A cGMP certificate covers exactly three things: a named scheme, a defined scope of products and processes, and the sites where those processes run. Everything outside that boundary is not covered, however good the facility is.
- Scheme named on the certificate, never a generic label
- Scope written to match what you actually produce
- One written quotation once scope is confirmed
- Certification under IAS’s UQAS accreditation
That sounds obvious until a buyer asks what your cGMP certificate covers for the product line they are about to order, and nobody at the site can answer without opening the document.
Want to know what your scope should say? Send IAS your product list and site addresses and we will draft the scope wording before you commit to anything — start a scoping conversation.
At a glance
- Named scheme: the framework the audit measured you against, printed on the certificate.
- Defined scope: the product categories, processes and activities assessed.
- Named sites: the physical locations covered, listed individually.
- A validity cycle: surveillance between assessments, recertification at the end.
- Clear limits: anything not written into the scope is not covered by the certificate.
What a cGMP certificate covers: the three things printed on it
The scheme
A certificate that says only “cGMP certified” identifies nothing, because cGMP is a general term rather than a single worldwide standard. A usable certificate names the framework the audit applied. That is what lets a buyer decide whether the assessment is relevant to what they are purchasing.
The scope
The sentence setting out what a cGMP certificate covers does most of the work, and it is written to match what the applicant actually produces, packs, stores or handles. A chemical formulator is not assessed against pharmaceutical dosage-form requirements. A warehousing operation is not asked to demonstrate manufacturing controls it does not perform.
The sites
Each location is named. A certificate covering a Tuas plant says so, and does not silently extend to a second facility that was never audited.
What a well-written scope statement looks like
A weak scope reads: Manufacture of food products.
A strong one reads: Manufacture, primary packing and storage of ready-to-drink beverages and powdered beverage premixes at a named address, assessed against a named scheme.
The difference matters commercially. The first sentence forces every buyer to ask a follow-up question. The second answers what a cGMP certificate covers. When a procurement team is comparing three suppliers on a Thursday afternoon, the certificate that answers its own questions is the one that gets accepted without a phone call.
| Scope element | Vague version | Usable version |
|---|---|---|
| Activity | “Manufacturing” | Manufacture, primary packing and storage |
| Product | “Food products” | Ready-to-drink beverages and powdered premixes |
| Site | Company name only | Named address, listed individually |
| Framework | “cGMP” | The named scheme the audit applied |
| Exclusions | Unstated | Contract-packed lines stated as outside scope |
The limits — what the certificate does not cover
Knowing what a cGMP certificate covers also means knowing where it stops — the part most pages skip, and the part buyers actually test.
A cGMP certificate does not certify a product. It evidences that a system covering a defined scope was assessed against a named scheme. It does not confer permission to manufacture or to sell — those decisions belong to regulatory authorities, and no certification body can grant them.
What a cGMP certificate covers also does not extend automatically. A new production line, a new product family or an additional site sits outside the existing scope until a scope extension or reassessment brings it in. Sites that add capacity and assume the certificate followed are the most common source of an awkward conversation with a customer auditor.
Adding a line or a site this year? Tell IAS now rather than after the change. A scope extension planned in advance costs less than one handled retrospectively — request a quotation.
How scope gets decided
What a cGMP certificate covers is agreed at application, before any audit is planned. IAS reviews what you make, where, and which markets are asking for evidence, then confirms the applicable scheme and drafts the scope wording. Nothing is assumed from your industry label.
One practical tip at this stage: send the product list your sales team uses, not the one your quality team keeps. The sales list is what customers order from, and it is usually the more complete of the two — quality lists tend to omit lines that were added quickly or that somebody assumed were covered.
Where several product lines share a common framework and your systems support it, one certificate can cover them together. Where the categories rely on materially different frameworks, they are usually scoped separately, because a single certificate that blurs two schemes is less useful to a buyer than two that are clear.
Keeping the scope honest between audits
A scope written in January describes the site as it was in January. What keeps it accurate is the internal audit programme — trained people inside the business checking that the certified system is still the system running on the floor.
That is why certification and cGMP internal auditor training in Singapore tend to be bought together. Certification sets the criteria; internal auditors test whether the site still meets them. Sites that certify without building the internal capability usually discover their drift at the surveillance visit, which is the expensive moment to discover it.
For teams that cannot release several people at once, the self-paced online cGMP internal auditor training covers the same method, and the cGMP foundation course suits staff who work inside the system rather than audit it.
Three scope statements, read as a buyer would read them
What a cGMP certificate covers is easier to judge from examples than from principles. Here are three, with the questions each leaves open.
Statement one — Manufacture of nutritional products
A buyer reads this and cannot tell whether “manufacture” includes packing, whether “nutritional products” covers the powdered blend they want, or which site made it. Every one of those becomes an email. Worse, the vagueness invites the buyer to assume the broadest reading, which is a risk to you rather than to them.
Statement two — Manufacture and packing of nutritional powders and capsules
Better. The activities are named and the product forms are specific. What is still missing is the site and the framework. If you operate two facilities, this statement quietly implies both.
Statement three — the version that answers its own questions
Manufacture, primary packing, secondary packing and storage of nutritional powders and two-piece capsules at a named site address, assessed against a named framework. Contract-filled liquid lines are excluded.
This one answers its own questions, including the awkward one. The exclusion is the mark of a scope written by someone who understood it — it tells a buyer exactly where the boundary sits instead of leaving them to discover it.
When what a cGMP certificate covers has to change mid-cycle
Scope is settled at application, but businesses do not stand still, and four situations come up often enough to plan for.
- A new product family. If it falls under the same framework and uses the same processes, a scope extension usually handles it. If it introduces a different framework, it is closer to a new certification than an amendment.
- A new site. Always requires assessment of that site. A certificate covering one address never quietly extends to a second, however similar the operation.
- A relocated line. Moving production between certified areas within one site is normally a change-control matter. Moving it to an uncertified building is a scope question.
- An acquisition. The acquired site’s certification, if any, belongs to the entity that held it. Bringing it under your certificate is an assessment, not a paperwork transfer.
| Change | Usually handled by | Tell IAS |
|---|---|---|
| New product, same framework | Scope extension | Before the line starts |
| New product, different framework | New scope, often a separate certificate | At the planning stage |
| Additional site | Assessment of that site | Before it produces certified goods |
| Line moved within certified areas | Your own change control | At the next surveillance |
| Acquired facility | Assessment; certificates do not transfer | During due diligence |
The common thread is timing. A change flagged in advance is scoped into the next planned visit at marginal cost. The same change discovered during an audit is a finding, and the products made in the meantime sit outside the certificate that was supposed to cover them.
Quick definitions
- Certificate scope: the written description of what was assessed and where.
- Named scheme: the published framework the audit measured against.
- Scope extension: the assessment that brings a new line, product or site inside an existing certificate.
- Exclusion: an activity deliberately stated as outside the certified boundary.
- Multi-site scope: one certificate covering several named locations under common control.
- Surveillance: the interim visit sitting between two full assessments.
- Objective evidence: something a second person can verify without taking your word for it.
- Certification decision: the independent technical review that precedes issue.
Why manufacturers in Singapore work with IAS
- Scope drafted with you before the audit is planned, not written afterwards.
- The scheme is always named on the certificate, so buyers can read what was assessed.
- Multi-site and multi-product scopes handled as one coordinated programme.
- Certification and internal auditor training available together, so the criteria match.
- A single written figure once the scope is agreed, rather than a headline rate that later changes.
To be clear about the boundary: IAS certifies management systems and delivers training. Licensing a facility and approving a product for sale are decisions for regulatory authorities, and a certificate never substitutes for either.
If you want the mechanics rather than the summary, the certification process page sets out each stage, frequently asked questions answers the questions that arrive most often, IAS accreditation explains the basis on which IAS issues, and the Singapore service index lists the other services available here.
Frequently Asked Questions
Can one certificate cover more than one product category?
Yes, provided a single framework governs them and your documentation reaches across them. Categories resting on genuinely different frameworks read better on separate certificates — a buyer reading a single certificate that mixes two schemes tends to ask more questions, not fewer.
What happens if we add a new production line after certification?
The new line sits outside the certified scope until a scope extension covers it. Tell IAS before the change rather than after; an extension planned in advance is simpler and cheaper than one handled retrospectively.
Does the certificate cover our contract manufacturer?
Not unless that site was audited and named. A certificate covers the locations listed on it. Where you rely on a contract manufacturer, the usual routes are to bring that site into your scope or to ask them to certify their own.
How specific does a certification scope statement need to be?
Specific enough that a buyer can tell whether their product is covered without contacting you. Naming the activity, the product families and the site address is the working standard.
Can we exclude part of the site from scope?
Yes, and stating an exclusion openly is better practice than leaving it ambiguous. An exclusion that is written down is a boundary; one that is implied is a finding waiting to happen.
Who decides which scheme applies?
It follows from your product category and target markets, and IAS confirms it at application. It is not a preference you select — the framework that governs what you make is the framework the audit uses.
Is the certificate valid worldwide?
What it records is a stated scope, a stated framework, and an independent body that examined the two together. How much weight a particular buyer gives it depends on that buyer’s own qualification rules, which vary. What travels is the clarity of what it states.
How long does scoping take before an audit can be booked?
Usually a short exchange rather than a project — your product list, your sites and your target markets are most of what is needed. Complex multi-site groups take longer because there is more to define.
Do we need internal auditors as well?
Certified systems are meant to examine themselves, and the interim visit tests whether that examination is really happening. Most sites train three or four people so that every area can be audited by someone independent of it.
Does the certificate name our company or the site?
Both, and they do different jobs. The company is the certified entity; the site list says which of its addresses were assessed. A buyer checking whether the plant supplying them is covered reads the site list, not the company name at the top.