail in the analysis of batch to batch comparability.

Paragraph 7.30 of Q7 makes the circularity explicit. Even inside the regulated system, a supplier’s certificate of analysis is an acceptable substitute for in-house testing only where the recipient operates a supplier evaluation system, audits included. The certificate alone was never considered sufficient evidence. It becomes sufficient in combination with qualification machinery that vouches for the issuer. The research market runs on supplier certificates while lacking every part of the machinery that makes such certificates meaningful, which is why published guidance on evaluating a research peptide supplier leans so heavily on the few signals a buyer can still check from outside.

What a batch specific certificate can and cannot compensate for

A third party certificate of analysis tied to a specific batch is best understood as an endpoint measurement that does not depend on process history. An independent laboratory receives the material that actually shipped and characterises it, whatever upstream changes did or did not occur. That is a genuinely different epistemic object from a manufacturer’s certificate, because it does not require trusting the process, and its value survives the process changing silently. It has limits that should be stated just as plainly. It cannot certify that the next batch will resemble this one. It cannot reach upstream into raw materials and route selection. And it is only as good as the ability to verify the certificate itself with the laboratory that issued it, since a document nobody can authenticate is not evidence.

The allocation logic follows directly. Pharmaceutical systems invest heavily in process control precisely so that endpoint testing can be trusted and, in defined cases, reduced. A supply chain without process control obligations must run the allocation in reverse: assume nothing about the process, and measure each batch as though it were the first. That is the coherent way to read a research peptide certificate, not as proof of a controlled process but as a batch by batch substitute for one, and it is the reason batch specific third party certificates carry more weight in this market than any general claim a supplier makes about its methods.

Limitations and open questions

Three caveats bound the argument. First, the FDA quality agreements guidance is formally nonbinding, and even within pharmaceutical manufacture a quality agreement cannot transfer statutory responsibility, so the machinery described here is itself an imperfect instrument rather than a guarantee. Second, the 62 percent figure describes drugs in shortage across the US market generally, not peptides specifically, and it quantifies association with quality problems rather than proven causation in each case. Third, the difficulty of managing change is not unique to unregulated markets. ICH Q12, adopted in November 2019, exists because post-approval change management was burdensome enough inside the regulated system to need its own guideline. No comparable framework, binding or voluntary, has been proposed for research use chemicals, and because no notification duty exists, the actual frequency of silent process changes in the research peptide supply chain is not just unknown but structurally unmeasurable. That unmeasurability, rather than any single failure, is the strongest argument for verifying every batch independently.

All compounds discussed are supplied strictly as research chemicals. For research purposes only. Not for human consumption. Not for diagnostic or therapeutic use.