{
 "slug": "annex-22-ai-oversight-receipt",
 "topic_id": "TOPIC-120",
 "cluster": "Pharma, Biotech & Clinical Trial GxP Identity",
 "tier": "Tier A",
 "title": "EU GMP Annex 22: when a model reviews the batch record, whose signature releases the product?",
 "summary": "EU GMP is adding a dedicated artificial intelligence annex covering AI in visual inspection, deviation triage and batch record review. It will require provable human oversight. No GMP system currently produces the proof.",
 "lede": "A model reviews four thousand batch record entries and surfaces twelve exceptions. A human accepts its disposition. The eQMS records an approval. Nothing records which model version produced that disposition, what the human was shown, whether they overrode anything, or that they were present at all.",
 "date": "2026-02-03",
 "category": "Developer",
 "author_id": "tobias-lindqvist-rao",
 "tags": [
  "Annex 22",
  "EU GMP",
  "AI in manufacturing",
  "human oversight",
  "batch record review",
  "EU AI Act"
 ],
 "image": "https://cdn.twc.sh/images/igcache/Annex%2022%20AI%20Oversight/1500_900/blog.jpg",
 "schema": "Article",
 "key_takeaways": [
  "EU GMP is bringing AI-assisted visual inspection, deviation triage and batch record review inside the validated-system perimeter.",
  "The operative requirement in any oversight regime is not that a human was assigned — it is that a human decided. Current eQMS data models record assignment.",
  "A GMP AI Oversight Receipt carries model identifier and version, input hash, output hash, human decision and override delta, signed by the decision-maker."
 ],
 "body": [
  {
   "type": "h2",
   "text": "What is actually changing"
  },
  {
   "type": "diagram",
   "kind": "flow",
   "alt": "A model reviews, a human releases, the record shows a status",
   "caption": "The requirement is about a person's oversight. The artefact is a workflow transition.",
   "nodes": [
    {
     "label": "Model triages deviations",
     "note": "or reviews the record"
    },
    {
     "label": "Human reviews the model's output",
     "note": "sometimes briefly",
     "bad": true
    },
    {
     "label": "Release signed",
     "note": "workflow status",
     "bad": true
    },
    {
     "label": "Inspector asks what was reviewed",
     "note": "no record",
     "bad": true
    }
   ]
  },
  {
   "type": "p",
   "html": "EU GMP annexes are the operative detail beneath the GMP principles. Annex 11 governs computerised systems. A new annex addressing artificial intelligence brings model-assisted decisions in GMP operations — visual inspection, deviation triage, batch record review — into that same perimeter, with the validation and oversight expectations that follow."
  },
  {
   "type": "p",
   "html": "At time of writing the text is not final, so this article designs to the obligations that will not change regardless of drafting: attribution, human oversight, audit trail, and the ability to reconstruct a decision. Those four are stable across every AI governance instrument published to date, including Articles 12 and 14 of the EU AI Act."
  },
  {
   "type": "h2",
   "text": "The integration pattern that creates the gap"
  },
  {
   "type": "p",
   "html": "AI is almost never integrated as a new workflow. It is integrated as a pre-processing layer feeding an existing approval workflow, because that is the cheapest path through change control."
  },
  {
   "type": "code",
   "text": "batch_records → [model v2.3.1] → exceptions[] → eQMS approval task → user clicks Approve\n                                                            ↓\n                                              audit_trail: user_id, timestamp, APPROVED"
  },
  {
   "type": "p",
   "html": "The eQMS data model predates the model. It captures who was assigned the task, who completed it, and when. It does not capture the model identifier, the input set, the output set, the exceptions surfaced, which exceptions the human examined, or whether any disposition was overridden — because nothing in the workflow engine has a field for any of that."
  },
  {
   "type": "h2",
   "text": "The unfalsifiability problem"
  },
  {
   "type": "p",
   "html": "Consider two sites. At site A, a reviewer examines every exception, agrees with the model, and approves. At site B, a reviewer approves without opening the exception list. Their audit trails are byte-identical."
  },
  {
   "type": "p",
   "html": "This cuts both ways, and that is the point worth making to an inspector. Site A cannot demonstrate diligence. Site B cannot be distinguished from site A. An oversight claim that cannot be falsified also cannot be evidenced, and a regulator faced with an unevidenced oversight claim on a novel technology will do the conservative thing."
  },
  {
   "type": "blockquote",
   "text": "If the record looks the same whether the human reviewed or not, the record is not evidence of review."
  },
  {
   "type": "h2",
   "text": "The GMP AI Oversight Receipt"
  },
  {
   "type": "p",
   "html": "A canonical statement, signed at the moment of disposition by the reviewing human's hardware credential. Six fields, each discharging a specific obligation."
  },
  {
   "type": "table",
   "head": [
    "Field",
    "Content",
    "Obligation it discharges"
   ],
   "rows": [
    [
     "<code>model</code>",
     "Model identifier, version, validation state reference",
     "Traceability of the decision aid; validation status at time of use"
    ],
    [
     "<code>input_hash</code>",
     "Hash of the record set submitted for review",
     "Reconstruction: exactly which records the model examined"
    ],
    [
     "<code>output_hash</code>",
     "Hash of the model's full disposition set",
     "The machine output, fixed before human involvement"
    ],
    [
     "<code>exceptions</code>",
     "Hash of the exception list presented to the human",
     "What the human was actually shown"
    ],
    [
     "<code>decision</code>",
     "Accept, reject, or modified disposition",
     "The human act"
    ],
    [
     "<code>override_delta</code>",
     "Structured diff where the human disposition differs",
     "Evidence of genuine review, and a governance metric in its own right"
    ]
   ]
  },
  {
   "type": "p",
   "html": "The statement is canonicalised under RFC 8785 and signed with user verification required, then countersigned by the issuer so it verifies offline. An inspector can check it without access to your eQMS and without trusting your administrators."
  },
  {
   "type": "h2",
   "text": "Override delta as a governance metric"
  },
  {
   "type": "p",
   "html": "The override delta is the field that does the most work after deployment. Track its rate per reviewer per month and you get a signal that no other instrumentation provides."
  },
  {
   "type": "ul",
   "items": [
    "A sustained zero override rate across all reviewers is not evidence that the model is perfect. It is a prompt to check whether review is occurring.",
    "A reviewer whose override rate diverges sharply from peers is either catching something or misunderstanding the model. Both are worth knowing.",
    "A step change in override rate following a model version bump is your earliest signal of drift, arriving well before a batch-level outcome does."
   ]
  },
  {
   "type": "p",
   "html": "None of that is available today, because the disposition and the override are not recorded as distinct events."
  },
  {
   "type": "h2",
   "text": "Mapping to the obligations you already have"
  },
  {
   "type": "table",
   "head": [
    "Instrument",
    "Obligation",
    "Field that discharges it"
   ],
   "rows": [
    [
     "EU AI Act Art. 12",
     "Automatic recording of events over the system lifetime",
     "<code>input_hash</code>, <code>output_hash</code>, timestamp"
    ],
    [
     "EU AI Act Art. 14",
     "Effective oversight by natural persons",
     "<code>decision</code>, <code>override_delta</code>, signer identity"
    ],
    [
     "EU GMP Annex 11",
     "Computerised system controls and audit trail",
     "Full receipt, countersigned and offline-verifiable"
    ],
    [
     "ICH Q9(R1)",
     "Risk-proportionate decision documentation",
     "<code>exceptions</code> scope and disposition basis"
    ]
   ]
  },
  {
   "type": "h2",
   "text": "Deploy it before the annex lands, not after"
  },
  {
   "type": "p",
   "html": "The commercial argument is simple and worth stating plainly to the people who fund this. The first thing a regulator does when it doubts an AI-assisted process is require reversion to the prior manual process. That reversion destroys the entire business case for the deployment, which is usually a cycle-time saving measured in weeks per batch."
  },
  {
   "type": "p",
   "html": "Building the evidence layer now protects the investment. Building it after an inspection finding is remediation, and remediation is always more expensive than design."
  },
  {
   "type": "h2",
   "text": "Three GMP applications, one missing artefact"
  },
  {
   "type": "table",
   "caption": "Where AI is entering GMP",
   "head": [
    "Application",
    "Oversight question"
   ],
   "rows": [
    [
     "Automated visual inspection",
     "Who confirmed the reject and accept decisions?"
    ],
    [
     "Deviation triage",
     "Who agreed with the classification?"
    ],
    [
     "<strong style=\"font-weight:600\">Batch record review</strong>",
     "<strong style=\"font-weight:600\">What did the reviewer actually examine?</strong>"
    ],
    [
     "Trend detection",
     "Who assessed the signal?"
    ]
   ]
  },
  {
   "type": "h2",
   "text": "Objections and honest limits"
  },
  {
   "type": "p",
   "html": "<strong style=\"font-weight:600\">“The annex is not final, so it is early to build.”</strong> Recording what a reviewer was shown costs nothing to add and cannot be created retrospectively. Building it now is cheaper than validating a change under a deadline later."
  },
  {
   "type": "p",
   "html": "<strong style=\"font-weight:600\">“Our validation covers the model.”</strong> Validation establishes the model performs as intended. Oversight is a different requirement about what a human did with its output, and it needs a different artefact."
  }
 ],
 "faq": [
  {
   "q": "Is Annex 22 final?",
   "a": "No. At the time of writing it is in development, which is why this article designs to the stable obligations — attribution, oversight, audit trail, reconstruction — rather than to draft wording that may change."
  },
  {
   "q": "Does the receipt contain batch data?",
   "a": "No. It carries one-way hashes of the record set and the model output, plus a structured diff of the human override. The underlying data never leaves the site."
  },
  {
   "q": "What if we use AI only for visual inspection?",
   "a": "The same structure applies. The input hash covers the image set, the output hash covers the classification set, and the override delta records images the human reclassified."
  },
  {
   "q": "Does this make us compliant with Annex 22?",
   "a": "No artefact makes anyone compliant. This produces evidence for an oversight claim you will have to make either way, in a form an inspector can verify independently."
  },
  {
   "q": "Does model validation satisfy an oversight requirement?",
   "a": "No. Validation shows the system performs as intended. Oversight is about what a human did with its output."
  },
  {
   "q": "What is the cheapest thing to build now?",
   "a": "A digest of what the reviewer was shown, captured per decision. It cannot be created retrospectively."
  },
  {
   "q": "Why do override rates matter?",
   "a": "Because a review process with no disagreements is evidence that the oversight is nominal."
  }
 ],
 "sources": [
  {
   "t": "EudraLex Volume 4 — EU GMP guidelines",
   "u": "https://health.ec.europa.eu/medicinal-products/eudralex/eudralex-volume-4_en"
  },
  {
   "t": "Regulation (EU) 2024/1689 (AI Act) — consolidated text",
   "u": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj"
  },
  {
   "t": "ICH Q9(R1) — Quality Risk Management."
  },
  {
   "t": "RFC 8785 — JSON Canonicalization Scheme",
   "u": "https://www.rfc-editor.org/rfc/rfc8785"
  }
 ],
 "related": [
  {
   "slug": "part-11-signature-evidentiary-ladder",
   "title": "A username and a password: what a GxP signature proves",
   "category": "AEO"
  },
  {
   "slug": "scope-of-review-statement",
   "title": "Review by exception: what did the release signature attest to?",
   "category": "Developer"
  },
  {
   "slug": "ambient-scribe-attestation",
   "title": "Who signed the note the model wrote?",
   "category": "Vertical"
  }
 ],
 "wordcount": 1135,
 "url": "/blog/annex-22-ai-oversight-receipt.html",
 "reading_time": "5 min read",
 "image_title": "Annex 22 AI Oversight",
 "seo_title": "EU GMP Annex 22: whose signature releases the batch?",
 "meta_description": "EU GMP is adding a dedicated artificial intelligence annex covering AI in visual inspection, deviation triage and batch record review.",
 "hub": {
  "slug": "topics/gxp-identity",
  "title": "Pharma and GxP identity"
 },
 "answer": "A named human's, and the evidence that they exercised oversight does not currently exist. EU GMP is adding a dedicated artificial intelligence annex covering AI in visual inspection, deviation triage and batch record review, and it will require provable human oversight that no GMP system produces today.",
 "answer_q": "When a model reviews the batch record, whose signature releases the product?",
 "glossary": [
  {
   "term": "Annex",
   "def": "A section of the EU GMP guidelines addressing a specific area, which the AI annex will join."
  },
  {
   "term": "Human oversight",
   "def": "A person's meaningful involvement in a decision — the requirement, as distinct from validation of the system."
  },
  {
   "term": "Deviation triage",
   "def": "Classifying deviations by significance, increasingly assisted by automated systems."
  }
 ],
 "checklist": {
  "title": "Preparing for an AI annex",
  "id": "annex",
  "desc": "Four steps.",
  "steps": [
   {
    "name": "Inventory where AI already touches GMP decisions.",
    "text": "Most sites find more than they expected."
   },
   {
    "name": "Record what the human was shown.",
    "text": "A digest of the rendered output, per decision."
   },
   {
    "name": "Capture agreement and disagreement separately.",
    "text": "Override rates are the evidence oversight is real."
   },
   {
    "name": "Bind the release signature to both.",
    "text": "The record and the oversight decision."
   }
  ]
 },
 "cta": {
  "title": "Where this fits in Manav",
  "html": "Manav binds the signer to the exact record being certified, on a credential under their sole control, and produces a receipt an inspector or a partner can verify without access to the originating system.",
  "href": "../docs.html",
  "label": "See signature binding"
 }
}