If you manufacture bottles, blisters, vials, closures, tubes, or other components that touch a medicinal product directly, sooner or later a pharma customer or regulator is going to ask about ISO 15378. It’s the standard that tells the industry your quality system is built for primary packaging, not just general manufacturing.
This guide breaks down what ISO 15378 actually covers, who needs it, and the realistic path from first gap assessment to certificate in hand — so you can plan the work instead of guessing at it.
Quick Answer
ISO 15378 is the international standard for primary packaging materials for medicinal products — it applies ISO 9001 quality management requirements together with Good Manufacturing Practice (GMP) principles specific to packaging that comes into direct contact with drugs (glass, plastic, rubber, aluminum, laminates, films). To qualify, you build a compliant quality management system, run it long enough to generate audit evidence, and pass a two-stage certification audit through an accredited certification body.
What ISO 15378 Actually Covers
ISO 15378 (currently the 2017 edition, referencing ISO 9001:2015) is titled ‘Primary packaging materials for medicinal products — Particular requirements for the application of ISO 9001, with reference to good manufacturing practice (GMP).’ The key word is primary: it applies to packaging materials that touch the drug product directly — think glass ampoules and vials, blister packs, closures, stoppers, tubes, plastic bottles, foils, and laminate containers. Secondary packaging like cartons or shipping boxes that never contact the product isn’t the target.
Structurally, it takes the full ISO 9001 framework and layers on GMP-specific requirements: batch traceability from raw material through finished component, contamination and cross-contamination controls, controlled and monitored environmental conditions (cleanrooms or controlled areas where relevant), change control, risk management applied to packaging design and process, validation of processes that can’t be fully verified by inspection alone, and documented procedures for deviations and corrective action. In practice, it’s what lets a pharmaceutical company treat you as a qualified, auditable supplier without doing a full GMP inspection of your site themselves.
The standard is used across pharmaceutical, biotech, nutraceutical, and in some cases cosmetic packaging supply chains, and it’s frequently requested by drug manufacturers as a supplier qualification prerequisite alongside or instead of full pharmaceutical GMP certification.
How to Qualify: The Certification Path
Start with a gap assessment against the current edition of the standard, ideally led by someone who has done ISO 9001 or pharma GMP audits before. Map every clause — traceability, environmental monitoring, validation, risk management, document control — against what you currently do, and be honest about where ‘we sort of do that informally’ isn’t going to hold up under audit.
Build or upgrade your quality management system to close the gaps. This is usually the longest phase: writing or revising procedures, defining batch and lot traceability records, setting up environmental monitoring where your process requires it, formalizing risk assessments for packaging materials and processes, and training staff on the new or updated procedures. Most organizations coming from a solid ISO 9001 baseline need several months; those starting from scratch should expect closer to six months to a year before they’re audit-ready.
Run the system long enough to generate real records — internal audits, management review, corrective actions on actual nonconformities — because auditors want to see the system operating, not just documented on paper.
Select an accredited certification body (organizations like SGS, TÜV Rheinland, TÜV SÜD, DQS, and others offer ISO 15378 certification through nationally accredited programs) and go through the two-stage external audit: Stage 1 reviews your documentation and readiness; Stage 2 is the on-site audit of your actual processes, records, and staff practices. Nonconformities found in either stage need corrective action before the certificate is issued.
Once certified, the certificate is typically valid for up to three years, with annual (or sometimes semi-annual) surveillance audits in between and a full recertification audit at the end of the cycle.
Tips / Common Mistakes
Don’t treat this as a paperwork exercise bolted onto ISO 9001 — the GMP-specific pieces (environmental controls, batch traceability, validation) are usually where companies underestimate the work, and they’re exactly what pharma customers care about most.
Get environmental monitoring and cleanroom classification (if applicable to your process) sorted early; retrofitting controlled areas late in the project is expensive and slow.
Involve production and quality staff in writing the procedures, not just quality management alone — auditors interview line staff, and procedures nobody on the floor actually follows are a fast way to pick up nonconformities.
Get quotes from a couple of accredited certification bodies before committing — cost and audit scheduling can vary meaningfully by company size and the maturity of your existing quality system.
Keep the system running as a real management tool after certification. Surveillance audits catch systems that were built for the initial certification and then neglected.
Explore more: More packaging compliance guides.
ISO 15378 FAQs
Who needs ISO 15378 certification?
Manufacturers of primary packaging materials for medicinal products — glass, plastic, rubber, or aluminum components that directly contact the drug, such as bottles, vials, blister packs, closures, and tubes. It’s often required or preferred by pharmaceutical companies qualifying new suppliers.
How is ISO 15378 different from ISO 9001?
ISO 15378 is built on ISO 9001 but adds pharmaceutical GMP-specific requirements: batch traceability, environmental controls, contamination prevention, and validation practices specific to packaging that touches medicinal products.
How long does ISO 15378 certification take?
Timelines vary by starting point, but organizations typically need several months to a year to build and operate a compliant quality system before the certification audit, plus time for the two-stage audit itself and any corrective actions.
How long is an ISO 15378 certificate valid?
Certificates are typically valid for up to three years, with periodic surveillance audits (often annual) required to maintain certification and a full recertification audit at the end of the cycle.
Source Smarter With Packaura Direct
Find packaging suppliers, surplus inventory, and certification — all on Packaura Direct. Try Packaura Direct.
Photo by Catgirlmutant on Unsplash.