Assessment · worksheet · CSVtoCSA editorial

AI GxP assessment

Version 2.0 · Updated 2026-09-21 · Assessment

Record actual use, influence and the requirements that need a local applicability decision.

Adapt this template to your intended use, applicable requirements, and approved procedures.

When to use it

Use when you need to record actual use, influence and the requirements that need a local applicability decision.

Information needed before starting

  • Defined AI use, authority limits and assessed configuration
  • Controlled sources and independent reference results relevant to this worksheet
  • Applicable risk assessment, acceptance basis and responsible reviewers

Field instructions

  • Intended use: Describe the specific task, permitted reliance and exclusions.
  • Users: Identify roles, qualifications and responsibility for decisions.
  • Process supported: Identify the regulated or nonregulated process and jurisdiction.
  • Inputs and sources: Identify source documents, revisions and authority.
  • Outputs: Describe drafts, findings, records and actions.
  • Influence on work or decisions: Trace how output or omission can change work or a decision.
  • Human review: Describe the full verification and independent review required.
  • Failure consequences: Describe incorrect and missing outputs and possible process effects.
  • Requirements requiring assessment: Identify relevant sector, record and local requirements without assuming universal applicability.
  • Scope conclusion and rationale: State included functions, limits, assumptions and unresolved questions.
  • Responsible roles and evidence: Record the actual local assessment and approval process; never copy fictional approval.

Completed fictional example

Fictional GXP-01 assumes a US-market medical-device manufacturer and protocol review in a production-equipment validation process.

FieldCompleted example
Intended use / usersPRA-01 candidate protocol gaps for qualified validation personnel
Process / inputsValidation protocol review; draft protocol, approved requirements, validation procedure and equipment risk assessment
Outputs / influenceDraft findings and cited passages may prompt protocol revision; omissions may narrow a reviewer’s attention
ReviewSource verification plus complete independent required protocol review
ConsequencesMissed alarm test could leave inadequate coverage; false requirement could misdirect revisions
Applicability questionsAssess QMSR/incorporated quality-system duties, required records and whether Part 11 is in scope; consider FDA CSA recommendations for production/QMS software
ConclusionInclude the application and final review workflow in local GxP/software-assurance assessment; no expanded reliance on current evidence
Assumptions / ownerJurisdiction and process assumed here; Quality and Regulatory Affairs confirm actual applicability

Blank template

System / record ID: ____________________

Prepared by / date: ____________________

Required review / approval under local procedure: ____________________

FieldYour entry
Intended use____________________
Users____________________
Process supported____________________
Inputs and sources____________________
Outputs____________________
Influence on work or decisions____________________
Human review____________________
Failure consequences____________________
Requirements requiring assessment____________________
Scope conclusion and rationale____________________
Responsible roles and evidence____________________
Relevant regulations and guidance

These sources apply within their stated scope. The suggested worksheet fields, test designs and fictional decisions are practitioner recommendations, unless a source requirement is expressly identified. Completing a template does not establish compliance.

Computer Software Assurance for Production and Quality Management System Software ↗

Regulatory guidance / GMP guideline · United States · February 2026

Scope: Medical-device manufacturers assuring software used in production or their quality management system.

Relevance: For medical-device production or QMS software, supports selecting assurance activities from intended use, risk and available evidence. It is nonbinding guidance and does not determine other sectors’ obligations.

Status: Final / published · Checked 2026-09-21

Publication identity, scope and status checked against the linked official source. This is not an independent audit of every retained guide statement.

Read source details and applicability →

EudraLex Volume 4, Annex 11 — Computerised Systems ↗

Regulatory guidance / GMP guideline · European Union · January 2011 revision

Scope: Computerised systems supporting activities in the applicable EU pharmaceutical GMP context.

Relevance: For computerised systems used in EU GMP activities, informs lifecycle, supplier and record controls. Confirm applicability to the actual activity; the example does not establish it.

Status: Final / published · Checked 2026-09-21

The Commission index confirms the January 2011 operative revision. The linked PDF could not be retrieved in this check; retained detailed section mappings need review against an authorized copy.

Read source details and applicability →

Artificial Intelligence Risk Management Framework (AI RMF 1.0) and NIST AI 600-1 ↗

Industry guidance / framework · United States · AI RMF 1.0 (2023); GenAI Profile (2024)

Scope: Cross-sector AI governance and risk management, including generative AI.

Relevance: A voluntary framework for describing AI risks, evaluation and ongoing management. Its suggested practices are not regulatory requirements.

Status: Final / published · Checked 2026-09-21

Publication identity, scope and status checked against the linked official source. This is not an independent audit of every retained guide statement.

Read source details and applicability →
Was this useful? Leave feedback

Was this resource useful?

Was this template clear and useful? Tell us which instruction or field could be improved.

Loading contribution options…

Questions and moderated discussion

Questions and discussion

Ask a question or share a perspective. Contributions are reviewed before publication.

Loading contribution options…

Suggest a correction

Sent privately to the editorial moderation queue. Your account email and correction are not published as a comment. Do not include confidential or personal information.

Resource: AI GxP assessment

Loading sign-in status…

Correction details