What is GMP certification in Dehradun?
- Governing ruleSchedule M, D&C Rules 1945
- Enforced byState authority and CDSCO
- ApplicationsONDLS portal
- WHO-GMP validityTypically 3 years
GMP certification is a phrase that covers two different things for a manufacturer in Dehradun, and separating them is the first useful step. The first is compliance with Schedule M to the Drugs and Cosmetics Rules, 1945, which is a condition of the drug manufacturing licence and applies whether or not any certificate is ever issued. The second is the WHO-GMP certificate and the product-wise Certificate of Pharmaceutical Product, which are documents applied for and issued after inspection, and which overseas buyers and importing regulators actually ask to see. This page covers both, plus the parallel GMP regimes for Ayush products, food, cosmetics and medical devices.
The reason GMP is a live issue rather than a settled one is the revised Schedule M notified on 28 December 2023. It moves Indian requirements substantially closer to WHO-GMP and EU-GMP expectations, introducing a formal Pharmaceutical Quality System, Quality Risk Management, an annual Product Quality Review, qualification and validation discipline extending to computerised systems, and data integrity requirements aligned to ALCOA+ principles. Manufacturers above ₹250 crore turnover were given the shorter transition. Micro, small and medium manufacturers up to that turnover were given twelve months, and those who applied in the prescribed form received an extension to 31 December 2025.
That extension has expired, and no further general extension followed. The Central Drugs Standard Control Organisation has directed state drug control authorities, Uttarakhand included, to inspect manufacturing units against the revised requirements, and units that never applied for the extension are inspected without any grace period at all. For a manufacturer in Dehradun that has been treating the revision as a future project, the position in 2026 is that the inspection is the deadline. Explore all licenses and registrations.
Revised Schedule M A licence condition, not a certificate to buy
No advisory firm can certify a facility. The licensing authority inspects and decides. What preparation buys you is a facility and a file that survive that inspection.
- Schedule M compliance is required with or without a certificate
- WHO-GMP and COPP are separate, for export
- The MSME extension expired on 31 December 2025
Legal framework
Parent statute: Drugs and Cosmetics Act, 1940 | GMP for drugs: Schedule M to the Drugs and Cosmetics Rules, 1945, revised by notification dated 28 December 2023 | Ayush: Schedule T | Medical devices: Fifth Schedule, Medical Devices Rules, 2017 | Food: Schedule 4, FSS (Licensing and Registration) Regulations, 2011 | Cosmetics: Cosmetics Rules, 2020 | Applications: ONDLS portal | Inspecting authority: Uttarakhand licensing authority with CDSCO
What the revised Schedule M added
The old Schedule M was largely about premises and equipment. The revised one, which Uttarakhand inspectors now apply, is about whether you can prove the system worked.
| Requirement | What it means in practice | Where units commonly fall short |
|---|---|---|
| Pharmaceutical Quality System | A formal system covering responsibilities, procedures, change control, deviations, CAPA, self-inspection and management review | Procedures exist on paper but the system is not demonstrably operating |
| Quality Risk Management | Documented assessment, control, communication and review of quality risks | Decisions taken without a recorded risk rationale |
| Product Quality Review | Periodic review per product of batch data, deviations, changes, stability, complaints and recalls | Never performed, or performed without conclusions |
| Qualification and validation | Premises, utilities, equipment, processes and analytical methods | Records that do not match the equipment installed |
| Computerised system validation | Validation, audit trails and user access management | Shared logins and audit trails never reviewed |
| Data integrity, ALCOA+ | Records attributable, legible, contemporaneous, original and accurate | Records completed after the event or reconstructed |
| Change control | Assessment and approval before the change is made | Change control raised after implementation |
| Self-inspection | Planned internal audit with findings tracked to closure | Performed as a formality with no findings recorded |
The pattern in that right-hand column is worth naming. Very few units in Dehradun fail a revised Schedule M inspection because the standard is unattainable. They fail because the system is real but undocumented, or documented but not demonstrably operating. An inspector cannot credit what cannot be evidenced, and the revision has narrowed the space in which a well-run but lightly documented facility could previously get by.
The second pattern is data integrity. A quality control laboratory with a shared analyst login, an instrument whose audit trail has never been reviewed, and a chromatography system where results can be reprocessed without trace is a finding under the revised requirements, regardless of whether the underlying results are sound. This is the single most common area of genuine, expensive gap for units that were entirely comfortable under the previous Schedule M.
The extension has expired
The compliance window for micro, small and medium manufacturers with turnover up to ₹250 crore, extended to 31 December 2025 for those who applied in the prescribed form, has closed and no further general extension followed. CDSCO has directed state authorities, Uttarakhand among them, to inspect. Units that never applied for the extension have no grace period at all.
GMP is not one thing
Five different regimes use the same three letters. Which one applies to your Dehradun unit is decided by what you make, and the answer changes the standard, the authority and the certificate.
| Product | Standard | Authority | Export certificate |
|---|---|---|---|
| Drugs and pharmaceuticals | Schedule M, D&C Rules 1945 | Uttarakhand Licensing Authority with CDSCO | WHO-GMP certificate and COPP |
| Ayurvedic, Siddha and Unani medicines | Schedule T, D&C Rules 1945 | State licensing authority for Ayush | Ayush GMP and COPP where applicable |
| Medical devices | Fifth Schedule, Medical Devices Rules, 2017 | CDSCO and state authorities | ISO 13485 commonly required by buyers |
| Food and nutraceuticals | Schedule 4, FSS Licensing Regulations, 2011 | FSSAI | Buyer-driven; HACCP and ISO 22000 common |
| Cosmetics | Cosmetics Rules, 2020 | State licensing authority | ISO 22716 commonly required by buyers |
| Veterinary products | Schedule M applied to the category | State Licensing Authority | WHO-GMP route where applicable |
Getting this wrong is more common than it sounds, because a single group in Dehradun can hold licences across categories. A company making an allopathic tablet, an Ayurvedic syrup and a nutraceutical powder is subject to Schedule M, Schedule T and Schedule 4 to the FSS Licensing Regulations, 2011 respectively, in three separate licence tracks with three different inspecting authorities. Explore Ayush licensing, nutraceutical licensing and FSSAI licensing.
A private GMP certificate is not a WHO-GMP certificate
Third-party bodies issue voluntary GMP certificates against WHO GMP or similar criteria, and they carry some commercial weight with buyers. They are not issued by a licensing authority, they do not discharge the Schedule M obligation, and where an importing regulator asks for WHO-GMP they will not close the requirement. Check what the buyer actually needs before commissioning either.
Documents a GMP file needs
The inspection of a unit in Dehradun is a documentation exercise punctuated by a facility walk. This is what has to exist, be current and be retrievable.
| Category | Document | Purpose |
|---|---|---|
| Licence | Drug manufacturing licence with product schedule | Establishes what may lawfully be made at the site |
| Site plan and approved layout | Compared against the facility on the walk | |
| Site description | Site Master File | The first document an inspector reads |
| Quality system | Quality manual and procedures | Evidences the Pharmaceutical Quality System |
| Change control, deviation and CAPA records | Shows the system operating, not just existing | |
| Self-inspection reports with closure evidence | Internal audit discipline | |
| Management review records | Ties quality data to management decisions | |
| Qualification | Premises, utility and equipment qualification | Must match the equipment actually installed |
| HVAC and water system schematics and monitoring | Environmental and utility control evidence | |
| Validation | Process validation reports | Demonstrates the process is reproducible |
| Analytical method validation | Demonstrates the test methods are fit for purpose | |
| Computerised system validation and audit trail review | Data integrity evidence | |
| Product | Batch manufacturing and packaging records | Contemporaneous evidence of each batch |
| Stability data and Product Quality Review | Ongoing evidence of continued fitness | |
| Product summary sheets and labels | Required for the WHO-GMP and COPP applications |
Pro tip: retrievability is part of the evidence
A record that exists but takes two days to locate reads to an inspector like a record that does not exist. Before the inspection, pick ten documents at random across quality, production and the laboratory and time how long it takes to produce them. If any takes more than a few minutes, the filing system is a finding waiting to be written.
How to reach GMP compliance in Dehradun
Ten steps. Eight to sixteen weeks where the gaps are documentary, six to twelve months where the building has to change.
Establish the applicable GMP regime
Identify whether the facility sits under Schedule M, Schedule T for Ayush, the Fifth Schedule to the Medical Devices Rules, 2017, Schedule 4 to the FSS Licensing Regulations, or the Cosmetics Rules, 2020. A group with multiple licences may sit under more than one.
Run the gap assessment
Assess premises, utilities, equipment, the quality system and the records against the revised requirements, and separate documentation gaps from engineering gaps because they carry entirely different timelines and costs.
Build the Pharmaceutical Quality System
Define responsibilities and implement change control, deviation, CAPA, self-inspection and management review, with the link from product quality data back into improvement. This is the part that cannot be created the week before an inspection.
Prepare the Site Master File
Document the site as it actually is: layout, products, personnel, premises, utilities, equipment, quality system, production, quality control, contract activities, distribution, complaints, recalls and self-inspection.
Complete qualification and validation
Qualify premises, utilities and equipment; validate processes, analytical methods and computerised systems including audit trails and user access. Reconcile every record against the equipment on the floor.
Establish data integrity controls
Apply ALCOA+ across paper and electronic records: unique user access, contemporaneous entry, audit trail review, controlled issue of blank forms and retention that keeps records retrievable.
Run the Product Quality Review
Complete the periodic review per product across batch data, out-of-specification and out-of-trend events, deviations, changes, stability, returns, complaints and recalls, ending in a stated conclusion.
Assemble the WHO-GMP application
Compile the manufacturing licence, Site Master File, product summary sheets, stability data, process validation reports, HVAC and water schematics, previous inspection reports, labels and artwork for the products applied for.
File on the ONDLS portal
Submit the WHO-GMP certificate and COPP applications electronically on the Online National Drugs Licensing System, which has been the only accepted route since 15 July 2025.
Mock inspect, then host the joint inspection
Run a mock inspection with fresh eyes, then host the joint inspection by the Uttarakhand Licensing Authority and CDSCO, and answer every observation with a dated corrective and preventive action plan supported by evidence.
Common mistake
Writing the Site Master File to describe the facility you intend to have rather than the one you have. Inspectors walk the site against that document, and every difference between the two becomes an observation, plus a credibility problem that colours the rest of the inspection. Describe what exists, and list the upgrades separately as a dated plan.
Get your Dehradun facility assessed against the revised Schedule M
A professional fee from ₹24,999 for the gap assessment, quality system documentation, Site Master File and application filing. Government fees, testing and upgrades at actuals.
The two export certificates
One describes the facility. The other describes a product. Exporters in Dehradun generally need both, and buyers frequently ask for the wrong one.
| Parameter | WHO-GMP certificate | Certificate of Pharmaceutical Product (COPP) |
|---|---|---|
| What it covers | The manufacturing facility, for stated products | A specific product and its regulatory status |
| Issued by | Uttarakhand Licensing Authority, with CDSCO in the inspection | Uttarakhand Licensing Authority or CDSCO by licensing route |
| Based on | A GMP inspection of the facility | The facility position plus the product licence position |
| Typical validity | Three years | Two years |
| Format | Authority format confirming GMP compliance | WHO certification scheme format |
| Product-specific | No | Yes |
| Filed on ONDLS | Yes | Yes |
| Who asks for it | Buyers and importing regulators generally | The importing country regulator, product by product |
Both are filed on the Online National Drugs Licensing System portal, which has been the only accepted route since 15 July 2025, with physical submissions no longer taken. The application package for a WHO-GMP certificate is substantial: the manufacturing licence, the Site Master File, product summary sheets, stability data, process validation reports, HVAC and water system schematics, the previous inspection report where one exists, and the actual product labels. A joint inspection by the Uttarakhand authority and CDSCO then follows before the certificate issues.
The scope point matters commercially. The certificate covers the products stated in the application, so adding a product later is a fresh application for the added scope rather than an automatic extension. Exporters in Dehradun entering a new market are better served by working backwards from what that market's regulator requires than by obtaining a broad certificate and hoping it covers the position.
What inspectors actually write up
The same small set of findings accounts for most observations at units in Dehradun. None of them require new equipment to fix.
| Finding | Why it is raised | How it is closed |
|---|---|---|
| Batch records completed after the event | Contemporaneous recording is an ALCOA+ requirement | Retrain, restructure the record, supervise at the point of entry |
| Shared laboratory logins | Records must be attributable to an individual | Unique user accounts with role-based access |
| Audit trails never reviewed | Review is part of the control, not an option | Scheduled audit trail review with recorded outcomes |
| Qualification records not matching installed equipment | The file describes a different facility | Requalify and reconcile the asset register |
| Change control raised after implementation | Assessment must precede the change | Rework the procedure and evidence prospective approval |
| Product Quality Review missing or inconclusive | The revision makes it an express requirement | Complete the review with stated conclusions |
| Self-inspection with no findings ever recorded | Reads as a formality rather than an audit | Run a real internal audit and track findings to closure |
| Site Master File out of date | Inspectors walk the site against it | Rewrite to the current facility and control revisions |
Read down that list and the theme is visible: almost every item is a discipline problem rather than a capability problem. That is good news for cost, because closing them is a matter of procedure, training and supervision rather than capital expenditure. It is bad news for timing, because behaviour takes longer to change than a document does, and an inspector can tell the difference between a procedure issued last week and a practice that has been running for six months.
GMP vs ISO 9001 vs a private certificate
Three things that get quoted against each other in buyer conversations with manufacturers in Dehradun, doing three different jobs.
| Parameter | GMP under Schedule M | ISO 9001 | Private GMP certificate |
|---|---|---|---|
| Nature | Regulatory requirement | Voluntary management system standard | Voluntary third-party certification |
| Who assesses | Uttarakhand Licensing Authority with CDSCO | Accredited certification body | The issuing body |
| Legal effect | Condition of the manufacturing licence | None | None |
| Satisfies Schedule M | Yes | No | No |
| Accepted by importing regulators | Through the WHO-GMP certificate and COPP | No | Varies by buyer, rarely by regulator |
| Scope | The licensed facility and products | The organisation | As stated by the issuing body |
| Typical validity | WHO-GMP typically three years | Three years with surveillance audits | As stated by the issuing body |
| Consequence of losing it | Licence action and stop-manufacturing risk | Certificate withdrawn | Certificate withdrawn |
Explore: ISO certification, drug and cosmetic licence or CE certification for products entering the European Union.
Frequently asked questions about GMP certification in Dehradun
38 questions sourced from real search queries, the revised Schedule M, CDSCO guidance and our experience having assisted 500+ manufacturing compliance files, including for units in Dehradun.
Book your revised Schedule M gap assessment in Dehradun
Talk to an IncorpX regulatory compliance expert for a free consultation on where your facility stands, what is documentary and what is structural. From ₹24,999, upgrades at actuals.
Nebin Binoy 
