AI-supported validation of computerized systems - QFINITY
QFINITY · Pharmaceutical Engineering

AI does not replace validation. It makes it intelligent.

In ISPE Pharmaceutical Engineering (January/February 2026), Oliver Herrmann and Frank Henrichmann (QFINITY) show how AI is changing the validation of computerized systems - and what its benefits depend on: well-documented processes, precise requirements and structured risk assessments.

The article

AI makes validation intelligent, not obsolete.

Validating computerized systems remains a regulatory cornerstone - resource-intensive and error-prone. The article frames its forecast as conditional: AI can support requirements interpretation, test creation and execution, evidence capture and risk assessment - but its benefit is tied strictly to the quality of the inputs, not to a promise of automation.

AI is only as good as the process, requirements and risk work that comes before it. It automates weak foundations along with everything else - it does not fix them.
What the article says

The key points at a glance.

  • Three preconditions

    Well-documented business processes, precise requirements and structured risk assessments are the prerequisite for any AI-supported validation.

  • Structured digital records

    All validation deliverables must exist as structured digital records - only then can AI deliver traceable, inspection-ready results.

  • AI-enabled tools in use

    AI-enabled tools support requirements interpretation, test creation and execution, evidence capture and risk assessment - embedded in a risk-based framework per GAMP 5.

  • Expected benefit

    Faster validation cycles, higher test coverage including edge cases, more consistent risk assessments and potentially continuous validation instead of a one-off event.

  • Human-in-the-loop

    Accountability, judgment and compliance decisions stay with people. The article explicitly warns against over-reliance on automation without sufficient human oversight.

  • Appropriate, not compulsory

    For small and medium-sized companies, a traditional, document-based approach can remain appropriate and acceptable - full automation is not forced on any organization, whatever its size.

The changing role

From document administrator to Quality Architect.

When AI takes over script creation, test execution and document administration, the work of validation teams shifts away from mechanics toward judgment - business analysis, quality-assuring the inputs and releasing the AI outputs. That shift comes with greater responsibility: the purpose of a validation comes from the process and its intended use, not from the tool - the AI supplies suggestions; judging their suitability remains a human decision.

This is exactly where QFINITY operates - in the middle of each of these shifts, and helping shape them through the leading organizations (ISPE, RQA, ACDM). For us, AI is not hype but the necessary next step: it is here to stay, and it will change fast. Rigor by process understanding and risk, not by tool promises.

Regulatory

Guardrails still taking shape.

Guidance is still limited: the Annex 22 draft excludes generative AI and LLMs for critical GMP applications and permits them for non-critical ones with a qualified human-in-the-loop - with the classification made through a documented risk assessment. On top of that, the AI itself must be verified (reliability, defined limits, consistency), and ICH Q9(R1) reminds us to deliberately address subjectivity and bias in risk management.

EU Annex 22 (draft) ICH Q9(R1) Human-in-the-Loop Verification of the AI Continuous validation
The authors

Written by practitioners of the standard.

Frank Henrichmann, Senior Executive Consultant at QFINITY, is Chair of the GAMP Global Steering Committee and a member of the global GAMP AI SIG. Oliver Herrmann, Founder and CEO of QFINITY, is Chair of the ISPE GAMP Europe Steering Committee, a member of the ISPE AI Community of Practice, and GAMP Track Lead of the ISPE Europe Conference 2026 in Copenhagen. They belong to the small circle of qualified ISPE GAMP trainers - and the article is their own publication, not a third-party article about QFINITY.

GAMP Global Steering Committee GAMP AI SIG ISPE AI Community of Practice GAMP Track Lead - ISPE Europe 2026 Qualified ISPE GAMP trainers
Read the full article in ISPE Pharmaceutical Engineering
Related topics

From thesis to practice.

AI in validation - but on a sound foundation.

We work with you to determine whether processes, requirements and risk assessments are robust enough for AI-supported validation to deliver traceable, inspection-ready results. Free initial consultation, about 30 minutes, directly with one of the authors.

Arrange an initial consultation