Year: 2026

An API DMF (Drug Master File) is a confidential submission to a regulatory authority that contains detailed information about the manufacture, processing, quality control and packaging of an active pharmaceutical ingredient. It allows an API manufacturer to share sensitive technical details with the regulator without revealing them to the customer who uses the API in a finished product. This guide explains what a DMF is, how it works, how it differs from an ASMF and a CEP, and what buyers should know when a supplier says it has a DMF. Key Takeaways A DMF is a confidential file submitted by the API manufacturer to the regulator. It is not an approval. The regulator reviews a DMF only in connection with a finished product application that refers to it. Customers get a Letter of Authorisation (LOA) that lets the regulator refer to the DMF for their application. Different regions use different systems, such as the US DMF, the EU ASMF and the European CEP.   What Is a Certificate of Analysis? A CoA confirms that a batch was tested and states whether it complies with the specification. For APIs, the specification is usually based on a pharmacopoeia such as IP, BP, USP or Ph. Eur., or on an agreed in-house standard. What Is a Drug Master File? A DMF is a submission, usually by an API manufacturer, to a regulator such as the US Food and Drug Administration (FDA). It holds confidential information about the facilities, processes and controls used to make an API (or another material such as an intermediate, excipient or packaging component). The aim is to protect the manufacturer’s know-how while still allowing the regulator to assess an application that uses that material. How a DMF Works The API manufacturer submits the DMF to the regulator. A customer, usually a finished product manufacturer, files an application (for example, an ANDA in the United States) that refers to the DMF. The API manufacturer issues a Letter of Authorisation that lets the regulator use the DMF for that customer’s application. The regulator reviews the DMF as part of reviewing the application and may ask questions. A DMF is not approved or rejected by itself. It is reviewed only when it is referenced. What a DMF Typically Contains The exact format varies by region, but an API file generally covers: manufacturer and site information description of the manufacturing process and controls raw materials, starting materials and intermediates specifications and analytical methods impurity profile and control strategy stability data and retest period container closure system Many parts follow the Common Technical Document (CTD) structure. Open Part and Restricted Part Many systems split the file into two parts: Applicant’s (open) part: information the finished product manufacturer needs to see Restricted (closed) part: confidential details, such as detailed process information, that only the regulator sees DMF vs ASMF vs CEP System Used in Notes US DMF United States Submitted to the FDA and referenced in applications such as ANDAs ASMF (Active Substance Master File) European Union Similar split between applicant and restricted parts CEP (Certificate of Suitability) Europe A certificate issued by EDQM showing that an API’s quality is suitably controlled by the European Pharmacopoeia Other countries have their own requirements, and some accept DMF or ASMF information in the finished product file. Why a DMF Matters for Buyers Faster, smoother filings. The finished product applicant can refer to the file instead of collecting every detail. Confidentiality. The API supplier does not have to share its process. Regulatory confidence. A well-maintained file shows documented quality systems. Questions to Ask a Supplier Do you hold a DMF, ASMF or CEP for this API, and in which regions? What is the current status and are you keeping the file updated? Will you provide a Letter of Authorisation for my filing? Who is the holder, and does it match the manufacturing site? What other regulatory documents can you provide? See documents to request from an API supplier and how to evaluate a pharmaceutical API supplier. DMF and Markets in Africa Registration rules differ by country. Regulators such as NAFDAC in Nigeria, the Pharmacy and Poisons Board in Kenya and the Ghana FDA each set their own requirements, and the API information they ask for is often part of the finished product dossier. Check the current guidance of your regulator. Regulatory Support at Salvavidas Pharma Salvavidas Pharma is a WHO-GMP certified pharmaceutical manufacturer and exporter based in Surat, Gujarat, India. See our regulatory services. Frequently Asked Questions What does DMF stand for?Drug Master File. Is a DMF a regulatory approval?No. It is a confidential submission that the regulator reviews only when a finished product application refers to it. Who files a DMF?Usually the API manufacturer, or another holder of the material, such as an excipient or packaging supplier. What is a Letter of Authorisation?A letter from the DMF holder allowing the regulator to refer to the file in a specific customer’s application. Need regulatory documents for your API? Contact our export team.

An API certificate of analysis (CoA) is a document issued by the manufacturer that shows the test results for a specific batch of an active pharmaceutical ingredient, compared with its approved specification. It is one of the most important documents you receive with any API shipment, because it tells you whether that batch meets the quality standard you expect. This guide explains what a CoA contains, how to read one, what to check, and the red flags that suggest a problem. Key Takeaways A CoA is batch-specific. It reports the results for one batch of one product. It lists tests, specifications (limits), methods and actual results, and is signed by an authorised person. Buyers should check that the CoA matches the product, batch number, manufacturer and their own specification. A CoA is not a substitute for supplier qualification or your own testing. What Is a Certificate of Analysis? A CoA confirms that a batch was tested and states whether it complies with the specification. For APIs, the specification is usually based on a pharmacopoeia such as IP, BP, USP or Ph. Eur., or on an agreed in-house standard. What a CoA Usually Contains Section What it shows Product name API name, and grade or pharmacopoeia reference Manufacturer details Name and address of the manufacturing site Batch number Unique identifier linking to batch records Dates Manufacturing date and retest or expiry date Batch size and quantity Amount in the batch or consignment Tests Appearance, identification, assay, related substances, residual solvents, water content and other tests Specification The accepted limit for each test Results The actual measured values Methods Reference to the test method or pharmacopoeia Conclusion A statement that the batch complies Approval Signature, name and date of the authorised quality person Example Tests on an API CoA Description: colour and physical form Identification: tests confirming the API is what it says Assay: how much active substance is present Related substances: impurities and degradation products Residual solvents: solvents left from manufacture Water content: moisture level Physical tests: for example particle size or polymorphic form where relevant Microbial limits: where required The tests and limits depend on the product and your agreed specification. How to Read and Check a CoA Product and grade. Make sure the name and grade match your order. Manufacturer and site. Check the manufacturing site is named and matches the licence and GMP certificate. Batch number. It should match the label on the containers. Dates. Check the manufacturing date and retest or expiry date. Specification. Compare the listed limits with your own specification. Results. Confirm every result is within the limit and that results are actual values, not just the word passes. Methods. Check the pharmacopoeia or method reference. Signature. An authorised person should sign and date it. CoA vs Other Documents Specification: the limits for the product. The CoA reports results against them. Safety Data Sheet (SDS): hazard and handling information, not quality results. Batch manufacturing record: the detailed internal record of how the batch was made. GMP certificate: shows the site’s compliance status, not a batch result. See the full list in documents to request from an API supplier. Red Flags on a CoA no manufacturer name or site address a missing batch number or dates missing tests that appear in your specification results shown only as complies or passes, with no values identical results across different batches no signature or an unclear signatory details that do not match the product, label or other documents Retest Date vs Expiry Date For APIs, many manufacturers state a retest date. After that date the material should be retested to confirm it still meets specification before use. Ask the supplier which they use and what stability data supports it. CoA and Your Own Testing Many buyers perform their own identity tests and, for critical products, full testing of incoming batches, based on their quality system and supplier risk level. See how to evaluate a pharmaceutical API supplier. CoA Practice at Salvavidas Pharma Salvavidas Pharma is a WHO-GMP certified pharmaceutical manufacturer and exporter based in Surat, Gujarat, India. See our API products. Frequently Asked Questions What does CoA stand for?Certificate of Analysis. Who issues a CoA for an API?The manufacturer’s quality control and quality assurance team, signed by an authorised person. Is a CoA the same as a specification?No. The specification lists the limits. The CoA shows the results of testing one batch against those limits. Can I get a sample CoA before ordering?Often yes. Ask the supplier for a sample CoA for the product and compare it with your specification. Need a sample CoA? Contact our export team.

GMP in pharmaceutical manufacturing stands for Good Manufacturing Practice. It is the set of rules and practices that make sure medicines are consistently produced and controlled to the quality standards they are meant to meet. GMP covers everything from buildings and equipment to people, documents and testing. This guide explains what GMP is, its main principles, the difference between GMP, cGMP and WHO-GMP, and what a GMP certificate means for buyers. Key Takeaways GMP ensures medicines are made consistently and safely, and that the quality is built into the process, not just tested at the end. Core areas include quality management, personnel, premises and equipment, documentation, production, quality control and complaints handling. GMP, cGMP and WHO-GMP are closely related. The differences are mainly in who sets and inspects the standards. A GMP certificate is useful evidence, but buyers should still review quality systems and documentation. What Does GMP Mean? Good Manufacturing Practice is a quality system for manufacturing medicines. Its aim is to protect patients by reducing the risks that cannot be removed by testing a finished product alone, such as mix-ups, contamination and errors. Regulators around the world publish GMP requirements, and manufacturers are inspected against them. GMP vs cGMP vs WHO-GMP Term Meaning GMP Good Manufacturing Practice, the general term cGMP Current Good Manufacturing Practice, the term used in the United States. The word current signals that practices must keep up with modern standards WHO – GMP GMP guidelines published by the World Health Organization, widely used as a reference, and a term often used for certificates in India EU GMP GMP requirements used in the European Union ICH Q7 The GMP guide specifically for active pharmaceutical ingredients In India, GMP requirements for medicines are set out in Schedule M of the Drugs and Cosmetics Rules, which has been revised to align more closely with international standards. The Main Principles of GMP 1. Quality management A quality system with clear responsibilities, an independent quality unit and a culture of compliance. 2. Personnel Trained, qualified staff with defined roles and good hygiene practices. 3. Premises and equipment Facilities designed to prevent contamination and mix-ups, and equipment that is qualified, calibrated and maintained. 4. Documentation If it is not written down, it did not happen. GMP requires written procedures, batch records and traceable data, including data integrity controls. 5. Production controls Validated processes, controlled materials, in-process checks and clear labelling. 6. Quality control Testing of raw materials, in-process samples and finished products against approved specifications, plus stability testing. 7. Complaints, deviations and recalls Systems to investigate problems, make corrections and withdraw products from the market if needed. 8. Self-inspection and audits Regular internal checks and supplier audits to keep standards high. GMP for APIs Active pharmaceutical ingredients follow a dedicated guide, ICH Q7, which applies from the point where the API starting material enters the process. It does not cover worker safety, which is handled separately, for example for highly potent APIs. See the process in how APIs are manufactured. What Is a GMP Certificate? A GMP certificate is issued by a regulatory authority (or on its behalf) after an inspection or assessment, showing that a site met GMP requirements at that time. For buyers it is a useful, but not final, piece of evidence. When reviewing one, check: the issuing authority the site name and address the products or dosage forms covered the validity date Also review the quality system, inspection history and your own sample tests. See how to evaluate a pharmaceutical API supplier. Why GMP Matters for Buyers fewer batch failures and quality complaints smoother registration, because regulators expect GMP evidence a better chance of passing audits and tenders lower risk to patients and your reputation GMP at Salvavidas Pharma Salvavidas Pharma is a WHO-GMP certified pharmaceutical manufacturer and exporter based in Surat, Gujarat, India. Visit our manufacturing facility page. Frequently Asked Questions What does GMP stand for? Good Manufacturing Practice. What is the difference between GMP and cGMP? They are very similar. cGMP is the United States term, and the c reminds manufacturers to follow current, up-to-date practices. Is a GMP certificate permanent? No. Certificates have validity periods and sites are re-inspected, so always check the date. Does GMP guarantee a perfect product? No system is perfect, but GMP greatly reduces risk by building quality into every step.Looking for a GMP-certified supplier? Contact our export team. Sources ICH Q7: Good Manufacturing Practice for Active Pharmaceutical Ingredients, European Medicines Agency Q7A Good Manufacturing Practice Guidance for Active Pharmaceutical Ingredients, US FDA