GMP certification

GMP certification in Pakistan, and who can actually issue one

For medicines, a GMP certificate comes from a regulator after an inspection. No consultancy issues one, and neither does any certification body. If a firm offers to sell you GMP certification for a pharmaceutical plant, you are being sold something other than what you think.

Last updated 11 November 2026Lahore, Karachi, IslamabadAxora Global

Get a free gap analysisCommon questions

The short answer

Good Manufacturing Practice is a body of requirements for how a product is made, controlled, stored and released, so that every batch comes out as intended. It is not one standard. It is several regimes that share the same principles, written by different authorities, and enforced in different ways.

In Pakistan, GMP for medicines is enforced by the Drug Regulatory Authority of Pakistan. DRAP states that Schedule B, Schedule B-I and Schedule B-II of the Drugs (Licensing, Registering and Advertising) Rules, 1976 provide the GMP guidelines, and that these are mandatory for all manufacturers. The wider legal frame is the Drugs Act 1976 and the Drug Regulatory Authority of Pakistan Act, 2012.

That is the key difference between GMP and a standard like ISO 9001. GMP is law, checked by a government inspector. ISO certification is voluntary assurance, checked by an accredited private body. The two work differently and they are bought differently.

Three things to be clear about before you spend money

  • A GMP certificate for medicines is issued by a regulator, not bought from a consultancy. What a consultancy can sell you is the work that gets you ready for the inspection, and an honest assessment of whether you are.
  • A third party GMP audit is not a GMP certificate. It can be genuinely useful, because a customer or an exporter often wants independent evidence, but it does not carry the authority of an inspection.
  • GMP outside medicines is a different conversation. Food, cosmetics and supplements each have their own GMP expectations, and some of them are certifiable in the normal sense.

The rest of this page sets out which regime applies to you, what DRAP actually inspects, what the work costs and how long it takes, and one uncomfortable fact about Pakistan's standing internationally that affects every pharmaceutical exporter in the country.

What is GMP, and is there a single GMP standard?

No. There is no single international GMP standard in the way there is a single ISO 9001. There are several regimes that agree on principles and differ in detail, and which one matters to you depends on where your product is made and where it is going.

The World Health Organization version is the basis for national rules in well over a hundred countries, and it is the reference point most developing market regulators built from. The European Union writes its own, the United States writes its own in regulation, and a group of inspectorates maintains a harmonised guide so that an inspection in one member country means something in another.

RegimeWhere it is writtenWho checks it
WHO GMPWHO guidance on good manufacturing practices for pharmaceutical productsNational regulators that have adopted it, and WHO assessment where prequalification applies
EU GMPEudraLex Volume 4The national regulatory agency of the member state
US cGMP21 CFR Parts 210 and 211 for finished pharmaceuticals, with separate parts for positron emission tomography drugs, medicated feeds and type A medicated articlesFDA inspection
PIC/S GMP GuideDocument PE 009, currently in its eighteenth revisionThe participating inspectorates, as a regulator to regulator scheme
PakistanSchedules B, B-I and B-II of the Drugs (Licensing, Registering and Advertising) Rules, 1976DRAP inspection

The practical consequence is that a plant built to satisfy DRAP is not automatically a plant that satisfies a European or American inspector, and a plant built to satisfy a European inspector will comfortably satisfy DRAP. If export is the goal, build to the higher bar once rather than twice.

Who can actually issue a GMP certificate in Pakistan?

For medicines, the regulator. GMP status is established by inspection, and the document that follows is the regulator's, not a private body's.

This matters because the market is muddled on the point. There is no accredited GMP certification scheme in the sense that ISO 9001, ISO 22000 or ISO 13485 certification is accredited, where an accreditation body stands behind a certification body which stands behind your certificate. GMP sits outside that structure. When a private firm issues a document with the word GMP on it, that document is the opinion of the firm that wrote it, and its value is whatever the reader thinks the firm's name is worth.

Sometimes that is worth quite a lot. A buyer in a market that cannot send its own auditors may reasonably accept a respected third party's audit report. We help clients commission exactly that when it serves a purpose. What we will not do is call it a GMP certificate, because the word misleads the person who reads it next.

One small detail that confuses people, worth clearing up: DRAP itself holds an ISO 9001:2015 certificate. That covers DRAP's own internal quality management as an organisation. It says nothing about your plant and it is not a GMP scheme.

What does DRAP inspect you against?

Against the schedules named above, read together with your licence and your product registrations. In practice an inspection is not a document review, it is a walk through the plant with the documents in hand, and the gap between what your procedures say and what your staff actually do is where findings come from.

The areas that generate findings most reliably, in our experience, are the unglamorous ones. Water systems and their qualification. Cleaning validation, and whether you can prove the cleaning works rather than assert it. Environmental monitoring in areas that need it. Batch record completeness, including the corrections people make in the moment. Change control, which almost every plant underuses. Deviation handling, and whether deviations get investigated or just recorded. Qualification and calibration of the equipment the batch depends on. Training records that correspond to what the person actually does.

None of that is exotic. It is simply the difference between a plant that runs on a system and a plant that runs on the memory of three experienced people, which is the position a great many otherwise capable Pakistani manufacturers are in.

What are the five manufacturing licence types?

The Drugs (Licensing, Registering and Advertising) Rules, 1976 provide five types of drug manufacturing licence. Knowing which one you hold or need matters, because the GMP expectations and the capital involved differ sharply between them.

Licence typeWhat it covers in practice
By way of FormulationMaking finished dosage forms from purchased active ingredients. The most common route for Pakistani manufacturers.
By way of Basic ManufacturingMaking the active ingredient itself, with the far heavier process and containment expectations that follow.
By way of Semi-Basic ManufacturingAn intermediate position between basic manufacture and formulation.
By way of Re-packingRepacking rather than making. Schedule D of the same Rules is cited in relation to this route.
For Experimental purposeManufacture for experimental rather than commercial supply.

A licence runs for five years unless it is revoked or suspended earlier, so renewal is a recurring event rather than a one off hurdle, and the condition of your quality system at renewal is what the renewal turns on.

Is Pakistan a PIC/S member, and why does that matter?

This is the fact that changes how a Pakistani exporter should think about GMP, and almost nobody states it plainly.

The Pharmaceutical Inspection Co-operation Scheme is how regulators recognise each other's inspections. If your regulator is a participating authority, a GMP inspection at home carries weight abroad. DRAP is not a PIC/S participating authority. It is also not listed as an applicant, nor as a pre-applicant. Pakistan is simply absent from the scheme.

AuthorityCountryStanding
NPRAMalaysiaParticipating authority since January 2002
Badan POMIndonesiaParticipating authority since July 2012
Thai FDAThailandParticipating authority since August 2016
Iran FDAIranParticipating authority since January 2018
TMMDATürkiyeParticipating authority since January 2018
SFDASaudi ArabiaParticipating authority since July 2023
JFDAJordanParticipating authority since January 2026
Emirates Drug EstablishmentUnited Arab EmiratesPre-applicant
DRAPPakistanNot a participating authority, not an applicant, not a pre-applicant

India and Bangladesh are not participating authorities either, so this is a regional pattern rather than a uniquely Pakistani problem. But it has a direct commercial consequence: when your buyer or their regulator cannot lean on your regulator's inspection, they ask you to supply the assurance yourself. That is why Pakistani exporters get asked for WHO GMP style evidence, third party audit reports, buyer audits and documentation packs that a Malaysian or Turkish manufacturer is not asked for.

So the practical answer to a Pakistani pharmaceutical exporter is: build the quality system to a standard that stands on its own, because your regulator's signature will not carry it for you.

What does GMP work cost in Pakistan?

There is no fixed price. The range between a small formulation plant tidying up an existing system and a site preparing for a demanding export inspection is wide enough that any single figure is meaningless.

Axora Global quotes a consultancy fee band after a free gap analysis, once the scope, your number of sites and the maturity of your existing system are known, and arranges any independent audit separately. For GMP there is an important addition: we will tell you before you spend anything whether the gap is a documentation gap or a capital gap. A documentation gap is consultancy work. A capital gap, for example a water system that cannot be qualified or an area that cannot hold its classification, is construction and equipment, and no amount of paperwork closes it. Finding that out at the start is worth more than anything else in the engagement.

How long does it take to get a site GMP ready?

For a working plant that needs its system brought into order, three to six months is realistic. For a plant with physical deficiencies, the timeline is set by the construction and qualification work, not by us, and twelve to eighteen months is common. For a new site, GMP readiness should be designed in from the drawings, and retrofitting it afterwards is the most expensive way to arrive at the same place.

What stretches a timeline is almost always validation and qualification. Cleaning validation needs runs. Process validation needs batches. Stability needs time that cannot be compressed. A plan that ignores those is not a plan.

What about GMP outside medicines?

Several of our clients come to us for GMP and turn out to need something adjacent, which is usually cheaper and more certifiable.

Food. Good manufacturing practice in food is normally handled as part of the prerequisite programmes underneath a food safety management system. If a buyer is asking a food business for GMP, what they generally want is HACCP, ISO 22000 or a GFSI recognised scheme such as FSSC 22000 or BRCGS, all of which are properly certifiable. We would usually steer a food manufacturer there rather than towards a standalone GMP document.

Cosmetics. ISO 22716:2007 covers good manufacturing practices for cosmetics. It was confirmed as current in 2022 and remains in its 2007 edition. One thing to know about it: ISO wrote it as guidelines rather than as a requirements standard. That is why audits against it vary in what they actually test, and why you should ask what a cosmetics GMP audit will cover before you buy one.

Dietary supplements. The United States has run a separate current good manufacturing practice regime for dietary supplements since 2007, distinct from the rules for medicines. If you export supplements rather than medicines, that is the regime to read.

Medical devices. Device quality systems moved away from the GMP framing and towards ISO 13485 some time ago, and since February 2026 the American rules are built on ISO 13485:2016 itself. If devices are your business, that is the page to read rather than this one.

How we work on GMP

The gap analysis is free and it is a site visit, not a sales call. We walk the plant, read what you have, and come back with a written list separating the documentation gaps from the capital gaps, with the sequence and the honest view of how long each takes. You keep that document whether or not you engage us.

After that the work is unglamorous and specific: the quality system documents built around your actual process, validation and qualification plans that can be executed with the equipment you own, deviation and change control that people will really use, training that matches the job, and a mock inspection before the real one. We prepare you for the regulator's inspection, and where a buyer wants independent evidence we arrange an audit by a third party whose name carries weight in your market.

We do not issue GMP certificates, because for medicines nobody outside the regulator can.

Common questions about GMP certification

Can Axora Global give me a GMP certificate?

No, and neither can any other consultancy or certification body, for medicines in Pakistan. GMP status for a pharmaceutical plant is established by a regulator's inspection, and the resulting document is the regulator's. What we provide is the work that makes the plant ready, an honest assessment of whether it is, and where a buyer wants independent evidence, an audit arranged with a reputable third party that is described accurately rather than dressed up as certification.

Is GMP mandatory in Pakistan?

For medicines, yes. DRAP states that Schedule B, Schedule B-I and Schedule B-II of the Drugs (Licensing, Registering and Advertising) Rules, 1976 provide the GMP guidelines and that they are mandatory for all manufacturers. The wider legal frame is the Drugs Act 1976 and the Drug Regulatory Authority of Pakistan Act, 2012. This is law rather than voluntary assurance, which is the main way GMP differs from an ISO standard.

What is the difference between GMP and ISO 9001?

GMP is a legal requirement for how a product is made, enforced by a government inspector, and specific to the sector. ISO 9001 is a voluntary management system standard, certified by an accredited private body, and applicable to any organisation. A plant can hold ISO 9001 and still fail a GMP inspection, because ISO 9001 does not test the things an inspector tests, such as cleaning validation, water system qualification or batch record integrity.

What does GMP work cost?

There is no fixed price. Axora Global quotes a consultancy fee band after a free gap analysis, because the fee varies with scope, organisation size and the number of sites, and arranges any independent audit separately. For GMP specifically we separate documentation gaps from capital gaps before you commit anything, because a water system that cannot be qualified is a construction cost rather than a consultancy one.

How long does GMP readiness take?

Three to six months for a working plant that needs its system put in order. Twelve to eighteen months is common where there are physical deficiencies, because the timeline is then set by construction and qualification rather than by documentation. Validation is what cannot be compressed: cleaning validation needs runs, process validation needs batches, and stability needs elapsed time.

Is Pakistan a PIC/S member?

No. DRAP is not a participating authority in the Pharmaceutical Inspection Co-operation Scheme, and it is not listed as an applicant or a pre-applicant either. Malaysia, Indonesia, Thailand, Iran, Türkiye, Saudi Arabia and Jordan are participating authorities. India and Bangladesh are not. The commercial effect is that a Pakistani exporter is asked to supply assurance that a manufacturer in a member country would not be asked for.

Does my plant need WHO GMP rather than DRAP GMP?

It depends on where you sell. WHO GMP is the reference most developing market regulators built from, and buyers in those markets often ask for evidence framed against it. Building to the higher of the regimes that apply to you is almost always cheaper than building to the domestic minimum and then upgrading when an export order arrives. We establish which regimes apply during the gap analysis before any work is planned.

What does an inspector look at first?

In our experience, the areas that produce findings most reliably are water systems and their qualification, cleaning validation, environmental monitoring, batch record completeness including in the moment corrections, change control, deviation investigation, equipment qualification and calibration, and whether training records match what the person actually does. The common thread is evidence: an inspector is testing whether you can prove what you assert.

I run a food factory and my buyer asked for GMP. What do they mean?

Usually they mean a food safety management system with its prerequisite programmes in place, rather than a standalone GMP document. Depending on the buyer the right answer is HACCP, ISO 22000, or a GFSI recognised scheme such as FSSC 22000 or BRCGS. Those are properly certifiable by an accredited body, which a standalone food GMP document is not, so they also answer the buyer more convincingly.

Is ISO 22716 a GMP certification for cosmetics?

ISO 22716:2007 covers good manufacturing practices for cosmetics and was confirmed as current in 2022. The important detail is that ISO wrote it as guidelines rather than as a requirements standard, so audits against it differ in what they test. Ask any provider exactly what a cosmetics GMP audit will cover and what document you will hold at the end of it before you buy one.

Do medical device makers need GMP?

Device quality systems moved to ISO 13485 rather than a GMP framing, and since 2 February 2026 the American device quality rules are built on ISO 13485:2016 by reference. If you manufacture devices, including surgical instruments, ISO 13485 is the system to build and the certificate buyers ask for.

Start with an honest gap analysis

Tell us what you make, which licence you hold and which markets you sell into. The visit is free, the findings are written down, and we separate what paperwork can fix from what only money can.

Get a free gap analysisSee ISO 13485 certification