PharmaDossier
Manufacturing

Nitrosamine Risk Reviews: What to Request From an API Supplier

A practical guide for drug product quality teams on the 15 risk factors, chemistry disclosures, batch testing evidence, and change commitments required from API suppliers.

Ran Chen
Ran Chen
32 min read · Published · Source-cited

The supplier request, in one table

Quality and regulatory teams assessing commercial drug products cannot accept a supplier's one-page "nitrosamine-free" declaration as a defensible risk evaluation. Under current health authority expectations—including the U.S. Food and Drug Administration (FDA) Revision 2 guidance issued in September 2024, the European Medicines Agency (EMA) questions-and-answers document EMA/409815/2020 at Revision 23, and Health Canada's May 2026 nitrosamines policy—the marketing authorisation holder or finished drug product manufacturer bears ultimate regulatory accountability for patient safety. A receiving sponsor's risk evaluation is only as rigorous as the technical chemistry, process provenance, and analytical evidence furnished by its active pharmaceutical ingredient (API) manufacturers and intermediate vendors.

The workable file is version-controlled and has five parts. (1) A structured risk-evaluation report that answers all 15 risk factors in Question 4 of EMA/409815/2020, with a justification for every Yes, No, or not applicable. The APIC Revision 4 template (January 2026) and the CMDh questionnaire are accepted formats. FDA Revision 2 does not prescribe that form. It does expect the drug-product risk assessment to be built with the API manufacturer and to cover the root causes in Section III. (2) Chemistry disclosures for nitrosating agents and for nitrosatable secondary and tertiary amines, including amide solvents and quaternary ammonium residues. (3) The list of potentially present nitrosamines, the acceptable-intake basis attributed to the agency that set it, and the test results that support the conclusion. (4) A statement on virgin versus recovered solvents, reagents, and catalysts, including whether recovery is outsourced. (5) A written commitment to re-evaluate and tell the customer when the process, starting materials, or suppliers change. That commitment is a template and quality-agreement practice. It is not created by 21 CFR 314.70 or the EU variations regulation. Those rules govern what the application holder reports to the authority after a change.

Request DeliverableRegulatory BasisSupplier Submission RequirementQuality Acceptance Criteria
Structured 15-Factor Risk EvaluationEMA Q&A Rev. 23, Question 4; APIC Rev. 4. FDA Rev. 2 Section IV expects a risk assessment with the API manufacturer. It does not publish this 15-factor form.Completed APIC Revision 4 (January 2026) or CMDh questionnaire evaluating 7 synthetic, 5 drug product-relevant, and 3 GMP factors.Unambiguous Yes/No/NA selection for every factor; technical justification provided for every 'No' or 'NA' citing specific reaction conditions, purge factors, and reagent chemistry.
Nitrosating Agent & Amine Precursor DisclosureFDA Rev. 2 (Root Causes); APIC Rev. 4 (Tables 3 & 4)Quantitative declaration of all nitrite salts, nitrous acid, alkyl nitrites, NOx sources, secondary/tertiary amines, and amide solvents (DMF, DMAc, NMP).Explicit residual concentration limits or validated purge factors; thermal and acidic degradation pathways of amide solvents addressed; quaternary ammonium salt stability documented.
Identified Impurity Profile & Testing DataFDA Rev. 2 Section IV.A (acceptable intakes) and Section V.A (confirmatory testing); EMA Appendix 1 Rev. 13; Health Canada Appendix 1Comprehensive listing of potential small-molecule nitrosamines and NDSRIs with root causes, CPCA potency categories, and validated LC-MS/MS or GC-MS/MS data.Minimum of three representative commercial batches tested across shelf life (including labeled expiry); LOD and LOQ disclosed; impurity levels demonstrated <= 10% of AI limit for routine testing omission.
Recovered Solvents & Supply Chain VerificationFDA Rev. 2 Section III.B.4 (recovered solvents, reagents, and catalysts); WHO Annex 2; APIC guidance (May 2025)Formal certification disclosing whether solvents, reagents, or catalysts are virgin or recovered, whether recovery is internal or outsourced, and vendor qualification data.Evidence that outsourced recovery does not introduce amines or nitrosamines: dedicated equipment, or cleaning shown to remove the impurities of concern, plus a statement on whether purchased materials are recovered.
Change-notification commitmentAPIC Rev. 4, Section 8. After a change, the application holder reports it under 21 CFR 314.70 or the EU variations rules. Those rules do not require the supplier letter.Written agreement to re-evaluate nitrosamine risk and notify customers prior to implementing any synthetic route, reagent, KSM, or facility changes.Pre-notification window defined; threshold triggers established for regulatory re-filing; commitment to provide updated risk evaluation reports prior to commercial implementation.

The decision framework below outlines how receiving quality organizations should evaluate an API supplier's nitrosamine dossier, verify whether confirmatory testing is required, and manage ongoing lifecycle surveillance.

flowchart TD
    A["Supplier inquiry issued"] --> B{"Is the report structured?"}
    B -->|"One-page negative statement"| C["Ask again for all 15 EMA Q4 factors, each justified"]
    B -->|"Fifteen factors answered"| D{"Is a formation pathway plausible?"}
    C --> B
    D -->|"No pathway, and each No or NA is justified"| F["Step 1 can close without confirmatory testing"]
    D -->|"Justification missing"| G["Ask for the missing chemistry or process evidence"]
    G --> D
    D -->|"Pathway identified"| H["Step 2, unless a no-formation study is already documented"]
    H --> I["FDA recommendation: three U.S. batches across expiry, including the end of expiry"]
    I --> J{"Result versus that agency's acceptable intake"}
    J -->|"At or below 10 percent of the intake"| K["Negligible-risk record; a specification may be omitted"]
    J -->|"Above 10 percent and within the intake"| L["Add a release and stability control"]
    J -->|"Above the intake"| M["Mitigate, then use that agency's reporting path"]
    F --> N["Date the file and reopen it when a limit, process, or supplier changes"]
    K --> N
    L --> N
    M --> N
How to judge an API supplier response. Confirmatory testing follows an identified pathway. The presence of an amine, by itself, does not start Step 2.

Why a one-page 'nitrosamine-free' statement fails Step 1

The 2018 finding of N-nitrosodimethylamine (NDMA) in valsartan led FDA, EMA, and other authorities to a three-step framework: risk evaluation, confirmatory testing when a risk is identified, and changes to the marketing authorisation plus corrective and preventive action. The original call-for-review submission dates have passed in the United States and the European Union. The need to keep the evaluation current has not. In the EU, marketing authorisation holders remain responsible for product quality under the Article 5(3) follow-up, and EMA/409815/2020 tells them to revisit the evaluation when new risk-factor or limit information appears. In the United States, Revision 2 is guidance, not a statute. Impurity control is still part of current good manufacturing practice, and FDA's recommended date for concluding NDSRI confirmatory testing and application changes (August 1, 2025) has passed.

In practice, pharmaceutical quality teams frequently encounter API vendors who respond to comprehensive nitrosamine questionnaires with a standardized, one-page declaration. These generic certificates typically assert that nitrosamines are not intentionally added during synthesis, that raw materials are procured from qualified vendors, and that the resulting active substance is compliant with general pharmacopeial purity standards. As documented in technical exchanges on the USP Nitrosamines Exchange, receiving drug product sponsors find these superficial statements practically useless during regulatory audits and pre-approval inspections (PAIs).

A one-line statement that nitrosamines are not added, or are not expected, does not answer the risk evaluation. FDA Revision 2 says the drug-product assessment should be done with the API manufacturer so the route of synthesis and the process conditions that create risk are known. The record that holds up is the chemistry and the controls, not a signature under a negative sentence.

Furthermore, the scope of risk assessments expanded dramatically with the recognition of Nitrosamine Drug Substance-Related Impurities (NDSRIs). Unlike small-molecule volatile nitrosamines such as NDMA or N-nitrosodiethylamine (NDEA)—which typically arise from solvent degradation or contaminated reagents—NDSRIs form when the active pharmaceutical ingredient itself, or one of its synthetic intermediates, possesses a vulnerable secondary or tertiary amine moiety that reacts with trace nitrites present in excipients or water. A legacy supplier certificate dating from 2020 or 2021 that evaluated only small-molecule nitrosamines fails current regulatory standards because it omits the API's own chemical susceptibility to nitrosation.

The 15 risk factors your request must cover

Quality groups usually ask for a structured report rather than a free-text letter. The APIC template, Report on the Risk of Potential Presence of Nitrosamine Impurities, Revision 4 (Version 4.1, January 2026), follows the 15 factors in Question 4 of EMA/409815/2020. It is an industry format, not a U.S. legal requirement. Another structure can still be acceptable if every factor is answered and justified. FDA's own root-cause discussion sits in Revision 2, Section III, and it is not numbered as these 15 questions.

A compliant supplier response must address all 15 factors individually, requiring the API manufacturer to designate each item as "Yes," "No," or "Not Applicable," accompanied by documented scientific rationale. The 15 factors span three operational domains: chemical synthesis of the drug substance, downstream drug product-relevant chemistry, and general good manufacturing practice (GMP) facility controls.

Factor ID & DomainRisk MechanismWhat a useful answer includesCommon Failure Mode
Q4.1 (API synthesis): Nitrite salts and other nitrosating agentsUse of nitrite salts and esters (sodium nitrite, alkyl nitrites) or other nitrosating agents (nitroso halides, nitrosonium salts, nitrogen oxides, nitroalkanes, Fremy's salt, nitroso sulfonamides) while secondary or tertiary amines are present in the same step or another step. Amine sources include solvents such as DMF, DMAc, and NMP, and quaternary ammonium salts that can degrade to amines.Walk every step for a nitrosating agent and an amine that can meet it, including a deliberate diazotization, and state the purge that separates them from the API.Stopping at 'sodium nitrite is not charged' and skipping nitric acid, nitrogen oxides, or amines revealed by solvent degradation.
Q4.2 (API synthesis): Nitrite formed from hydroxylamine or nitro-aromaticsNitrite formed by oxidation of hydroxylamine, or released from a nitro-aromatic precursor (for example by fluoro-denitration), while a secondary or tertiary amine is present in that step or a later one.Identify every hydroxylamine, nitro-aromatic, and denitration operation, and state whether an amine is still present when that nitrite can form.Treating 'no sodium nitrite is charged' as a complete answer. Partial reduction of a nitro group matters only because it can produce hydroxylamine, which is this factor, not a separate EMA item.
Q4.3 (API Synthesis): Disinfected process waterReaction of chloramines or ozone used in water purification with trace amine residues to generate nitrosamines.Water testing records, total organic carbon (TOC) monitoring, and purification train configuration (reverse osmosis, deionization).Assuming potable city water meets requirements without verifying chloramine neutralization at the facility intake.
Q4.4 (API synthesis): Oxidation of hydrazine-type reagentsOxidation of hydrazines, hydrazides, or hydrazones by hypochlorite, air, oxygen, ozone, or peroxides during manufacture or storage. EMA lists this as a route that can generate N-nitrosamines, not as the formation of a separate nitrosating agent.Name the hydrazine-type reagent, the oxidant, and the quench or purge that keeps the resulting nitrosamine out of the API.Describing the step as if it only creates a nitrosating species, or omitting hydrazides and hydrazones.
Q4.5 (API Synthesis): Contaminated recovered materialsUse of recycled or recovered solvents, reagents, or catalysts containing residual amines or nitrites.Complete provenance records for recovered materials, batch-specific recycling records, and distillation purity profiles.Relying on generic solvent specifications (e.g., gas chromatography purity > 99%) that do not detect parts-per-billion nitrosamines.
Q4.6 (API Synthesis): Vendor-supplied materialsStarting materials, intermediates, or raw materials purchased from external chemical suppliers containing unrecognized nitrosamines.Supplier qualification files, testing records of incoming raw materials, and synthetic route verification for key starting materials.Treating vendor-supplied advanced intermediates as inherently clean without auditing the upstream synthesis.
Q4.7 (API Synthesis): Synthetic carry-overCarry-over of deliberately formed nitrosamines or precursors from upstream synthetic steps into the final crystallization.Demonstrated spike-and-purge clearance studies, analytical testing of late-stage intermediates, and mother-liquor purge data.Assuming crystallization purges polar nitrosamines without measuring solubility or partition coefficients in the crystallization matrix.
Q4.8 (Finished product): Nitrosatable nitrogen and excipient nitriteNitrosatable nitrogen in the API, or in an impurity or degradant, reacting with a nitrosating agent in the finished product during formulation or storage. Secondary amines are the clearest case; tertiary amines have also nitrosated. Nitrite in common excipients is part of this factor. APIC splits it into 8a (functionality in the API or a known impurity) and 8b (nitrite in an excipient).The API supplier answers 8a from the structure. 8b belongs to the marketing authorisation holder. The API manufacturer should mark 8b not applicable rather than guess the formulation.Marking a tertiary amine 'not vulnerable' with no discussion of dealkylation, or sending the excipient-nitrite question to the API supplier as if it were 8a.
Q4.9 (API and finished product): Degradation pathwaysDegradation from inherent reactivity (a nitro-alkyl, an oxime, or other functionality EMA flags) or from an exogenous nitrosating agent, during API or finished-product manufacture or during storage. Crystal structure, crystal habit, temperature, and humidity can matter.State which degradants can reveal an amine or a nitrosating species, and what stability or forced-degradation evidence was considered.Reviewing only the commercial synthesis and ignoring storage of the bulk API.
Q4.10 (API and finished product): Oxidation of functionality in the substanceOxidation of a hydrazine or other amine-containing group in the active substance or in an impurity or degradant, including groups formed from hydrazones and hydrazides, during API manufacture, finished-product manufacture, or storage. EMA cites oxygen and peroxides, including peroxide impurities in some excipients. This is not the packaging factor, and it is not the same question as Q4.4, which is about hydrazine reagents charged to the synthesis.Show whether the API or a named impurity carries that functionality, and whether an oxidant is present in the process or expected in the formulation.Numbering a blister-foil question as Q4.10, or assuming a Q4.4 reagent review already covers a group that is part of the molecule.
Q4.11 (Finished product): Certain packaging materialsNitrosamines linked to primary packaging. The case EMA describes is blister lidding foil that contains nitrocellulose. Heat-sealing can generate nitrogen oxides, which nitrosate low-molecular-weight amines in the printing ink or in the product, and the nitrosamine can transfer into the blister cavity. The API supplier may correctly answer not applicable. The marketing authorisation holder still has to answer it.For the finished product, identify whether the lidding foil contains nitrocellulose and whether a vulnerable amine is present in the ink or the product.Substituting a generic rubber-stopper story for the nitrocellulose heat-seal pathway, or closing the factor from the API report alone.
Q4.12 (Process water and purification): Quaternary ammonium anion-exchange resinsAmines leaching from quaternary ammonium anion-exchange resins and meeting a nitrosating agent in the liquid. EMA's example is water for injections: residual chloramine from disinfection reacted with dimethylamine from the demineralisation resin and formed NDMA. The same pattern can apply when API or finished-product water is purified on similar resins. Risk follows the concentration of the reactive agents and therefore the volume of water.State whether such resins are used in the synthesis or in the water train, and what evidence shows amines are not leaching into a stream that also contains a nitrosating agent.Marking the factor not applicable because the synthesis has no resin column, without looking at how process water is purified.
Q4.13 (GMP Controls): Equipment cross-contaminationCarry-over of nitrosamines or vulnerable amine/nitrite residues between manufacturing campaigns on shared multi-product equipment.Cleaning validation protocols incorporating nitrosamine-specific limits, visual inspection criteria, and swab testing using validated MS methods.Using non-specific cleaning verification (e.g., TOC or conductivity) that lacks the sensitivity to detect nanogram-level nitrosamine residues.
Q4.14 (GMP Controls): Phase-separation errorsIncomplete phase cuts or emulsion carry-over during aqueous-organic extractions allowing aqueous nitrites to enter organic amine phases.Standard operating procedures (SOPs) for extraction cuts, automated interface detection sensors, and secondary wash step validation.Relying entirely on manual sight-glass inspection during rapid production shifts without secondary extraction verification.
Q4.15 (GMP Controls): Outsourced recovery operationsThird-party solvent or catalyst recycling facilities co-distilling or co-processing materials from multiple pharmaceutical clients.Audits of CDMO and solvent recovery vendors, dedicated recovery campaigns, and contractually enforced segregation of solvent streams.Allowing outsourced recyclers to blend solvent batches across different manufacturing lines or non-pharmaceutical clients.

When reviewing an APIC Table 1 submission, quality units must verify that the supplier has not inserted blanket dismissals. For example, if Factor Q4.1 is checked "No," the justification must specifically identify every reagent used across the complete synthetic sequence and confirm the absence of nitrites, nitrates, and nitrous acid. If Factor Q4.8 indicates that the API is a secondary amine, the supplier cannot claim "No Risk" for the finished drug product; instead, the supplier must classify the drug substance as a vulnerable amine, provide pKa data, and furnish the drug product manufacturer with the exact chemical inputs required to model NDSRI formation in the finished dosage form.

Chemistry asks: nitrosating agents, vulnerable amines, recovered materials

Understanding nitrosamine risk requires rigorous organic chemistry analysis. Nitrosamines form through the electrophilic reaction of an active nitrosating agent with a vulnerable amine species. In pharmaceutical manufacturing environments, this reaction typically occurs in liquid solution under acidic, neutral, or even weakly basic conditions, depending on the presence of catalytic species and the pKa of the amine.

To conduct a thorough risk evaluation, quality teams must request detailed disclosures regarding two critical chemical categories: nitrosating agents (APIC Table 3) and vulnerable nitrosatable substances (APIC Table 4).

Nitrosating Agents and Upstream Sources

The primary nitrosating agent in synthetic chemistry is nitrous acid (HNO2), generated in situ by the acidification of inorganic nitrite salts (such as sodium nitrite, NaNO2). However, quality reviewers must look beyond intentional diazotization reactions. Other potent nitrosating agents frequently present in synthetic processes include:

  • Nitrogen oxides (NO and NO2), which can be present as dissolved gaseous contaminants in nitric acid (HNO3) or formed during oxidation reactions.

  • Alkyl nitrites (such as tert-butyl nitrite or isoamyl nitrite), widely utilized in organic synthesis for mild diazotization and functional group interconversions.

  • Nitrosyl halides (NOCl, NOBr), formed when nitrites react with halide salts in acidic media, representing exceptionally reactive nitrosating electrophiles.

  • Azide decomposition quenching byproducts: In tetrazole synthesis (common in sartan drug substances), excess sodium azide is frequently quenched with sodium nitrite under acidic conditions. If secondary amine solvents are present during this quench, nitrosamine formation is virtually instantaneous.

Vulnerable Amines and Amide Solvent Degradation

Secondary amines (e.g., dimethylamine, diethylamine, diisopropylamine) represent the most vulnerable substrate class because their reaction with nitrosating agents yields stable, highly carcinogenic N-nitrosodialkylamines without requiring an elimination step. Tertiary amines can also undergo dealkylative nitrosation under elevated temperatures or in the presence of reactive nitrosating electrophiles, yielding secondary amines that immediately react to form nitrosamines.

A major source of secondary amine contamination in API manufacturing is the hydrolytic and thermal degradation of common dipolar aprotic amide solvents. Dimethylformamide (DMF) degrades into dimethylamine (DMA) and formic acid; dimethylacetamide (DMAc) degrades into DMA and acetic acid; and N-methyl-2-pyrrolidone (NMP) degrades into 4-(methylamino)butyric acid. When DMF is heated in the presence of trace moisture or residual acid, significant quantities of volatile dimethylamine are liberated. If the synthetic route involves nitric acid, nitrous acid, or trace nitrites in any subsequent step, the generated DMA readily combines with nitrosonium ions to produce NDMA.

Recovered Solvents, Reagents, and Supply Chain Verification

FDA Revision 2, Section III.B.4, treats recovered solvents, reagents, and catalysts as a root cause. Residual amines can carry through recovery, and a quench that uses nitrous acid to destroy residual azide can form nitrosamines in the solvent being recovered. Outsourcing adds risk when the contractor is not told what is in the stream, or when shared equipment is cleaned without evidence that the impurities of concern are removed. The guidance illustrates the problem with recovered solvents and with a catalyst combined across customers. It does not rank warning letters or name a universal list of solvents.

In Revision 2 of its nitrosamines guidance, the FDA explicitly recommends that API manufacturers thoroughly audit their supply chains, establish rigorous monitoring programs for at-risk raw materials and intermediates, and directly verify with chemical vendors whether purchased materials are virgin or recovered. If a contract manufacturer utilizes an external solvent recovery facility, the sponsor must verify that the recovery vendor operates dedicated distillation equipment or maintains validated cleaning protocols between different client campaigns. Co-distilling solvent streams from unrelated chemical manufacturing lines has historically introduced trace secondary amines and nitrites into previously clean API production processes.

Test data: what to request and how to judge it

Analytical testing serves as the definitive empirical check on theoretical risk evaluations. However, testing alone cannot replace a comprehensive Step 1 evaluation; rather, confirmatory testing (Step 2) is triggered whenever a theoretical risk assessment identifies plausible formation pathways, precursor carry-over, or unverified supply chain inputs.

When requesting and reviewing analytical test data from an API supplier, quality units must enforce strict evidentiary standards regarding sample representation, batch numbers, analytical methodology, and detection limits.

Batch Sampling and Expiry Coverage

FDA Revision 2 recommends, rather than orders by statute, that confirmatory testing use at least three representative batches currently marketed in the United States, at time points within labeled expiry including the end of expiry, and that all available API sources be included. Freshly manufactured lots alone do not meet that recommendation. FDA also notes that high NDSRI levels have generally been associated with drug products rather than APIs, and that NDSRI levels can rise during storage. A data-driven argument that the structure will not form a nitrosamine, for example a targeted nitrosation study, can justify omitting confirmatory testing. Testing is not the default for every API.

Furthermore, if a drug product manufacturer utilizes multiple qualified API manufacturing sites or secondary suppliers, confirmatory testing must encompass representative lots from every approved source. Demonstrating that an API produced at Facility A is free of nitrosamines does not establish equivalence for the same chemical entity manufactured at Facility B, where water sources, solvent recovery practices, equipment trains, and raw material vendors inevitably differ.

FDA Per-Lot Testing Expectations

A point that is easy to drop out of a supplier file is how long incoming API testing continues. FDA Revision 2 expects the drug-product manufacturer to keep testing each API lot for nitrosamine impurities until it has verified that the supplier can consistently manufacture API within the recommended acceptable intake through the expiry or retest date. That is an expectation in guidance, tied to demonstrating control, not a sentence that testing of every lot is permanent once the demonstration exists.

Drug product quality teams cannot prematurely switch to skip-lot testing or reduce testing frequency based on initial qualification batches. Skip-lot testing or omission of an API release specification is only justified once process capability is statistically demonstrated across a sufficient historical production window (typically at least 10 consecutive commercial lots) and supported by long-term stability data.

Analytical Rigor: Method Validation, LOD, and LOQ

Control levels sit in the nanogram-per-day range, so the limit of quantitation has to be justified against the acceptable intake and the maximum daily dose. High-performance liquid chromatography with ultraviolet detection is usually not sensitive enough for that range. FDA expects a method commensurate with the level to be controlled. Liquid chromatography–tandem mass spectrometry and gas chromatography–tandem mass spectrometry are the usual choices. The guidance does not say that every file must use high-resolution mass spectrometry or multiple-reaction monitoring.

Quality teams must require suppliers to submit complete analytical validation packages conforming to ICH Q2(R2) guidelines. The validation report must disclose the Limit of Detection (LOD) and Limit of Quantitation (LOQ) for every target analyte. Crucially, the method LOQ must be low enough to quantify the impurity at or below the regulatory action threshold.

The 10 Percent-of-AI Threshold for Specification Omission

Regulatory authorities—including the FDA, EMA, Health Canada, and the World Health Organization (WHO)—converge on a harmonized action threshold regarding routine commercial release testing. If rigorous confirmatory testing across representative batches demonstrates that nitrosamine levels consistently remain at or below 10 percent of the established Acceptable Intake limit (or below a validated LOQ where the LOQ is demonstrated to be <= 10% of the AI), the sponsor is justified in omitting a routine release specification from the drug substance and drug product registrations.

If confirmatory results are above 10 percent of the recommended acceptable intake and still within it, FDA recommends a control in the release and stability specifications. For an approved application, that specification change is described as a changes-being-effected-in-30-days supplement. If results exceed the acceptable intake and a formulation, process, or packaging change is needed, major changes are submitted in a prior-approval supplement under 21 CFR 314.70(b) or 21 CFR 601.12(b). Exceeding the acceptable intake does not, by itself, mean every distributed batch is recalled. FDA's acceptable-intake page describes interim limits when a recall would disrupt supply, and Health Canada's May 29, 2026 update expects notification when a recall decision is made, not every time an elevated result is recorded.

Limits that moved after your last review

A common vulnerability in pharmaceutical compliance files is the assumption that an approved nitrosamine risk assessment remains permanently valid. In reality, the toxicological benchmarks and regulatory policies governing nitrosamines have evolved continuously throughout 2024, 2025, and 2026. A quality file established under 2022 guidelines is likely obsolete if it has not been systematically reconciled against recent health authority revisions.

Toxicological Architecture: ICH M7(R2) and the Cohort of Concern

Under the International Council for Harmonisation (ICH) guideline M7(R2), mutagenic impurities are generally managed using the Threshold of Toxicological Concern (TTC) of 1.5 micrograms per day (µg/day), which corresponds to a theoretical 1-in-100,000 excess lifetime cancer risk. However, N-nitroso compounds belong to the "cohort of concern"—a structural class of exceptionally potent alkylating mutagens for which the standard TTC is explicitly inapplicable.

Acceptable intakes are compound-specific because N-nitroso compounds sit in the ICH M7(R2) cohort of concern, so the 1.5 µg/day threshold of toxicological concern does not apply. Where robust rodent carcinogenicity data exist, the intake is derived from a TD50. On FDA's CDER Nitrosamine Impurity Acceptable Intake Limits page, Table 2 (compound-specific data or read-across) lists NDMA at 96 ng/day and NDEA at 26.5 ng/day. The page notes that the NDMA figure was previously communicated on September 3, 2020. Do not carry the older sartan interim set forward as if it were still the FDA table. On the same page, the CPCA table lists N-nitroso-N-methyl-4-aminobutyric acid (NMBA) at potency category 4, 1500 ng/day, and N-nitrosodiisopropylamine (NDIPA) at potency category 5, 1500 ng/day. EMA Appendix 1 and Health Canada Appendix 1 are separate lists and have been revised on their own dates, including Health Canada's revisions of NMBA and NDIPA noted on May 31, 2024. Cite the agency, the list, and the revision. One number labeled as harmonized for NMBA or NDIPA is not supportable from these sources.

The CPCA Framework for Complex NDSRIs

For NDSRIs that lack robust carcinogenicity data and a suitable read-across surrogate, FDA's RAIL guidance (final August 2023) and EMA Appendix 2 use the Carcinogenic Potency Categorization Approach. Both sort structures into five potency categories using features such as the alpha-hydrogen count and deactivating groups. The intake attached to category 1 is not the same in both regions. EMA Appendix 2 assigns category 1 an acceptable intake of 18 ng/day. FDA recommends 26.5 ng/day for category 1 for products intended for the United States, including when another region uses a different category 1 figure. Categories 2, 3, 4, and 5 are 100, 400, 1500, and 1500 ng/day in both the FDA RAIL table and EMA Appendix 2. Category 5 is the less potent structural case. It does not allow a higher intake than category 4.

Regulatory Authority & DocumentPublication / Current DateWhat the document expectsOperational Action Threshold
FDA Revision 2 Guidance (Control of Nitrosamine Impurities)September 2024 (Effective Sept 5, 2024)Three-step strategy FDA recommends: risk assessment, confirmatory testing if a risk is identified, and reporting of changes. Reevaluate if NDSRIs were left out. Keep testing API lots until the supplier is shown to meet the acceptable intake through expiry or retest. Collaboration with the API manufacturer is recommended in the guidance.NDMA limit: 96 ng/day; 10% AI threshold for specification omission; 3 batches tested across expiry including end of shelf life.
FDA CDER AI Limits WebpageAugust 6, 2026Centralized repository of compound-specific AI limits; regularly updated with CPCA calculations and empirical carcinogenicity readouts.Requires continuous reconciliation of drug product impurity profiles against newly published compound limits.
EMA Q&A EMA/409815/2020 (Revision 23)October 10, 2025Operationalizes Article 5(3) CHMP Opinion; requires formal reporting when nitrosamines are newly identified or exceed AI limits; 3-year CAPA implementation window.Limits live in Appendix 1. The additional Step 2 template is for a nitrosamine above the acceptable intake, above a 1-in-100,000 lifetime risk, or newly identified. Deadlines have passed; reporting responsibilities continue.
EMA Appendix 1 Acceptable Intakes (EMA/42261/2025 Rev. 13)June 24, 2026The EU list of established acceptable intakes (EMA/42261/2025). It is an EMA list, not a global harmonized table.EMA expects corrective and preventive action within three years after an acceptable intake is established and published. A new or lowered listing is a reason to reopen the supplier file. It is not Health Canada's dated clock.
Health Canada Nitrosamines Policy UpdateMay 29, 2026 (Preceded by Aug 1, 2025)Three-year CAPA timeline running to August 1, 2028 for pre-existing limits; 17 CPCA additions; shift to recall-based reporting trigger; risk-based Level I/III change classification.Appendix 1 was updated December 17, 2025 and March 11, 2026, including a cut in the N-nitroso-meglumine intake from 1500 ng/day to 100 ng/day. Re-check the table. A new listing does not by itself order a synthesis rewrite. Limits published on or after August 1, 2025 have a CAPA window of up to three years from publication.
WHO Good Practice Guidance (Annex 2)WHO guideline annex, not a 2026 AI listComprehensive life-cycle risk assessment spanning supply chain, utilities, packaging, and shelf life; distributor obligations.Annex 2 expects the assessment to cover the supply chain, excipients, processing, utilities, storage, and degradation over shelf life, and expects root-cause work above 10 percent of the acceptable intake. It guides regulators and prequalification. It does not replace FDA, EMA, or Health Canada.

The administrative deadlines set in 2020 and 2021 have passed. The file still has to move when the lists move. FDA recommended that NDSRI confirmatory testing be concluded and required application changes submitted by August 1, 2025, and that date has passed. Health Canada allows up to three years from August 1, 2025 (to August 1, 2028) for corrective and preventive action on acceptable intakes published in its Appendix 1 before that date, and up to three years from the publication date for limits published on or after August 1, 2025. EMA expects corrective and preventive action within three years of an acceptable intake being established and published. Those are not one shared clock.

A worked record: one API, one request file

The log below is a worked example for a model active substance that uses dimethylformamide in stage 2 and a secondary-amine coupling in stage 3. Every status, concentration, and limit of quantitation in the table is hypothetical. None of those figures is an agency limit or a result measured from a real supplier.

Inquiry Item & CodeInformation Requested From SupplierSupplier Submission StatusTechnical Review & DeficienciesAction Required to Close File
Item 1: Risk Assessment Template (Q4.1 - Q4.15)Completed APIC Revision 4 report answering all 15 risk factors with individual technical justifications.Hypothetical, partially useful: an APIC Rev. 4 report is in the file, but Q4.5 (recovered materials) and Q4.13 (cross-contamination on a shared line) are marked no risk without the records those answers need.Supplier utilized a standardized template but failed to furnish documentation regarding multi-product equipment cleaning validation or solvent recovery vendor oversight.Ask for the cleaning evidence behind the shared-line answer, and for a written statement from the recovery vendor on what else that equipment processes. This example does not set a swab limit.
Item 2: Solvent Chemistry & Amine Impurities (Table 4)Declaration of DMF sourcing, virgin vs. recycled status, and maximum allowable dimethylamine (DMA) concentration in incoming solvent.Deficient: Supplier confirmed DMF is utilized in Stage 2 but stated solvent is purchased to standard ACS reagent grade without DMA testing.Hypothetical gap: the file says DMF is used and is bought to a reagent-grade purity that does not quantify free dimethylamine. DMF can hydrolyse to dimethylamine. A purity line that does not measure that amine does not close the NDMA question. No concentration is stated here because this row is not a measured result.Ask for either a quantified free-dimethylamine specification justified against the purge and the acceptable intake, or a purge study. Do not copy a parts-per-million number from this example.
Item 3: Nitrosating Agent Screening (Table 3)Screening of all acids, reagents, and water used across Stages 1 through 4 for trace nitrites or nitrate precursors.Hypothetical, acceptable for this example: purified-water nitrite is reported below the supplier's own water specification, and nitric acid is not used. A real file would carry the laboratory figure, not a number from this article.Hypothetical judgment: the water result and the statement that nitric acid is not used are enough to close this row of the example. Do not treat any nitrite number in the status cell as a WHO limit.Record verified; attach water testing Certificate of Analysis to the master dossier.
Item 4: Confirmatory Testing Package (Step 2)LC-MS/MS testing for NDMA and the API-related NDSRI across 3 commercial batches including end-of-expiry lots.Partially Acceptable: Testing submitted for 3 release batches (all < LOQ), but zero stability or expiry-dating lots evaluated.Hypothetical gap: three release batches, all reported below the limit of quantitation, and no result at the end of labeled expiry. That does not meet FDA's recommendation to test three U.S. batches across expiry, including the end of expiry.Ask for retained samples at or near labeled expiry, tested with a method whose limit of quantitation is justified against 10 percent of the applicable acceptable intake. This example does not set that limit.
Item 5: Supply Chain Traceability & AuditingConfirmation that Key Starting Material (KSM) vendors have been audited and that purchased KSMs are manufactured without secondary amine solvents.Deficient: Supplier provided only a vendor questionnaire for the Stage 1 KSM manufacturer without on-site audit verification.APIC May 2025 guidelines emphasize that precursor contamination at ppb levels can originate in upstream raw materials, necessitating verified supply chain oversight.Require the API manufacturer to execute an on-site audit of the KSM facility or run an internal analytical screening of 3 incoming KSM lots for trace nitrosamines.
Item 6: Change Notification AgreementSigned commitment to notify the customer prior to modifying route of synthesis, solvent recovery practices, or manufacturing site.Acceptable: Supplier signed Section 8 of the APIC template agreeing to pre-notification of process and vendor changes.Contractual notification threshold established; change-control protocol integrated into quality agreement.Execute formal bilateral Quality Agreement amendment referencing the APIC change commitment.

The Reviewer's Red-Flag Checklist

When a response comes back, six patterns should keep the file open:

  • Blanket Negative Declarations: Any document stating simply that 'the product is free of nitrosamines' without answering the 15 individual risk factors.

  • Unsubstantiated 'Not Applicable' Designations: Marking solvent recovery or equipment cleaning as 'NA' when the facility operates shared multi-product synthesis lines.

  • Lack of LOQ / LOD Disclosure: Analytical test reports that state 'None Detected' but fail to specify the method's Limit of Quantitation or provide chromatograms.

  • Testing only fresh batches: Release data on three newly made lots, with no result at or near the end of labeled expiry. FDA's recommendation in Revision 2 is three representative U.S. batches across expiry, including the end of expiry.

  • Undefined Solvent Recovery Streams: Stating that solvents are 'recycled in accordance with GMP' without verifying whether recovery is performed on dedicated internal equipment or outsourced to commercial recyclers.

  • No change commitment: A static assessment with no sentence, in the report or the quality agreement, that the supplier will re-evaluate and notify the customer when the process, materials, or suppliers change.

Managing Recalcitrant Suppliers: The APIC May 2025 Playbook

In scenarios where an API vendor refuses to provide detailed synthetic information citing proprietary intellectual property, quality units must follow the escalation pathway established in APIC's "Nitrosamines Risk Management: Guidance for API Manufacturers" (May 2025). Sponsors cannot simply drop the inquiry. Instead, the drug product manufacturer must: (1) utilize the Drug Master File (DMF) or Certificate of Suitability (CEP) Letter of Authorization mechanism to request that health authorities inspect the confidential synthesis during application review; (2) execute an internal, worst-case risk evaluation assuming maximum potential carry-over of vulnerable amines; and (3) perform rigorous end-product confirmatory testing across all commercial batches to establish empirical safety.

Change notification: keeping the review alive

A nitrosamine risk evaluation is not a one-time regulatory filing; it is an active lifecycle control document. A risk profile that was thoroughly documented and approved in 2024 can be instantly invalidated by an unannounced process change at an API manufacturing site or raw material vendor.

Section 8 of the APIC Revision 4 template is the sentence to ask the supplier to adopt: if the process, starting materials, or suppliers change in a way that can affect the evaluation, the manufacturer will reassess, revise the report when needed, and inform customers of a change in the outcome. That sentence becomes an obligation only if the quality agreement or supply contract incorporates it. It is not a regulation. Once the customer implements a responsive change, the application holder uses the U.S. supplement rules or the EU variations framework to tell the authority what the application requires.

  • The synthetic route of the active substance, including changes in reaction sequence, reagents, catalysts, or reaction stoichiometry.

  • The sources, manufacturing processes, or specifications of Key Starting Materials (KSMs) and advanced intermediates.

  • The specifications, grades, or suppliers of process solvents, particularly dipolar aprotic solvents (DMF, DMAc, NMP) subject to degradation.

  • Solvent recovery operations, including any transition from internal dedicated recovery to third-party commercial recycling vendors.

  • Manufacturing equipment trains, dedicated versus shared equipment status, or cleaning validation protocols.

  • Manufacturing site or facility relocation, including secondary synthesis sites or intermediate processing contractors.

The Confidentiality Interface: DMF Letters of Authorization

When an API supplier operates under a Type II Drug Master File (in the United States) or an Active Substance Master File / CEP (in Europe), the vendor typically maintains the specific route of synthesis and intermediate reaction conditions within the restricted, proprietary portion of the file. Receiving sponsors receive only an open-part applicant's summary and a Letter of Authorization (LoA) granting regulators permission to review the closed dossier.

Quality teams must recognize that relying solely on a DMF Letter of Authorization creates severe compliance vulnerabilities if not paired with a robust bilateral quality agreement. While the FDA or EMA will inspect the closed DMF during initial application review, regulatory agencies do not actively notify drug product sponsors when an API vendor submits minor annual updates or manufacturing modifications to a Type II DMF. Sponsors seeking to prevent post-approval supply interruptions should consult the operational strategies outlined in our analysis of API supplier DMF letters of authorization and notification traps, which details how unannounced Type II DMF amendments routinely trigger inspection findings and import alerts.

In a CDMO contract, nitrosamine surveillance belongs in the audit rights, the cleaning limits, and the path for a batch that fails those limits. Ambiguous raw-material and change-control language is a known inspection problem in quality agreements. It is not, on this record, something that can be ranked as the most frequent cause of warning letters.

Retrigger Discipline: Maintaining the Live Dossier

To ensure that commercial dossiers remain permanently inspection-ready, drug product quality units must establish an internal standard operating procedure governing nitrosamine retrigger events. A formal re-evaluation of the supplier risk file must be automatically initiated whenever any of the following triggers occur:

  • Health Authority AI Revisions: A regulatory agency (FDA, EMA, Health Canada, or WHO) publishes a new or lowered Acceptable Intake limit for an impurity relevant to the drug substance.

  • Supplier Process Change: Receipt of a formal change-control notification from the API vendor detailing synthetic route, solvent, or facility adjustments.

  • Annual product review: Re-read raw-material trends, stability results, and incoming API release data at the product review the quality system already runs.

  • OOS or Out-of-Trend (OOT) Investigation: Any analytical observation of unexpected chromatographic peaks or unexplained degradation during commercial release or stability testing.

  • New Scientific Literature: Peer-reviewed publications or regulatory alerts identifying novel degradation pathways or catalytic formation mechanisms applicable to the therapeutic class.

A version-controlled request file, a 15-factor evaluation, and a written change commitment in the quality agreement keep the review alive after the original call-for-review dates.

Sources

This analysis is based on primary regulatory guidance documents, international standards, and official technical templates governing pharmaceutical impurity control:

  • U.S. Food and Drug Administration (FDA), Center for Drug Evaluation and Research: Control of Nitrosamine Impurities in Human Drugs: Guidance for Industry (Revision 2, September 2024; Effective September 5, 2024). https://www.fda.gov/media/141720/download

  • U.S. Food and Drug Administration (FDA), Center for Drug Evaluation and Research: CDER Nitrosamine Impurity Acceptable Intake Limits (webpage, content current as of August 6, 2026). https://www.fda.gov/regulatory-information/search-fda-guidance-documents/cder-nitrosamine-impurity-acceptable-intake-limits

  • European Medicines Agency (EMA): Nitrosamine impurities: guidance for marketing authorisation holders, including Questions and Answers for marketing authorisation holders/applicants on the CHMP Opinion for the Article 5(3) of Regulation (EC) No 726/2004 referral on nitrosamine impurities in human medicinal products (EMA/409815/2020 Rev. 23, October 10, 2025; and Appendix 1 Acceptable Intakes EMA/42261/2025 Rev. 13, June 24, 2026). https://www.ema.europa.eu/en/human-regulatory-overview/post-authorisation/pharmacovigilance-post-authorisation/referral-procedures-human-medicines/nitrosamine-impurities/nitrosamine-impurities-guidance-marketing-authorisation-holders

  • Heads of Medicines Agencies / Co-ordination Group for Mutual Recognition and Decentralised Procedures - Human (CMDh): Nitrosamine impurities technical guidance and response templates. https://www.hma.eu/human-medicines/cmdh/nitrosamine-impurities.html

  • Active Pharmaceutical Ingredients Committee (APIC / CEFIC): Report on the Risk of Potential Presence of Nitrosamine Impurities, Supplier Template Revision 4 (January 2026, Version 4.1). https://apic.cefic.org/wp-content/uploads/2026/03/APIC_Template_for_report_on_Nitrosamine_Risk_Evaluation_Update-January-2026_V4-1.pdf

  • Active Pharmaceutical Ingredients Committee (APIC / CEFIC): Nitrosamines Risk Management: Guidance for API Manufacturers (Final, May 2025). https://apic.cefic.org/wp-content/uploads/2025/05/APIC-Nitrosamines-Risk-management_Guidance-for-API-Manufacturers_Final-1.pdf

  • Health Canada: Nitrosamine impurities in medications: Overview (What's new, including guidance updates of August 1, 2025, and May 29, 2026, with Appendix 1 Acceptable Intake table updates). https://www.canada.ca/en/health-canada/services/drugs-health-products/compliance-enforcement/information-health-product/drugs/nitrosamine-impurities.html

  • World Health Organization (WHO): WHO good practice considerations for the prevention and control of nitrosamines in pharmaceutical products (Annex 2). https://cdn.who.int/media/docs/default-source/medicines/norms-and-standards/guidelines/production/annex-2_who-good-practice-considerations-for-the-prevention-and-control-of-nitrosamines-in-pharmaceutical-products.pdf

  • International Council for Harmonisation (ICH): ICH Harmonised Guideline M7(R2): Assessment and Control of DNA Reactive (Mutagenic) Impurities in Pharmaceuticals to Limit Potential Carcinogenic Risk (Step 4, 2023). https://database.ich.org/sites/default/files/ICH_M7(R2)_Guideline_Step4_2023_0216_0.pdf

  • USP Nitrosamines Exchange: Technical practitioner discussions regarding API supplier risk evaluation responses and regulatory expectations. https://nitrosamines.usp.org/t/whats-your-experience-on-api-risk-assessments/4241

Ran Chen
Contributing Editor
Ran Chen

Founder, PharmaDossier. Life-sciences operator covering market access, specialty pharma, biosimilars, and regulated healthcare growth.

Follow on LinkedIn →