ISO 17025 Accreditation in Canada: What Canada GMP Compliance Requires From Your Contract Testing Lab

Most pharmaceutical manufacturers have a line in their supplier qualification procedure that reads something like: confirm contract lab holds current ISO 17025 accreditation. The COA comes back on lab letterhead, the accreditation number is there, and the batch gets released.

That’s the process. It’s also one of the more significant compliance gaps we see in Canada GMP programs — not because ISO 17025 doesn’t matter, but because holding accreditation and being in scope for the specific methods you’re relying on are two different things entirely.

Health Canada’s Food and Drug Regulations C.02.019 places the obligation to use adequately equipped, qualified facilities on the drug establishment licensee. Your contract lab’s accreditation certificate doesn’t transfer that obligation. It confirms the lab has a quality system — it doesn’t confirm that quality system covers your test. Understanding what the standard actually requires, where Canadian pharmaceutical labs most commonly fall short, and how those gaps connect back to your own compliance program is worth your attention.

ISO 17025:2017 and the Canadian Accreditation Landscape

ISO/IEC 17025 was last revised in November 2017, replacing a 2005 edition that had grown increasingly awkward to apply to modern analytical environments. The 2017 version restructured around 43 clauses, introduced alignment with ISO 9001:2015’s high-level structure, and added explicit requirements for impartiality management and risk-based thinking that the 2005 edition hadn’t addressed systematically.

In Canada, the national accreditation authority under the Standards Council of Canada Act is the Standards Council of Canada (SCC). SCC recognizes several accreditation bodies operating in the Canadian market — including CALA (Canadian Association for Laboratory Accreditation) and PJLA. When a pharmaceutical testing lab holds ISO 17025 accreditation, that accreditation has been granted by one of these SCC-recognized bodies, typically with surveillance assessments roughly every 12 months and full re-assessments on a 4-year cycle.

The scope of accreditation is the piece that most pharmaceutical quality teams underread. It’s a listed document — publicly searchable through the accreditation body’s directory — that itemizes the specific test methods, matrices, and measurement ranges the lab has demonstrated competence for. A lab can be ISO 17025 accredited and simultaneously out-of-scope for ICP-MS heavy metals testing, for in-house HPLC purity methods, or for particulate matter analysis. The certificate doesn’t distinguish between these. The scope document does.

For your Canada GMP supplier qualification program, asking for the scope of accreditation — not just the certificate number — is the minimum due diligence.

The 5 Most Common Nonconformities Found During ISO 17025 Assessments in Canada

Assessment bodies flag nonconformities across both management and technical clauses. In pharmaceutical laboratory contexts, five areas come up disproportionately.

1. Measurement uncertainty not documented or reported on test reports

Clause 7.6 of ISO/IEC 17025:2017 requires that labs evaluate and report measurement uncertainty for all quantitative results. This requirement existed in the 2005 version too, but the 2017 revision made it more explicit and harder to waive via client agreement alone. In practice, measurement uncertainty estimates are missing from COAs far more often than they should be — or they’re present in internal records but stripped from the customer-facing report. For pharmaceutical clients relying on those results against pharmacopoeial limits, this creates a direct Canada GMP documentation gap that may not surface until a Health Canada inspection.

2. Method validation records incomplete for in-house or modified methods

When a lab uses an unmodified pharmacopoeial method (USP, Ph.Eur., BP), full validation isn’t required under ISO 17025 — but verification that the method performs as expected under the lab’s specific conditions still is. In-house methods and modified pharmacopoeial procedures require full validation per ISO 17025 clause 7.2.2. Health Canada also references ICH Q2(R1) as the standard for analytical method validation in drug submissions. We regularly encounter labs with experienced chemists and modern instrumentation whose internal validation packages have gaps in linearity data, specificity documentation, or robustness studies. These gaps only surface during formal assessment or, worse, during a regulatory inspection of the drug manufacturer relying on those results.

3. Equipment calibration records with broken traceability chains

Metrological traceability — connecting every calibration result to national or international measurement standards through an unbroken documented chain — is a core ISO 17025 requirement under clause 6.4.6. Common failure modes include calibration certificates from non-accredited third-party suppliers, in-house calibrations without documented traceability to NIST or NRC (National Research Council Canada) measurement standards, and calibration intervals that have lapsed without formal risk justification. A single break in that chain can invalidate the results produced by the affected instrument for the entire period it was outside specification. If those results appear on a COA supporting a released batch, you have a problem that predates your supplier qualification update.

4. Personnel competency records not maintained through method lifecycle

Clause 6.2 requires labs to document personnel competency — not just qualifications and training records, but active evidence that each analyst can perform the assigned methods to the required standard. In practice, competency demonstration records often cover initial qualification but not the periodic re-qualification that both ISO 17025 and Health Canada GMP guidelines expect. This is particularly relevant for method transfers from a manufacturer’s internal lab to a contract lab: the transfer validation package needs to demonstrate that the receiving lab’s personnel are competent with the specific method, not just that the method produces equivalent results in the abstract.

5. Impartiality policy exists on paper but not in practice

The 2017 revision’s clause 4.1 introduced a formal requirement for labs to identify and manage risks to impartiality — essentially, to assess and document whether commercial pressures, relationships with parent organizations, or individual conflicts of interest could influence technical outputs. This was not a substantive requirement under the 2005 version. Many labs updated their quality manuals to include impartiality language without building the underlying risk assessment process that the clause actually requires. Assessment bodies have flagged this with increasing frequency in post-2020 surveillance cycles, particularly in labs that operate as subsidiaries of larger manufacturing groups.

How These Gaps Become Your Canada GMP Compliance Problem

Under C.02.019 of the Food and Drug Regulations and Health Canada’s GUI-0001 Good Manufacturing Practices Guidelines (most recently revised in 2023), manufacturers and importers who contract out testing remain responsible for ensuring that testing is conducted appropriately. This isn’t procedural boilerplate. It means your batch release decision rests on the integrity of your contract lab’s quality system — and any significant nonconformity that undermines that system potentially undermines your release decision too.

The scenario worth thinking through: a lab conducting your COA testing has a major nonconformity flagged by their accreditation body — say, a calibration traceability failure on the HPLC system used for your active ingredient assay. If that nonconformity covers the period during which your batch was tested, you now have a documentation issue in your batch records. Health Canada GMP inspectors reviewing your product history can legitimately ask what you knew about your lab’s accreditation status, when you last verified their scope, and how you managed that risk at the time of batch release.

This isn’t an edge case. It’s precisely the kind of issue that surfaces during pharmaceutical site inspections when released product quality complaints circle back to contract lab performance. The drug establishment licensee is the entity on the hook.

Building a Supplier Qualification Approach That Actually Addresses Canada GMP Requirements

Your supplier qualification procedure for contract testing labs should do more than collect an accreditation certificate once a year. A more robust approach covers five specific elements.

First, verify scope, not just accreditation status. Pull the current scope of accreditation from the accreditation body’s public directory — CALA and PJLA both maintain searchable databases. Confirm that the specific methods, matrices, analytes, and detection techniques for your products are listed. Not just “HPLC” generically, but the method category and measurement range that matches your application.

Second, request the last two assessment summaries. A lab operating in good faith under ISO 17025 will have documented records of recent assessments and any corrective actions raised. They should be willing to share a summary or a sanitized version. A lab that declines to discuss their assessment history at all is worth scrutinizing more carefully in your qualification evaluation.

Third, understand the subcontracting policy in writing. ISO 17025 clause 6.6 requires labs to inform clients when work is subcontracted. A lab issuing a COA for your product may have subcontracted the heavy metals analysis by ICP-MS to a second facility. Your supplier qualification scope needs to extend to that second lab too. Under Canada GMP, you’re responsible for the full chain.

Fourth, build accreditation status verification into periodic re-qualification — not as an informal inquiry but as a documented procedure step. Annual confirmation that the scope hasn’t narrowed and no major nonconformities are open should appear in your re-qualification records. It’s a 20-minute task that closes a meaningful compliance gap.

Fifth, review measurement uncertainty on incoming COAs. If a quantitative result on your COA doesn’t include expanded uncertainty — or if the lab can’t explain how it was calculated for that specific method — that’s a direct ISO 17025 clause 7.6 gap. It’s also a useful proxy for whether the lab’s quality system is operating in substance or just in appearance.

Labs that take their accreditation seriously are typically willing to walk through their quality system with a pharma client performing proper due diligence. The ones that push back on reasonable transparency questions are the ones worth that extra scrutiny — before the next batch, not after.

---

Written by Nour Abochama, Quality & Regulatory Advisor, Androxa. Learn more about our team

Talk to our team about Health Canada compliance Contact us

Related from our network

• ISO 17025 accreditation and supplement COA verification for US manufacturers — How accredited US testing labs approach method scope, measurement uncertainty, and COA documentation for dietary supplement compliance
• EU GMP analytical laboratory requirements for cosmetic and pharmaceutical products — Understanding European laboratory accreditation expectations for manufacturers entering the EU market under ISO 17025 and EU 1223/2009