The bridge between the quality system and the plant. A site can pass every inspection and still release a week late — and that gap is a process problem, not a compliance one.
Compliance asks whether you may ship. Operational performance asks how long it takes and what it consumed. Most sites measure the first and absorb the second as normal.
Each of these is a metric a site probably already reports. Treated as instruments rather than as reporting, they show where the process is binding — and most can be improved without adding headcount.
Where batches actually wait — documentation review, open deviations, or a single decision point.
ReadRestructured so the review assembles continuously rather than being compiled after the period it describes.
ReadPlan against actual, on risk-based frequency, resourced honestly.
ReadRead by inspectors as a proxy for control, and a throughput constraint in its own right.
ReadQuality documentation prepared alongside development so the first batch does not sit in quarantine.
ReadMost transfer delays are quality-document delays, and those can be prepared in advance.
ReadTheir compliance position is your operational dependency, not a procurement detail.
ReadRisk-tiered so routine changes move and significant ones get genuine assessment.
ReadInvestigation is production time
Deviation and CAPA work draws on production, engineering and technical staff as well as QA. A backlog forms when events arrive faster than they close, and once it exists every hour spent on the queue is an hour not spent on the intake feeding it.
Triage by exposure rather than by ease, and repair the intake process — clearing a queue without fixing what produced it buys eighteen months at most.
Access control and review are operational changes
Removing shared logins, enforcing individual accounts and instituting audit trail review change how people work at the line and in the laboratory. Done badly this creates workarounds; done well it is largely invisible after a few weeks.
Design the controls so the compliant route is the easy route. Controls that fight the workflow are the ones that quietly stop being followed.
It consumes the people who run production
An inspection draws heavily on production, engineering and QA simultaneously, and the back room — the function retrieving documents — is usually the part nobody has practised. Unprepared, that pulls senior operational staff off the floor for the duration.
Rehearse the back room and brief SMEs before you need them. The cost of a rehearsal is a day; the cost of learning during the inspection is the inspection.
Open deviations gate release
Batches routinely wait on open deviations rather than on analysis, which makes investigation closure a throughput constraint as much as a compliance one. Recurring event types consume the same production and engineering capacity repeatedly.
Map where batches actually wait in the release path. Shortening the investigation route often releases more capacity than adding testing resource.
It determines how quickly the site can change
A heavy revalidation burden makes every process improvement expensive, so improvements stop being proposed. Qualification status that no longer matches installed equipment is also the finding most likely to surface within the first hours of a facility tour.
Risk-tier revalidation triggers so routine changes move and significant ones get genuine assessment.
Audit capacity is the real constraint
Risk-based tiering is what makes a supplier programme survivable. Without it, either everything requires an audit — which does not happen — or nothing does, and the programme exists only on paper.
Resource the audit programme honestly against the tiering, and run audits jointly where internal capacity is the genuine constraint.
Something has happened and the timeline may not be yours any more.
Nothing has failed yet, and you would like to keep it that way.
Compliant, and still slower or more expensive than it should be.
Capacity, a specialism, or cover you cannot justify hiring full time.
Your current release cycle time, or how late the last product quality review was, or how many of this year's audits have actually happened. One number is enough for a useful first conversation.