Your next Joint Commission survey is scheduled, and the surveyor asks to see your HEPA filter certification documentation. Do you know what they’re looking for?
Pharmaceutical cleanroom compliance involves multiple intersecting standards—IEST-RP-CC001 for testing methodology, ISO 14644-3 for performance requirements, and USP 797/800 for certification frequency. Navigating these overlapping requirements while maintaining patient care schedules requires clear, actionable guidance. The stakes are high—failed certifications mean halted compounding operations and potential patient safety risks.
This guide explains the specific HEPA filter certification requirements for controlled environments including pharmaceutical cleanrooms, research laboratories, biopharmaceutical manufacturing, medical device production, and hospital surgical suites, the standards that govern testing, required documentation, and how to interpret results. We’ll discuss what regulators expect during USP 797 and USP 800 compliance audits, plus how to maintain the six-month certification cycle without disrupting patient care.
We’ll cover three key areas: the certification standards your testing must follow (IEST-RP-CC001 and ISO 14644-3), the documentation you need for audit readiness, and how to read certification results to identify problems before they become costly failures.
What Are HEPA Filter Certification Requirements?
HEPA filter certification requirements are the mandatory standards and testing protocols that verify filter integrity and performance in pharmaceutical cleanrooms. These requirements include:
- Minimum 99.99% particle removal efficiency at 0.3 microns
- In-situ leak testing using DOP or PAO aerosol challenge methodology
- NIST-traceable testing instruments
- Six-month certification intervals for pharmaceutical cleanrooms per USP 797 and USP 800
- Complete documentation proving filter integrity, airflow velocity, and ISO classification
Certification must follow IEST-RP-CC001 and ISO 14644-3 methodologies to meet regulatory expectations across pharmaceutical, research, biopharmaceutical, and medical device manufacturing facilities.
Certification Standards: IEST-RP-CC001 and ISO 14644-3
Understanding IEST-RP-CC001 Testing Protocol
IEST-RP-CC001 is the industry-accepted standard for HEPA filter leak testing published by the Institute of Environmental Sciences and Technology. [1] This methodology uses a DOP (dioctyl phthalate) or PAO (polyalphaolefin) aerosol challenge to detect even microscopic leaks in filter media and sealing systems.
The testing process follows strict parameters:
- Scan rate: Maximum 2 inches per second across entire filter face and frame
- Probe distance: Approximately 1 inch from filter exit plane
- Acceptable penetration: Below 0.01% for pharmaceutical applications (stricter than industrial standards)
- Detection capability: Identifies any penetration points where unfiltered air bypasses HEPA media
The standard covers both filter media integrity and the frame-to-housing seal, which means a filter can fail certification even if the media itself is perfect. Gasket compression issues, frame warping, or improper installation can all create bypass leaks that compromise cleanroom classification. The FDA recognizes IEST-RP-CC001 as the appropriate methodology for pharmaceutical cleanroom qualification. [2]
Allometrics maintains CETA Registered Cleanroom Certification Professionals who follow these exact protocols for pharmaceutical, research, biopharmaceutical, and industrial facilities nationwide.
ISO 14644-3 Installation and Performance Testing Requirements
ISO 14644-3 establishes the international standard for cleanroom installation qualification and periodic performance testing. While IEST-RP-CC001 defines how to test HEPA filters, ISO 14644-3 establishes when testing must occur and under what conditions.
Three testing states defined:
- As-built: Empty cleanroom structure only
- At-rest: Fully equipped but unoccupied (typical for pharmaceutical certification)
- Operational: Normal working conditions with active operations
When testing is required:
- After initial installation
- After any filter replacement
- At regular intervals based on risk assessment
ISO 14644-3 connects directly to ISO Class 5 requirements for Primary Engineering Controls (biological safety cabinets, compounding aseptic isolators) and Secondary Engineering Controls (buffer rooms at ISO Class 7, ante rooms at ISO Class 8). This framework provides the quality assurance structure that regulatory agencies expect during inspections and accreditation surveys.
USP 797 and USP 800 Certification Frequency Requirements
USP General Chapter 797 mandates six-month certification intervals for all sterile compounding cleanrooms—significantly more frequent than the annual certification common in industrial facilities. This accelerated schedule reflects the direct patient safety risks associated with contaminated compounded sterile preparations.
What requires six-month certification:
- Primary Engineering Controls: Laminar airflow workbenches, biological safety cabinets, compounding aseptic isolators (CAIs), compounding aseptic containment isolators (CACIs)
- Secondary Engineering Controls: Buffer rooms, ante rooms
USP 800 hazardous drug handling areas follow the same six-month certification frequency when performing sterile compounding (which requires compliance with both USP 797 and USP 800). Non-sterile hazardous drug compounding areas require containment verification through routine wipe sampling.
Additional certification triggers:
- Immediately after any HEPA filter replacement
- Following facility modifications affecting airflow
- After any event compromising filter integrity
The challenge for hospital pharmacies and compounding facilities: coordinating these certifications around patient care schedules. Oncology treatment days, surgical case loads, and critical medication needs all impact when testing can occur without disrupting operations.
Managing certification schedules across multiple Primary and Secondary Engineering Controls requires careful planning. Allometrics provides comprehensive USP 797/800 certification programs with predictable six-month scheduling. Call (281) 474-3329 to discuss your cleanroom certification needs.
Documentation Required for Filter Certification
Understanding the standards is only half the equation—you also need to know what documentation proves compliance during audits.
Certification Report Components and Data Requirements
Comprehensive HEPA filter certification reports typically include specific data elements that demonstrate both testing methodology and results, such as:
- Filter identification (location code, serial number, dimensions)
- Testing date and technician credentials
- Test methodology reference
- Challenge aerosol type (DOP or PAO) and upstream concentration
- Scanning results with leak location documentation if any penetration detected
- Pass/fail determination with measured penetration percentage
- Airflow velocity measurements in cubic feet per minute
- Pressure differential readings relative to adjacent spaces
- ISO classification verification with particle count data
The report must demonstrate NIST traceability of all testing instruments used during certification. This means particle counters, photometers, micromanometers, and anemometers must have current calibration certificates traceable to national standards.
Pharmaceutical applications require significantly more detailed documentation than industrial cleanrooms. Regulators expect to see not just pass/fail results, but the actual data supporting those conclusions. This level of detail allows quality teams to identify trending issues before they become failures—declining airflow velocity, for example, signals filter loading and approaching end of service life. Research laboratories, biopharmaceutical facilities, and industrial ISO cleanrooms follow similar documentation principles, though certification frequencies and specific requirements vary by application and regulatory oversight.
Instrument Calibration Documentation and Traceability
Every testing instrument used during HEPA filter certification must have a valid calibration certificate demonstrating NIST traceability. This requirement applies to particle counters measuring ISO classification, photometers detecting aerosol penetration, micromanometers measuring pressure differentials, and anemometers verifying airflow velocity.
What NIST traceability means: The instrument’s calibration traces through an unbroken chain of comparisons back to measurement standards maintained by the National Institute of Standards and Technology. For pharmaceutical cleanrooms, this traceability is non-negotiable—it’s what makes your certification data legally defensible during FDA inspections.
Why ISO 17025 accreditation adds value: Labs holding this accreditation have demonstrated technical competence and quality management systems meeting international requirements. While not universally mandated, ISO 17025 accreditation provides additional confidence in measurement reliability during regulatory inspections.
Our A2LA ISO 17025 accredited calibration laboratory ensures all testing instruments maintain NIST traceability—eliminating questions about measurement reliability during FDA inspections.
Retention Requirements and Documentation Management
Pharmaceutical facilities typically retain HEPA filter certification documentation for a minimum of three years per general GMP guidelines, though many facilities keep records longer to demonstrate compliance continuity.
What surveyors expect to see immediately:
- Current certifications for all HEPA filters (Primary and Secondary Engineering Controls)
- Previous certification history showing unbroken six-month compliance
- Corrective action documentation for any failed certifications
- Instrument calibration certificates for equipment used during testing
The most common audit finding: Gaps in certification history. A single missed six-month certification can trigger extensive questioning about quality oversight and patient safety protocols.
Digital documentation management systems or secure online portals make retrieval faster and reduce the risk of lost paperwork. Many facilities struggle with tracking certification due dates across multiple Primary Engineering Controls and room classifications. A compounding pharmacy with three hoods, one isolator, a buffer room, and an ante room manages certification schedules for six separate controlled environments—each on its own six-month clock.
Tracking certification due dates and maintaining audit-ready documentation doesn’t have to overwhelm your quality team. Our online portal provides 24/7 access to current certifications and instrument calibration certificates. Learn more about our documentation management solutions.
Documentation Needed for Your Next Survey
Current Certifications:
- ☐ All HEPA filters in Primary Engineering Controls (hoods, isolators, CAIs, CACIs)
- ☐ All Secondary Engineering Controls (buffer rooms, ante rooms)
- ☐ All certifications within six-month validity window
Historical Records:
- ☐ Previous certification history (minimum 3 years)
- ☐ Unbroken compliance continuity (no gaps in six-month cycles)
- ☐ Corrective action documentation for any failed certifications
Instrument Documentation:
- ☐ Current calibration certificates for all testing equipment
- ☐ NIST traceability documentation
- ☐ ISO 17025 accreditation verification (if applicable)
How to Read and Interpret Certification Results
Having the right documentation is critical, but you also need to understand what those numbers actually mean for your cleanroom operations.
Understanding Pass/Fail Criteria and Penetration Percentages
Penetration percentage represents the inverse of filter efficiency—a HEPA filter rated at 99.97% efficiency allows 0.03% penetration under test conditions. For pharmaceutical cleanrooms, acceptable penetration typically must remain below 0.01% for critical compounding areas.
What gets tested:
- Filter media leaks: Penetration through the HEPA material itself
- Frame/gasket leaks: Bypass around seals and mounting hardware
- Scan leaks: Localized penetration at specific points (pleats, corners, gaskets)
When repair is acceptable vs. replacement required:
Repair works for: Small, isolated leaks in accessible locations where sealant can be properly applied and verified. Total penetration after repair must remain below 0.01%.
Replacement required for: Any single leak exceeding 0.01%, multiple leaks exceeding cumulative thresholds, inaccessible leak locations, or filter media degradation.
Reading Your Certification Report: Key Data Points
Sample Filter Certification Result:
| Data Point | Your Report Shows | What It Means |
| Penetration % | 0.008% | PASS – Below 0.01% threshold |
| Airflow Velocity | 95 FPM | PASS – Within 90 ±20% range |
| Pressure Differential | +0.03 iwc | PASS – Positive pressure maintained |
| ISO Classification | Class 5 verified | PASS – Meets USP 797 requirements |
iwc = inches water column
Red flag example: Penetration 0.015% = FAIL – Exceeds acceptable threshold
Airflow Velocity and Pressure Differential Interpretation
Airflow velocity measurements verify that your HEPA-filtered air supply provides adequate air changes per hour to maintain ISO classification. ISO Class 5 Primary Engineering Controls typically require minimum airflow velocity of 90 feet per minute (FPM) ±20%, though specific equipment may have manufacturer-specified requirements.
Insufficient airflow velocity means your cleanroom cannot achieve the required air changes to maintain particle counts within classification limits. A laminar airflow workstation reading 70 FPM when it should deliver 90-110 FPM cannot provide adequate protection, even if the HEPA filter itself passes leak testing.
Pressure differential requirements by room type:
- Sterile compounding (USP 797): Buffer rooms maintain positive pressure relative to ante rooms (typically +0.02 to +0.05 inches water column) to prevent contamination entry
- Hazardous drug areas (USP 800): Negative pressure rooms contain hazardous vapors and prevent escape into adjacent spaces
Declining airflow velocity over successive certifications signals filter loading—particulate buildup increasing resistance and reducing flow. This trending data helps predict filter replacement timing before velocity drops below minimum requirements and forces emergency replacement during production schedules.
Red Flags That Require Immediate Action
Certain certification results demand urgent response before resuming any compounding operations:
Critical failures requiring immediate suspension:
- Penetration exceeding 0.01% that cannot be successfully repaired
- Airflow velocity below minimum threshold indicating severe filter loading or fan failure
- Pressure differential failure where rooms cannot maintain required pressure relationships
- Multiple repair areas on single filter indicating overall filter degradation
- Particle counts exceeding ISO classification limits despite passing HEPA leak test
The required protocol:
- Immediately suspend compounding in affected area
- Conduct root cause investigation and document findings
- Implement corrective action (repair or replacement)
- Perform recertification before returning space to service
Contingency planning matters: What happens when your cleanroom fails certification and you cannot compound medications for oncology patients or surgical cases? This scenario requires advance planning—identifying backup compounding locations, establishing relationships with 503B outsourcing facilities, or maintaining emergency stock of commonly used preparations.
Documentation requirements: Failed certifications, investigation findings, and corrective actions become part of your permanent quality record. Surveyors specifically look for how facilities respond to failures, not just whether failures occur. A well-documented response to a failed certification often demonstrates stronger quality systems than facilities that have never documented any issues.
What to Do When Certification Fails
Step 1: IMMEDIATE ACTION
→ Suspend all compounding operations in affected area
Step 2: INVESTIGATION
→ Conduct root cause analysis
→ Document all findings
Step 3: CORRECTIVE ACTION
→ Repair (if leak ≤0.01% and accessible)
→ Replace filter (if repair not feasible)
→ Address systemic issues (pressure, airflow, installation)
Step 4: VERIFICATION
→ Perform recertification testing
→ Document passing results
Step 5: RETURN TO SERVICE
→ Resume compounding operations
→ Update certification records
Contingency Planning: Identify backup compounding locations or 503B outsourcing relationships before emergencies occur.
Keep Your Cleanroom Compliant Without the Compliance Headaches
Managing certification schedules across multiple Primary and Secondary Engineering Controls requires careful planning. Allometrics provides comprehensive cleanroom certification services with emphasis on:
- ISO 17025 accredited testing instruments ensuring NIST traceability and 50+ years expertise
- CETA and NSF 49 certified technicians
- Flexible scheduling that works around patient care operations
- Audit-ready documentation
- Online portal access to current certifications and instrument calibration certificates
Whether you’re facing an upcoming survey, managing routine six-month cycles, or dealing with a failed certification that’s disrupting operations, we understand the unique pressures pharmacy directors and quality managers face.
Schedule your cleanroom certification or request a compliance consultation: Call (281) 474-3329
HEPA Filter Certification: Your Questions Answered
HEPA filters must meet minimum 99.99% particle removal efficiency at 0.3 microns and pass in-situ leak testing using DOP or PAO aerosol challenge methodology. Testing follows IEST-RP-CC001 protocols with acceptable penetration below 0.01% for pharmaceutical applications, and all testing instruments must maintain NIST traceability to ensure measurement accuracy and regulatory compliance.
Pharmaceutical cleanrooms require six-month certification intervals for all Primary and Secondary Engineering Controls under USP 797 standards. This includes laminar airflow workbenches, biological safety cabinets, compounding isolators, buffer rooms, and ante rooms—significantly more frequent than the annual certification common in industrial facilities due to direct patient safety considerations.
HEPA filter certification verifies filter integrity, airflow velocity, and ISO classification compliance in controlled environments. Testing confirms that filters achieve minimum 99.99% particle removal efficiency, identifies any leaks in filter media or frame seals, measures airflow velocity to ensure adequate air changes, and validates pressure differentials between spaces meet specification requirements.
Resources
- https://www.iest.org/Standards-RPs/Recommended-Practices/IEST-RP-CC001
- https://sst.semiconductor-digest.com/2006/02/iest-rp-cc0014-hepa-and-ulpa-filters/
