Raising the Bar in GxP Compliance – Part 20: EMA’s Digital GMP Overhaul – What Annexes 11 & 22 Mean for You.
Welcome to the twentieth instalment of Raising the Bar in GxP Compliance, Rephine’s expert-led blog series for QA and regulatory professionals. In this edition, we explore the European Medicines Agency’s ground-breaking draft revisions to the EU GMP Guidelines—specifically Chapter 4, Annex 11, and the brand-new Annex 22 on artificial intelligence. These updates mark a bold shift towards digital-first compliance, with far-reaching implications for documentation, computerised systems, and the use of AI in GxP environments. Read on to understand what these changes mean for your organisation, and how Rephine can help you get ahead of the regulatory curve.
Digital transformation is reshaping GxP compliance.
As the EMA introduces sweeping revisions to EU GMP guidelines, including a first-of-its-kind annex on AI, pharma companies must rethink how they govern data, systems, and innovation—without compromising quality or oversight.
EMA Launches Consultation on Major EU GMP Revisions
In July 2025, the European Medicines Agency (EMA) launched a public consultation on three critical updates to the EU GMP Guidelines (EudraLex Vol. 4) that will redefine how pharmaceutical companies manage documentation, digital systems, and artificial intelligence in regulated environments. These drafts include:
- Revised Chapter 4: Documentation
- Revised Annex 11: Computerised Systems
- New Annex 22: Artificial Intelligence
This coordinated revision represents a strategic step towards building a modern, technology-enabled regulatory framework that safeguards product quality while enabling innovation.
Why the New EU GMP Guidelines Matter for Pharma
The EMA recognises the rapid digital transformation across the pharma industry and the increasing complexity of GxP environments. These drafts aim to:
- Ensure that documentation remains accurate, complete and legible across paper, digital and hybrid formats
- Strengthen controls for computerised systems, from design to operation to supplier oversight
- Introduce a regulatory structure for AI and machine learning applications in GxP settings
Together, these documents signal a future where risk-based, data-driven compliance becomes the norm.
.
What’s Changing: Chapter 4, Annex 11, and Annex 22 Explained
- Chapter 4 – Documentation
- Applies to all documentation forms: text, image, audio, video
- Embeds Quality Risk Management (QRM) and data governance across the documentation lifecycle
- Aligns with ALCOA+ and data integrity principles
- Annex 11 – Computerised Systems
- Enhances system lifecycle control: requirements, validation, change management
- Strengthens data integrity, audit trail, and security requirements
- Mandates supplier qualification and performance oversight
- Annex 22 – Artificial Intelligence
- Establishes GxP requirements for AI model training, validation, intended use, and performance monitoring
- Requires human oversight and procedures for algorithmic review
- Demands traceability, quality of training/test data, and lifecycle management of AI tools
Key Dates and How the Industry Can Participate
Rephine is currently reviewing the draft guidelines and preparing its official input to the EMA consultation, available here
Final publication expected in late 2025 or early 2026
This is a key moment for industry professionals, QPs, IT, QA, and compliance leaders to understand the direction of EU regulation and prepare accordingly.
To support the industry through this transition, Rephine will be publishing a dedicated series of articles and LinkedIn posts over the coming weeks. These will explore each section of the consultation in depth, provide practical advice for implementation, and offer timely insights on the implications for GxP operations.
Preparing for Compliance: What Pharma & Biotech Must Do Now
Companies operating in the EU — and those exporting to EU markets — will need to:
- Review internal systems and documentation frameworks against new expectations
- Reassess validation and supplier qualification processes for IT systems
- Evaluate any use of AI under the lens of intended use, explainability, and regulatory alignment
How Rephine Supports Readiness for the Revised EU GMP Guidelines
Rephine provides expert support across all three dimensions of the new EU GMP revisions:
✅ Gap analysis for documentation, computerised systems and AI readiness.
✅ Validation and compliance services for Annex 11-aligned IT systems.
✅ AI governance frameworks aligned with Annex 22.
✅ Strategic consulting for QRM and data integrity integration across systems.
Dr. Eduard Cayón
CSO (Chief Scientific Officer)
About the Author:
Dr. Eduard Cayón is the Chief Scientific Officer (CSO) at Rephine, a global leader in GxP compliance and quality assurance.
We don’t just deliver audits or consultancy services — we partner with clients at every stage of their quality journey, offering end-to-end solutions that empower confidence and compliance.
With over 25 years of experience, Rephine has built an enviable reputation as the gold standard in the industry operating from four primary locations: Stevenage in the UK, Barcelona in Spain, India, and Shanghai in China.
Dr. Cayón, who holds a Ph.D. in Organic Chemistry, is a deeply experienced pharmaceutical industry consultant and auditor.
He is dedicated to supporting pharmaceutical, biotech, and medical device companies in meeting the highest standards of manufacturing and supply chain integrity.
