GMP biostorage: a biologics storage checklist

scientist saving vaccines in freezer

Key takeaways

  • GMP biostorage means holding biological materials under written procedures, qualified equipment and records that protect identity, strength, quality and purity.

  • Storage conditions come from the product's own specification, so define the range, permitted excursions and handling limits before you compare providers.

  • Temperature mapping, calibrated monitoring, tested alarms and periodic data review are the evidence that a freezer or cold room actually holds its range.

  • Inventory status, lot traceability, returned stock and electronic records need the same control as the temperature itself.

  • Choose a provider by following a real alarm and a real lot through its procedures, and put responsibilities in a written quality agreement.

GMP biostorage is the storage of biologics, cell and tissue products and related materials under good manufacturing practice controls: written procedures, qualified and calibrated equipment, continuous temperature records and clear quarantine and release status. In the US, CGMP rules cover the holding of drugs as well as their manufacture, so a storage site that holds regulated drug or biological products takes on real compliance duties, not just shelf space.

This checklist covers what to verify for refrigerated, freezer, ultra-low and cryogenic storage, how monitoring should work and how to choose a provider. For the wider facility framework, see Mercury's guide to GMP warehousing. This article stays focused on the cold storage tiers that biologics depend on.

What is GMP biostorage?

GMP biostorage is controlled storage of biological materials in a way that meets the CGMP requirements that apply to those materials. Under 21 CFR 210.2, the drug CGMP rules in Parts 210 and 211, the biologics rules in Parts 600 through 680 and the cell and tissue rules in Part 1271 supplement each other where they apply. A company that performs only some operations, such as holding, needs to comply with the rules that apply to those operations. Under 21 CFR 210.1, these rules set minimum practices for the facilities and controls used in the manufacture, processing, packing or holding of a drug, so storage is squarely in scope.

Not every sample in biorepository storage is a regulated drug product. A research collection, a clinical trial material and a licensed biologic can sit in the same building under different requirements. Start by confirming the regulatory status of each material, then hold the storage site to the standard that applies.

The core CGMP storage rules

For drug products, including biological products subject to Part 211, the key storage requirement is short. 21 CFR 211.142 requires written warehousing procedures that include quarantine before release by the quality control unit and storage under appropriate conditions of temperature, humidity and light so that identity, strength, quality and purity are not affected. Related rules require distribution of the oldest approved stock first, with only temporary and appropriate deviations, and a system that shows where each lot went so it can be recalled (21 CFR 211.150).

For human cells, tissues and cellular or tissue-based products, 21 CFR 1271.260 is more explicit. It requires control of storage areas to prevent mix-ups and contamination, storage at an appropriate temperature, acceptable temperature limits for each step, recorded storage temperatures that are periodically reviewed and documented corrective action whenever proper storage conditions are not met.

Match the storage tier to the product

Biologics storage conditions come from the product's label, specification or stability data, never from a generic range. The table below lists the main tiers and what to confirm for each. The first three ranges are the examples WHO gives in its mapping guidance, not universal limits. Use the table to make sure the provider actually operates the tier your materials need.

Storage tier

Example range

What to confirm with the provider

Controlled room temperature

15 °C to 25 °C

Mapped areas and seasonal data, since ambient rooms follow the weather

Refrigerated

2 °C to 8 °C

The exact range, door-opening behavior and freeze risk near cooling units

Frozen

−25 °C to −10 °C

Set point, recovery time after opening, defrost cycles and backup units

Ultra-low temperature storage

Set by the product specification

Rack layout, capacity reserved for emergency transfers and alarm response time

Cryogenic (liquid nitrogen)

Set by the product specification

Whether storage is liquid or vapor phase, nitrogen supply, fill-level monitoring and staff safety

The takeaway is that the tiers are not interchangeable. An ultra-low freezer does not meet a cryogenic specification, and a facility with good cold rooms may have no frozen capacity at all. For cryogenic moves between sites, Mercury's guide to shipping with liquid nitrogen dewars covers the transport side.

What are the requirements for GMP freezer storage?

GMP freezer storage requires a qualified unit or room that holds the product's specified range, calibrated monitoring with recorded data, tested alarms, written procedures for loading and transfers, and a documented plan for failures. Each of those points needs evidence, not a statement that the freezer is "validated."

Equipment control comes first. 21 CFR 211.68 requires automatic, mechanical and electronic equipment used in holding drug products to be routinely calibrated, inspected or checked under a written program, with records of those checks. It also requires controls over computer systems and a backup of entered data.

For freezer rooms and walk-in cold rooms, the WHO technical supplement on temperature mapping of storage areas gives a practical baseline. It says new temperature-controlled areas must be mapped before use, both empty and under normal load, to define zones that should not hold product and, where needed, how long temperatures stay in range during a power failure. It suggests a study length of 24 to 72 hours for freezer rooms and cold rooms, or longer if justified, and re-mapping after significant changes such as new loading patterns or a different set point. The same supplement notes that it does not cover small units like individual refrigerators or freezers, which are usually tested and qualified as equipment.

For ultra-low and freezer units, the checklist usually includes:

  • Installation and operational qualification records for each unit, plus performance data under the loading pattern you will use.

  • Calibration certificates for every monitoring probe, with dates and traceability.

  • Backup power, and reserved backup freezer capacity sized for the materials at risk.

  • Written procedures for door openings, defrosting, inventory pulls and emergency transfers.

  • A maintenance schedule and service history for compressors and alarms.

How is GMP refrigerated storage monitored?

GMP refrigerated storage is monitored with calibrated sensors placed at the locations mapping identified as the warmest and coldest, a system that records readings at a defined interval, alarms that escalate to on-call staff, and regular documented review of the data by quality. The monitoring design follows the mapping results, which is why mapping comes first.

The WHO supplement explains that the purpose of finding hot and cold spots is to decide where monitoring sensors should go, and that those spots can shift between summer and winter. It also lists quarantine areas and receiving and loading bays among the spaces that need mapping when they handle temperature-labeled products. A refrigerated store that is perfect inside but has an unmapped receiving dock still has a gap.

Electronic monitoring systems raise a records question. 21 CFR Part 11 applies to electronic records created, modified or maintained under FDA records requirements. Where it applies, controls include system validation, access limited to authorized people and secure, time-stamped audit trails that record operator changes without obscuring earlier data. Ask the provider which of its records fall under Part 11 and how the system meets those controls.

Follow one alarm from start to finish

The best monitoring test is a walk-through. Pick a hypothetical overnight alarm on a 2 to 8 °C cold room and ask the provider to show each step: who receives the alert, how fast they must respond, how they confirm the reading, where product moves if the room cannot recover and who has authority to quarantine it. Then ask to see the records that event would produce. Under 21 CFR 1271.260, for cell and tissue products, corrective action must be taken and documented whenever proper storage conditions are not met. Resetting the alarm is not the end of the event. The product's status needs a quality decision based on its stability data. Mercury's guide on preventing temperature excursions covers investigation and disposition in detail.

What should a biologics storage checklist include?

A biologics storage checklist should cover the product's requirements, the equipment evidence, monitoring and alarms, inventory control, personnel, records and contingency planning. Use this GMP storage checklist when you audit a site or review a proposal:

  1. Product requirements. Approved storage range, permitted time out of storage, light and humidity limits, freeze-thaw limits and expiry dating for each material.

  2. Mapping and qualification. Current mapping reports for every storage, staging, quarantine and dock area the product will pass through, with seasonal data where relevant.

  3. Monitoring and alarms. Probe locations tied to mapping, calibration records, recording interval, alarm limits, escalation chain and alarm test records.

  4. Receipt and quarantine. Inspection on arrival for labeling, container damage, broken seals and contamination, with quarantine until release, in line with 21 CFR 211.82 for components and 211.142 for drug products.

  5. Inventory status and traceability. Clear separation of released, quarantined, rejected and returned stock, location control by lot and a first-expiry or oldest-first rule with documented exceptions.

  6. Returned goods. A procedure for returns. Under 21 CFR 211.204, returned drug products whose storage or shipping conditions cast doubt on their quality must be destroyed unless testing or investigation shows they meet standards.

  7. People and access. Training in CGMP and in the specific tasks staff perform, given on a continuing basis as 21 CFR 211.25 requires, plus restricted access to storage areas.

  8. Records. Batch-related records retained at least 1 year after the batch's expiration date under 21 CFR 211.180, and audit trails where electronic records apply.

  9. Contingency. Backup power, spare capacity, emergency transfer procedures and a tested communication plan for clients.

Each line should map to a document or a demonstration. If the provider cannot show the evidence, treat the item as open.

Do not forget the handoffs

Many storage failures happen at transitions rather than inside the freezer. Check receiving hours, how long product can wait on a dock, who inspects incoming temperature data and who decides whether a discrepancy blocks acceptance. Check the outbound side too: packaging selection, pre-conditioning and the handoff to the courier. Mercury's article on biologics stability testing for shipping explains how stability data sets the limits for those handoffs.

How do you choose a GMP biostorage provider?

Choose a GMP biostorage provider by matching its proven capabilities to your product's requirements, then testing its procedures with real scenarios before you place inventory. A short sales presentation will not show you how a biologics warehouse behaves at 3 a.m. during a compressor failure. The documents and walk-throughs will.

A practical selection process has four steps. First, send your storage specification and ask which tiers, capacities and temperature ranges the site actually operates. Second, request the evidence on the checklist above and review it with your quality team. Third, run the alarm walk-through and a lot-tracing exercise, asking the provider to find a sample lot, show its location history and produce its temperature record. Fourth, agree a written quality agreement.

FDA's guidance on quality agreements in contract manufacturing describes how parties can define and document who does what to stay compliant with CGMP. For storage, the agreement should cover who approves receipt and release, who reviews monitoring data, how deviations and changes are reported, how fast you are notified of an event, how records are shared and what happens at the end of the contract.

When you compare GMP cold storage providers, look for:

  • Experience with your material type and regulatory status.

  • All the tiers you need now and in the next stage of development, including ultra-low temperature storage or cryogenic capacity.

  • Monitoring visibility you can access directly, with clear alarm notification to your team.

  • Integration with temperature-controlled transport, so storage and shipping records connect.

  • Capacity that can grow with your program, with a clear process for qualifying new units or zones before your product moves in.

cGMP cold storage is only as strong as the records that prove it. A provider that can show mapping, calibration, alarm history and lot traceability on request gives you GMP-compliant storage you can defend in an audit. Mercury offers cold chain storage and warehousing with temperature-controlled zones, ultra-low temperature freezers, real-time monitoring and inventory visibility, connected to its cold chain transport and dry ice replenishment services.

Share on Linkedin
Share on X
Share on Facebook