Certification Guide for Pharma Buyers: What GMP, ISO & Schedule M Certificates Actually Tell You

Certification Guide for Pharma Buyers: What GMP, ISO & Schedule M Certificates Actually Tell You

Certificate walls are a fixture of the pharma contract manufacturing sales process: WHO-GMP framed in reception, ISO certificates in the conference room, Schedule M compliance declared in every brochure. Most of them are real. Some are current. A smaller number tell you what you actually need to know about whether this facility will consistently manufacture your product to specification.

This guide cuts through the certificate landscape to focus on two things: what each certificate actually confirms, and what documents tell you more than any certificate can.

Evaluating a specific manufacturer?
Use this guide alongside our Buyer’s Due-Diligence Checklist and our detailed Quality Control Guide for a complete evaluation framework. See the Revised Schedule M Guide for compliance specifics.

WHO-GMP vs IP Quality Control Standards Diagram

The Three Main Certificates — What Each Actually Confirms

WHO-GMP Certificate

What it confirms:
A WHO-GMP (Good Manufacturing Practice) certificate confirms that a facility was inspected against WHO’s GMP guidelines and met the required standards at the time of inspection. The inspection covers facility layout, equipment qualification, process validation, documentation systems, quality control laboratory, and personnel training — at a point in time.

What it doesn’t confirm:
It says nothing about what’s happening between inspections. It doesn’t confirm that the specific molecule you want to manufacture is within the facility’s proven capability. And — critically — it only covers the dosage forms listed in the scope.

The scope page is what matters most:

Scope EntryWhat It Covers
Oral Liquids (Non-Sterile)Syrups, solutions, suspensions
Semi-Solid PreparationsCreams, ointments, gels
Tablets and CapsulesCompressed and filled oral solids
Nasal and Otic PreparationsNasal sprays, ear drops
Parenteral PreparationsInjectables — sterile manufacturing

Your product must be explicitly listed in the scope. If your product is a nasal spray and the certificate scope says “Oral Liquids” only — the certificate is irrelevant to your product category.

Scope Mismatch Is a Common Oversight
It’s surprisingly common for brand owners to check the existence of a WHO-GMP certificate without reading its scope. A facility can hold a WHO-GMP certificate for oral tablets while having no validated nasal spray or semi-solid manufacturing capability. Always read the scope page — not just the certificate header.

Schedule M Compliance

What it confirms:
Schedule M compliance, under India’s Drugs & Cosmetics Act, is the mandatory GMP standard that every licensed pharmaceutical manufacturer must meet. It covers facility requirements (layout, clean rooms, HVAC), equipment qualification, process validation, documentation (BMR, SOP, QC records), quality management systems, and personnel requirements.

The Revised Schedule M (2023) updated these requirements significantly:

Revised Schedule M AdditionWhat It Changes
Pharmaceutical Quality System (PQS)Formal quality system now mandatory, not just documentation
Quality Risk Management (QRM)Proactive risk identification required across production
ALCOA+ Data IntegrityAll records — electronic and paper — must meet strict traceability standards
Lifecycle ValidationEquipment validation is ongoing, not a one-time event

What it doesn’t confirm:
Like WHO-GMP, Schedule M compliance is verified during inspections. Ongoing compliance between inspections depends on the facility’s internal discipline.

ISO 9001:2015

What it confirms:
ISO 9001:2015 is a quality management system standard — it confirms that a facility has documented its processes, has mechanisms for identifying non-conformance, and has management review cycles in place. It applies to any industry, not just pharmaceuticals.

What it doesn’t confirm:
ISO 9001 contains no pharmaceutical-specific requirements. It doesn’t specify cleanroom standards, batch documentation format, microbiological testing requirements, or analytical method validation. It’s a meaningful process framework, but it’s not a substitute for WHO-GMP or Schedule M compliance.

How to Read an ISO 9001 Certificate
An ISO 9001 certificate is a positive quality signal — it means the facility has invested in process documentation and quality management structure. But evaluate it as a supplement to WHO-GMP and Schedule M compliance, not as an alternative. A WHO-GMP + Schedule M + ISO 9001 combination is the benchmark for a well-managed Indian pharma manufacturer.

Calibrated Analytical Testing Instruments in QC Lab

The Certificate Comparison Table

CertificateIssued ByPharma-Specific?Inspection-Based?Scope-Limited?
WHO-GMPState Drug AuthorityYesYes — point-in-timeYes — check scope page
Schedule MState Drug AuthorityYesYes — mandatory legal requirementCovered by drug license scope
ISO 9001:2015Private certification bodyNoYes — annual surveillanceNo — general management systems

The Documents That Tell You More Than Certificates

Once you’ve verified that the certificates are genuine, current, and cover your product category, shift your attention to operational evidence. Three documents tell you more about a manufacturer’s actual daily quality discipline than any certificate does.

1. The Certificate of Analysis (COA)

A COA for a commercial batch tells you what the manufacturer actually tested, what results they got, and whether the batch met its specifications. Request a sample COA for a product similar to yours and check:

  • All pharmacopoeial tests present: Assay, dissolution, microbial limits, pH (for liquids), viscosity (for suspensions), spray pattern (for nasal sprays)
  • Actual results, not just “passes”: A COA that says “Complies” instead of giving the actual number is a documentation quality red flag
  • QP signature and date: Confirms a Qualified Person reviewed and released the batch
  • License number reference: Ties the batch to a valid manufacturing license

2. The Batch Manufacturing Record (BMR)

A BMR (or a redacted sample of one) shows you the discipline of the manufacturing documentation process. Check:

  • Is it contemporaneous? (Times and initials recorded at the time of each step, not filled in after the run)
  • Are there corrections done correctly? (Single line through error, initial, and date — no correction fluid)
  • Is the yield calculation present and verified by a second person?
  • Are raw material lot numbers and test report references present?

A manufacturer who won’t share a redacted BMR sample is a manufacturer who doesn’t want you to see their documentation quality. That’s an answer in itself.

3. The OOS Investigation Procedure

Ask: “Can you walk me through what happens when a batch test result falls outside specification?”

A manufacturer with a real OOS procedure will describe Phase 1 (laboratory investigation to rule out assignable error) and Phase 2 (full manufacturing investigation involving BMR review, environmental monitoring review, and raw material lot tracing) — and will be able to name the SOP by its document number. They’ll confirm that the batch is quarantined throughout the investigation and that no rework-to-pass is permitted.

A manufacturer who says “we re-test until it passes” or looks confused by the question has answered it.

The Most Efficient Due Diligence Question
If you only have time for one question during a manufacturer evaluation, make it this: “Can I see a sample COA, a page from a BMR, and your OOS SOP?” A manufacturer who produces all three immediately, without hesitation, has demonstrated more about their quality culture than any certificate wall can.

How Saar Biotech’s Certificates Stack Up

Our manufacturing facility at EPIP Phase-1, Baddi operates under:

  • WHO-GMP Certificate covering Oral Liquids (Non-Sterile) and Nasal/Otic Preparations — scope-matched to our core product categories
  • ISO 9001:2015 Certification for our quality management system
  • Schedule M Compliance under current Himachal Pradesh State Drug Authority licensing, updated to Revised Schedule M requirements

We make sample COAs, redacted BMR pages, and our OOS investigation procedure available to prospective partners on request — before any commitment is made. We welcome independent facility audits as a standard part of the partnership evaluation process.

Explore our manufacturing facilities:

Browse our product range:

Our detailed quality control systems — including in-process testing protocols, ALCOA+ data integrity implementation, and analytical instrumentation — are documented in our Quality Control Guide.

Conclusion

Certificates are the starting point of a manufacturer evaluation, not the endpoint. They confirm a facility met defined standards at an inspection — they don’t tell you what’s happening in the QC laboratory this week. For that, you need operational evidence: a current COA with real numbers, a BMR sample that reflects genuine contemporaneous documentation, and an OOS procedure that a member of their quality team can walk you through from memory.

Manufacturers who are proud of their quality systems answer these requests quickly. Manufacturers who aren’t will find reasons not to.

Ready to evaluate Saar Biotech’s quality credentials directly?

Frequently Asked Questions

What is the difference between WHO-GMP, Schedule M, and ISO 9001 for a pharmaceutical manufacturer?
Schedule M is the mandatory GMP standard under India’s Drugs & Cosmetics Act — every licensed pharmaceutical manufacturer in India must comply with it. WHO-GMP is an internationally recognised standard that aligns closely with Schedule M but is used for export registration and international credibility; the Revised Schedule M (2023) was specifically designed to bring Indian GMP closer to WHO-GMP globally. ISO 9001:2015 is a general quality management system standard applicable to any industry — it documents that a facility has defined processes and follows them, but it doesn’t specify pharmaceutical-specific requirements for cleanrooms, sterility, or batch documentation the way WHO-GMP and Schedule M do.
How do I verify that a WHO-GMP certificate is genuine?
WHO-GMP certificates for Indian pharmaceutical manufacturers are issued by state drug authorities — not by private certification bodies. A genuine certificate will name the issuing State Drug Controller’s office, carry an official stamp, list the exact dosage forms covered under its scope, and have a defined validity period. Cross-check the certificate number with the issuing state drug authority’s records where possible. ISO certificates can be verified through the issuing certification body’s online lookup. Be cautious of any GMP certificate issued by a private organisation that is not a state or national drug regulatory authority.
What should the scope page of a WHO-GMP certificate contain?
The scope page specifies the categories of pharmaceutical products the facility is certified to manufacture — for example, ‘Oral Liquids (Non-Sterile),’ ‘Semi-Solid Preparations,’ ‘Tablets and Capsules,’ or ‘Nasal and Otic Preparations.’ Your product must fall within the listed categories. A facility with WHO-GMP for oral liquids is not automatically certified for nasal sprays or parenteral preparations — these are separate scopes requiring specific equipment, facility, and process validation.
If a manufacturer has a WHO-GMP certificate, do I still need to check their COA and BMR?
Absolutely yes. A WHO-GMP certificate tells you the facility met standards during its last inspection. A COA and BMR sample tells you whether that quality discipline is actually being practised on current production batches. These are different questions with different answers. A certificate is a baseline requirement; the COA and BMR are evidence of what’s happening today. Always ask for both.
What is the Revised Schedule M and why does it matter for me as a brand owner?
The Revised Schedule M, notified in 2023, updates India’s GMP requirements to align more closely with global WHO-GMP and PIC/S standards. Key additions include a mandatory Pharmaceutical Quality System (PQS), Quality Risk Management (QRM) framework, stricter data integrity requirements under ALCOA+ principles, and lifecycle-based validation. For brand owners, it matters because manufacturers now have higher compliance obligations — which raises the baseline quality standard across the industry, but also increases the gap between compliant and non-compliant facilities. Choosing a manufacturer who has proactively implemented the Revised Schedule M reduces your product’s regulatory risk.
About Saar Biotech
WHO-GMP Certified
2250+ B2B Partners
240+ Products
Baddi Facility
Learn about our facility
Manufacturing Assurance

Why Choose Saar Biotech as Your Contract Manufacturing Partner?

Across every dosage form and every therapeutic area, Saar Biotech maintains the same uncompromising standards — because your brand's reputation depends on it.

WHO-GMP Certified

All dosage forms manufactured under WHO-GMP and ISO 9001:2015 in Baddi, India.

30–45 Day Turnaround

From artwork approval to first dispatch — delivered on time, India-wide.

Complete Regulatory Support

DCGI licensing, state permissions, COA issuance — handled by our team.

Segregated Lines

Dedicated Beta-Lactam and Non-Beta-Lactam manufacturing blocks for absolute purity.

240+ Approved Formulations
2250+ B2B Partners Served
Schedule M Compliant Manufacturing
30–45 Day Turnaround (Days)
Call Us
WhatsApp
Email