Auditing a peptide supplier remotely

A site visit answers questions a certificate cannot. When travel is impractical, a structured remote audit still separates a supplier who knows their process from one who forwards documents — provided you ask for things that are hard to fabricate and score the answers the same way every time.

What a remote audit can and cannot do

It can verify that documents exist, that they are internally consistent, that equipment is present and identified, and that staff can explain their own process. It cannot verify housekeeping, actual behaviour on an unannounced day, or whether the deviation you were shown is the only one. Treat the remote audit as a filter that decides whether a site visit or a trial order is worth the cost — not as a substitute for either.

Step 1: the document request

Send the list before scheduling the call, and ask for files rather than descriptions. If you plan an on-site visit instead, the printable 40-question audit questionnaire covers the same ground in a form you can hand to the supplier.

A supplier who needs a week to produce a batch record summary has told you something about their record system.

Document	What you are checking
Company registration and site address	That the legal entity, the invoicing entity and the manufacturing site are the same or explicitly related
Facility layout with room functions	Whether synthesis, purification, drying, QC and packaging are separated and how material moves between them
Equipment list with IDs and capacities	Whether the scale they quote matches the reactors and lyophilizers they have
Batch record summary for a recent lot	Whether the lot number on the COA traces to synthesis, purification and QC dates
COA template and one real COA	Whether the template has lot-linked fields or is a fill-in-the-blank certificate
Analytical method summaries	Column, gradient, wavelength, integration — enough to judge whether the method is specific
Deviation and CAPA procedure, with a redacted example	Whether the system exists and has ever produced a record
Change-control procedure	What triggers notification to the customer, and who approves
Subcontractor list	Which steps are outsourced — synthesis, purification, filling, lyophilization, testing
Retention sample policy	Whether samples are held per lot, for how long and under what conditions
Shipping validation or thermal data	Whether the shipper configuration was tested or only described

Cross-check before the call: the site address on the registration against the address on the COA; the equipment capacity against the batch size quoted; the lot number on the COA against the batch record. Inconsistencies found on paper are the most productive use of the interview time.

Step 2: the video walkthrough

Ask for a live call with a handheld camera, not an edited video. Edited footage is a marketing asset; a live walk is an observation. Give the sequence in advance so the visit is efficient, and ask the camera operator to keep walking rather than stopping at staged benches.

Receiving and warehouse. Resin, reagent and solvent storage; how containers are labelled; whether incoming material is quarantined until released.
Weighing and dispensing. Balances, calibration stickers, dedicated spatulas, and how small quantities are handled without cross-contamination.
Synthesis. Reactor IDs; ask the operator to read the ID plate aloud and match it to the equipment list. Ask what the current batch is and which lot it will become.
Cleavage and purification. HPLC columns, fraction collection, how fractions are pooled and on what criterion.
Lyophilization. Loaded shelves, cycle display, and how cycle records are retained. Ask what the last failed cycle was and what was done.
QC laboratory. Instruments with IDs, column logs, a chromatogram on screen with the method visible, and the standard preparation area.
Packaging. Vial washing and depyrogenation if applicable, filling, stoppering, labelling, and the secondary pack area.
Retention samples. The actual shelf, the actual boxes, and a sample pulled at random to match a lot number you already hold.

During the walk, ask for two unscripted things: a page from an equipment logbook for a date you choose, and a batch record for a lot you did not pre-announce. Both are difficult to prepare in advance and easy to verify for internal consistency.

Step 3: the questions that reveal the system

Ask each function the same kind of question — what happens when something goes wrong — rather than what the procedure says. A documented procedure can be recited; a real system produces a specific story.

“Tell me about the last out-of-specification result. What was it, what did you do, and who signed it off?”
“When did you last change a purification method, and which customers were notified?”
“If I retest this lot in six months and get a lower purity, what is your position?”
“Which steps in this product are subcontracted, and how do you qualify that subcontractor?”
“What is your water content specification, and what was the last lot's actual result?”
“How do you handle a customer's third-party result that disagrees with your COA?”

Answers that drift into general assurance (“we have strict quality control”) without a specific instance are the signal. A good supplier will name a lot, a date and a person.

Step 4: score it, don't impression it

Score each dimension from 1 to 5 immediately after the call, before comparing suppliers, and keep the evidence next to the score.

Dimension	1 — weak	3 — adequate	5 — strong
Documentation	Template COA, no lot linkage	Lot-linked COA, batch record on request	Full traceability from resin to release, retained records
Analytical capability	Outsources all testing, no method detail	In-house HPLC, MS outsourced	In-house HPLC and MS, method development, forced degradation
Deviation handling	“We have no deviations”	Procedure exists, example vague	Specific recent example with root cause and CAPA
Change control	No procedure	Procedure exists, notification discretionary	Written notification and re-qualification trigger
Capacity match	Quoted scale exceeds equipment	Plausible, not demonstrated	Demonstrated with IDs, logs and a live batch
Packaging and shipping	Described only	Standard configuration, no data	Validated shipper, thermal data, lot-level packing records

Weight the dimensions for your use. A screening laboratory may care most about analytical capability; a distributor may weigh documentation and packaging more heavily. Record the weighting before scoring so the result is not retrofitted to a preferred supplier.

Red flags specific to remote audits

Only edited video is offered, or the live call is repeatedly rescheduled.
Equipment ID plates cannot be read, or do not match the equipment list.
Rooms are skipped with an explanation that is never followed up.
Every document has the same creation timestamp or the same author.
The supplier cannot produce a COA for the lot you already bought.
“No deviations” from a site that has been operating for years.
Retention samples exist as a policy but not as a shelf you can see.

One red flag is a question; three is a decision. None of them, individually, proves bad faith — but together they describe a supplier whose documents are produced for customers rather than for the process.

Close the loop with a sample

The audit ends with material, not impressions. Order a small lot and send a portion to a third-party laboratory for identity and purity by a method you specified. Compare the result with the supplier's COA and with your own in-house result. That triangulation is worth more than any questionnaire, and it is the only step that tests the product rather than the presentation. What to ask the laboratory for is covered in verifying peptide purity and using a third-party laboratory; the certificate checks are in COA red flags.

Then write the findings into the specification annex and the supply agreement, so the audit has a contractual consequence rather than ending as a file. The field list is in writing a specification annex.

For laboratory research use only. This article describes supplier evaluation practice; it makes no claim about any specific supplier or compound and does not support administration to humans or animals.

Editor's take

A remote audit proves documents, not processes. That is still valuable: a supplier with coherent records usually has a system, and one without them rarely does.

Sources & evidence

Specification and analytical expectations: ICH Q6B / Q2(R1) — ICH quality guidelines.
API manufacturing quality systems: ICH Q7 — same ICH page.
Chinese national standards: GB/T via the SAMR full-text platform.

Commercial due diligence guidance, not legal advice; supplier claims must be verified against batch documents.

Limitations

This is commercial due diligence guidance, not legal advice. Supplier claims must be verified against batch documents and, where required, an independent audit.