CMC-only complete response letters: how commercial teams should read the risk

A Complete Response Letter (CRL) is FDA's formal notification that an NDA or BLA cannot be approved in its current form. When the sole deficiency is chemistry, manufacturing, and controls (CMC), the clinical program is complete, the efficacy data are sufficient, and the holdup is entirely on the manufacturing and quality side. For commercial teams, this is simultaneously the best and worst scenario: the drug works, but the supply chain and quality system are not ready for market.

On July 10, 2025, FDA published 202 CRLs issued between 2020 and 2024 as part of its "radical transparency" initiative under Executive Order 14303. On September 4, 2025, FDA released another 89 CRLs tied to pending applications. Going forward, FDA will release CRLs promptly after issuance. Analysis of these published letters confirms that CMC deficiencies remain a leading cause of approval delay — and for biotech sponsors approaching first commercial launch, a CMC-only CRL can mean 12 to 24 months of additional development time and tens of millions in remediation costs.

This article is for commercial operations leads, launch planners, market access teams, regulatory affairs professionals, and biotech executives who need to understand what a CMC-only CRL means for launch timing, revenue, and organizational response.

What the CRL data show about CMC deficiency patterns

Overall deficiency distribution

Analysis of 89 CRLs issued between January 2024 and January 2025 by The FDA Group found three dominant deficiency categories:

These categories are not mutually exclusive. Many CRLs cite deficiencies across multiple categories, but a significant subset cite CMC deficiencies as the sole barrier.

Analysis of 291 published CRLs by Syner-G Biopharma found that of 43 CMC-related CRLs from the July 2025 release, 25 cited facility inspection deficiencies, 8 cited microbiology testing gaps, and the remainder cited process validation, analytical method validation, and stability data issues.

Top CMC deficiency categories

Compliance Insight's analysis of CRL drivers from 2020 to 2024 ranked CMC and manufacturing deficiencies at approximately 44% of all CRLs. The specific deficiency patterns include:

1. Process validation failures. Inadequate process performance qualification, missing batch data, or failure to demonstrate commercial-scale process reproducibility.
2. Analytical method validation gaps. Methods not validated per ICH Q2 requirements, incomplete specificity or accuracy data, or methods that cannot distinguish product-related impurities.
3. Facility inspection deficiencies. GMP violations observed during pre-approval inspection (PAI), including data integrity failures, inadequate environmental monitoring, or insufficient cleaning validation.
4. Stability data insufficiency. Missing long-term stability data at the proposed commercial storage condition, inadequate photostability studies, or stability data that do not support the proposed shelf life.
5. Microbiology and sterility assurance. Insufficient bioburden and endotoxin testing, growth promotion test failures, or absent low endotoxin recovery (LER) studies.
6. Container closure system inadequacy. Incomplete extractables and leachables data, container closure integrity testing gaps, or incompatible materials of construction.
7. CMC data integrity. Inconsistent data between Module 3 and the manufacturing site records, missing audit trails, or Part 11 electronic record non-compliance.

Cell and gene therapy CMC scrutiny

The CMC burden is disproportionately heavy for cell and gene therapies (CGT). Analysis of publicly released CRLs from 2020 to 2024 found that 74% cited manufacturing or quality deficiencies. Even at the IND stage, an estimated 40% of CGT submissions are delayed for CMC-related issues.

Recent high-profile examples include:

• Ultragenyx UX111 (AAV gene therapy for Sanfilippo Syndrome Type A): FDA issued a CRL on July 11, 2025 citing CMC observations. The company stated that the CMC observations were "readily addressable" but acknowledged the CRL would delay potential approval to 2026.
• Replimune RP1 (oncolytic immunotherapy for melanoma): FDA issued a CRL on July 21, 2025, citing the IGNYTE trial's heterogeneity, lack of a well-controlled design, and inability to isolate RP1's contribution when combined with nivolumab. The deficiency was clinical and statistical, not CMC-driven.
• Capricor CAP-1002 / Deramiocel (cell therapy for Duchenne muscular dystrophy cardiomyopathy): CRL issued July 11, 2025, stating the statutory requirement for substantial evidence of effectiveness was not met. While the FDA also noted outstanding CMC items that were not fully reviewed due to the clinical deficiency, the primary barrier was clinical. Capricor subsequently submitted Phase 3 HOPE-3 data and received a new PDUFA date of August 22, 2026.

On January 11, 2026, FDA announced flexible CMC requirements for CGT products, including allowance for concurrent release of PPQ lots and no requirement to supply three PPQ lots for process validation. This flexibility reflects the agency's recognition that standard CMC expectations may need adaptation for CGT products, but it also means sponsors must be prepared to justify their validation strategy with strong process understanding.

How to read a CMC-only CRL

Named-product examples from published CRLs

FDA's transparency initiative now makes specific CRL text publicly available. Several notable CMC-driven CRLs illustrate the deficiency patterns:

• Eli Lilly Ebglyss (lebrikizumab): FDA cited findings from a multi-sponsor inspection of a third-party contract manufacturing organization that produced the monoclonal antibody drug substance for lebrikizumab. The CRL was CMC-only — no concerns were raised about the clinical data package, safety, or labeling. The drug was subsequently approved in September 2024 after the CDMO inspection issues were resolved.
• Gilead Sunlenca (lenacapavir): FDA identified incompatibility between the drug product solution and borosilicate glass vials, resulting in sub-visible glass particles. The CRL required Gilead to switch to an alternative container (aluminosilicate glass) — a container closure system change classified as Tier 2–3 in severity. The drug was resubmitted in June 2022 and approved in December 2022, resolving the deficiency within approximately 10 months.
• Ultragenyx UX111 (ABO-102): FDA conducted a pre-license inspection of the gene therapy manufacturing facility, issued a Form FDA 483, and determined that corrective actions were not comprehensive enough to address systemic inspection findings. Three separate PLI deficiencies were cited.
• Replimune RP1: The CRL dated July 21, 2025, focused entirely on clinical trial design — the IGNYTE study was not an adequate and well-controlled investigation and could not isolate the contribution of RP1 to observed response rates. No CMC deficiency was cited. A second CRL was issued on April 10, 2026, after resubmission, citing the same clinical deficiencies.

Several companies received multiple CRLs during the 2020–2024 period, including Alvotech, Celltrion, Eli Lilly, Pfizer, and Teva Pharmaceuticals — signaling systemic rather than product-specific CMC failures at those organizations.

Step 1: Classify the deficiency by remediation complexity

Not all CMC deficiencies are equal. Commercial teams should work with regulatory affairs and CMC leads to classify each deficiency into one of four tiers:

One case described by The FDA Group illustrates the escalation risk: a sponsor received a CRL citing "inadequate analytical method validation" that appeared straightforward. Investigation revealed that seven analytical methods required complete revalidation, invalidating 18 months of stability data, resulting in several million dollars in additional remediation costs and a two-year delay to approval.

Step 2: Assess the re-inspection risk

Under 21 CFR § 601.20, a BLA cannot be approved until a pre-approval inspection has been satisfactorily completed. If the CRL cites facility-related deficiencies, the sponsor must remediate and then undergo another PAI. In 2025, FDA increased for-cause inspections by nearly 250%, meaning manufacturing sites with prior 483 observations or Warning Letters face higher re-inspection scrutiny.

Commercial teams should ask:

• Does the CRL cite the same facility that received a prior 483 or Warning Letter?
• Is the facility in a country where FDA inspection scheduling is backlogged?
• Has the CDMO recently changed ownership or lost key personnel?
• Are there unresolved import alerts on the facility?

If any of these conditions apply, the remediation timeline should be extended by at least one additional inspection cycle (typically 3–6 months after remediation completion).

Step 3: Calculate revenue at risk

A CMC-only CRL delays revenue but does not eliminate it — assuming the deficiency is remediable. Commercial teams should model:

1. Time to resubmission: How many months to complete remediation, compile the supplement, and file?
2. FDA review clock for resubmission: Under 21 CFR 314.110, resubmissions are classified as Class 1 or Class 2. Class 1 resubmissions address minor deficiencies (documentation gaps, labeling corrections) and receive a 2-month review with a 90% PDUFA goal. Class 2 resubmissions address major deficiencies (process validation, analytical revalidation, facility remediation) and receive a 6-month review. For CMC-only CRLs, most resubmissions will be Class 2. Roughly 41% of all NDAs and BLAs receive a CRL at first filing; more than half ultimately gain approval after resubmission.
3. Launch window erosion: Does the delay push launch into a different plan year, affecting formulary positioning and payer negotiations?
4. Competitive landscape shift: Will a competitor launch during the delay? Is there a biosimilar entry or generic approval that changes the market?
5. Exclusivity clock impact: For products with regulatory exclusivity, does the delay reduce the effective exclusivity period?
6. Patent life erosion: Does the delay push approval closer to patent expiry, reducing the commercial return?

Step 4: Evaluate the CDMO relationship

For sponsors relying on a CDMO, a CMC-only CRL is a critical inflection point in that relationship. The commercial team should evaluate:

• Root cause ownership: Did the deficiency originate from CDMO execution failure, sponsor oversight failure, or joint miscommunication?
• Remediation capacity: Does the CDMO have the technical capability and bandwidth to execute the required remediation on the required timeline?
• Quality agreement alignment: Does the quality agreement specify responsibilities for CRL remediation, including timelines, cost allocation, and communication requirements?
• Alternative site evaluation: Should the sponsor begin qualifying a second manufacturing site as a backup or replacement?

Organizational response: what commercial teams should do in the first 30 days

Week 1: Rapid assessment

• Convene a cross-functional CRL response team: regulatory affairs, CMC, quality, commercial operations, legal, and finance.
• Obtain the full text of the CRL and classify every deficiency by tier (documentation, analytical, process, fundamental).
• Identify which deficiencies are CMC-only versus any clinical or safety overlays.
• Assess whether any deficiencies could trigger a broader FDA enforcement action (Warning Letter, import alert).

Weeks 2–3: Remediation planning

• Develop a remediation plan with specific deliverables, owners, and timelines for each deficiency.
• If CDMO-dependent, assess CDMO willingness and capacity to execute remediation.
• Determine whether a Type A meeting with FDA is warranted to align on remediation approach before resubmission.
• Update the launch timeline model with revised assumptions and communicate to leadership.

Week 4: Stakeholder communication

• Brief the board and investors with a clear remediation timeline and updated revenue projections.
• Prepare KOL and HCP communication if the product has an established development-stage community.
• For products with a compassionate use or expanded access program, determine whether the CRL affects continued supply.
• Review any outstanding supply agreements, purchase commitments, or CDMO contract terms affected by the delay.

The transparency shift: CRLs are now public

FDA's decision to publish all CRLs through the openFDA API changes the risk calculus. Previously, a CMC-only CRL was a private matter between FDA and the sponsor. Now, competitors, investors, payers, and media can read the full deficiency letter — with proprietary manufacturing details redacted but company names visible.

For commercial teams, this means:

• Investor relations must be prepared for public scrutiny of CMC deficiencies, especially for publicly traded biotech companies where a CRL can trigger significant stock movement.
• Competitive intelligence teams can now study competitor CRLs for insights into FDA expectations in a specific therapeutic area or modality.
• Payer engagement may need to address questions about manufacturing readiness if the CRL becomes publicly known during formulary negotiations.
• CDMO due diligence can incorporate CRL history as a risk factor when evaluating contract manufacturing partners.

"Guidance is not approval": the early-engagement trap

A common pattern in CMC-only CRLs is that the sponsor believed prior FDA engagement had cleared the manufacturing approach. Pre-IND meetings, mid-cycle Type B meetings, and Type C meetings all provide opportunities to discuss CMC strategy with FDA reviewers. But FDA meeting feedback is non-binding. Reviewers at the meeting stage are evaluating preliminary data and may not have seen the full commercial-scale manufacturing data that will be assessed at filing.

Late-stage CMC rejections — even after seemingly productive pre-submission meetings — underscore that meeting feedback is not a guarantee of approval. Sponsors should treat pre-submission FDA engagement as directional guidance, not as tacit approval of their CMC approach, and should build internal CMC review gates that are independent of FDA meeting feedback.

When the CRL language is coded

Not every CMC CRL states the deficiency in plain manufacturing terms. FDA may cite "inadequate evidence of effectiveness" or "trials not adequately interpretable" when the root cause is analytical: assay variability that compromises endpoint measurement, batch inconsistencies that make trial results difficult to interpret, or potency methods that do not reliably distinguish between product lots. Commercial teams reading the CRL for the first time should ask whether a deficiency framed as clinical is actually driven by CMC and analytical limitations. If the CRL cites data quality concerns alongside efficacy questions, the remediation plan may need to address analytical methods before any new clinical work is considered.

What to monitor next

• FDA's openFDA CRL database for ongoing publication of new CRLs, which will provide real-time transparency into approval barriers.
• FDA's January 2026 flexible CMC guidance for CGT products and how reviewers apply it in practice.
• Pre-approval inspection trends: FDA's increased use of for-cause inspections and remote record reviews under Section 704(a)(4).
• ICH Q12 implementation and its potential to streamline post-approval CMC changes that might otherwise trigger new CRL risk.
• Biosimilar CRL patterns: 3 of the regulatory-issue CRLs in the July 2025 release were for biosimilar applications affected by reference product interchangeability exclusivity timing.

Sources

• FDA. Complete Response Letters (CRLs). openFDA API. open.fda.gov/apis/transparency/completeresponseletters
• FDA. FDA Announces Real-Time Release of Complete Response Letters, Posts Previously Unpublished Batch of 89. September 4, 2025. fda.gov/news-events/press-announcements/fda-announces-real-time-release-complete-response-letters-posts-previously-unpublished-batch-89
• The FDA Group. Behind the Rejections: An Analysis of 89 FDA CRLs Reveals Why Drugs Really Fail to Get Approved. September 8, 2025. insider.thefdagroup.com/p/an-analysis-of-89-fda-crls
• Syner-G Biopharma. 291 FDA Complete Response Letters Decoded: Insights for Biologics CMC Strategy. 2025. synergbiopharma.com/blog/291-fda-complete-response-letters-decoded-insights-for-biologics-cmc-strategy
• Compliance Insight. Top 10 FDA CRL Drivers (2020–2024). compliance-insight.com/top-10-fda-crl-drivers-2020-2024
• BioPharm International. Manufacturing and CMC Challenges in Immunotherapy: Lessons from Recent Complete Response Letters. July 2025. biopharminternational.com/view/manufacturing-and-cmc-challenges-in-immunotherapy-lessons-from-recent-complete-response-letters
• FDA. Flexible Requirements for Cell and Gene Therapies to Advance Innovation. January 11, 2026. fda.gov/vaccines-blood-biologics/cellular-gene-therapy-products/flexible-requirements-cell-and-gene-therapies-advance-innovation
• Ultragenyx. FDA Issues CRL for UX111 Gene Therapy. Press Release, July 11, 2025. curesanfilippofoundation.org/2025/07/fda-issues-crl-for-ultragenyx-ux111-gene-therapy
• Outsourced Pharma. What FDA's Complete Response Letters (CRL) Say About Outsourcing. 2025. outsourcedpharma.com/doc/what-fda-s-complete-response-letters-crl-say-about-outsourcing-0001
• GMDP Academy. FDA Gene and Cell Therapy CMC Requirements. August 2025. gmdpacademy.org/news/fda-gene-cell-therapy-cmc-requirements
• 21 CFR § 601.20. Biologics License: Procedures and Requirements.