Does Passing IQ OQ PQ Mean Your Leak Test Method Stays Valid?

Oct. 09, 2026

No, and this is where most CCIT programs quietly lose their validated state. Qualification proves the instrument and method were fit on installation day; it says nothing about month fourteen. Leaving the state intact depends on four things running continuously: calibrated measurement chain, reference standards that have not aged past their own tolerance, change control that catches every material or parameter edit, and periodic review of the data the instrument produces. Skip any one and you can still be generating green results while no longer able to defend them. The practical test is whether you could hand an inspector the audit-ready record for the batch you released last month, including evidence that nothing relevant changed in between. If that takes more than an afternoon to assemble, the gap is in your lifecycle controls rather than in your detector.

In short: treat the report from qualification as a starting condition, not as an asset. Budget for calibration, reference standard replacement and periodic review from day one, and decide before purchase which re-qualification work your own team will execute and which you intend to buy from the supplier.

What actually triggers revalidation?

Most change control systems list far too many triggers to be usable, or far too few. Sorting them by depth of work is more practical than sorting them by category.

Trigger	Typical depth of work	Why it matters
Software patch or firmware update	Documentation review to partial revalidation, depending on change	Can alter processing or disable features without visible sign
Replacement of a test chamber or fixture	Targeted verification of chamber fit and baseline	Changes the measurement volume and therefore sensitivity
Transducer or gauge replacement	Calibration plus verification against known leaks	Shifts the quantitative basis of the method
New container supplier or dimensional change	Partial revalidation	Presents a different seal geometry to the same detector
Elastomer or closure formulation change	Partial to full revalidation	Alters the defect population the method was validated against
New dosage form, fill volume or headspace condition	Partial revalidation	Changes how a leak expresses itself in the signal
Move to another laboratory or line	Method transfer with comparative testing	Different environment, operators and utilities
Repeated system suitability failures or sustained drift	Investigation first, then risk-based re-verification	Signals the method boundary has moved
Revised acceptance threshold or smaller critical leak size	Full revalidation	Redefines what the method must prove

The middle rows cause the most disruption because they arrive from procurement or packaging development rather than from the laboratory, and nobody thinks to route them through the integrity method owner.

How often should the measurement chain be calibrated?

Calendar defaults are a starting point, not a risk-based answer. Intervals should shorten where drift would be hard to notice and lengthen where trending gives you early warning.

Element	Typical interval	What actually drives the interval	Early sign that it is drifting
Pressure or vacuum transducer	12 months, shorter on high use	Cumulative duty cycles and repeated venting	Baseline signal moves over successive suitability runs
Timer and dwell control	Annual	Number of cycles executed	Repeatability degrades on known standards
Chamber seal and lid gasket	Quarterly visual, annual replacement	Mechanical wear and cleaning agents	Rising baseline leak rate
Helium reference leak, if applicable	12 to 24 months	Manufacturer recommendation and usage	Calibration factor migrates
Positive control set	Re-verified annually or after damage	Handling frequency and storage conditions	Detected size shifts away from certificate value
Fixtures and holders	On change or visible wear	Sample throughput	Growing false reject rate from seated samples

The useful part is the last column. A method with a stable trend tells you the instrument is healthy and lets you defend a longer interval; a flat line with no trending data gives you nothing either way.

What do reference standards age into?

Positive controls are consumables with a shelf life, even when they look permanent. Treating them as permanent is one of the most common quiet failures we see.

Control type	Dominant ageing mechanism	Consequence if ignored	Practical response
Laser drilled micro-hole	Partial occlusion by product residue or dust	Detection limit quietly improves in appearance, masking loss of sensitivity	Re-verify annually against the certificate value and retire on failure
Micropipette capillary	Mechanical breakage or seal degradation	Method appears more sensitive than it is, or fails suitability unexpectedly	Keep a spare set; Zholion supplies replacements matched to specification and to a traceable certificate
Capillary tube	Blockage or liquid ingress	False passes when the control itself stops leaking	Qualify storage conditions and inspect before each campaign
Natural defect samples	Unstable, population changes as samples break	Poor reproducibility between runs	Use for screening, not for the quantitative detection claim

Buy at least one spare set per critical leak size at the same time as the instrument. Sets purchased later will not necessarily match the original certificate values, and a mismatch forces you to re-demonstrate part of the method.

What belongs in the service contract and spare parts list?

This deserves attention during negotiation, because items left out of the original order tend to arrive later as expedited shipments at premium freight cost.

Item	Why it matters	Suggested quantity	Consequence if missing
Replacement chamber or fixture gaskets	Wear item with a defined life	Two sets per chamber	Unplanned downtime during a campaign
Spare transducer, or a calibrated rental arrangement	Single points of failure on the measurement chain	One per critical instrument	Method cannot be executed at all
Second set of positive controls per leak size	Standards age and break	One spare set per size	Suitability testing stalls pending requalification
Consumable seals and connectors	Cheap, slow to source later	Annual estimate based on throughput	Idle instrument for want of a small part
Software update and support term	Ties to operating system patching cycles	Match expected instrument life	No route to patches when the host system is upgraded
Documented response time and escalation route	Defines what "support" means	Stated in the contract	Unbounded outage with no accountability
Second instrument or external capacity arrangement	Single instrument is a single point of schedule risk	Decide explicitly whether to accept it	A breakdown stops batch release entirely

That last row is a genuine decision rather than a defect. Some sites accept the risk; others need a route to testing during outage, which is why Zholion runs both an instrument business and a testing laboratory and why the choice between them is worth making deliberately rather than by default.

Where do CCIT programs actually fail?

Failure mode	Root cause	How it surfaces	Control
Silent drift	No trending of suitability data	Inspector finds no review evidence	Periodic review with defined scope and frequency
False passes accepted as noise	Suitability failures attributed to the units rather than the method	Small misses recurring over several campaigns	We described the physics in notes on troubleshooting false passes
Orphaned standards	Controls bought years ago with no owner	Certificates expired, values unverifiable	Assign ownership and a re-verification date per set
Unrouted changes	Packaging or IT changes bypass the method owner	Discovery of the change during inspection	Change control listing CCIT as an impacted area
Calibration without traceability	Certificates from non-traceable providers	Findings during supplier audits	Specify traceability in the purchase order
Single shared audit trail review	Nobody owns periodic review	Volume too large to review meaningfully	Risk-based sampling plan written into the SOP

The recurring theme is ownership rather than technology. Every one of those rows sits with a person, and when that person leaves without a successor the control lapses unnoticed.

FAQ

Q: How often should we re-qualify the instrument itself?A: Annually is the common default, but a risk-based approach tied to drift trending and change history is more defensible and often cheaper. Sites running little use with stable suitability data can justify extending intervals if the justification is documented.

Q: Can we keep using the same positive controls for years?A: Only while each set still verifies against its certificate value. Annual re-verification is the usual practice, and a control that fails re-verification should be retired rather than re-certified repeatedly without investigation.

Q: Do we need to revalidate if only the software is patched?A: Usually a documented impact assessment rather than a full revalidation. Patches that touch signal processing, thresholds or data handling deserve more scrutiny than cosmetic interface changes, which is why a change notification commitment matters at purchase.

Q: Should we keep this capability in-house or use a testing laboratory?A: It depends on volume and on whether the result sits on your critical path. High-volume sites with stability programs usually justify in-house equipment, while development-stage work often suits outsourced testing, and we set out that trade-off in a separate comparison.

Q: What is the cheapest mistake to avoid here?A: Ordering the spare reference standard set with the instrument. It costs little at purchase, cannot always be matched to the original later, and when it is missing it blocks the method rather than merely slowing it.

Q: Can you support all of this after installation?A: Yes. Zholion supplies replacement chambers and fixtures built to your original drawings, additional positive controls matched to existing certificates, and through our own laboratory we can take samples when your instrument is unavailable.

Talk to Zholion About Sustaining Your Validated State

Send your current method, reference standard certificates and service arrangement to marketing@zholion.com. Zholion will review which elements are still defensible, quote matched replacement controls and fixtures built from your drawings, and propose a service and spare parts package sized to the number of instruments and operating hours you actually run.