What Quality System Should a Peptide Supplier Have?

What ISO 9001 actually certifies

ISO 9001 is a standard for a quality management system. It sets requirements for process control, document control, competence and training, supplier evaluation, corrective action, internal audit and management review. Certification means an accredited body has audited those processes at a named site and found them conformant to the stated scope.

It does not certify that any particular peptide is 98% pure, and it does not guarantee a validated analytical method. A certificate carries a scope statement, a site address, a standard version, a certificate number and an expiry date, and it can be checked against the certification body register. When a supplier says "ISO 9001 certified", the useful follow-up questions are: which site, which scope, which body, and may I see the certificate? A supplier with a genuine certificate answers all four without hesitation.

MOL Changes aligns its documentation and process control with ISO 9001 principles. We do not claim ISO 9001 certification, and we will not describe ourselves as certified in a quotation or on a COA. Buyers should treat the distinction as a positive signal: a supplier who is precise about what it holds is usually precise about what it tests.

What GMP means, and what "GMP-grade" does not mean

Good manufacturing practice is a regulatory framework for making medicinal products. For active pharmaceutical ingredients it is described in ICH Q7; for finished pharmaceuticals it appears in 21 CFR Parts 210 and 211 in the United States and in the EU GMP guide. It requires a qualified facility, validated equipment and processes, a quality unit independent of production, documented batch records, deviation investigation and a formal release by an accountable person.

"GMP-grade" is not a defined term in any pharmacopoeia. It usually means the supplier follows GMP-like documentation, or that the material could be made in a GMP facility, or simply that the marketing team liked the phrase. GMP status attaches to a manufacturing site and a product type, and it is demonstrated by an inspection history and a certificate or compliance statement, not by an adjective. A peptide made in a GMP facility is still a research reagent unless it is released under GMP for a medicinal use.

Three documentation tiers in plain terms

"GMP-adjacent" is an honest description of a middle tier: the controls and records mirror GMP, but the site has not been inspected for GMP compliance and the material is not released for medicinal use. It is the appropriate tier for most preclinical and early development work, and it is a more useful claim than an unsupported "GMP" label. Decide which tier your application needs before you compare prices, because the documentation burden is what drives most of the cost difference.

QC and QA are not the same function

Quality control is the laboratory: it sets specifications, runs HPLC and mass spectrometry, performs Karl Fischer and assay testing, calibrates instruments and investigates out-of-specification results. Quality assurance is the system: it writes and controls procedures, trains staff, runs internal audits, manages change control and deviations, qualifies suppliers, and makes or approves the release decision.

In a small peptide company one person may do both, which is acceptable at research scale as long as the two roles are documented separately and the release decision is recorded. The failure mode to watch for is a COA signed by the analyst who also performed the synthesis with no independent review. That is not a paperwork technicality: an independent release step is what catches the batch that passed purity but failed identity.

Change control, deviations and corrective action

Change control is the discipline that keeps a validated process stable. Any change to the synthetic route, resin, coupling reagent, solvent, purification column, lyophilisation cycle or scale should be assessed for its effect on the product, and re-qualified where the effect could be material. Scale-up is the classic case: a 5 mg synthesis and a 500 g synthesis are not the same process, and a supplier who scales without re-verifying purity and impurity profile is guessing.

Deviations are the record of what went wrong, and corrective and preventive action is the record of what changed as a result. A mature system logs planned and unplanned deviations, investigates root cause, assigns actions, and checks that the actions worked. Ask a supplier to describe one deviation from the past year and what followed. The answer distinguishes a system that exists from a binder that was written for an audit.

Supplier qualification and incoming material control

Quality does not start in the synthesis vessel. Amino acids, resins, solvents and cleavage reagents are bought from other suppliers, and their purity and documentation determine what can be made. A quality system should include an approved supplier list, a qualification process, incoming inspection or certificate review, and a re-qualification interval.

The same logic applies to you as the customer. Qualify your peptide supplier with a questionnaire, a sample test and, where the application justifies it, an audit. Put the specification, analytical package, change notification and complaint handling into a quality agreement. That document is what you rely on when a lot is late, a purity result is disputed or a sequence has to be re-made, and it is far easier to negotiate before the first purchase order than after the third.

What to ask in the first technical call

• Who performs the synthesis, at which site, and who signs the certificate of analysis?
• Do you hold ISO 9001 certification, and what exactly does the scope cover?
• Are you claiming GMP, and if so for which site, product type and authority?
• Which analytical methods do you use for release, and are they documented in a specification?
• How do you handle a batch that fails the purity specification?
• What is your retention sample policy and for how long do you keep records?
• How do you notify customers of a process change or a scale-up?

Seven questions, twenty minutes. The answers say more about a quality system than any certificate, and they are the same questions an auditor would open with. For the document trail that should follow, see how to verify a peptide supplier. Our own scope and claims are stated plainly on the quality page.