---

1Why Annex 1 §4.21 Put the Pass Box on the Audit List

Before the 2023 revision of EU GMP Annex 1, the pass box was treated as a passive component — a steel box with two doors, a UV-C lamp, and a sign that said “use in order.” The 2023 revision changed that. Annex 1 (2023) §4.21 introduced explicit language: every transfer of material into or out of a Grade A/B core must be through a qualified, interlocked, sanitized pass box, and the qualification must be retrievable on demand.

The language that did not exist in the 2008 Annex 1 is now the audit baseline. The new clauses require: (1) interlock logic that prevents both doors from being open simultaneously; (2) UV-C cycle that is qualified to a defined bioburden reduction target, not a timer; (3) particle-count evidence on both sides of the hatch, with the transfer on the higher-class side captured at the breathing zone equivalent; (4) sanitization cycle that is logged against a unique transfer ID, so the auditor can trace any material to the cycle that moved it. Each of these is a discrete document, and each is a place where a 2026 audit can find a gap.

---

2The Interlock Logic and Why Single-Side Verification Fails

The interlock is the heart of the pass box. If both doors can be open simultaneously — even for a fraction of a second — the higher-class side is exposed to the lower-class side, and the entire qualification collapses. The 2023 Annex 1 makes this point explicit, and the 2024–2026 inspection cycles have made it a finding.

1. Door-A sensor reports open + Door-B sensor reports open → both doors shall not open at the same time
2. UV-C cycle in progress + either door open → UV-C shall immediately stop and alarm
3. Particle count above threshold + transfer initiated → transfer shall not start and alarm
4. Door open past timeout + UV-C cycle not complete → forced UV-C cycle and alarm

Interlock	Logic	Failure mode	Detection in qualification
Both doors open	Door-A open AND Door-B open → alarm + lock	Sensor failure or bypassed wiring	Forced-open test on each door, log response time
UV-C during open door	UV-C on AND any door open → UV-C off + alarm	Door switch stuck or UV-C relay failure	Open door during UV-C cycle, log UV-C off time
Particle count limit	Count > class limit AND transfer → block + alarm	Counter calibration drift or sensor failure	Injected count via reference standard, log block time
Timeout	Door open > 30 s AND UV-C incomplete → force cycle + alarm	Operator leaves door ajar	Door-open test for 31 s, log forced cycle

---

3The 5-Stage Sanitization SOP and Its Qualification Matrix

The 5-stage sanitization SOP is the minimum viable procedure for any pass box that serves an ISO 5 / Grade B core. Each stage has a single acceptance criterion, a single qualification measurement, and a single record row in the qualification matrix.

---

4UV-C Dose, Bioburden Target, and the 4-Log Reduction Claim

The UV-C cycle is the contamination-control workhorse of the pass box. The cycle time on its own is not a meaningful qualification variable — what matters is the dose delivered to the worst-case interior point, and what that dose achieves against a defined bioburden target.

1. Dose measurement. The dose is measured in mJ/cm² at the worst-case interior point, typically the floor center, using a calibrated actinometer. The acceptance criterion is ≥40 mJ/cm², which corresponds to a 4-log reduction of bacterial spores per the FDA and USP guidance.
2. Bioburden target. The 4-log reduction claim is verified by a bioburden test: a known inoculum of Bacillus subtilis spores is placed at the worst-case interior point, the UV-C cycle runs, and the surviving cfu is counted. Acceptance: ≥4-log reduction (≥99.99% kill).
3. Lamp aging. UV-C lamps lose output over time. The qualification must include a lamp-aging curve and a replacement schedule, typically every 12 months or every 8,000 hours of operation, whichever comes first. The dose is re-validated after every lamp change.
4. Reflectance assumption. The 4-log claim assumes the interior is stainless steel (reflectance ~50% at 254 nm). Painted or plastic interiors have a different reflectance and the dose must be re-measured for any interior change.

---

5Class-Specific Pass Box Configurations (ISO 5 / ISO 6 / ISO 7 / ISO 8)

---

6Most-Common Audit Findings and How to Pre-Close Them

Three findings account for roughly 80% of pass-box-related observations in the 2024–2026 EU and FDA inspection cycles. All three are pre-closeable in the same audit cycle they are found.

1. Finding: missing interlock validation. The Annex 1 §4.21 + ICH Q9 gap. The fix is a four-row interlock test matrix (door, frame, panel, recovery) tied to a SIL or PL classification. The audit is closed by showing the auditor the matrix, the proof-test interval, and the failure-mode data on demand.
2. Finding: UV-C dose not tied to a bioburden reduction target. The Annex 1 §4.21 + USP <1072> gap. The fix is a single-page bioburden test report that ties the dose to the 4-log reduction. The audit is closed by showing the auditor the report, the actinometer calibration, and the lamp-aging curve.
3. Finding: sanitization cycle not linked to the air-shower cycle on the personnel side. The Annex 1 §4.21 + §7 cross-reference gap. The fix is a single line in the pass box qualification form: “material exited through pass box on cycle number X” — and that cycle number is the cycle in the air shower validation report on the personnel side (see air shower compliance audit). The audit is closed by showing the auditor the cross-reference and the validation report.

---

7The 12-Month Pass Box Compliance Folder

The folder structure mirrors the air shower pack (see air shower compliance audit) and the gowning pack (see personnel gowning procedure). The same nine-folder layout works for every qualified utility in the cleanroom envelope — and the pass box is no exception.

• 00_protocols/ — current pass box qualification protocol, version-controlled, with redline vs. previous version
• 10_initial_qualification/ — initial qualification records, with interlock test matrix, UV-C dose report, and bioburden test report
• 20_requalification/ — annual requalification records, with calendar of due dates
• 30_lamp_log/ — UV-C lamp replacement log, dose re-validation after each lamp change, lamp-aging curve
• 40_transfer_log/ — every material transfer, with transfer ID, UV-C cycle, particle count, and operator signature
• 50_trend/ — 12-month trend report, drift detection log, CAPA references
• 60_deviations/ — every failed qualification, every interlock alarm, with closure evidence
• 70_change_control/ — every UV-C lamp change, every interior change, every SOP version change, with requalification scope
• 80_correspondence/ — regulator correspondence, prior audit responses, CAPA closure letters

---

8Closing and Related Reading

The pass box is the lowest-cost contamination-control step in any GMP cleanroom envelope — and the most-cited source of audit findings when the qualification is incomplete. The interlock logic, the 5-stage sanitization SOP, the UV-C dose tied to a 4-log reduction, and the 12-month requalification trend are the four documents that close an audit on the pass box. Build the folder structure once, apply the same template to the pass box, the air shower, the gowning room, and every other contamination-control step, and the next inspection cycle will be measured in hours, not days.