Document Control (Metadata)

Table of Contents

• Section 1 - Family Summary
• Section 2 - Purpose, Scope & Regulatory Anchors
• Section 3 - General Training Requirements
• Section 4 - Unified Responsibility & High-Level Control Mapping
• Section 5 - Required AAs & Traceability Matrix
• Section 6 - AA Deliverable Requirements
• Section 7 - WIN Layer (High-Level Operational HOW)
• Section 8 - Governance Inheritance

Work Instructions

• WI-QA-2A – Finished Goods Microbiological Data Review & Disposition

Section 1 - Family Summary

This Family operates under the governance requirements defined in the Unified Governance Manual (QMS-GOV), including the Quality Manual, Risk Management Program (RMP), Internal Audit Program (IAP), and Material Review Board (MRB) governance administered by QA. All QA responsibilities and Work Instructions must align with these enterprise governance authorities.

The Quality Assurance (QA) Process Family executes and administers enterprise Quality Management System processes across all GMP activities under the governance of the QMS and the authority of the Quality Unit. QA ensures that systems, processes, and products are controlled, compliant, validated, traceable, and continuously improving.

The Quality Unit retains ownership of the Quality Management System (QMS). Quality Assurance administers defined QMS processes under delegated authority but does not hold ultimate system ownership or non-delegable quality authority.

QA administers quality oversight of outsourced manufacturers and critical suppliers under the governance of the Quality Unit. This includes qualification, audit oversight, performance monitoring, material disposition controls, and risk-based surveillance to ensure compliance with applicable GMP and regulatory requirements.

Authority Delegation & Escalation Framework

The Quality Unit holds non-delegable quality authority as required under 21 CFR Part 111 Subpart F. This authority protects product safety, regulatory compliance, and independence from operational influence.

Quality Assurance executes Quality Management System processes under formally delegated authority from the Quality Unit. QA may finalize routine quality system determinations when outcomes are fully defined by approved specifications, established acceptance criteria, and controlled procedures.

• QA may execute and finalize decisions that are objectively determined by predefined, documented criteria.
• QA may not independently authorize determinations requiring discretionary judgment outside established criteria.
• Matters requiring interpretation, deviation from approved limits, risk evaluation, or regulatory impact assessment must be escalated to the Quality Unit.
• Escalation triggers are defined within applicable SOPs and are mandatory when met.

Non-Delegable Quality Unit Authority

The following authorities are retained exclusively by the Quality Unit and may not be delegated:

• Approval of product release outside predefined acceptance criteria.
• Authorization of rework, reprocessing, or salvage not previously defined in approved procedures.
• Acceptance of product or data outside specification without documented risk assessment.
• Determination of regulatory reporting obligations.
• Final resolution of confirmed data integrity violations.
• Override of established specifications, validated parameters, or QC limits.
• Authority to halt manufacturing, packaging, distribution, or release due to quality risk.

Delegation of execution does not transfer final Quality Unit authority. The Quality Unit retains the right to review, intervene, or assume direct authority in any quality-impacting matter.

QA maintains independence from Production, Packaging, Warehouse, and other operational Process Families to ensure unbiased execution of quality system controls and oversight activities.

QA administers WHAT-level enterprise quality system controls, including:

• Release and disposition of components, work-in-process, and finished goods
• Deviation, investigation, and CAPA management
• Change control and validation/qualification oversight
• Document control and record lifecycle management
• Complaint handling and recall management
• Internal audits and audit readiness
• Management Review facilitation and system administration
• Specification and master data oversight
• Nonconformance management and MRB participation
• Reserve sample and stability program oversight
• Sampling program governance

Regulatory frameworks including 21 CFR Part 111, 21 CFR Part 11, and NSF/ANSI 455-2 require manufacturers to maintain independent quality oversight functions that ensure:

• Validated systems and processes
• Controlled and compliant documentation
• Reliable data integrity and electronic records
• Traceable and complete GMP records
• Consistent and controlled product quality

Key QA risk themes include:

• Incomplete or inadequate investigations
• Ineffective or missing CAPAs
• Uncontrolled changes or validation gaps
• Outdated or uncontrolled documentation
• Incorrect or unsupported release decisions
• Insufficient management oversight

QA interfaces with all Process Families—including QCL, QCP, TAL, IT, WH, PROD, PKG, SAN, MNT, PROC, and others—by providing:

• Independent oversight
• Approval and control enforcement
• Verification of compliance
• Escalation of quality risks

Risk Tier Classification: VERY HIGH. QA system controls form the foundation of GMP compliance. Failure in QA execution or oversight can compromise the entire Quality Management System, expose the organization to regulatory enforcement, and jeopardize product safety.

Section 2 - Purpose, Scope & Regulatory Anchors

Product Disposition & Nonconformance

Deviations, CAPA & Change Control

Document & Specification Control

Specifications and acceptance criteria are established under Quality Unit authority within the Quality Control (QC) Control Framework. QA administers the controlled lifecycle management of approved specifications but does not independently establish acceptance criteria.

Complaints & Market Actions

Audit, Management Review & Oversight

Sampling, Stability & Retention

Citations above support WHAT requirements; compliance traceability is maintained at the L0 level.

Section 3 - General Training Requirements

The following WHAT-level training requirements apply to all personnel who work within or support the Quality Assurance (QA) Process Family. Training expectations are grouped by governing SOP and aligned to the domain structure defined in Section 2 to improve traceability, audit clarity, and architectural consistency.

Personnel must complete initial qualification training prior to independent execution of QA-controlled activities and must complete annual refresher training thereafter. Retraining is required upon significant procedural revision, regulatory update, or identified performance gap.

Product Disposition & Nonconformance

SOP-QA-RELEASE — Product Release & Disposition

• Personnel must understand that QA performs independent batch record review and prepares disposition decisions under delegated Quality Unit authority.
• Personnel must understand that final quality authority resides with the Quality Unit.
• Personnel must understand records reviewed as part of release (manufacturing, packaging, QC, deviations, changes).
• Personnel must understand that incomplete, inaccurate, or missing records prevent release.

SOP-QA-NCMR — Nonconforming Material Review

• Personnel must understand what constitutes nonconforming material.
• Personnel must understand segregation and status-control requirements.
• Personnel must understand approved disposition pathways.
• Personnel must understand escalation requirements to QA and the Quality Unit.

SOP-QA-RETURNS — Returned Product, Salvage & Reprocessing

• Personnel must understand returned product risk controls.
• Personnel must understand evaluation and disposition criteria.
• Personnel must understand that redistribution requires QA authorization under delegated authority.

Deviations, CAPA & Change Control

SOP-QA-DEVIATION — Deviation Management

• Personnel must understand deviation definitions and identification triggers.
• Personnel must understand documentation and timeliness requirements.
• Personnel must understand escalation thresholds.

SOP-QA-CAPA — Corrective & Preventive Action

• Personnel must understand systemic risk identification and CAPA initiation triggers.
• Personnel must understand effectiveness verification requirements.

SOP-QA-CHANGE — Change Control

• Personnel must understand quality-impacting change definitions.
• Personnel must understand impact and risk assessment principles.
• Personnel must understand approval and verification requirements.

Document & Specification Control

SOP-QA-DOCCTRL — Document Control

• Personnel must understand document lifecycle controls including creation, revision, approval, issuance, and retirement.
• Personnel must understand version control and effective date governance.
• Personnel must understand restrictions on use of obsolete documents.

SOP-QA-SPEC — Specification Management

• Personnel must understand that specifications define acceptance criteria under Quality Unit authority.
• Personnel must understand the approval and revision process for specifications.
• Personnel must understand linkage between specifications, testing, and release decisions.

Complaints & Market Actions

SOP-QA-COMPLAINT — Complaint Handling

• Personnel must understand complaint intake and classification requirements.
• Personnel must understand investigation expectations and timeliness standards.
• Personnel must understand escalation requirements for safety-related complaints.
• Personnel must understand Serious Adverse Event (SAE) criteria, FDA reporting timelines, and use of MedWatch Form 3500A for reportable dietary supplement events.

SOP-QA-RECALL — Recall Management

• Personnel must understand recall initiation triggers and scope definition.
• Personnel must understand traceability and reconciliation expectations.
• Personnel must understand regulatory notification requirements.

Audit, Management Review & Oversight

SOP-QA-AUDIT — Internal Audit Program

• Personnel must understand audit planning and execution principles.
• Personnel must understand documentation and corrective action follow-up expectations.
• Personnel must understand auditor independence requirements.

SOP-QA-MGMTREV — Management Review

• Personnel must understand required inputs to management review.
• Personnel must understand leadership oversight responsibilities.
• Personnel must understand action tracking and follow-up expectations.

Sampling, Stability & Retention

SOP-QA-SAMPLING — Sampling Program

• Personnel must understand approved sampling plans and statistical rationale.
• Personnel must understand documentation and traceability requirements.

SOP-QA-STABILITY — Stability Program

• Personnel must understand stability study design and monitoring requirements.
• Personnel must understand escalation requirements for stability excursions.

SOP-QA-RESERVE — Reserve Sample Program

• Personnel must understand reserve sample retention requirements.
• Personnel must understand controlled retrieval and documentation expectations.

Section 4 – Roles & Governance Responsibilities

This section defines organizational roles within the Sawgrass Nutra Labs Quality Management System (QMS) and the governance responsibilities assigned to each role.

A Role represents a defined structural position within the quality governance architecture (Authority, System Administration, Technical Execution, Operational Execution, or Cross-Functional Governance).

Responsibilities define the outcome-based accountabilities assigned to that role. Responsibilities do not confer authority beyond that defined by the Quality Unit.

Architectural Clarification: Quality Control (QC) represents the Control Framework — acceptance criteria, specifications, and release rules — established under Quality Unit authority. QC is not an organizational role.

Section 5 — Required AAs & Traceability Matrix

Quality Event Escalation (Cross-Domain Governance)

All Auditable Artifacts leverage the centralized QA Quality Event escalation process. Deviations, complaints, excursions, specification failures, or risk indicators are escalated through WIN-QA-DEVIATION or the applicable QA event pathway.

Domain-specific SOPs and WINs define event identification triggers only. They do not establish independent investigation, escalation, or final disposition authority. Final regulatory authority remains under the Quality Unit governance framework.

Section 6 — AA Deliverables

AA-REC-QA-RELEASE-REL

• Complete batch record review (BPR, IPCs, COA)
• Verification of specification compliance
• Deviation and CAPA linkage assessment
• Final QA disposition decision (Release/Reject/Hold)
• Authorized QA signature with date/time (ALCOA+ compliant)

AA-REC-QA-NCMR-EVT

• Material identification and segregation status
• Detailed nonconformance description
• Risk classification and impact assessment
• Disposition decision with justification
• Traceability to affected lots/batches

AA-REC-QA-RETURNS-EVT

• Return intake details and product identification
• Inspection findings and condition assessment
• Investigation linkage if required
• Disposition decision (destroy/rework/release)
• QA authorization and documentation

AA-REC-QA-DEVIATION-EVT

• Deviation description and classification
• Immediate containment actions
• Root cause analysis methodology and results
• Impact assessment on product/system
• QA approval and documented closure

AA-REC-QA-CAPA-EVT

• CAPA initiation trigger and linkage
• Root cause confirmation
• Defined corrective and preventive actions
• Effectiveness verification evidence
• Formal QA closure approval

AA-REC-QA-CHANGE-EVT

• Change description and justification
• Impact and risk assessment
• Approval workflow documentation (QA/QU)
• Implementation verification
• Post-change effectiveness confirmation

AA-LOG-QA-DOCCTRL-APR

• Document ID, version, and revision history
• Approval signatures and effective dates
• Controlled distribution record
• Obsolete document archival confirmation

AA-REC-QA-SPEC-APR

• Specification limits and acceptance criteria
• Associated test methods
• Approval and revision history
• Linkage to applicable materials/products

AA-REC-QA-COMPLAINT-EVT

• Complaint intake and classification
• Batch/product traceability
• Investigation findings
• Adverse event determination
• Regulatory reporting assessment

AA-CHK-QA-RECALL-EVT

• Recall classification and scope
• Affected lot identification
• Notification and communication records
• Effectiveness checks
• Formal recall closure documentation

AA-REC-QA-AUDIT-APR

• Audit plan and defined scope
• Findings and observations
• Risk classification of findings
• Corrective action tracking
• Audit closure verification

AA-REC-QA-MGMTREV-APR

• QMS performance metrics and KPIs
• Trend analysis (deviations, CAPA, complaints)
• Management decisions and action items
• Meeting minutes and approvals

AA-TMP-QA-SAMPLING-APR

• Sampling plan definition
• Sample size and method justification
• Approval and revision history
• Execution traceability

AA-LOG-QA-STABILITY-APR

• Stability study design
• Timepoint test results
• Trend evaluation
• Shelf-life determination

AA-LOG-QA-RESERVE-APR

• Reserve sample identification
• Storage conditions and controls
• Retention period tracking
• Retrieval and disposition documentation

Section 7 — Execution (WIN)

WIN-QA-RELEASE

Trigger Event: Batch ready for QA disposition

• Verify batch record completeness (BPR, IPC, COA)
• Confirm compliance with approved specifications
• Review all deviations, investigations, and CAPA linkage
• Assess product impact and risk classification
• Approve, reject, or hold batch
• Document disposition in validated system of record
• Escalate discrepancies via deviation workflow

WIN-QA-NCMR

Trigger Event: Identification of nonconforming material

• Segregate and label nonconforming material
• Document nonconformance details
• Perform risk and impact assessment
• Determine disposition (rework, reject, use-as-is)
• Maintain traceability to affected lots
• Escalate critical defects

WIN-QA-RETURNS

Trigger Event: Product return received

• Inspect returned product condition
• Verify lot traceability and history
• Assess for potential quality impact
• Determine disposition (destroy, rework, release)
• Link investigation if required
• Document QA decision and justification

WIN-QA-DEVIATION

Trigger Event: Deviation identified

• Document deviation immediately
• Implement containment actions
• Initiate investigation
• Perform root cause analysis
• Assess impact on product/system
• Close deviation with QA approval

WIN-QA-CAPA

Trigger Event: Systemic issue identified

• Initiate CAPA record
• Define corrective and preventive actions
• Implement actions per plan
• Verify effectiveness of actions
• Document closure in QMS system

WIN-QA-CHANGE

Trigger Event: Change request initiated

• Document proposed change
• Perform impact and risk assessment
• Route for QA/QU approval
• Implement approved change
• Verify effectiveness post-implementation

WIN-QA-DOCCTRL

Trigger Event: Document creation or revision

• Create or revise controlled document
• Route for approval
• Issue approved version
• Archive obsolete versions
• Maintain revision history

WIN-QA-SPEC

Trigger Event: Specification creation or update

• Define acceptance criteria and limits
• Assign test methods
• Route for QA approval
• Issue controlled specification
• Maintain version control

WIN-QA-COMPLAINT

Trigger Event: Complaint received

• Log complaint in system
• Assess severity and classification
• Perform investigation
• Determine regulatory reporting requirements
• Document findings and closure

WIN-QA-RECALL

Trigger Event: Recall initiated

• Identify affected lots and distribution scope
• Notify regulatory bodies and stakeholders
• Execute recall plan
• Perform effectiveness checks
• Document recall closure

WIN-QA-AUDIT

Trigger Event: Scheduled or triggered audit

• Define audit scope and plan
• Conduct audit activities
• Document findings
• Assign corrective actions
• Verify closure of findings

WIN-QA-MGMTREV

Trigger Event: Management review cycle

• Compile QMS metrics and trends
• Review performance indicators
• Identify risks and opportunities
• Define improvement actions
• Document decisions and approvals

WIN-QA-SAMPLING

Trigger Event: Sampling required

• Execute approved sampling plan
• Collect and label samples
• Maintain traceability
• Submit samples for testing

WIN-QA-STABILITY

Trigger Event: Stability timepoint reached

• Perform scheduled testing
• Record analytical results
• Evaluate trends
• Escalate out-of-trend conditions

WIN-QA-RESERVE

Trigger Event: Batch retained

• Store reserve samples under controlled conditions
• Maintain retention inventory log
• Track retention period
• Retrieve samples for investigation if required

Governance Inheritance

This Family Pack inherits all enterprise-level governance defined in the L0 Unified Governance Document (L0-QMS-UGD), which serves as the authoritative source for quality, documentation, data integrity, and system requirements. All SOPs, WINs, and FORMs within this Family must be created, maintained, and executed in alignment with L0 rules, including:

• Enterprise documentation control, change control, and record-lifecycle governance
• ALCOA+ data integrity principles governing all GMP data
• Part 11 electronic records and signature requirements
• Training, qualification, and annual refresher requirements
• System-of-Record expectations for creation, retention, and retrieval of evidence
• Unified expectations for traceability, role accountability, and cross-functional escalation
• Electronic systems subject to 21 CFR Part 11 must undergo periodic review and re-validation at defined intervals and upon significant system changes to ensure continued compliance, security, audit trail integrity, and data reliability.

L0 requirements apply uniformly and supersede all Family-level content. This Family Pack does not replace or modify L0 governance and operates fully within the enterprise-wide QMS architecture.