Mention GLP and GMP in the same sentence to anyone working in a U.S. pharmaceutical contract lab, and you’ll get nods around the room. Both terms are familiar. Everyone’s heard them, most people have worked under at least one of them, and the assumption is usually that they’re two versions of the same thing- stricter versus less strict, or research versus production. Most can name the regulations behind each. But ask someone to draw a clean line between how GLP and GMP actually govern sample management on the bench, different traceability requirements, different retention schedules, different documentation obligations — and the conversation tends to get murky fast.
That conflation is understandable. The two frameworks share a vocabulary: SOPs, audit trails, raw data, specimen integrity. They both live under the FDA’s jurisdiction. In labs that operate across both non-clinical research and manufacturing quality control — which is increasingly common at CROs and contract testing facilities — GLP and GMP requirements often run parallel to each other, sometimes in the same building. The assumption that one system can loosely satisfy both, or that the two are interchangeable at the procedural level, is where compliance programs quietly develop gaps.
This article is about those gaps. Specifically, what they mean for sample management.
Two Different Problems That Happen to Use Similar Language
GLP — Good Laboratory Practice — exists to ensure the integrity of non-clinical safety data submitted to regulatory agencies. In the United States, the authoritative framework is FDA 21 CFR Part 58, with the OECD Principles of GLP serving as the internationally harmonized equivalent. The central concern of GLP is the study: a defined protocol, a defined set of test and control articles, a defined population of test systems, and a defined set of data that will ultimately be used to make regulatory decisions about drug safety.
GMP — Good Manufacturing Practice — serves a fundamentally different purpose. Governed by FDA 21 CFR Parts 210 and 211 for pharmaceuticals, GMP addresses the manufacture of drug products intended for human use. Quality control laboratories operating within a GMP environment are regulated not as independent research units but as extensions of the manufacturing process. The central concern here is the batch: a defined quantity of product manufactured under defined conditions, tested according to defined specifications.
This distinction — study versus batch — is not semantic. It shapes almost everything about how sample management works under each framework.
How Sample Traceability Works Under GLP
In a GLP study, traceability is organized around the study plan. Every sample collected — whether from a test system, a control group, or an interim sacrifice — exists in relation to a specific protocol with a unique study number. The Study Director, a role with no direct GMP equivalent, holds ultimate scientific responsibility for the integrity of that study and all the data it generates.
Sample identity under GLP flows from this study-centric architecture. A specimen must be traceable back to the individual test system from which it came, the time point at which it was collected, the treatment group to which that animal or subject belonged, and the study under which all of this was conducted. Chain of custody isn’t just about who handled the sample — it’s about maintaining the interpretive context that makes the data scientifically defensible.
The OECD Principles elaborate on this substantially. GLP-compliant facilities must maintain archives — not just records, but physical or electronic archives — that allow any study to be reconstructed from raw data alone. For samples themselves, retention requirements under GLP are tied to the study lifecycle and the regulatory use of the data. Wet specimens, histopathology slides, biological matrices — these must be retained for defined periods after the study is complete, typically until the sponsor confirms archival or regulatory review is concluded. In practice, this often means retention periods of five years or longer for studies supporting regulatory submissions.
The test and control article accountability is another GLP-specific obligation with direct implications for sample management. Characterization, stability, and homogeneity data for test articles must be documented and linked to the study record. When samples of test articles are retained for verification purposes, that retention must itself be documented and traceable.
How Sample Traceability Works Under GMP
GMP sample management operates differently from the ground up. In a 21 CFR Part 211 QC laboratory, samples are collected from batches of drug substance or drug product, not from biological test systems. The traceability requirement is batch-specific: a sample must be linkable to the lot number, the collection point in the manufacturing process, the sampling procedure used, and the test methods applied.
The regulatory emphasis in GMP shifts toward the specification system. Samples are collected not to generate exploratory safety data but to verify that a product meets predetermined quality standards. Out-of-specification (OOS) investigations, an area with extensive FDA guidance, require meticulous sample management records — who collected the sample, when, under what conditions, with what container system, and with what chain of custody to the testing laboratory.
Retention samples under GMP are a distinct category. For finished drug products, 21 CFR 211.170 mandates retention of reserve samples from each lot for defined periods — generally one year past the labeled expiry, or longer depending on the dosage form. These samples serve as the last line of defense in stability disputes and recall investigations. The documentation requirements for reserve samples are specific: quantity, container type, storage conditions, and location must all be recorded and maintained.
Reference standards, reagents, and working standards all carry their own GMP documentation burdens — certification, expiration, storage condition logs — and all of these touch the sample management infrastructure of the lab.
Where the Two Frameworks Overlap (and Why That’s Where Problems Occur)
Labs that operate under both frameworks — a CRO running GLP toxicology studies while also providing GMP-compliant QC testing for a manufacturing client, for example — will find significant surface area where the two sets of requirements converge. This is also where the practical confusion tends to concentrate.
Both GLP and GMP demand SOPs. Both require that deviations be documented and that corrective actions be recorded. Both treat raw data as sacrosanct and require audit trails for any change to an original record. Both impose storage condition requirements for samples and specimens, and both require that storage be monitored and logged.
At the record level, the similarity is even more superficial than it looks. A GLP raw data record for a biological specimen must contain enough information to reconstruct the scientific context of that data point within the study. A GMP sample record must contain enough information to establish that the sample was collected in compliance with the sampling plan and that the results reflect the batch as manufactured. These are related but distinct evidentiary standards.
The archive is another area of apparent overlap with important underlying differences. GLP archives are study-specific: all data, specimens, and documentation related to a completed study are transferred to the archive under defined procedures and may only be accessed and removed under controlled conditions. GMP document retention requirements are operationally organized but not structured around a discrete study archive concept. Batch records, laboratory notebooks, analytical results — these are retained according to product-specific timelines and regulatory requirements (generally two years after distribution or one year past expiry, whichever is longer under 211.180), but without the same emphasis on the study as an archival unit.
The Documentation Requirements, Side by Side
For labs trying to build compliance programs that address both frameworks coherently, it helps to be explicit about what each one actually requires at the document level.
Under GLP, the critical documents for sample management include the study plan (protocol), which establishes collection procedures, specimen handling requirements, and retention specifications; the raw data record for each specimen, which must capture collection details at the time of collection; specimen disposition records, which account for the fate of every sample collected (tested, archived, destroyed, transferred); test and control article accountability records; and the final study report, which must reference all of these and confirm that the study was conducted in accordance with GLP.
Under GMP, the equivalent documentation stack includes the sampling plan or procedure SOP, which specifies how samples are to be collected from each product type and at what points in the process; the sample receipt record in the QC laboratory, capturing chain of custody from collection to testing; analytical worksheets and raw data records tied to the batch record; OOS and out-of-trend investigation records when results deviate from specifications; reserve sample logs; and certificate of analysis documentation linking test results to the batch.
The functional requirement in both cases is the same: a complete, contemporaneous, attributable, and legible record. The difference is the organizational logic around which that record is built.
What This Means for a Sample Management System
A lab running under one framework can build a sample management system — or configure a LIMS — around the organizational logic of that framework alone. A GLP-only facility needs study-centric sample tracking with protocol linkage, test system identifiers, and an archive handoff workflow. A GMP-only QC lab needs batch-centric sample tracking with lot number linkage, specification checks, and reserve sample management.
A lab that operates under both frameworks needs a system that can do both — and do them distinctly, without conflating the two organizational models.
This is a harder problem than it sounds. Most off-the-shelf LIMS products are designed around one model or the other. Configuring a batch-centric system to handle study-specific GLP requirements, or vice versa, typically requires significant customization and risks introducing compliance gaps at the seams. The documentation that satisfies a GMP auditor looking at a batch record is not automatically the documentation that satisfies a GLP auditor reconstructing a study from raw data.
The practical requirements for a system that handles both include: the ability to link samples to either a study plan or a batch record as the organizing unit; role-based access controls that reflect the Study Director model in GLP and the QC manager accountability model in GMP; configurable retention schedules that apply different rules to GLP specimens and GMP reserve samples; audit trails that are study-complete for GLP purposes and batch-complete for GMP purposes; and archive workflows that distinguish between the GLP study archive and the GMP document retention system.
The Compliance Case for Getting This Right
The cost of conflating GLP and GMP in practice is not always immediately visible. Studies can complete, and batches can be released without incident even when the underlying sample management records are technically non-compliant. The exposure surfaces when something goes wrong: an FDA inspection, a data integrity challenge, a sponsor audit, or an OOS investigation that requires reconstructing the chain of custody for a sample collected six months ago.
At that point, the question is not whether the lab follows good science — it’s whether the documentation system can prove it. A GLP inspection under 21 CFR Part 58 will examine whether specimens can be traced back to individual test systems and study protocols. A GMP inspection under 21 CFR Parts 210/211 will examine whether samples were collected, handled, and tested according to written procedures, and whether deviations were documented and investigated.
These are different evidentiary tests, applied by inspectors trained to look for different things. Labs that build their compliance programs around the distinction — rather than assuming that one set of practices covers both — are the ones that tend to perform better under scrutiny.
QISS LAB: Built for Both Frameworks
QISS LAB is designed with this distinction built in. Whether your lab operates under GLP, GMP, or both simultaneously, QISS LAB provides configurable sample management workflows that reflect the actual compliance requirements of each framework.
If your lab is operating across both frameworks and your current sample management system was built for only one of them, it’s worth examining where the gaps are before an inspection finds them for you. Book a demo and see how QISS LAB can help you better.
