FDA Establishment Inspections: A Complete Guide for Pharmaceutical and Medical Device Manufacturers

An FDA establishment inspection (EI) is a careful, critical, official examination of a facility to determine its compliance with laws enforced by the FDA. For any pharmaceutical manufacturer, medical device maker, biologics producer, or other FDA-regulated entity, an EI is not a one-time event to survive: it is a recurring feature of operating in a regulated industry, and the outcome of each inspection shapes the FDA’s future treatment of the facility.

This guide covers everything an establishment needs to understand about the FDA inspection process: the types of inspections FDA conducts, how inspectors select sites, what happens from the first day to the Establishment Inspection Report (EIR), the three classification outcomes, the rights facilities have during and after an inspection, and how to prepare a quality system that holds up under scrutiny.

The companies that perform best in FDA inspections do not treat them as audits to be survived. They treat them as reviews of systems they run well every other day of the year.

Types of FDA Establishment Inspections

FDA conducts several categories of establishment inspections. Understanding which type is being conducted shapes how the facility should prepare and what areas are likely to receive the most scrutiny.

Surveillance (Routine)

Periodic inspections of regulated facilities regardless of pending applications. Frequency is risk-based. In FY2024, FDA conducted 989 drug quality inspections, a 27% increase from FY2023.

Pre-Approval (PAI)

Triggered by a marketing application (NDA, ANDA, BLA, PMA). Verifies the facility can manufacture the product as described in the submission before approval is granted.

For-Cause

Triggered by a complaint, adverse event report, recall, whistleblower report, or other intelligence suggesting a specific compliance problem. Generally results in more intense scrutiny than routine surveillance.

Follow-Up

Conducted after a previous OAI classification to verify that corrective actions have been implemented. Also may follow a warning letter to assess whether commitments have been fulfilled.

FDA’s Office of Regulatory Affairs (ORA) uses a risk-based site selection model to prioritise which facilities receive surveillance inspections and how frequently. Key factors include the facility’s inspection history, product risk, time since last inspection, and supply chain significance. Facilities named in marketing applications for the first time, or those with products classified as high-risk, are prioritised for pre-approval inspections.

Key Forms: 482, 483, and 484

Three FDA forms structure the formal documentation of any establishment inspection. PharmaGuru’s regulatory glossary covers these forms in detail, and understanding each one clarifies what happens at each stage of the inspection.

Form	Name	When issued	Purpose
FDA 482	Notice of Inspection	Inspection begins	Official notice to facility management that an inspection is authorised and underway. Must be presented before the inspection begins.
FDA 483	Inspectional Observations	Closeout meeting	Lists conditions the investigator observed that, in their judgment, may constitute violations. Issued only when objectionable conditions are found. The facility has 15 business days to respond.
FDA 484	Receipt for Samples	When samples taken	Documents any product, labelling, or environmental samples collected during the inspection. Samples may be used for laboratory analysis to support enforcement action.

A Form 483 is not a Warning Letter and is not a final determination of non-compliance. It is the beginning of a dialogue. The facility’s response to the 483, in terms of quality, specificity, and completeness of the corrective action commitments, directly influences whether the inspection is classified VAI or OAI.

The Four-Phase Inspection Process

Notification and opening meeting. FDA investigators present their credentials and issue Form 482. The opening meeting introduces the investigators, outlines the scope and purpose of the inspection, and requests initial documents (typically quality manuals, organisational charts, batch records, and deviation logs). The facility should have a designated inspection team and a primary point of contact ready to receive investigators professionally and escort them throughout the facility.

On-site review. The core of the inspection involves document review, facility walkthrough, personnel interviews, and sample collection. Investigators examine records relevant to CAPA systems, batch records, complaint handling, equipment qualification, environmental monitoring, data integrity controls, and training documentation. Inspectors are escorted at all times. All requests for documents should be responded to promptly; unexplained delays attract scrutiny. Document requests that implicate trade secrets or attorney-client privilege should be handled according to the facility’s pre-established inspection procedures rather than improvised responses.

Closeout meeting. At the conclusion of the on-site portion, the investigator holds a closeout meeting with facility management. If objectionable conditions were observed, Form 483 is presented and discussed. This is an opportunity for the facility to provide immediate clarifying information: if a 483 observation reflects a misunderstanding, or if the facility can show that a corrective action is already in progress, that information should be provided at the closeout meeting, documented in writing, and referenced in the formal 483 response.

Post-inspection response and EIR. The facility has 15 business days to submit a written response to any Form 483 observations. The investigator then writes the Establishment Inspection Report (EIR) and submits a classification recommendation. After review by the relevant Center and District Office, the final inspection classification is issued: NAI, VAI, or OAI.

Inspection Classifications: NAI, VAI, and OAI

After the EIR is reviewed, FDA issues a final inspection classification. Each outcome has specific consequences and regulatory implications, as documented in FDA’s Inspection Classification Database.

NAI

No Action Indicated

No significant violations found. Facility is in an acceptable state of compliance. Usually no Form 483 was issued. No further regulatory action.

VAI

Voluntary Action Indicated

Objectionable conditions found, but FDA has determined the facility can voluntarily correct deficiencies. A Form 483 was usually issued. No mandatory regulatory action, but the facility’s response and follow-through are tracked.

OAI

Official Action Indicated

Serious violations found requiring FDA enforcement action. May lead to Warning Letter, import alert, product seizure, injunction, or consent decree. A Form 483 was issued and the response was classified as inadequate, or findings were severe enough to escalate directly.

A 2025 published analysis of GCP inspections in Springer found that roughly 81.2% of inspections were classified NAI, 18.5% VAI, and 0.3% OAI. For pharmaceutical GMP inspections in FY2024, FDA’s own report noted that 93% of sites achieved NAI or VAI on their most recent inspection. The small percentage reaching OAI drives a disproportionate share of enforcement activity.

An important point from the Springer analysis: approximately 97% of investigator recommendations of NAI were upheld as NAI in the final classification, and 96% of VAI recommendations held as VAI. The Center and District review does upgrade some classifications, most commonly when the facility’s 483 response is deemed inadequate, which is how a recommended VAI can become a final OAI without new on-site evidence.

The Establishment Inspection Report (EIR)

The EIR is the FDA investigator’s internal report summarising the inspection’s scope, findings, observations, and classification recommendation. Unlike the Form 483 (which lists objectionable conditions) or the Warning Letter (which is a formal enforcement communication), the EIR provides a comprehensive narrative of what the investigator saw, reviewed, and concluded.

The EIR is not automatically shared with the inspected facility. It is considered an internal FDA working document. However, Field Management Directive (FMD) 145 mandates release of the EIR’s narrative portion to the inspected entity once an inspection is deemed “closed” under 21 CFR Section 20.64(d)(3). Facilities can also request EIRs through the Freedom of Information Act (FOIA), and EIRs from other facilities are available via FOIA as a source of competitive intelligence about what inspectors are focused on. Assyro AI’s EIR guide from May 2026 notes that the EIR is typically available approximately 3 to 6 months after the inspection closes.

For regulatory professionals, EIRs from peer companies are among the most instructive documents available for anticipating what FDA inspectors will examine. EIRs from facilities that received OAI or Warning Letters describe in narrative detail what conditions the investigator found, how the facility’s management responded, and what commitments were made or missed.

Your rights during an FDA inspection

✓Request and review the investigator’s credentials before granting access

✓Accompany the investigator at all times during the facility walkthrough

✓Provide clarifying context during the closeout meeting on any 483 observations

✓Disagree with 483 observations in writing, with rationale and supporting documentation

✓Have legal counsel present during the inspection

✓Have policies in place for handling document requests involving trade secrets or privileged information

✓Request the EIR after the inspection is closed under FMD 145 and 21 CFR 20.64(d)(3)

Common Mistakes

Mistake	Consequence
No designated inspection team or documented inspection procedure	Disorganised response, delayed document production, inconsistent statements from different personnel
Delaying or refusing reasonable document requests	Signals evasion; may escalate investigator attention to that area
Treating the 483 as a bureaucratic formality rather than a strategic document	A vague or generic 483 response is the most common way a VAI becomes an OAI without a follow-up inspection
Over-committing in the 483 response to timelines the team cannot meet	Missed commitments are cited in follow-up inspections and warning letters as evidence of systemic failure
Focusing inspection prep on documentation retrieval rather than process quality	An investigator who can see a process running in real time sees more than the documents describe
Not monitoring the FDA inspections database for peer EIRs and citation trends	Missing advance intelligence about what inspectors are currently focused on

Advanced Considerations

Writing a 483 response that changes the classification outcome. The 15-business-day response window is where many inspections are decided. A strong response does three things: it quotes each observation verbatim before addressing it (showing the facility understood the finding exactly as written), it presents documented evidence of root cause analysis rather than a summary, and it provides specific CAPA commitments with realistic timelines that include verification of effectiveness. FDA’s FY2024 enforcement data shows warning letters now increasingly include point-by-point explanations of why a 483 response was inadequate. Reading those letters before writing a response is valuable preparation.

Using EIRs from other facilities as intelligence. EIRs available through FOIA or the FDA reading room describe in narrative detail what an investigator found at a comparable facility. For quality teams preparing for a pre-approval inspection at a site that manufactures similar products to ones that have received OAI findings elsewhere, reading those EIRs is among the highest-value preparation activities available.

Foreign site inspections and MRA partner inspections. Over 62% of drug quality inspections in FY2024 were at foreign sites. Facilities outside the US cannot assume that geographic distance or logistical complexity reduces inspection probability. FDA’s growing use of Mutual Recognition Agreement (MRA) partner inspections (198 in FY2024, the highest ever) means European regulators may inspect a facility on FDA’s behalf, with findings shared directly with FDA enforcement. A facility operating to a standard it believes is adequate for EU GMP but not for 21 CFR requirements may find that gap surfaces through an MRA-based inspection rather than a direct FDA visit.

Remote regulatory assessments. FDA expanded its use of remote regulatory assessments (RRAs) during the pandemic and has maintained them as a tool for lower-risk situations and for facilities where an on-site inspection is logistically complex. RRAs typically involve electronic submission of records and documents for review, videoconference facility walkthroughs, and structured Q&A sessions with facility personnel. They do not replace on-site inspections for high-risk situations but represent a category of FDA oversight activity that facilities may encounter between formal EIs.

Frequently Asked Questions

Do we have to let FDA in without advance notice?

Yes. Under Section 704 of the FD&C Act, FDA has the statutory authority to inspect regulated facilities during regular business hours. The investigator presents Form 482 as official notice. Refusing or significantly impeding an inspection can result in additional enforcement action. However, you have the right to confirm credentials and to have legal counsel present.

What happens if we disagree with a 483 observation?

Disagreement should be stated in writing during the closeout meeting and in the formal 483 response, with supporting rationale and documentation. Investigators may note disagreements in the EIR. The classification review at the Center/District level may consider documented disagreement, particularly if the facility provides evidence that the observed condition was not, in fact, non-compliant.

How long does an FDA inspection typically last?

This varies widely based on facility size, product complexity, and inspection type. A routine surveillance inspection of a straightforward manufacturing site may last one to two days. A pre-approval inspection or for-cause inspection at a complex facility may last a week or more. Inspectors determine the duration based on what they find during the review.

When do we receive the EIR?

The EIR is typically available approximately 3 to 6 months after the inspection closes. Under Field Management Directive 145 and 21 CFR Section 20.64(d)(3), the narrative portion of the EIR must be released to the inspected entity once the inspection is deemed closed. You may also request it through FOIA.

Can a VAI become an OAI after the fact?

Yes. The Center and District Office review of the EIR and the 483 response can result in the classification being upgraded. A recommended VAI can become a final OAI if the 483 response is deemed inadequate, even without a follow-up on-site inspection. This is documented in published research on inspection classification congruence: roughly 97% of VAI recommendations held, meaning the 3% that did not upgrade typically did so based on the quality of the 483 response.

Knowledge check

An FDA investigator issues a Form 483 with three observations at the closeout meeting. The facility’s 15-day written response addresses two of the three observations with documented CAPAs but is vague on the third. What is the likely consequence?

Show answer

The Center/District review may classify the inspection OAI rather than VAI, based on the inadequate response to the third observation. FDA’s FY2024 warning letters increasingly specify point-by-point why a 483 response failed. An incomplete response is the most common pathway from a recommended VAI to a final OAI without a follow-up inspection.

Summary

An FDA establishment inspection follows a four-phase process: notification and opening, on-site review, closeout with Form 483 (if applicable), and post-inspection response leading to EIR and classification. The three outcomes are NAI (no significant violations), VAI (voluntary correction), and OAI (enforcement action). Approximately 93% of inspected drug facilities reach NAI or VAI; the path to OAI most often runs through an inadequate 483 response rather than findings alone. The EIR is the inspector’s full narrative report, available approximately 3 to 6 months post-inspection, and is a key intelligence resource for peer facilities. Inspection readiness is not a pre-inspection activity: it is the condition of your quality system every day.