Part 1 · Define the use and responsibilities

Chapter 4: GxP Applicability for AI

Document how actual AI use can affect a regulated activity or record.

On this page

Plain meaning

GxP is shorthand for several regulated good-practice areas. Determine the applicable process and obligations rather than treating GxP as a single global rulebook.

An AI application can influence regulated work even when it does not directly control equipment. If its output changes a quality decision, creates a required record, or determines what a reviewer examines, that reliance belongs in the assessment.

Three examples

General learning: An assistant explains a public concept to a learner. The learner does not use the output as an approved procedure.

Drafting: An assistant proposes wording for a quality document. The drafting and review process must address unsupported facts and source integrity before the document is approved.

Decision support: An assistant recommends deviation severity, affecting escalation and investigation. Assess the relationship between an incorrect recommendation and the actual process decision.

Completed scoping note — fictional

The assistant is used during regulated protocol review. Its output is advisory, but reviewers may rely on it to identify gaps. The assessment therefore includes missed findings, false findings, source verification, and the final review workflow. The advisory label does not remove that dependency.

Completed protocol-review assessment — fictional

This teaching assessment assumes a medical-device manufacturer evaluates an assistant within its production-equipment validation process. It is not an assessment of a named commercial product. The same technology can fall into a different scope when its users, jurisdiction or reliance change.

Assessment fieldCompleted example
Intended usePRA-01 suggests candidate gaps between a draft production-equipment validation protocol and its approved requirement set.
UsersQualified validation personnel; the validation process owner controls permitted users.
Process supportedProtocol preparation and review before the normal Quality approval workflow.
Inputs and source documentsDraft protocol, approved user requirements, current validation procedure and equipment risk assessment; document identifiers and revisions are recorded.
OutputsDraft findings, cited passages, unresolved questions and a reviewer disposition for each finding.
Influence on work or decisionsA finding may prompt a protocol revision. An omitted finding could narrow the review if a user treats the list as complete. No AI output is itself an approved requirement or approval decision.
Required human reviewVerify proposed findings against the approved sources and perform the full required protocol review beyond the generated list. Reject unsupported findings and escalate conflicts.
Incorrect or missing outputA missed safety-related alarm challenge could leave inadequate validation coverage; a false requirement could cause unnecessary or misleading changes.
Requirements requiring assessmentDetermine the manufacturer's applicable QMSR and incorporated quality-system obligations, relevant record requirements and whether Part 11 applies to the records/signatures used. FDA CSA recommendations may inform the production/QMS software approach. The AI is not assumed to be a medical-device function.
Scope conclusion and rationaleInclude the application and reviewer workflow in the local GxP and software-assurance assessment because its findings influence a regulated validation activity. Restrict it to controlled evaluation until relevant evidence supports the proposed reliance. “Advisory” does not resolve the omission risk.
Assumptions and open questionsDevice-production context and US market exposure are assumed here. Quality and Regulatory Affairs must confirm actual process, jurisdiction, record scope, supplier arrangements and local procedures. No global classification follows from this example.

The same technology, three uses

UseAssessment questionAssumed conclusion for this fictional situation
General learning using public materialDoes the output influence a regulated activity or record?Outside the protocol-review scope only while it remains personal learning and is not copied into controlled instructions or relied on for a quality decision. Reassess a change in use.
Drafting a validation documentHow is the draft verified before approval and use?Include the drafting/review dependency in the assessment where draft content becomes a controlled document. Independent verification and approval are assumed, not proven merely by a label.
Identifying protocol gapsCould a missed finding affect the adequacy of the approved protocol?Include omission risk and the final review outcome. The full required review remains in place; its effectiveness must be evaluated.

Use the GxP assessment worksheet to record the assumptions and open applicability questions. The system-use assessment tool can help structure the initial facts; its output does not replace the local scope decision.

Exercise

A tool is marked “for information only,” yet its output is copied into a batch decision without verification. Is the label sufficient?

Show suggested answer

No. Correct the use or the process and assess the real reliance. The operational behavior determines the problem that needs control.

Expected records

The completed GxP assessment, confirmed applicability questions, source/record scope and local scope decision. Adapt record names and detail to the applicable procedures; these are practitioner examples, not a universal mandatory document list.

Worksheets

Each worksheet includes instructions, a completed fictional example and a blank version. Adapt it to your applicable procedures and requirements.

Relevant regulations and guidance

Regulations set requirements within their scope; guidance offers recommendations or explains applicable expectations; standards depend on adoption or incorporation. Voluntary frameworks do not establish compliance. The lesson's controls, test designs and example records are practitioner suggestions unless explicitly identified otherwise.

21 CFR Part 820 — Quality Management System Regulation ↗

Regulation · U.S. Food and Drug Administration · QMSR: 2024 final rule

Scope: United States · Finished medical-device manufacturers and the operations within Part 820 scope.

Relevance to this lesson: Assess actual manufacturer and operation scope; an advisory label does not answer the quality-system question.

Publication status: Final / published. Source checked 21 September 2026.

Publication identity, scope and status checked against the linked official source. This is not an independent audit of every retained guide statement.

Source details and applicability

21 CFR Part 11 — Electronic Records; Electronic Signatures ↗

Regulation · U.S. Food and Drug Administration · Current eCFR text

Scope: United States · Electronic records and signatures within FDA Part 11 scope, tied to the underlying required records.

Relevance to this lesson: Assess electronic-record and signature scope from the records actually required and used.

Publication status: Final / published. Source checked 21 September 2026.

Publication identity, scope and status checked against the linked official source. This is not an independent audit of every retained guide statement.

Source details and applicability

Computer Software Assurance for Production and Quality Management System Software ↗

Guidance · U.S. Food and Drug Administration · February 2026

Scope: United States · Medical-device manufacturers assuring software used in production or their quality management system.

Relevance to this lesson: Use the recommendations conditionally for device-production/QMS software.

Publication status: Final / published. Source checked 21 September 2026.

Publication identity, scope and status checked against the linked official source. This is not an independent audit of every retained guide statement.

Source details and applicability
Editorial information and limitations

Educational chapter · Editorial version 2.0. The update date records substantive site editing; a completed independent technical review is not claimed.

AI tools assisted drafting and structural editing. Examples and results labelled fictional or synthetic are teaching material. Adapt the methods to the actual intended use, applicable requirements and approved procedures.

Estimated reading time uses the written lesson at 220 words per minute, with links and Markdown formatting removed. Video time comes from the media file and is separate.

Sources, authorship and editorial policy
Suggest a correction

Sent privately to the editorial moderation queue. Your account email and correction are not published as a comment. Do not include confidential or personal information.

Chapter: 4: GxP Applicability for AI · Chapter link

Loading sign-in status…

Correction details

Was this resource useful?

Tell us what helped and what could be clearer. Usefulness feedback does not establish technical validity or regulatory compliance.

Loading contribution options…

Questions and discussion

Ask a question or share a perspective. Contributions are reviewed before publication.

Loading contribution options…