Two machines, one sterile chain
Aseptic processing separates two duties that are often discussed as if they were one. The product sterilisation system applies the scheduled process to the product. The filling and packaging system receives that treated product, protects it from recontamination and closes the package. The FDA inspection guide for aseptic processing and packaging makes the distinction explicit: a process authority must establish commercial sterility not only for the product but also for the product sterilisation system and the equipment downstream from the holding tube, including the filler, the packaging equipment and the packaging material.
That is a demanding sentence for a project team because it crosses departmental boundaries. The steriliser supplier may be responsible for the hold tube and the cooling section. The filler supplier may be responsible for the filling head, the sterile zone and the clean-in-place sequence. The bag or fitment supplier may be responsible for a pre-sterilised package. The processor remains responsible for the combined process and for the records that show it was maintained.
A filling machine can therefore be correctly built and still be part of an incompletely defined process. The review should not stop at the machine datasheet. It should follow the product from the hold tube outlet to the closed package and ask, at each transition, what keeps the product sterile and how that protection is monitored.
Trace the line from hold tube to fill head
The FDA guide identifies several places downstream of the holding tube where microorganisms could enter: product coolers, aseptic surge tanks, flow diversion valves, homogenisers, aseptic pumps and other equipment. It notes that rotating or reciprocating shafts and valve stems should have steam seals or other effective barriers, and that those barriers need to be monitored during operation. This is a useful checklist for a boundary review because it turns a general claim about a sterile line into specific questions about shafts, seals, valves and connections.
An aseptic surge tank deserves particular attention when one is used. The guide describes surge tanks as a way to store sterile product temporarily and to keep product flowing to the filler or to divert it if the packaging machine stops. It also describes sterilisation of the tank, venting to avoid air pockets and maintenance of sterile air or gas overpressure. Those are process functions, not optional accessories. If the project includes a surge tank, the brief should say who specifies the venting and overpressure conditions and how the filler responds when they are lost.
The same logic applies to filters, sterile gas supplies, backpressure and flow diversion. Each item has a normal operating state, a deviation state and a restart condition. The reviewed boundary is the set of these states across the whole chain, not a line on a layout drawing that stops at the filler inlet.
Assign cleaning, sterilisation and restart authority
The inspection guide describes start-up procedures that bring the product steriliser and the downstream equipment to commercial sterility before production, and it lists process deviations that can include a temperature drop, loss of differential pressure, loss of sterile air or gas pressure and critical factors outside the scheduled process. It also states that affected product must be destroyed, reprocessed or segregated and held for evaluation, and that the system must be cleaned and re-sterilised before operations resume.
For a project team, the important word is "authority". Who decides that a deviation has occurred? Who decides what happens to the product? Who authorises cleaning and re-sterilisation, and who signs the line back into production? These questions should be answered before commissioning, not during the first upset. A control system can enforce interlocks and record events, but it cannot invent the product disposition rule or the person who owns it.
The equipment specification can support this by making the boundary visible. Alarm and interlock schedules, sequence descriptions, sensor locations, record fields and change-control procedures should use the same names for the same boundary points. When the steriliser, filler and site automation use different terminology for the same valve or tank, the review becomes slower and the risk of an unrecorded assumption increases.
Keep machine acceptance separate from process validation
Factory acceptance testing and site acceptance testing are valuable. They can show that a machine runs, that the controls match the agreed sequence, that the safety functions operate and that the specified materials and components are present. They do not, by themselves, establish that a particular product has received a scheduled process or that the filled package is commercially sterile.
That distinction should be written into the project plan. Machine acceptance evidence answers questions about the equipment. Process validation evidence answers questions about the product, the package and the combined system. A supplier can provide documentation for the former within its scope; the processor and its process authority remain responsible for the latter. Blurring the two creates a false sense of completion and can leave a line running without the records that the process requires.
The same separation applies to automation. A successful control-system test is not proof of sterility. It is evidence that the control system behaves as specified. The specification still has to connect the control action to a validated process limit, and the site still has to verify that the limit is appropriate for the product and package.
A practical boundary review
A short review can expose most of the gaps. Draw the chain from the hold tube outlet to the closed bag. Mark every valve, tank, filter, seal, pump, filling head and package interface. For each one, record the normal condition, the monitored parameter, the deviation response and the person who owns the decision. Then mark the documents that prove each condition: the scheduled process, the equipment sequence, the acceptance test, the cleaning record and the production record.
If a box cannot be completed, that is a finding rather than a failure of the meeting. It shows where the project needs a supplier drawing, a process-authority decision, a site procedure or a trial. The aim is not to produce a perfect diagram on the first attempt. It is to make the boundary explicit enough that the equipment enquiry, the validation plan and the operating procedure describe the same system.
This site supplies aseptic bag filling equipment and connected filling-cell modules. It does not supply the upstream sterilisation process, and it does not turn a filler into a steriliser. Keeping that scope visible is part of a useful technical brief: the right machine can then be selected for the duty it actually performs, while the surrounding process is reviewed by the people responsible for it.
PRIMARY SOURCES
Read the source behind the boundary.
These are the primary public sources used for the regulatory context in this article. They are not a substitute for the scheduled process, product-specific validation or the advice of the responsible process authority.
NEXT STEP
Define the filling scope before the line is frozen.
Share the product, package, upstream process and planned acceptance route. We will help define the filling-cell scope and the interfaces that need a separate process decision.