Warehouse Controls and Lot Traceability: The GMP Finding That Trips Up Canadian Plants

When companies think about good manufacturing practices, they picture the cleanroom, the batch record and the laboratory. The warehouse rarely gets the same attention. Yet storage and distribution are where a surprising number of inspection findings and recalls begin. A mix-up between quarantined and released stock, a temperature excursion that is never investigated, or distribution records that cannot show where a lot went: each is a GMP failure, and each can turn a minor problem into a national recall.

This article explains what warehouse controls and lot traceability actually require under United States and Canadian GMP, why inspectors keep finding the same gaps, and how to close them before they cost you. It is written for quality and operations leaders at pharmaceutical, biologic and natural health product sites that store, import or distribute finished products and components.

Executive summary

Warehouse controls are the GMP rules for receiving, quarantining, storing and releasing materials and products. Lot traceability is the ability to show exactly where every lot came from and where it went, so a recall can be fast and complete. In the United States, these duties sit in 21 CFR Part 211, mainly sections 211.80 to 211.86 for components and 211.142 and 211.150 for finished products. In Canada, they sit in Part C, Division 2 of the Food and Drug Regulations and in Health Canada's GMP guide, GUI-0001. The rules are not complex, but they are exact, and inspectors check them closely.

What do warehouse controls and lot traceability mean in GMP?

Warehouse controls are the written procedures and physical conditions that govern how a site receives, identifies, quarantines, stores, rotates and releases materials and finished products. Lot traceability is the record system that links every unit to its lot or batch, its components, and every customer it was shipped to. Together they make sure the right product, in the right condition, reaches the right place, and that a defective lot can be pulled back quickly.

Why warehousing and distribution are a quiet compliance risk

Warehousing and distribution feel routine, so controls slip. When they do, the consequences are large: product stored outside its approved conditions, released stock mixed with quarantined stock, or a recall that cannot reach every customer because distribution records are incomplete.

The pattern shows up in enforcement. United States FDA warning letters regularly cite weak quality oversight of materials, storage and records alongside release and testing failures. A warning letter published in 2026, for example, faulted an overseas drug maker for releasing batches without full identity and strength testing and for relying on supplier certificates of analysis without verifying them. The common thread is a quality unit that does not control what happens to materials and products once they are in the building. We examine the broader supplier and contractor oversight pattern in our article on FDA supplier-oversight accountability.

Canadian recalls make the traceability point. Lot traceability decides how wide and how fast a recall must be. When a single contaminated ingredient reaches hundreds of products, only clean lot records let a company recall the affected lots instead of everything. We examined exactly this in the pistachio Salmonella recall, where one ingredient cascaded across roughly 300 products.

What the rules require

Receiving and quarantine

Under 21 CFR 211.82, components, containers and closures must be examined on receipt and held in quarantine until they have been tested or examined and released by the quality control unit. 21 CFR 211.80 requires written procedures and a distinctive code for each lot, with each lot identified as quarantined, approved or rejected. 21 CFR 211.84 says a lot must be withheld from use until it is sampled, tested or examined and released. Health Canada's GUI-0001 sets the same expectation: on receipt, materials are accounted for, documented, labelled and held in quarantine until released by quality control.

Storage conditions and segregation

21 CFR 211.142 requires finished products to be quarantined before release and stored under appropriate conditions of temperature, humidity and light so their identity, strength, quality and purity are not affected. 21 CFR 211.42 requires defined storage areas that prevent mix-ups. GUI-0001 requires materials to be stored separately from immediate manufacturing areas, with controls that ensure batch segregation and stock rotation. Temperature excursions must be detected and investigated, not ignored.

First-in, first-out and stock rotation

21 CFR 211.86 requires approved components to be rotated so the oldest approved stock is used first, and 21 CFR 211.150 requires that the oldest approved stock of a finished product is distributed first. Deviations are allowed only when they are temporary and appropriate. First-in, first-out is not only an efficiency habit. It is a GMP requirement that protects products from expiring in storage or being shipped out of sequence.

Lot traceability and distribution records

21 CFR 211.150 requires a system by which the distribution of each lot can be readily determined to facilitate recall, and 21 CFR 211.196 requires distribution records showing the product, strength, quantity, lot or control number, date and consignee. In Canada, Food and Drug Regulations section C.02.012(1) requires a system of control that permits complete and rapid recall of any lot or batch on the market, and section C.02.022 requires records of the sale of each lot or batch sufficient to recall it. Health Canada also expects companies to run recall effectiveness checks and to be able to notify every consignee.

Lot traceability when a recall hits

The test of a traceability system is a recall. Health Canada expects a company to carry out a complete and rapid recall, to notify every consignee who received the affected lot, and to produce recall effectiveness reports. If your distribution records cannot pinpoint which customers received a given lot, you face a choice between a slow investigation and a broad, costly recall of good product. Common CAPA actions after a traceability failure include reconciling distribution records against shipping data, capturing lot numbers at every handoff, and running a mock recall at least once a year to prove the system works.

Traceability is also a reporting matter. Under Vanessa's Law, Canadian recalls and serious risks carry mandatory reporting duties, so a traceability gap is a reporting risk as well as a supply risk. And when a storage or distribution problem points back to a batch, a disciplined batch failure investigation under 21 CFR 211.192 is what separates a contained issue from an expanding one.

The quality unit owns the decision

Behind every warehouse control is the quality unit. Under 21 CFR 211.22, the quality control unit has the responsibility and authority to approve or reject all components, containers, closures, in-process materials and finished drug products. That authority does not stop at the laboratory door. It covers whether a lot may leave quarantine, whether storage conditions were maintained, and whether a product may be distributed. When inspectors find released stock mixed with quarantined stock, or product shipped despite an excursion, they read it as a quality unit that is not in control. Recent FDA warning letters have made the same point about release decisions taken without adequate testing or verification of supplier data. The lesson for warehousing is the same: the quality unit, not the warehouse, decides what moves.

Data integrity reaches the warehouse

Temperature logs, receiving records and distribution records are data, and they must hold up to the same integrity standards as laboratory results. Regulators in Canada, the United States and Europe expect records to be attributable, legible, contemporaneous, original and accurate. A temperature chart with gaps, a receiving log completed days later, or a distribution record that cannot be reconciled with shipping data all raise data integrity concerns on top of the underlying GMP gap. Build warehouse records so that each entry shows who did what and when, and so the record is made at the time rather than reconstructed afterward.

Imported products and the cold chain

Storage control does not begin at your loading dock. For imported drugs, the conditions during international transport and at foreign sites are part of the same chain, and your establishment licence may list those foreign buildings. Confirm that temperature-sensitive products are shipped and held within their approved ranges, that excursions in transit are captured and assessed, and that your importer records tie each received lot back to its foreign source. A cold-chain break that is never investigated is a storage failure, wherever it happened, and it is one an inspector can trace through your receiving records.

Warehouse and distribution GMP audit checklist

• Quarantine received materials and products until the quality unit releases them, with clear physical or system segregation.
• Give every lot a distinctive code and a visible status of quarantined, approved or rejected.
• Define and monitor storage conditions for temperature, humidity and light, and investigate every excursion.
• Enforce first-in, first-out so the oldest approved stock ships first, and document any justified deviation.
• Keep distribution records showing product, strength, quantity, lot number, date and consignee for every shipment.
• Confirm you can identify and contact every consignee of any lot within hours, not days.
• Run a documented mock recall at least once a year and measure its effectiveness.
• Qualify and monitor third-party warehouses and distributors to the same standard as your own site.

Returns, rejects and recalled stock

One corner of the warehouse causes more mix-ups than any other: the place where returned, rejected and recalled stock sits. 21 CFR 211.42 requires separate, defined areas to hold these products so they cannot re-enter the supply chain by mistake, and 21 CFR 211.204 sets out how returned drug products must be identified and assessed before any decision to reprocess or destroy them. Recalled product must be segregated and controlled until its disposition is final. Treat this area as a controlled zone with its own procedures, clear labelling and quality unit sign-off, not as a shelf for anything that does not have an obvious home.

Common inspection findings

• Released and quarantined stock stored together, or status not visible on the material.
• Temperature excursions recorded but never investigated or closed.
• No distinctive lot code, so incoming materials cannot be traced to a shipment.
• First-in, first-out ignored, with older stock left behind newer stock.
• Distribution records that cannot show where a specific lot was shipped.
• Third-party warehouses treated as outside the quality system.
• No mock recall, so the traceability system is never tested until a real recall exposes its gaps.

A worked example: tracing one lot

Imagine a contract packager receives a complaint that a bottle contained the wrong lot's product. With strong traceability, the quality team pulls the batch record, identifies the exact lot, queries the distribution records, and within hours produces the full list of consignees who received it. The recall, if one is needed, is narrow and fast. Without that traceability, the same complaint forces a choice between a slow manual reconstruction and a broad recall of every lot shipped in the period, including good product. The difference is not luck. It is a distribution record system that captures lot numbers at every handoff and can be queried on demand. That system is what an inspector, and a recall, will test.

Frequently asked questions

What is lot traceability in GMP?

Lot traceability is the ability to link every unit of product to its lot or batch, the components used, and every customer it was shipped to. It lets a company determine the distribution of each lot and carry out a fast, complete recall if a problem is found. It is required under 21 CFR 211.150 in the United States and Food and Drug Regulations section C.02.012 in Canada.

What storage conditions does GMP require?

GMP requires products to be stored under conditions of temperature, humidity and light that protect their identity, strength, quality and purity, as set in 21 CFR 211.142. The specific conditions come from the product's approved labelling and stability data. Excursions must be detected and investigated, not simply logged.

Does GMP require first-in, first-out?

Yes. 21 CFR 211.86 and 211.150 require that the oldest approved stock is used and distributed first. Health Canada's GUI-0001 expects stock rotation as well. Deviation is allowed only when it is temporary and appropriate, and it should be documented.

Are third-party warehouses covered by GMP?

Yes. If a third party stores or distributes your product, their controls are part of your quality system. You must qualify them, define responsibilities in a quality or technical agreement, and audit them. An inspector will hold you accountable for a contractor's storage and traceability failures.

How often should we run a mock recall?

At least once a year is common practice, and more often for higher-risk products or after a change to your distribution network. The point is to prove you can identify affected lots, reach every consignee, and measure how effective the recall was, before a real event tests the system.

How do Canadian and United States warehouse rules differ?

They ask for the same outcomes through different sections. The United States uses 21 CFR Part 211, mainly 211.80 to 211.86 and 211.142 and 211.150. Canada uses Part C, Division 2 of the Food and Drug Regulations and GUI-0001. A cross-border site should build one system that satisfies the stricter of the two at each point.

How MFLRC can help

MFLRC helps pharmaceutical, biologic and natural health product companies turn warehousing and distribution from a quiet risk into a documented strength. Through our GMP audit services we run warehouse and distribution gap assessments, mock recalls and third-party warehouse audits. We build SOPs for receiving, quarantine, storage, stock rotation and distribution records, and we strengthen the quality assurance systems that tie them together. If an inspection or a recall has already exposed a gap, we lead the root cause analysis and CAPA so it is closed for good.

Whether you manufacture, import or distribute, we help you prove control of every lot from the loading dock to the customer. Learn more about our pharmaceutical regulatory and quality support.

Conclusion

Warehouse controls and lot traceability are not glamorous, but they decide how a problem ends. A site that quarantines properly, stores to specification, rotates stock and can trace every lot to every customer turns a potential crisis into a targeted, defensible recall. The rules in 21 CFR Part 211 and Health Canada's GUI-0001 are clear, and inspectors know exactly where to look. Audit your warehouse and distribution controls now, test them with a mock recall, and fix the gaps before an inspector or a recall finds them for you.

Sources and references

• US FDA, 21 CFR Part 211 Subpart H, Holding and Distribution (211.142, 211.150).
• US FDA, 21 CFR Part 211 Subpart E, Control of Components and Drug Product Containers and Closures.
• US FDA, Warning Letters database.
• Health Canada, Good manufacturing practices guide for drug products (GUI-0001).
• Health Canada, Drug and natural health product recall guide.