Controlled vs Uncontrolled Documents
In GMP systems, document control is not about where a file is stored or which software is used. It is about document status - whether information can be trusted as current, approved, and applicable. Regulators evaluate document control by determining which documents are controlled, which are not, and whether personnel understand the difference.
This article explains what regulators mean by controlled and uncontrolled documents, how inspectors assess document status during inspections, and why uncontrolled documents are a frequent source of data integrity and compliance risk.
Why Controlled vs Uncontrolled Documents Matter in GMP
Controlled documents are relied upon to guide GMP activities. Uncontrolled documents are not. When that distinction is unclear or inconsistently applied, inspectors question whether operations are being performed according to approved requirements.
Document status matters because:
SOPs define how work must be performed
Forms generate GMP records
Reference documents influence decisions
If document status cannot be demonstrated clearly, inspectors cannot trust that activities are being executed under approved conditions. This concern often escalates beyond documentation into broader data integrity questions.
What Regulators Mean by a Controlled Document
A controlled document is one that is formally governed by the quality system. While exact implementations vary, regulators expect controlled documents to demonstrate certain characteristics.
A controlled document typically has:
Documented approval before use
Version control and revision history
Defined distribution or access control
Clear status indicating the current effective version
What “controlled” does not automatically mean:
That the document is perfect or error-free
That is never changes
That it must be electronic
Inspectors assess whether a document is controlled by examining how it is managed, not by relying on labels alone.
What Regulators Mean by an Uncontrolled Document
An uncontrolled document is any document that is not governed by formal document control processes. This includes documents that were once controlled but are no longer current or properly managed.
Documents become uncontrolled when:
They are copied or printed without version control
They are stored outside approved systems
They are shared informally without status indication
Their use is not defined or restricted
Uncontrolled does not necessarily mean prohibited. Some documents may be intentionally controlled, such as general reference materials. The risk arises when uncontrolled documents are used to perform GMP activities without appropriate safeguards.
Common Misconceptions About Document Control
Several misconceptions contribute to document control failures.
Common examples include:
“Controlled means approved once and never revisited”
“Uncontrolled means not important”
“Electronic documents are automatically controlled”
“Printed copies are always uncontrolled”
Inspectors routinely test these assumptions by asking personnel how they know a document is current, approved, and applicable. Inconsistent answers indicate weak understanding of document status rather than isolated procedural gaps.
How Inspectors Assess Controlled vs Uncontrolled Documents
Inspectors rarely ask whether a document is controlled in isolation. They assess document status through use and behavior.
Typical inspection approaches include:
Observing which documents are used during operations
Asking how personnel verify that the document is current
Reviewing document headers, revision history, and access controls
Comparing SOPs, forms, and records for version alignment
When inspectors find uncontrolled documents influencing GMP decisions, they question whether document control is functioning as intended.
Impact on SOPs, Forms, and Records
The distinction between controlled and uncontrolled documents directly affects execution and record reliability.
Key impacts include:
SOPs: Use of outdated or uncontrolled SOPs undermines procedural compliance
Forms: Mismatched form versions lead to inconsistent records
Records: Records generated using uncontrolled documents may be considered unreliable
These issues often surface as data integrity concerns rather than documentation issues alone. When records cannot be traced clearly to controlled source documents, inspectors question their validity.
How forms should be designed to support control is addressed in Designing GMP-Compliant Forms.
Common Inspection Findings Related to Uncontrolled Documents
Uncontrolled documents frequently contribute to inspection findings.
Common patterns include:
Outdated SOPs found at points of use
Locally saved forms not aligned with approved versions
Informal job aids used without review or approval
Personnel unable to explain document status
These findings escalate quickly because they suggest that operations may not be consistently governed by approved requirements. Inspectors interpret this as a system-level weakness rather than a documentation oversight.
How Document Status Fits Within Document Control Systems
Controlled vs uncontrolled status is one element of a broader document control framework.
Document status is linked to:
Document lifecycle management
Training and competency documentation
Retrieval and inspection readiness
Data integrity controls
Understanding document status in isolation is insufficient. It must be supported by processes that ensure documents remain current, accessible, and appropriately restricted throughout their lifecycle.
The end-to-end management of documents is explored further in Document Lifecycle: Creation to Archival, while inspection-ready access is addressed in Documentation Retrieval Protocols.
Regulatory Perspective
Regulators do not expect organizations to eliminate all uncontrolled documents. They expect organizations to clearly define which documents are controlled, how that control is maintained, and how personnel recognize document status.
The distinction between controlled and uncontrolled documents defines the boundary of trust in a GMP system. Inspectors rely on controlled documents to understand approved requirements and assess execution against them. When document status is unclear or inconsistently applied, confidence erodes quickly. Clear control boundaries signal that documentation is governed intentionally, not assumed.
