Inspection Defense Reference
The 5-Element Authorization Structure
What an inspection-defensible batch release record contains — and why most don't.
An FDA inspector pulls a released batch from the prior quarter. The CoA is attached. Deviations are documented. The QP signature is present. Then comes the question your QMS was not designed to answer:
"Who authorized this release, based on what evidence, and why was it justified?"
The records you have describe what happened. The record an investigator asks for describes why this person, on this evidence, made this call. That record is the authorization structure below.
The Structure
A named individual carrying explicit release authority for this batch — not a signature line, an authorization role. The owner is the person whose decision the record defends.
A signature confirms an action occurred. An authorization role establishes who was empowered to make the call, under what delegation, and against what scope. An inspector reading the record needs to understand the authority, not just the autograph.
What it looks like on paper
"Released by Sarah Chen, Quality Director, under delegation of Release Authority — Pharmaceutical Quality Council Charter, Section 4.2, dated 2025-09-01."
An enumerated list of inputs that informed the decision — CoA, deviation reports, OOS investigations, environmental monitoring data, stability data, in-process control results. Each entry treated as a reviewed input, not a filed attachment.
A QMS stores these documents. An authorization record cites them as the evidence base the decision rests on. The distinction is whether an investigator can reconstruct what the decision-maker actually saw before signing.
What it looks like on paper
"Evidence reviewed: CoA #2026-0142 (passing), Deviation DV-2026-018 (closed, minor classification, no impact), Environmental Monitoring Report EM-2026-Q1 (within limits), Stability Data ST-2025-Lot-887 (no degradation)."
The specific standard the decision was measured against — 21 CFR 211.165, ICH Q7, EU Annex 16, the batch-specific specification, or the marketing authorization commitment. The standard names the bar; the decision either meets it or it doesn't.
"In compliance with cGMP" is not a standard. It is an aspiration. Inspectors cite specific subsections; defensible records do the same.
What it looks like on paper
"Decision measured against 21 CFR 211.165(d) and the approved specification for Product XYZ, Section 3.2.P.5.1 of the marketing authorization."
How deviations, excursions, or out-of-trend results were weighed against the release criteria — the reasoning, not just the conclusion. This is the element most often missing.
An investigator does not ask whether a deviation was closed. They ask how its impact on patient safety and product quality was evaluated, what factors were weighed, and why the resulting risk was judged acceptable for release. Without this written record, the reasoning gets reconstructed in the room — usually under pressure, often inconsistently.
What it looks like on paper
"Deviation DV-2026-018 (HVAC excursion, 2°C above limit, 45 minutes) evaluated against thermal mapping data and product stability profile. Excursion within validated range; no degradation pathway active at observed temperature. Risk to product quality assessed as negligible. Release justified."
When the decision was made — before disposition, not reconstructed after the fact. The timestamp anchors the record to a moment in time when the decision-maker had the evidence in front of them and made the call.
Reconstructed authorizations — even when factually accurate — are cited as undocumented decision reasoning. The record must be contemporaneous with the decision, not back-filled to satisfy an audit.
What it looks like on paper
"Authorization recorded 2026-03-14 at 14:22 EST, prior to disposition. Decision-maker confirmed evidence review and risk evaluation contemporaneous with signing."
FDA Inspection — Batch Release Review
"Walk me through how you decided this batch was releasable, given the deviation."
A defensible answer
The decision-maker points to the authorization record. Five elements, on one page, contemporaneous with the release. The investigator reads it. The pause — the one that gets cited — never happens.
Produce This Record For Your Next Release
The Inspection Response Record turns this structure into a working artifact.
Authorization records produced at the moment of the decision — not reconstructed during inspection. Aligned to 21 CFR Part 11. Defensible by design.
See the Inspection Response Record →