---

1Why VHP Bio-Decontamination Is on the 2026 Audit List

Vaporized hydrogen peroxide (VHP) is the bio-decontamination method that uses a 35% H₂O₂ solution, vaporized and distributed through a cleanroom envelope to achieve a 6-log reduction of biological indicators (Geobacillus stearothermophilus for bacterial spores, or Bacillus atrophaeus for chemical-resistant spores). Annex 1 §5 (2023 revision, in force since August 2024) made VHP a documented requirement on every Grade A/B aseptic core. The 2024–2026 EU and FDA inspection cycles have moved the bar from “the room has a VHP system” to “the VHP system has a documented 6-phase cycle, a 5-step sensor validation, and a 6-log BI result on demand.”

Three documents are now expected on the day of the audit. First, the 6-phase cycle validation matrix, with the H₂O₂ concentration, the temperature, the relative humidity, and the dwell time at each phase. Second, the H₂O₂ sensor validation (5-step IQ/OQ/PQ), with the calibration gas, the response time, and the linearity on the reference photometer. Third, the material compatibility table for every equipment surface inside the room — stainless steel, aluminum, polycarbonate, EPDM, silicone, and any other polymer that the H₂O₂ vapor will contact. Each is a single document. Each is a place where a 2026 audit can find a gap.

---

2VHP vs HPV vs H₂O₂ Vapor: The 3 Delivery Methods

The 2026 bio-decontamination market uses three delivery methods: vaporized hydrogen peroxide (VHP), hydrogen peroxide vapor (HPV), and H₂O₂ vapor (dry or wet). The terminology is confusing because the chemistry is the same (H₂O₂) and the delivery is different (flash vaporization vs. catalytic vs. nebulized). The auditor’s first question is which delivery method is installed, and whether the cycle parameters match that method.

Attribute	VHP (Vaporized H₂O₂)	HPV (Hydrogen Peroxide Vapor)	H₂O₂ Vapor (Nebulized)
Delivery method	Flash vaporization of 35% H₂O₂	Catalytic vaporization of 30-35% H₂O₂	Nebulized 3-6% H₂O₂
Cycle time (typical)	2-4 hours	4-8 hours	1-2 hours
Log reduction (typical)	6-log on G. stearothermophilus	6-log on G. stearothermophilus	3-4-log (limited by lower concentration)
Material compatibility	Broad (stainless, aluminum, polycarbonate, EPDM)	Broad (same as VHP)	Limited (wetting risk on optics and electronics)
Sensor requirement	Dedicated H₂O₂ sensor (electrochemical or IR)	Dedicated H₂O₂ sensor (same as VHP)	Standard H₂O₂ sensor (lower accuracy required)
Annex 1 §5 compliance	Yes (full cycle documented)	Yes (full cycle documented)	Limited (typically not accepted for Grade A/B)
Typical use case	Pharma aseptic core, biotech, chemical powder	Pharma aseptic core, biotech	Lab, R&D, low-grade cleanroom

---

3The 6-Phase Cycle: Conditioning, Gassing, Dwell, Aeration, Verification, Reset

The 6-phase VHP cycle is the decontamination protocol that the auditor reads first, validates second, and challenges third. Each phase has a single acceptance criterion and a single record row in the cycle validation matrix. A single missing phase is a single missing row, and a single missing row is a single audit finding.

The 4 most-critical phases below (Conditioning, Gassing, Dwell, Aeration) are the ones the 2024–2026 inspection cycles focus on. The 2 additional phases (Verification, Reset) are documented in the cycle validation matrix but are not the source of the typical audit finding.

---

4H₂O₂ Sensor Validation: The 5-Step IQ/OQ/PQ Method

The H₂O₂ sensor is the part of the VHP system that tells the operator — and the auditor — that the cycle is on track. The 2024–2026 enforcement cycles have moved the bar from “the room has a sensor” to “the sensor has a documented 5-step IQ/OQ/PQ, with each step tied to a reference photometer and a calibration gas.” The first 4 steps (IQ, OQ, PQ, Sensor Cal) are the most-cited; the 5th (Lifecycle) is the long-term audit log.

---

4H₂O₂ Sensor Validation: The 5-Step IQ/OQ/PQ Method

The H₂O₂ sensor is the part of the VHP system that tells the operator — and the auditor — that the cycle is on track. The 2024–2026 enforcement cycles have moved the bar from “the room has a sensor” to “the sensor has a documented 5-step IQ/OQ/PQ, with each step tied to a reference photometer and a calibration gas.”

1. Step 1: IQ (Installation Qualification). Sensor part number, serial number, install date, wiring, and the reference photometer used for the cross-check. Acceptance: every part number matches the BOM, the sensor is installed at the documented location, and the reference photometer is calibrated within 12 months.
2. Step 2: OQ (Operational Qualification). Sensor response to a known H₂O₂ concentration (typically 100 ppm, generated from a calibrated permeation tube). Acceptance: response within ±10% of the reference photometer, response time <30 seconds, linearity across 50-500 ppm range.
3. Step 3: PQ (Performance Qualification). Three consecutive VHP cycles with the sensor reading on the cycle chart. Acceptance: sensor reads within ±10% of the reference photometer at every phase, no drift across the three cycles. The three cycles establish the repeatability baseline.
4. Step 4: Sensor Cal. Sensor calibration against the reference photometer, with the calibration gas, the date, and the response value. Acceptance: response within ±10% of the certified gas concentration, logged against the sensor serial number. Calibration typically every 6-12 months, or after any sensor replacement.
5. Step 5: Lifecycle. Sensor replacement schedule (typically every 24 months), with the replacement date and the part number logged. Acceptance: sensor replaced on schedule, with a new IQ/OQ/PQ performed after each replacement. Document the lifecycle log and the CAPA history.

---

5Cycle Validation and the 6-Log Biological Indicator

---

6Material Compatibility: Stainless Steel, Aluminum, Polycarbonate, EPDM

The material compatibility table is the part of the VHP validation that the auditor checks against the actual equipment in the room. Every equipment surface that contacts the H₂O₂ vapor must be on the table, with the part number, the material, and the documented compatibility. The 2024–2026 enforcement cycles have made the material table a discrete audit subject.

1. Stainless steel (304 / 316L). Excellent compatibility with H₂O₂ vapor. No degradation, no corrosion, no particle shedding. Acceptance: the equipment surface is 304 or 316L, with the surface finish (electropolished, passivated, or mechanically polished) documented.
2. Anodized aluminum. Good compatibility with H₂O₂ vapor, but the anodized layer can be degraded by repeated cycles. Acceptance: the equipment surface is anodized aluminum, with the anodized layer thickness documented (typically 25-50 µm). Re-validate after 100 cycles or annually.
3. Polycarbonate (Lexan, Makrolon). Limited compatibility. H₂O₂ vapor can cause stress cracking and surface haze. Acceptance: the equipment surface is polycarbonate, with the manufacturer’s compatibility statement on file. Replace if haze or cracking appears.
4. EPDM (gasket, seal). Good compatibility with H₂O₂ vapor at room temperature, but the EPDM can swell or harden with repeated cycles. Acceptance: the equipment surface is EPDM, with the replacement schedule documented (typically 12-24 months). Document the lot number and the replacement date.

---

7Most-Common VHP Audit Findings and How to Pre-Close Them

Three findings account for roughly 80% of VHP-related observations in the 2024–2026 EU and FDA inspection cycles. All three are pre-closeable in the same audit cycle they are found.

1. Finding: missing 6-log BI result. The Annex 1 §5 gap. The fix is the BI result from the most recent cycle, with the BI lot number, the placement, the incubation time, and the read-out. The audit is closed by showing the auditor the BI result on demand.
2. Finding: H₂O₂ sensor not validated against the reference photometer. The 5-step IQ/OQ/PQ gap. The fix is the sensor validation package (IQ, OQ, PQ, calibration, lifecycle), with the reference photometer calibration log. The audit is closed by showing the auditor the sensor validation package on demand.
3. Finding: material compatibility not documented for the actual equipment inside the room. The Annex 1 §5 + ICH Q9 gap. The fix is a single-page material compatibility table that lists every equipment surface, the material, and the documented compatibility. The audit is closed by showing the auditor the table.

---

8Closing and Related Reading

VHP bio-decontamination is the lowest-risk way to achieve a 6-log reduction on a Grade A/B aseptic core — and the most-cited source of audit findings when the validation is incomplete. The 6-phase cycle, the 5-step H₂O₂ sensor validation, the 6-log BI result, and the material compatibility table are the four documents that close an audit on a VHP system. Build the folder structure once, apply the same template to the air shower, the pass box, the ductless fume hood, the modular wall, the gowning room, and the VHP system, and the next inspection cycle will be measured in hours, not days.