If you manufacture bottles, blisters, vials, closures, tubes, or other components that touch a medicinal product directly, sooner or later a pharma customer or regulator is going to ask about ISO 15378. It’s the standard that tells the industry your quality system is built for primary packaging, not just general manufacturing — and it’s increasingly a line item on pharma supplier qualification checklists rather than a nice-to-have.
This guide breaks down what ISO 15378 actually covers, exactly which packaging components fall under it, the concrete steps to get certified, what separates it from plain ISO 9001, what certification realistically costs, and how it’s referenced in Europe — so you can plan the work instead of guessing at it.
Quick Answer
ISO 15378 is the international standard for primary packaging materials for medicinal products — glass, plastic, rubber, aluminum, laminates, and films that touch the drug directly. To get certified, you build a quality management system that layers GMP controls (batch traceability, contamination control, environmental monitoring, process validation, risk management) onto the ISO 9001 framework, run it long enough to generate real audit evidence, then pass a two-stage audit through an accredited certification body such as SGS, TÜV Rheinland, TÜV SÜD, DQS, or Bureau Veritas. Certificates run on a three-year cycle with annual surveillance audits, and most organizations move from kickoff to certificate in roughly 4 to 8 months depending on how mature their existing quality system already is.
What ISO 15378 Actually Covers
ISO 15378 (currently the 2017 edition, referencing ISO 9001:2015) is titled ‘Primary packaging materials for medicinal products — Particular requirements for the application of ISO 9001, with reference to good manufacturing practice (GMP).’ The key word is primary: it applies to packaging materials that touch the drug product directly. Secondary packaging like cartons or shipping boxes that never contact the product isn’t the target.
Structurally, it takes the full ISO 9001 framework and layers on GMP-specific requirements: batch traceability from raw material through finished component, contamination and cross-contamination controls, controlled and monitored environmental conditions (cleanrooms or controlled areas where relevant), change control, risk management applied to packaging design and process, validation of processes that can’t be fully verified by inspection alone, and documented procedures for deviations and corrective action. In practice, it’s what lets a pharmaceutical company treat you as a qualified, auditable supplier without doing a full GMP inspection of your site themselves. The standard is used across pharmaceutical, biotech, nutraceutical, and in some cases cosmetic and medical device packaging supply chains, and it’s frequently requested by drug manufacturers as a supplier qualification prerequisite alongside or instead of full pharmaceutical GMP certification.
How to Get ISO 15378 Certified: Step-by-Step
Getting certified isn’t a single audit event — it’s a build-then-verify process, and skipping steps is the most common reason companies fail their first certification audit. The path most manufacturers follow looks like this:
1) Define scope — decide exactly which sites, product lines, and processes will be certified. 2) Run a gap assessment — compare your current quality system and GMP controls against ISO 15378’s requirements and document what’s missing. 3) Build or upgrade the QMS — write the procedures, risk assessments, validation protocols, and environmental monitoring plans the gap assessment identified. 4) Operate the system and generate evidence — you need real batch records, deviation logs, and internal audit findings, not just written procedures, because auditors look for a track record, not a binder. 5) Complete an internal audit and management review — required before a certification body will schedule Stage 1. 6) Stage 1 audit — the certification body reviews your documentation and readiness on paper (or remotely) and flags any gaps before committing resources to a full on-site visit. 7) Stage 2 audit — an on-site audit where the certification body verifies the QMS is actually operating as documented, interviews staff, and reviews objective evidence. 8) Certification decision and certificate issuance — assuming no major nonconformities remain open. 9) Annual surveillance audits — required every year to keep the certificate valid across its three-year cycle, with recertification audits at the end of that cycle.
Choosing a certification body matters as much as the internal work: confirm the body is accredited for ISO 15378 specifically (not just ISO 9001), since an unaccredited certificate carries far less weight with pharma customers and regulators.
ISO 15378 Certified Packaging Components: What Qualifies
‘ISO 15378 certified packaging components’ usually means components manufactured under a quality management system that itself holds current ISO 15378 certification — the certificate applies to the manufacturer’s site and scope, not a stamp printed on each individual unit. Component categories typically covered include glass ampoules, vials, syringes, and cartridges; plastic bottles, jars, closures, and oral dosing devices; rubber and elastomer stoppers, seals, and gaskets; aluminum caps, ferrules, and seals; and foils, films, laminates, and blister materials used in direct product contact.
If you’re buying rather than manufacturing, don’t take ‘ISO 15378 certified’ on a spec sheet at face value. Ask the supplier for their current certificate, confirm the certification body and its accreditation are current, check that the specific product line and manufacturing site you’re sourcing from are within the certificate’s stated scope, and verify the certificate hasn’t lapsed — surveillance audits happen annually and certificates run on a three-year cycle, so scope and status can change between renewals. A certificate that covers a supplier’s glass vial line, for example, doesn’t automatically extend to a closure line added at a different facility later.
What Drives ISO 15378 Certification Cost
There’s no published flat fee for ISO 15378 certification — every certification body quotes based on audit duration, and audit duration scales with how much there is to verify. The main cost drivers are: company size and headcount, the number of sites or production lines in scope, the complexity of the packaging technology involved (a multi-step blister-and-foil line takes longer to audit than a single injection-molding cell), whether you already hold ISO 9001 or another management system certification (which shortens the audit), and whether you bring in outside consulting help to prepare versus building the QMS internally.
Budget for three cost categories, not one: the certification body’s audit fees (Stage 1, Stage 2, and ongoing annual surveillance), any consultant or gap-assessment fees if you use outside help, and the internal cost of the time staff spend building procedures, running validations, and generating audit evidence before you’re ever audited. That internal-preparation cost is usually the largest of the three and the one companies most often underestimate.
ISO 15378 vs. ISO 9001: What’s Actually Different
ISO 15378 is not a separate, unrelated standard — it shares ISO 9001:2015’s high-level structure and includes every ISO 9001 requirement. The difference is what’s added on top: GMP-specific clauses covering batch and lot traceability, contamination and hygiene control, controlled environmental conditions, process validation where inspection alone can’t verify quality, and packaging-specific risk assessment.
A company that’s only ISO 9001 certified has a solid general quality system, but hasn’t been audited against the GMP-adjacent controls that pharma customers specifically care about — which is exactly why many drug manufacturers ask for ISO 15378 (or full pharmaceutical GMP certification) rather than accepting ISO 9001 alone from a primary-packaging supplier.
ISO 15378 in Europe: EN ISO 15378
Outside English-language markets, ISO 15378 is often referenced under its harmonized European designation, EN ISO 15378, or a national adoption such as Poland’s PN-EN ISO 15378 — these are the same international standard published through the European and national standards bodies, not a different certification scheme. A ‘certyfikat ISO 15378’ (Polish for ‘ISO 15378 certificate’) is issued by the same accredited certification bodies that operate internationally and follows the identical two-stage audit and three-year certification cycle described above.
ISO 15378 certification process FAQs
How do I get ISO 15378 certified?
You build a quality management system that meets ISO 15378’s GMP-layered requirements, operate it long enough to generate real audit evidence (batch records, deviation logs, internal audits), then pass a two-stage audit — Stage 1 document review and Stage 2 on-site verification — through an accredited certification body. A certificate valid for three years is issued if no major nonconformities remain open, with annual surveillance audits after that.
How long does ISO 15378 certification take?
Most organizations move from starting the gap assessment to holding a certificate in roughly 4 to 8 months, depending on how mature their existing quality system is and how much documentation and validation work the gap assessment turns up.
How much does ISO 15378 certification cost?
There’s no fixed fee — cost scales with company size, number of sites, and process complexity. Budget for certification-body audit fees, optional consultant fees for gap assessment and QMS build-out, and the internal staff time needed to prepare, which is usually the biggest cost of the three.
What counts as an ISO 15378 certified packaging component?
It’s a component manufactured at a site holding a current, in-scope ISO 15378 certificate — not a mark stamped on individual units. Common examples are glass vials and ampoules, plastic bottles and closures, rubber stoppers and seals, aluminum caps and ferrules, and foils and laminates used in direct product contact.
Is ISO 15378 mandatory for pharmaceutical packaging suppliers?
It’s not a legal requirement in most jurisdictions, but it has become a de facto requirement in practice — many drug manufacturers won’t qualify a primary-packaging supplier without it, or require full pharmaceutical GMP certification instead.
Who issues ISO 15378 certificates?
Accredited certification bodies issue them — common providers include SGS, TÜV Rheinland, TÜV SÜD, DQS, and Bureau Veritas. Always confirm the body’s accreditation specifically covers ISO 15378, not just ISO 9001, since that accreditation is what gives the certificate weight with pharma customers.
Find the Right Packaging Supplier
Search the free Packaura supplier directory — filter by material, certification, and location to find vetted suppliers. Search the Supplier Directory.
Want packaging news in your inbox? Subscribe to the free newsletter.