GDP for API Distributors: What an Audit Does Not Show

A European buyer reviews a new supplier and finds a valid GDP certificate, a GMP certificate for the production site, and a wholesale authorisation. The file looks complete. Six months later a consignment arrives with a two-hour temperature excursion on the air leg and no record of it, and the buyer discovers that the certificate answered a different question from the one being asked.

GDP is a system standard, audited periodically. A consignment is an event. The gap between the two is where most distribution failures live, and it is not closed by collecting more certificates.

What the certificate actually attests

Good Distribution Practice requires a documented quality system covering premises, equipment, documentation, personnel, complaints, recalls and transport. An inspection confirms that such a system exists and is being operated at the time of the audit. It does not certify any individual shipment, and it does not follow the goods.

That distinction matters because buyers often treat the certificate as a property of the product. It is a property of an organisation, at a moment. The question a buyer actually needs answered is narrower and more concrete: for this consignment, on this route, who held the goods, under what conditions, and what record exists.

The four places a chain breaks

In practice, failures cluster in four places, and each has a different documentary signature.

Break point	What goes wrong	What the record should show
Handover at origin	Goods sit on a dock longer than planned	Time, temperature and seal number at each handover
Air or sea leg	Undeclared excursion, or a hold on the tarmac	Continuous data logger, not a spot reading
Customs clearance	Storage in an uncontrolled bonded area	Clearance duration and storage location
Final delivery	Split consignments, partial seals	Reconciliation of seal numbers against the packing list

None of these is exotic. All four are ordinary events that a system-level certificate cannot see, and all four leave evidence if somebody was asked to collect it.

Temperature is a claim, not a reassurance

For a substance with a defined storage condition, the useful evidence is a continuous record covering the whole journey, not a statement that the goods were kept within range. A data logger with a defined sampling interval, downloaded and attached to the batch file, is the only form of evidence that survives an inspection two years later.

Where an excursion occurred, the question becomes whether an assessment was performed and what it concluded. An excursion with a documented evaluation is a managed event. An excursion discovered by the customer is a quality failure, regardless of whether the material was affected.

The role question behind the paperwork

Within the EU, wholesale distribution of medicinal products requires a wholesale distribution authorisation from the competent authority of the member state. A company that arranges sourcing and logistics without taking legal ownership is not performing that activity, and describing it as distribution misrepresents the position.

This is not a technicality to be smoothed over in a brochure. It determines which obligations apply, which inspections are relevant, and what a buyer can rely on. A partner that states its role precisely is easier to qualify than one that uses the word distribution loosely.

We describe our role as a customised supply-chain partner rather than as a distributor, because that is what the legal position supports. That phrasing is less impressive on a slide and considerably more useful in a supplier qualification file.

How to test a chain in one request

Ask for the last three consignments to a comparable destination and request, for each, the transit record, the seal numbers and any excursion assessment. Three consignments tell you more than three certificates, because they show whether the system produces records as a matter of habit or only when asked.

A supplier that can produce this within a day has a working process. A supplier that needs two weeks and returns a summary has a process that runs on request, which is a different thing.

Where a supply-chain partner adds real value

The value is not in holding a certificate. It is in owning the handovers. A partner that books the leg, specifies the logger, receives the download, reviews the excursion and files the assessment is doing work that a buyer importing directly would have to build internally.

For a buyer running several small imports a year, that internal build is rarely worth it. For a buyer running large volumes on a fixed route, it usually is. The decision is about volume and route stability, not about trust.

What to put in the quality agreement

Four clauses carry most of the weight: who holds the goods at each stage, what the storage condition is and how it is monitored, who reviews an excursion and within what period, and who retains the records and for how long. Everything else in a distribution quality agreement tends to be elaboration around these four.

If the agreement does not name the party responsible for the transit record, the record will not exist when it is needed. That is the pattern worth designing against.

What a qualification visit should look at

A visit is more informative than a certificate because it shows how the chain behaves when nobody has prepared for it. Four areas carry most of the signal: the goods-in area, the temperature monitoring, the deviation file and the record archive.

The goods-in area shows whether incoming consignments are checked against seals and loggers, or waved through. The monitoring shows whether the record is continuous or reconstructed. The deviation file shows whether excursions are written up or absorbed. The archive shows whether the records of a shipment from two years ago can still be produced.

Documents already published here shorten the preparation. Verifying a CEP or a GMP certificate covers what the paper does and does not prove. Retest period versus shelf life covers the dating question that a distribution chain can quietly compromise. And the market-by-market document map covers which of the three import routes applies to your destination.

Where the guidance is published

The EU guidance on good distribution practice sits in the EudraLex collection, alongside the good manufacturing practice guides. The European Medicines Agency publishes related quality guidance, and the Pharmaceutical Inspection Co-operation Scheme publishes inspection guides that many authorities use as a common reference.

Reading the distribution guide once is worth more than reading three supplier brochures. It is short, it is specific about transport, and it makes clear which obligations attach to which role.

The document set that survives an inspection

Four records, retained for the period your quality system requires: the transit record with its logger download, the seal reconciliation against the packing list, any excursion assessment with its conclusion, and the identity of the party holding the goods at each handover. Everything else in a distribution file is supporting material around these four.

A chain that can produce these four for any consignment in its history is under control. A chain that can produce them only for the last shipment is under control when watched.

One question that separates partners

Ask who signs the excursion assessment. If the answer is a named role within the partner organisation, the process is owned. If the answer is the customer, the partner is a forwarder with a quality manual.

That single question is more diagnostic than any certificate, because it locates responsibility rather than describing a system.

Storage at the destination is part of the chain

A distribution chain does not end at the customer's gate. It ends when the material is consumed. Between those two points sits a warehouse that may be climate-controlled, may be ventilated, or may be a room with a roller door that opens twenty times a day in summer.

Good distribution practice addresses this by requiring that storage conditions be defined and maintained, that the premises be suitable for the products held, that pest control and cleaning be documented, and that stock rotation be controlled. None of this is exotic, and all of it is invisible to a supplier's certificate.

For a buyer, three questions establish whether the destination leg is under control. Who owns the material at each handover, what condition is it required to be held in, and who is responsible for demonstrating that the condition was met. If any of the three has no named answer, the chain has a gap that no upstream documentation closes.

The practical consequence is that a quality agreement covering transport but not storage covers half the journey. The half it does not cover is the half where most excursions happen, because a warehouse is not designed around a single product and a container is.

Why the certificate looks complete either way

A GDP certificate, a wholesale authorisation and a GMP certificate together describe an organisation's systems and a production site's compliance. They do not describe a consignment, and they do not describe a warehouse that belongs to somebody else.

That is not a defect in the certificates. It is a category difference, and the mistake is treating documents about organisations as evidence about events. The evidence about events is the transit record, the seal reconciliation and the excursion assessment, and those are produced consignment by consignment or not at all.

Frequently asked questions

Does a GDP certificate mean the product was handled correctly?

It means the holder was audited against GDP requirements at a point in time. It does not certify any individual consignment. Handling of a specific shipment is evidenced by temperature records, seal numbers and transit documentation, not by the certificate.

Who is responsible if a shipment is damaged in transit?

Responsibility follows the terms of sale and the contracts in place, but documentation responsibility does not move with the goods. A supplier that cannot produce transit records for its own leg of the journey has left the buyer without evidence, whatever the Incoterm says.

Is a distributor required to hold a wholesale authorisation?

Within the EU, wholesale distribution of medicinal products requires a wholesale distribution authorisation issued by the competent authority of the member state. The scope of that authorisation, and whether it covers the product category in question, is worth checking separately from any quality certificate.

What is the difference between GDP and GMP?

GMP covers production. GDP covers storage, transport and distribution after production. A product can be made under GMP and then damaged by a distribution chain that is not under control. Both are needed, and one does not imply the other.

How often should a distributor be re-audited?

Risk-based, typically on a cycle of two to three years, with more frequent review where the product is temperature-sensitive or the route is complex. A certificate older than the audit cycle it claims to reflect is a document, not assurance.

Can a supply-chain partner without a wholesale authorisation still serve us?

Yes, in a defined role. A partner that arranges sourcing, documentation and logistics without taking legal ownership of the product is not performing wholesale distribution. The distinction has to be stated accurately, because describing that role as distribution would misrepresent the regulatory position.