Is an electronic signature legally valid?

Yes. In the United States electronic signatures generally have the same legal effect as handwritten signatures under the ESIGN Act and state UETA laws when the four validity elements are met: intent, consent, attribution, and reliable record retention.

When is notarization required?

Notarization is rarely required for internal GMP policies, but specific attestations, affidavits, or filings may require a notary or remote notarization depending on state rules and recipient requirements.

Who can sign the document?

Authorized signers are typically named officers, plant managers, or delegated quality leads. Record the signer’s title and signature authority in the document to avoid disputes.

How do I revise an executed document?

Create a new version with a version number and effective date, record change justification, obtain required approvals, and archive the prior version per your retention policy.

What if a field is entered incorrectly?

Document the correction through change control and reapproval rather than overwriting the signed record; keep an audit trail showing who made the change and why.

How long must signed GMP records be kept?

Retention depends on the record type and regulator. Follow applicable federal standards (for example, IRS, HIPAA, SEC) and longer state or industry requirements where applicable.

Business GMP Document

This template is fully customizable. Edit the text, fill out the fields, and send it for signature. Give it a try!

BUSINESS GMP DOCUMENT

This Business GMP Document (the "Agreement") is entered into as of Effective Date:

Party A: Company Name: Entity Type: Corporation LLC Other

Party A — Primary Business Address

Party B: Company Name: Entity Type: Manufacturer Supplier Other

Party B — Primary Business Address

WHEREAS

WHEREAS, Party A conducts manufacturing, packaging, testing, and distribution activities subject to Good Manufacturing Practice standards and requires that such activities be performed in compliance with applicable GMP requirements; and

WHEREAS, Party B has expertise, facilities, and quality systems necessary to perform manufacturing or supply services in accordance with GMP and agrees to provide goods and/or services under the terms of this Agreement; and

WHEREAS, the parties desire to set forth their respective rights, obligations, and procedures with respect to GMP compliance, quality assurance, payment, record retention, and recall cooperation.

SCOPE OF WORK

Party B shall perform manufacturing, packaging, testing, quality release, labeling, and any ancillary services described below in strict accordance with current Good Manufacturing Practices and the written specifications mutually agreed by the parties. Details of the required services, deliverables, measurable acceptance criteria, and applicable GMP standards are described in the scope below.

Detailed Scope of Work

PAYMENT TERMS

Compensation for the services rendered under this Agreement shall be as follows:

Total Estimated Compensation Payment Schedule Late Payment Fee

Party B shall provide itemized invoices in accordance with the payment schedule. Unless otherwise agreed in writing, payments not received within the agreed due period shall accrue the specified late fee and Party B may suspend further work after providing written notice and an opportunity to cure for not less than 10 days.

TERM AND TERMINATION

This Agreement commences on Start Date: and, unless earlier terminated, continues until End Date: .

Termination Notice Period

Either party may terminate this Agreement for material breach by the other party if such breach is not cured within the notice period set forth above following written notice. Termination for cause shall be without prejudice to remedies the non-breaching party may have under law or equity. Upon termination, Party B shall deliver all completed work and any work in progress and shall cooperate in an orderly transition of materials and records.

GMP COMPLIANCE, QUALITY, AND AUDITS

Party B represents and warrants that all manufacturing, testing, labeling, storage, and distribution performed under this Agreement will be carried out in accordance with applicable Good Manufacturing Practices, written specifications, and any agreed quality agreements. Party B shall maintain a quality system, documented procedures, and trained personnel necessary to meet these obligations.

Party A or its authorized representative shall have the right, upon reasonable notice and during normal business hours, to audit Party B's facilities, systems, records, and batch documentation to verify GMP compliance. Party B shall provide access and copies of relevant records and shall implement corrective actions within a commercially reasonable timeframe not to exceed days from notice of nonconformance.

In the event of a product recall or field action attributable to Party B's failure to comply with GMP or specifications, Party B shall cooperate fully with Party A, including providing all records, participating in root cause analysis, and bearing costs reasonably attributable to the recall to the extent caused by Party B's acts or omissions.

CONFIDENTIALITY

"Confidential Information" means any non-public technical, commercial, financial, or business information disclosed by one party to the other in connection with this Agreement. Each receiving party shall hold Confidential Information in strict confidence, use it solely to perform its obligations under this Agreement, and not disclose it to any third party except to employees, contractors, or advisors who have a need to know and are bound by confidentiality obligations no less protective than those herein.

Confidentiality Duration (years)

Confidentiality obligations shall survive termination of this Agreement for the duration specified above, except for information that: (a) is or becomes publicly known through no wrongful act of the receiving party; (b) is rightfully received from a third party without restriction; or (c) is independently developed by the receiving party without use of the disclosing party's Confidential Information.

INSURANCE, LIABILITY, AND INDEMNITY

Party B shall maintain insurance coverage appropriate to the scope of activities, including commercial general liability, product liability, and professional liability coverage. Minimum coverage limits shall be:

Each party agrees to indemnify and hold harmless the other party from third-party claims arising out of its negligent acts, willful misconduct, or material breach of this Agreement, subject to applicable law and any limitations agreed in writing.

RECORDS, RETENTION AND TRACEABILITY

Party B shall maintain complete and accurate records of manufacturing, testing, batch disposition, and quality activities. Such records shall be retained for a period of years or such longer period as required by applicable law or as agreed in writing. Records shall be made available to Party A and applicable regulatory authorities upon request.

GOVERNING LAW

This Agreement shall be governed by and construed in accordance with the laws of the State of without regard to its conflict of law principles. The parties consent to the exclusive jurisdiction and venue of the state and federal courts located in the chosen jurisdiction for any dispute arising out of or relating to this Agreement.

ENTIRE AGREEMENT

This Agreement, together with any incorporated quality agreements, purchase orders, schedules, and written amendments executed by authorized representatives of the parties, constitutes the entire agreement between the parties with respect to the subject matter hereof and supersedes all prior and contemporaneous agreements, proposals, and communications, whether written or oral.

NOTICES

All notices required or permitted under this Agreement shall be in writing and shall be delivered to the addresses set forth below or to such other address as a party may designate by written notice.

Notice Address — Party A Notice Address — Party B

MISCELLANEOUS

No amendment or waiver of any provision of this Agreement shall be effective unless in writing and signed by authorized representatives of both parties. If any provision of this Agreement is held invalid or unenforceable, the remainder of the Agreement shall remain in full force and effect.

Party A — Printed Name:

By:

Date:

Party B — Printed Name:

By:

Date:

What the Business GMP Document Is and why it exists

A Business GMP Document records an organization's Good Manufacturing Practice procedures, controls, and responsibilities for producing safe, compliant products. It centralizes policies, standard operating procedures (SOPs), training records, and quality checks so teams can demonstrate consistent production practices, support audits, and show regulatory due diligence across manufacturing, packaging, and distribution activities.

Why a clear Business GMP Document matters

A documented GMP program reduces product and compliance risk, standardizes operations, and preserves evidence for inspections and customer audits. It helps limit recalls, supports corrective action, and improves operational clarity across production, quality, and supply chain teams.

Who typically prepares and signs this document

Typical users include quality, operations, and compliance staff responsible for manufacturing controls and documentation.

Quality manager or director responsible for SOP accuracy and audit-ready records.
Compliance officer or regulatory affairs lead who validates procedures and risk controls.
Operations or plant manager accountable for implementation and signing off on practices.

Other participants include training coordinators, supply chain leads, and external auditors who review or verify the document.

Core elements to include in a professional Business GMP Document

A complete Business GMP Document organizes policy, procedures, roles, records, training, and change control so reviewers can quickly verify compliance and trace decisions.

Scope

Define products, processes, facilities, and excluded activities so readers understand what the GMP program covers and which sites or product lines are in scope for controls and audits.

Standard Procedures

Attach or reference SOPs for production, cleaning, calibration, sampling, and deviation management so staff have stepwise procedures and expected outcomes for critical tasks.

Roles & Responsibilities

List role-based duties, escalation paths, and signatory authority to show who approves changes, who conducts inspections, and who is accountable for corrective actions.

Recordkeeping

Specify the record types, formats, retention periods, and storage locations for batch logs, certificates, and inspection evidence to ensure reproducible audit trails.

Training & Competency

Describe training requirements, assessment frequency, and competency documentation for personnel performing GMP-critical operations and decision points.

Change Control

Outline change request procedures, impact assessments, approval gates, and how updates are versioned to prevent undocumented process drift.

Essential compliance and security controls to document

Data encryption: AES-256 at rest

In-transit protection: TLS 1.2/1.3

Access controls: Role-based access

Audit trail: Immutable event log

HIPAA readiness: BAA available

21 CFR Part 11: Support for auditability

Step-by-step: completing a Business GMP Document

Follow a short, consistent sequence to collect information, verify accuracy, and obtain required approvals before finalizing the record.

01

Gather inputs: Collect SOPs, batch records, and personnel lists.
02

Draft sections: Write Scope, Procedures, Roles, and Records sections.
03

Internal review: Quality and operations review for technical accuracy.
04

Sign and archive: Obtain authorized signatures and store final version.

How to configure an online workflow for this document

Configure a repeatable digital workflow to route the document for review, approval, signature, and secure archival.

Field	Configuration
Signing Order	Sequential approvals by role
Authentication	Email or SMS code per signer
Storage Format	PDF/A with audit trail
Integrations	NetSuite, Box, Google Workspace

Where to file, send, and submit the completed document

Decide distribution and archival destinations before final approval so retention and accessibility are controlled.

Internal Archive: Company document management system.
Regulatory Submission: Provide on request during inspections.
Customer Supply Chain: Share redacted copies as needed.
External Audit: Provide certified copies or controlled access.

Technical formats and integrations for e-submission

Use interoperable file formats and supported integrations to ensure signed documents remain verifiable and retrievable.

File formats: PDF, DOCX, PDF/A
Integrations: Salesforce, NetSuite, Box
Authentication: Email, SMS, SSO

Select tools that preserve audit trails, support export in standard formats, and integrate with your DMS to automate retention and access controls.

Typical timelines and review expectations

Establish and track milestone dates for approval, audits, and retraining so compliance tasks remain on schedule.

Initial completion:

Complete initial draft within 30 days.

Internal review:

Quality review within 14 days of draft.

Management approval:

Sign-off within 7 days after review.

Annual review:

Review and update at least once per year.

Training refresh:

Retrain impacted staff within 90 days of changes.

Common mistakes to avoid when preparing this document

Using informal or ambiguous language for procedures that leads to inconsistent execution and audit observations.
Failing to record version history or approver names, which creates uncertainty during inspections and nonconformance investigations.
Omitting training records or competence evidence for staff performing GMP-critical tasks, increasing regulatory and product risk.
Relying on unsynchronized copies across sites instead of a single controlled master document, causing conflicting instructions.

Potential consequences of incomplete or incorrect documentation

Regulatory action: Warning letters

Product recall: Removal costs

Civil penalties: Fines possible

Criminal liability: Rare but possible

Contract breach: Customer claims

Audit findings: Corrective plans required

Typical eSignature vendor pricing and capability snapshot

Comparison shows common starting prices and basic capabilities; choose a plan that meets authentication and retention requirements for GMP records.

	signNow	DocuSign	Adobe Sign	PandaDoc	HelloSign
Starting Price	$8/user/mo	$15/user/mo	$14/user/mo	$19/user/mo	$15/user/mo
Free Trial	7-day free trial	Varies by vendor	Varies by vendor	Varies by vendor	Varies by vendor
Bulk Send	Yes (Business Premium)	Yes	Yes	Yes	No
Audit Trail	Yes	Yes	Yes	Yes	Yes
HIPAA Compliant	Yes	Yes	Yes	No	No

Frequently asked questions about Business GMP Documents

Answers address legal enforceability, eSignature use, notarization, revisions, signatory authority, and record retention for typical compliance scenarios.

Need help? Contact support

Is an electronic signature legally valid?
Yes. In the United States electronic signatures generally have the same legal effect as handwritten signatures under the ESIGN Act and state UETA laws when the four validity elements are met: intent, consent, attribution, and reliable record retention.
When is notarization required?
Notarization is rarely required for internal GMP policies, but specific attestations, affidavits, or filings may require a notary or remote notarization depending on state rules and recipient requirements.
Who can sign the document?
Authorized signers are typically named officers, plant managers, or delegated quality leads. Record the signer’s title and signature authority in the document to avoid disputes.
How do I revise an executed document?
Create a new version with a version number and effective date, record change justification, obtain required approvals, and archive the prior version per your retention policy.
What if a field is entered incorrectly?
Document the correction through change control and reapproval rather than overwriting the signed record; keep an audit trail showing who made the change and why.
How long must signed GMP records be kept?
Retention depends on the record type and regulator. Follow applicable federal standards (for example, IRS, HIPAA, SEC) and longer state or industry requirements where applicable.

be ready to get more

Join over 28 million airSlate SignNow users

Sign Now