Thermal Validation

Autoclave

Prepared by
Ahmed Elsayed
• Linked in :
[Link]
• E-Mail: ahmedelsayed063@[Link]
 Introduction to Thermal Validation
What is it?
• Thermal validation is the process of proving that an autoclave (steam sterilizer) can
consistently deliver the required lethality (F₀) to achieve sterility assurance level (SAL,
usually 10⁻⁶) for all types of loads.
• It ensures compliance with ISO 17665, EN 285, EU GMP Annex 1, PDA TR 1, and other
regulatory guidelines.

Why is it important?
• Patient Safety: Ensures all microbial contamination is inactivated.
• Regulatory Compliance: Required for GMP/FDA/EMA approval.
• Process Consistency: Demonstrates repeatability and robustness.
• Parametric Release: Enables release based on cycle parameters rather than sterility testing alone.
 Stages of Autoclave Validation
1. URS (User Requirement Specification)
Define what the autoclave must achieve (scope, loads, SAL target, acceptance criteria).
2. Risk Assessment (FMEA / Quality Risk Management)
Before design confirmation, perform Failure Modes and Effects Analysis (FMEA) Identify potential
failure modes
3. DQ (Design Qualification)
Confirm the selected design meets URS and regulatory requirements.
4. IQ (Installation Qualification)
Verify installation (utilities, calibration, documentation, materials).
5. OQ (Operational Qualification)
• Prove the autoclave operates correctly:
• Steam Quality (dryness, superheat, NCGs).
• Leak test & Bowie–Dick test.
• Heat Distribution (empty chamber, uniformity).
6. PQ (Performance Qualification / Heat Penetration)
• Validate sterilization effectiveness with real loads.
• Place Thermocouples (TCs) and Biological Indicators (BIs) at worst-case locations.
• Acceptance: F₀ ≥ target at cold spots, all BIs negative, no wet packs.

7. PPQ (Process Performance Qualification)

• Demonstrate reproducibility across multiple runs, different load patterns, shifts, and
operators.
8. Ongoing Monitoring / CPV
Continuous Process Verification: trending F₀, steam quality,
CIs/BIs, wet-pack rate.
Annual requalification or after major changes.
1) What is a URS?
A User Requirement Specification defines what the user needs from the equipment
(autoclave).
It is the foundation for:
• Vendor selection and design qualification (DQ).
• Later IQ/OQ/PQ protocols.
• Setting acceptance criteria for validation and operations.
Think of URS as “the contract” between the user’s process needs and the vendor’s
technical solution.

In short: URS translates business, regulatory, and technical needs into measurable requirements.
2) Typical Contents of an Autoclave URS
A) General Information
• Type of autoclave (steam sterilizer, pre-vacuum, pass-through).
• Intended use: porous/hard goods, liquids, ampoules, lyophilized vials, media.
• Standards & guidelines to comply with (ISO 17665, EN 285, Annex 1).
• Location: loading/unloading areas, cleanroom grades.
B) Capacity & Chamber Design
• Chamber volume (e.g., 600 L).
• Dimensions (WxHxD).
• Shelves, trolleys, racks.
• Single door or double-door (pass-through).
• Surface finish (316L SS, Ra ≤0.6 µm).
C) Utilities
• Clean steam: dryness ≥0.95, superheat ≤25 °C, NCGs ≤3.5%.
• Cooling water, compressed air, electrical supply.
D) Functional Requirements
• Cycle types:
• Porous load (pre-vacuum, fast exhaust, drying).
• Liquid load (load probe control, slow exhaust).
• Bowie–Dick, Leak test.
• Exposure start: based on last load sensor reaching setpoint (not chamber only).
• Automatic F₀ calculation.
• Alarms for deviations (temperature, pressure, BI/CI failures).
E) Performance Requirements
• Heat distribution uniformity: ±1 °C.
• Heat penetration: F₀ ≥ target at cold spots.
• BIs: Geobacillus stearothermophilus 10⁶ spores = no growth.
• CIs: correct endpoint.
• No wet packs (porous loads).
• Repeatability across 3 consecutive runs.
3) Example — URS for Implementation
Background
Company XYZ wants an autoclave for both porous surgical goods and liquid vials (up to 10
mL). The device must support parametric release.
Draft URS (Extracts)
Scope
• Autoclave for sterilization of:
• Pours textiles, instruments, and rigid containers.
• Small volume liquid vials (2, 5, 10 mL).
• Location: between Grade C (loading) and Grade B (unloading).
• Double-door, pass-through system.
Chamber
• 600 L capacity, 316L stainless steel, Ra ≤0.6 µm.
• Sloped drain, 4 removable shelves.
• Electropolished finish.
Utilities
• Clean steam at 3–4 bar.
• Steam quality: dryness ≥0.95, superheat ≤25 °C, NCGs ≤3.5%.
• Compressed air 6 bar (door gaskets, valves).
• Cooling water loop available.
Functional Requirements
• Cycles: porous load (121 °C, drying 20 min), liquids (121 °C, slow exhaust), Bowie–Dick,
Leak test.
• Load probe required for liquid cycles.
• PLC + HMI with 21 CFR Part 11 compliance.
• Automatic calculation of F₀.
• Exposure start rule: “last load sensor stable in setpoint band.”
• Alarm system for deviations
Performance Criteria
• Heat distribution: ±1 °C across chamber.
• F₀ target = ≥18 at cold spot (Overkill 12D, D121=1.5 min).
• All BIs (10⁶ spores) = No growth.
• All CIs = Endpoint color change.
• No wet packs.
• 3 repeatable runs per load configuration.
Compliance & Data
• Electronic batch records with T/P curves.
• Audit trails for all changes.
• Secure data storage for 5 years.
 2. Risk Assessment
• Regulatory guidelines (ICH Q9, ISO 17665, EU GMP Annex 1) emphasize risk-based
validation
• Before we lock a cycle design, we must understand:
➢What could fail?
➢How bad would it be (Severity)?
➢How often could it happen (Occurrence)?
➢How easy is it to detect (Detection)?

Output = Critical Process Parameters (CPPs) & Critical Quality Attributes (CQAs) to monitor
and control during OQ/PQ/CPV.
 CPP /
Failure Mode Effect Cause Control / Mitigation S O D RPN
CQA
Cold spots → under- Boiler issue / piping leaks / (CPP) Steam NCG test ≤3.5% (EN 285), Bowie-
High NCGs in steam 9 4 6 216
kill poor air removal quality Dick, OQ + trending in CPV

Steam not
Inadequate air Vacuum pump failure / door Sterility Daily Bowie-Dick, leak test ≤1
penetrating lumens 9 3 4 108
removal gasket leak (CQA) mbar/min, PQ with PCDs
→ residual bioburden

Control pressure drop ratio ≤2:1,

Reduced lethality Rapid depressurization / F₀ accuracy
Superheated steam humidity >40% for textiles, OQ 8 3 5 120
(dry heat effect) poor load pre-conditioning (CPP)
pressure-temp correlation

Wet loads →
Excess condensate Poor separators, defective Dryness Steam dryness test ≥95%, load
compromised SBS, 7 4 6 168
(wet steam) steam traps (CQA) dryness test at PQ
recontamination
Load
Cold spots in Incomplete Poor temp distribution, Chamber mapping (≥12 sensors),
penetration 9 2 4 72
chamber sterilization faulty sensor PQ 3 consecutive runs
(CQA)
Temperature/
Incorrect Fo False acceptance of Calibrated probes (traceable), Fo
Wrong z-value / sensor drift Pressure 8 2 5 80
calculation cycle cross-check with BI kill
monitoring

Undetected process Expired indicators / wrong ISO 11138-compliant BIs, ISO

BI/CI false negatives CQA 9 2 3 54
failure placement 11140 CIs, strategic placement
Load
Load configuration Reduced steam Overloading / mixed load Defined load patterns in PQ,
penetration 8 3 4 96
variation penetration types operator training
(CQA)
Loss of sterility post- ISO 11607 SBS validation, post-
Packaging failure Damaged SBS / wet packs CQA 7 3 5 105
process PQ package integrity test

Infrequent Process drift over Annual requalification (ISO 17665

Lack of periodic PQ CPP 8 2 6 96
requalification time §12.5), trending deviations
Why Risk Assessment is Critical
• Ensures validation focuses on real risks (NCGs, cold spots, wet packs), not just “paper
testing.”
• Defines where to put TCs/BIs in PQ (worst case = highest RPN).
• Guides ongoing monitoring (steam quality, BD/Leak, F₀ trending).
• Makes validation lifecycle fully risk-based and GMP compliant.
 Where to control NCGs in the validation lifecycle
URS
• Specify steam quality requirements (NCGs ≤ 3.0–3.5%, dryness ≥0.95, superheat ≤ +25
°C).
• Require a steam quality sample port and a documented test method.
DQ (Design Qualification)
• Review P&IDs: steam separator before sterilizer, correctly sized steam trap(s), sloped
lines, air vents at high points, sample port location close to chamber inlet.
• Ensure boiler/clean steam generator capability and condensate return design minimize
air ingress.
• Agree test frequency and alarm/response plan.
IQ (Installation Qualification)
• Verify installation vs. DQ (separator/traps, insulation, valves, vents).
• Calibrate pressure/temperature transmitters; confirm sample port is accessible and
tagged.
OQ (Operational Qualification)
• Perform NCG testing (method below) at the sterilizer sample port.
• Run Leak test and Bowie–Dick (correlates with air removal risk).
• Confirm T–P correlation (to catch superheat/entrained gases).

PQ (Performance Qualification)
• Place TCs/BIs at worst-case positions (near drain, dense packs, lumens).
• If NCGs are high, you’ll often see slow come-up / lower F₀ at cold spots → cycle fails.
• Prove F₀@cold spot ≥ target with All BIs negative.
PPQ & CPV (Ongoing)
• Trend NCG results (control chart), link excursions to F₀ dips/wet-pack events.
• Define Warning and Action limits and the response/CAPA.
 Design Qualification (DQ)
➢ Design Qualification (DQ) is the documented verification that the design of the
autoclave is suitable for its intended use and meets the User Requirement
Specification (URS) as well as regulatory standards.
• It ensures the equipment design will support:
• Sterility assurance (SAL 10⁻⁶).
• GMP and ISO 17665 compliance.
• Safe and reproducible operations.
Think of it as the blueprint check: does the autoclave’s design cover all user, process,
and regulatory needs before it’s built or installed?

2) Objectives of DQ
• Confirm that URS requirements are translated into the design.
• Ensure compliance with ISO 17665, EN 285, EU GMP Annex 1, PDA TR 1.
• Identify and resolve design gaps early.
• Approve technical drawings, specifications, and control logic.
• Provide a baseline for IQ/OQ testing later.
3) Key Elements of Autoclave DQ
A) General Requirements
• Autoclave type: gravity, pre-vacuum, pass-through (double door).
• Chamber capacity & intended load types (porous, hard goods, liquids).
• Compliance: ISO 17665, EN 285, 21 CFR Part 11 (data integrity).
B) Mechanical Design
• Chamber construction: stainless steel 316L, Ra ≤0.6 µm, electropolished.
• Drain location: lowest point, sloped for condensate removal.
• Jacket design for temperature uniformity.
• Doors: single/double door, safety interlocks, cleanroom pass-through.
C) Utilities & Piping
• Steam: clean steam supply, must allow testing for dryness, NCGs, superheat.
• Piping: slopes, air vents at high points, properly located steam traps.
• Cooling water & compressed air specifications.
D) Control & Automation
• PLC/HMI with SCADA integration.
• Exposure start rule: hold begins when last load sensor reaches setpoint.
• Alarms & interlocks for deviations.
• Audit trail and electronic signatures (21 CFR Part 11).
E) Instrumentation
• Chamber and drain temperature sensors (accuracy ±0.5 °C).
• Pressure transmitters.
• Ports for validation thermocouples (≥12–20).
• Steam quality sample port.
F) Safety
• Pressure relief valves.
• Emergency stop buttons.
• Door interlocks: cannot open under unsafe pressure/temperature.
G) Documentation
• P&IDs (piping and instrumentation diagrams).
• GA (general arrangement) drawings.
• Vendor manuals and certificates.
• FAT (Factory Acceptance Test) / SAT (Site Acceptance Test) plans.
• Example of DQ Implementation (Case Study)
Background
Pharma company needs a 600 L double-door autoclave for sterilizing porous loads (surgical
packs) and liquid vials (up to 10 mL). URS requires:
• Steam quality testing (dryness, NCGs, superheat).
• 21 CFR Part 11 compliance.
• Uniformity ±1 °C.
• F₀ ≥18 at cold spots.
• Parametric release capability.
Step 1: Review Vendor Proposal
• Vendor offers: 600 L chamber, SS 316L, double-door, jacketed, PLC with audit trail.
• Matches URS on chamber size, finish, and double-door pass-through.
Step 2: Check P&IDs & GA Drawings
• Drain located at lowest point → complies.
• Steam traps & separator shown on P&ID → aligns with steam quality control.
• Sample port near chamber inlet for steam testing → meets URS.
Step 3: Control System Review
• PLC with 21 CFR Part 11 audit trail → matches compliance.
• Exposure rule (hold starts when last load probe reaches setpoint) → critical for validation.
• Alarm: chamber-drain deviation >1 °C triggers abort → risk control.
Step 4: Instrumentation
• 2 built-in RTDs (chamber & drain), ±0.5 °C accuracy.
• 20 spare TC ports for PQ studies.
• Steam quality test connection provided.
Step 5: Gap Analysis
• URS required up to 4 pre-vacuum pulses; vendor design default = 3.
• Resolution: vendor software modified to allow up to 4 pulses.
Step 6: Approval
• DQ signed off by Validation, QA, Engineering.
• Design “frozen” for fabrication & FAT.
Deliverables of DQ
• DQ Protocol (plan and responsibilities).
• Traceability Matrix: URS requirement → Design feature → Compliance.
• Approved P&IDs, GA drawings, technical specs.
• Gap analysis & resolution records.
• DQ Report with final sign-off.

Why DQ Matters
• Prevents costly design changes later.
• Embeds compliance and risk controls into the equipment from day one.
• Provides auditors clear evidence that the system was designed fit-for-purpose.
Example: approving the 4th pre-vacuum pulse in DQ saved the company from cycle
failures in PQ.

Design Qualification = documented proof that the autoclave design is fit for purpose,
compliant with URS/regulations, and risk-controlled before fabrication or installation.
URS Requirement Design Feature (Vendor Proposal) Compliance Evidence / Test
Chamber 600 L, 316L SS, electropolished, Ra GA drawing, Material certificate, FAT visual
Chamber capacity ≥600 L, SS 316L, Ra ≤0.6 µm
≤0.5 µm inspection
Double-door with interlock (cannot open both
Double-door, pass-through, GMP interlocks P&ID, FAT functional test, IQ verification
sides)

Steam quality control (NCGs ≤3.5%, dryness Steam separator, traps, sample port near P&ID, OQ steam quality test, calibration
≥0.95, superheat ≤25 °C) chamber inlet certificates

Software updated to allow 1–4 pre-vacuum

Pre-vacuum cycles (up to 4 pulses) FAT test reports, SAT verification
pulses
Cycle types: Porous, Liquids (slow exhaust), BD,
PLC programmed with 4 cycle families FAT cycle execution, IQ verification
Leak test

Exposure start: last load probe stable at setpoint PLC logic modified for load-based hold start Functional specification, OQ validation

F₀ calculation in real time PLC algorithm calculates F₀, z=10 °C default FAT software test, PQ correlation with BI results

Chamber & drain sensors (accuracy ±0.5 °C) 2 RTDs installed, calibrated ±0.2 °C Calibration certificates, IQ check

≥20 spare thermocouple ports for PQ Validation port manifold included FAT inspection, PQ sensor mapping

21 CFR Part 11 compliance (audit trail, e- SCADA/HMI with secure login, audit trail
Vendor software validation, OQ test
signatures) enabled

Safety: pressure relief, emergency stop, door Relief valve rated, E-stop both sides, interlock
FAT safety test, IQ verification
cannot open under pressure tested
• what the user needs (URS).
• how the design addresses it (Design Feature).
• how we prove it during FAT/IQ/OQ (Compliance Evidence).

This matrix becomes part of the DQ Report and shows auditors a clear line of sight:
requirement → design → test.
 Factory Acceptance Test
Definition:
• FAT = pre-delivery test performed at the vendor’s manufacturing site before the autoclave
is shipped.
• Purpose = verify the equipment is manufactured, assembled, and functions according to
URS/DQ requirements.
Typical FAT scope for autoclaves:
• Documentation check: DQ approved, manuals, calibration certs.
• Mechanical inspection: chamber dimensions, finish, drain slope.
• Utility connections (steam, water, air, power) simulated.
• Basic cycle runs (dry cycles) to verify PLC/HMI function.
• Safety checks: door interlocks, emergency stop, pressure relief.
• Control system demo: alarms, audit trail, recipe handling.
• Review of P&IDs, GA drawings, wiring diagrams.
FAT is a dry-run validation rehearsal before delivery — it reduces surprises at the user
site.
Where & When
• Conducted at the vendor’s facility, before shipment.
• Happens after Design Qualification (DQ) is approved and the autoclave is
manufactured/assembled.
Purpose
• Confirm the equipment was built according to URS & DQ.
• Detect and fix problems before shipment (cheaper and faster than fixing on site).
• Provide confidence to user QA/Validation that the autoclave is ready for delivery.
Scope
[Link] Review
1. URS vs. DQ compliance check.
2. Certificates: chamber material (316L SS), weld maps, pressure tests.
3. Calibration certificates (sensors, transmitters).
4. Vendor manuals & P&IDs.
[Link] Verification
1. Chamber dimensions, surface finish (Ra ≤ 0.6 µm).
2. Door(s): safety interlocks, gasket sealing, smooth operation.
3. Drain slope and jacket piping.
4. Shelves/trolleys installation.
[Link] Simulation
1. Simulated clean steam (or industrial steam).
2. Cooling water flow.
3. Compressed air pressure for door gasket.
4. Electrical power and HMI operation.
[Link] System Checks
1. PLC & HMI functions.
2. Recipe library (Porous load, Liquids, BD, Leak test).
3. Alarms/interlocks: e.g., chamber vs. drain deviation.
4. Audit trail & electronic signatures (21 CFR Part 11).
[Link] Test Runs
1. Empty chamber cycles at 121 °C and 134 °C.
2. Verify uniform heating (at least 4–6 sensors).
3. Short BD/Leak simulation runs.
Deliverables
• FAT Protocol (test plan).
• FAT Report (signed by vendor + user QA/Validation).
• Deviations noted, corrective actions documented.
 Site Acceptance Test
Definition:
• SAT = post-delivery test performed at the user’s site after installation, but before
IQ/OQ.
• Purpose = confirm the autoclave was delivered, installed, and connected
correctly in its final environment.
Typical SAT scope:
• Verify chamber and components survived shipping (no damage).
• Check installation matches approved GA/P&ID (drain, utilities, wiring).
• Power up autoclave, check PLC/HMI screens, alarms, communication.
• Utility verification: steam pressure, cooling water, compressed air.
• Safety interlocks tested in situ (doors, emergency stop).
• Run a short functional cycle to confirm readiness for IQ.

SAT = “Does the equipment work here, in my site, before we start IQ/OQ?”
Where & When
• Conducted at the user’s facility, after equipment delivery and installation.
• Happens before IQ (Installation Qualification) starts.
Purpose
• Confirm autoclave is delivered, installed, and connected correctly.
• Check it functions in the actual operating environment with site utilities.
• Bridge between FAT and IQ.
Scope
[Link] & Installation Check
1. Autoclave delivered without damage (chamber inspection).
2. Correct orientation (loading/unloading sides aligned with cleanroom grades).
3. Anchoring, leveling, vibration check.
[Link] Connection Verification
1. Steam supply: correct pressure/flow (3–4 bar for saturated steam).
2. Cooling water: flow/temperature.
3. Compressed air: stable 6 bar for door gasket.
4. Electrical connections: PLC/HMI powered up.
5. Steam sample port installed and tagged.
1. Safety Features
1. Door interlocks (cannot open under pressure/temp).
2. Pressure relief valves tested.
3. Emergency stop buttons tested.
2. Functional Checks
1. PLC/HMI startup and communication.
2. Test alarms: simulate door open, sensor fault.
3. Run a short 121 °C cycle (empty chamber).
4. Confirm chamber vs. drain correlation (evidence of saturated
steam).

Deliverables
• SAT Protocol (planned tests).
• SAT Report (signed).
• Deviations noted and resolved before IQ.
FAT vs. SAT — Key Differences

Aspect FAT (Vendor site) SAT (User site)

Location Vendor’s factory User facility
Manufacturing quality, design
Focus Installation quality, site utilities
compliance
Actual site utilities (clean steam,
Utilities Simulated (vendor-provided)
water, air)
Goal Ensure ready to ship Ensure ready for IQ/OQ
Outcome FAT report SAT report
 Installation Qualification (IQ)
• Installation Qualification (IQ) is the documented verification that the autoclave has been
delivered, installed, and configured according to:
• The approved Design Qualification (DQ),
• User Requirement Specification (URS), and
• regulatory/GMP requirements.

Simply: IQ confirms the autoclave is installed correctly, with all utilities, instruments,
and safety features in place, before moving to OQ/PQ.

Objectives of IQ
• Ensure the autoclave installation matches the approved design.
• Verify that all critical components (chamber, utilities, safety systems) are present,
installed, and documented.
• Provide baseline evidence for calibration, maintenance, and future qualification.
 Key Elements of IQ for Autoclave
A) Documentation Review
• Approved URS/DQ and vendor manuals available.
• Installation drawings: GA (General Arrangement) and P&IDs (Piping & Instrumentation
Diagrams).
• Certificates: material (e.g., SS 316L), weld/fabrication, chamber pressure test.
• FAT/SAT reports on delivery/assembly.
B) Physical Verification
• Chamber construction: SS 316L, Ra ≤0.6 µm, electropolished.
• Doors: correct type (single/double, interlocks working).
• Drain: lowest point, sloped to allow condensate removal.
• Shelves/trolleys: installed as per specification.
C) Utilities
• Steam supply: correct pressure/flow, clean steam generator connection.
• Steam sample port: installed at chamber inlet (for NCG/dryness/superheat tests).
• Cooling water: flow/pressure within spec.
• Compressed air: for door gaskets and valves, pressure verified.
• Electrical supply: PLC/HMI powered, alarms functional.
D) Instrumentation & Calibration
• Chamber & drain RTDs (calibration certificates, accuracy ±0.5 °C).
• Pressure transmitters calibrated.
• Data recorder/SCADA system verified (21 CFR Part 11 ready).
• Extra thermocouple ports available for PQ.
E) Safety Features
• Pressure relief valves installed & certified.
• Emergency stop buttons tested (both sides if pass-through).
• Door interlocks: cannot open when chamber under pressure/temp.
F) Ancillary Items
• Spare parts list delivered.
• Preventive maintenance plan available.
• Operator manuals, SOP drafts, training materials.
 Example — IQ Implementation (Case Study)
Background: A 600 L double-door autoclave delivered to a Grade C loading / Grade B
unloading cleanroom.
Step 1 – Documentation
• URS/DQ available and signed.
• Vendor provides chamber certificate (316L, Ra=0.5 µm), weld map, pressure test report.
• FAT passed; SAT completed at site.
Step 2 – Physical Verification
• Chamber size measured: 600 L (within ±2%).
• Double doors installed with interlocks.
• Drain confirmed at lowest point with slope.
Step 3 – Utilities
• Steam connection from clean steam generator at 3.5 bar.
• Sample port installed and tagged.
• Cooling water flowmeter calibrated (spec: 200 L/hr).
• Compressed air pressure 6 bar, stable.
Step 4 – Instrumentation
• 2 RTDs calibrated ±0.2 °C.
• 1 pressure transmitter calibrated ±0.05 bar.
• 20 TC ports available.
• SCADA tested → secure login, audit trail enabled.
Step 5 – Safety
• Relief valve tagged, certified at 4 bar.
• Emergency stop works from both sides.
• Doors cannot open under pressure.
Step 6 – Documentation & Handover
• IQ Protocol completed, all checklists signed.
• Deviation: none.
• IQ Report approved by Engineering, Validation, QA.
5) Deliverables of IQ
• IQ Protocol (with step-by-step checks).
• As-built drawings (GA, P&ID).
• Calibration certificates for sensors/instruments.
• Material & weld certificates for chamber.
• Utility verification records.
• Safety test records.
• IQ Report signed off by QA, Engineering, Validation.
Important of IQ
• Prevents installation errors (wrong utility connection, missing steam port, bad
interlocks).
• Ensures safety & compliance from day one.
• Provides baseline for OQ (operational testing) and PQ (performance testing).
• Satisfies auditors: equipment was installed “as designed” and ready for
qualification.
 Operational Qualification
• Operational Qualification (OQ) = documented evidence that the autoclave operates
correctly within its specified ranges and can achieve controlled, repeatable
conditions.
• OQ comes after IQ (installation checks) and before PQ (performance with real loads).
It answers: “Does the autoclave function properly under empty or controlled
conditions?”

Objectives of OQ
• Verify all critical operating functions (temperature, pressure, vacuum, drying).
• Demonstrate steam quality meets acceptance criteria.
• Confirm chamber environment uniformity under operating conditions.
• Test safety interlocks and alarms.
• Establish baseline operating ranges for PQ.
• Scope of OQ (What to test)
A) Documentation & Prerequisites
• IQ report approved.
• Calibration certificates available for all sensors.
• SOPs for operation and safety in place.
B) Steam Quality Tests (ISO 17665, EN 285 references)
Steam is the sterilant → quality is critical.
Perform 3 tests at the autoclave steam sample port (at chamber inlet):
[Link] Fraction (x ≥ 0.95)
1. Method: throttling calorimeter.
2. Ensures steam contains minimal entrained water.
3. Too wet = wet packs; too dry = superheated.
[Link] (≤ 25 °C above saturation)
1. Method: compare measured temp vs. saturation temp at pressure.
2. Too much = behaves like dry heat (lower lethality).
[Link]-Condensable Gases (NCGs ≤ 3.0–3.5% v/v)
1. Method: condense steam sample in measuring setup.
2. NCGs (air, O₂, CO₂) insulate loads, cause cold spots.
Perform at least 3 replicates; acceptance = all within spec.
C) Chamber Integrity & Air Removal
[Link] Test (EN 285)
1. Chamber evacuated to test vacuum level.
2. Acceptance: leak rate ≤ 1.3 mbar/min (typical).
3. Confirms chamber tightness.
[Link]–Dick Test (Daily Steam Penetration Test)
1. Porous test pack with chemical indicator sheet.
2. Run cycle at 134 °C, 3.5 min, 2–3 pre-vac pulses.
3. Acceptance: uniform color change (no “cold spots” or air pockets).
D) Heat Distribution (Empty Chamber Mapping)
• Install ≥ 12–18 thermocouples (TCs) across chamber:
• Corners (top/bottom, front/rear).
• Center.
• Near door, near drain.
• Rear wall opposite steam inlet.
• Run 3 consecutive empty chamber cycles (121 °C and/or 134 °C).
• Measure:
• Time to enter sterilization band (equilibration time).
• Max–min temperature difference during hold.
• Acceptance:
• Uniformity ≤ 1 °C across all sensors.
• Equilibration time within defined limits (e.g., ≤ 30–60 sec after reference probe).
• Repeatability: 3 runs consistent.
Purpose of Empty Chamber Heat Distribution
• To prove the autoclave chamber environment is uniform when sterilization conditions are reached.
• Ensures that saturated steam penetrates the entire chamber without air pockets or cold spots.
• Provides baseline data for later heat penetration studies (PQ) with actual loads.
Without a uniform environment, sterilization performance in PQ cannot be trusted.
Thermocouple (TC) Placement — Why These Locations?
To capture worst-case cold spots and confirm overall uniformity:
• Corners (top/bottom, front/rear): corners are furthest from direct steam flow → often colder zones.
• Center of chamber: ensures the bulk chamber heats evenly.
• Near door: area close to gasket/door seal; risk of air ingress or incomplete steam penetration.
• Near drain (lowest point): steam condenses at the drain; this is often the coldest spot in the
chamber.
• Rear wall opposite steam inlet: farthest from steam entry, often last to heat.
Usually 12–18 TCs are used for small-to-medium chambers; larger autoclaves may require 20–30+
TCs.
Key Measurements
a) Equilibration Time
• Definition: the time difference between the reference probe (usually chamber sensor)
reaching sterilization temperature vs. the last (slowest) TC to enter the band.
• Acceptance: typically ≤30–60 seconds.
• Rationale: ensures no area is lagging too long, which could cause under-processing.
b) Uniformity (Max–Min Difference)
• Definition: the maximum temperature difference across all TCs during the hold period.
• Acceptance: ≤1 °C (sometimes ≤1.5 °C for large chambers).
• Rationale: uniform temperature = uniform lethality; >1 °C spread can mean uneven steam
distribution.
c) Repeatability
• Perform 3 runs back-to-back under identical conditions.
• Acceptance: results should be consistent across runs (no major shifts or drifts).
• Rationale: confirms system stability, not random chance.
Aceptance Criteria (Industry Practice)

• Equilibration time: ≤30 sec (small chambers) or ≤60 sec (large autoclaves).
• Uniformity: Max–min spread ≤1.0 °C during hold.
• Repeatability: 3 runs consistent.
• No unexplained dips in temperature (which could indicate air entrapment or sensor
issues).
Case Study Example
Autoclave chamber: 600 L, pre-vacuum, porous loads.
• Installed 16 TCs: 4 corners top, 4 corners bottom, 2 center, 2 near door, 2 near drain, 2 rear
opposite inlet.
• Ran 3 cycles at 134 °C, 3.5 min.
Results:
• Reference probe (chamber) entered sterilization band at 3:10 min.
• Last TC (rear bottom corner near drain) entered at 3:35 min.
• Equilibration time = 25 sec → PASS.
• Max temperature difference during hold = 0.8 °C.
• Uniformity ≤1 °C → PASS.
• All 3 runs consistent (±0.1 °C across coldest point).

Conclusion: Chamber environment is uniform, suitable to proceed with PQ.

 Cycle Design (PDA TR 1 Approach)
Key Principles
1. Define Sterility Assurance Level (SAL)
1. Typically 10⁻⁶ (12 log reduction of bioburden).
2. For moist heat: often designed as 12D overkill against G. stearothermophilus.
2. Calculate Lethality (F₀)
1. Reference: 121 °C, z = 10 °C.
2. Formula:
• Example: if D121 = 1.5 min → need F₀ = 18 for 12D.

3. Set Exposure Rule

Hold time starts only when the last load sensor enters sterilization band (not when chamber probe reaches setpoint).

4. Cycle Phases
• Air removal: pre-vacuum pulses.
• Come-up: heat-up to sterilization temp.
• Exposure/Hold: maintain lethality.
• Exhaust/Drying: remove steam, dry load.
 Example – Cycle Design
Product: porous surgical packs.
Target: 12D kill (G. stearothermophilus, D121=1.5 min).
F₀ target: 18.
What does “12D kill” mean?
• D-value (Decimal Reduction Value):
• D121 = 1.5 min = the time at 121 °C needed to reduce the microbial population by 90% (1 log).
• Example: 10⁶ spores → after 1 D (1.5 min) → 10⁵ spores left.
• 12D kill = reducing by 12 logs (10¹² fold reduction).
• Starting from 10⁶ spores, after 12D:

• This means probability of survival = 1 in a million units.

• Equivalent to Sterility Assurance Level (SAL) = 10⁻⁶.
In simple terms: 12D = overkill strategy → ensures sterility even under worst-case
contamination.
• At 121 °C → need 18 min hold.
• At 126 °C → 18 ÷ 3.16 ≈ 5.7 min hold.
• At 134 °C → 18 ÷ 19.95 ≈ 0.9 min hold (too short, use ~3–5 min practical buffer).
Final Recipe:
• Pre-vacuum: 3 pulses.
• Exposure: 134 °C for 5 min.
• Drying: 15 min post-vacuum.
• Acceptance: F₀ ≥18 at worst-case TC, no wet packs.
PQ confirmation: BIs negative, CIs endpoints, F₀ ≥ target → cycle locked.

How to Calculate Required F₀

• Each D121 = 1.5 min.
• For 12D:

• So, the autoclave cycle must deliver F₀ ≥ 18 minutes at the coldest spot.
Example at Different Temperatures (using z = 10 °C)

At 121 °C: 18 min hold (baseline).

• At 126 °C:
• Each minute at 126 °C = 3.16 min equivalent at 121 °C.
• Needed hold = 18 ÷ 3.16 ≈ 5.7 min.
• At 134 °C:
• Each minute at 134 °C = ~20 min equivalent at 121 °C.
• Needed hold = 18 ÷ 20 ≈ 0.9 min → but in practice, cycle uses 3–5 min buffer for safety and
reproducibility.
 5) Case Study Example
Autoclave cycle for porous surgical packs
• Target: SAL 10⁻⁶ (12D kill).
• BI: G. stearothermophilus, D121 = 1.5 min, 10⁶ spores.
• Cycle options:
• 121 °C for 18 min.
• 126 °C for 6 min.
• 134 °C for 3–5 min.
Validation Result:
• Coldest spot F₀ = 22 min.
• All BIs negative.
• CIs endpoints reached.
• No wet packs.
→ Cycle accepted and locked.
Performance Qualification
• PQ demonstrates that, with real loads, your autoclave consistently delivers the required
lethality (F₀) at the coldest points in each validated load configuration—under routine
operating conditions.
Lifecycle context: IQ → OQ → PQ → PPQ → CPV.
Prerequisites (must be closed before PQ)
• IQ approved (installation, utilities, calibration, safety).
• OQ approved (steam quality, leak & Bowie–Dick, empty-chamber uniformity).
• Cycle Design defined (PDA TR 1 approach: target F₀/D/z, exposure rule, parameters).
• Risk assessment identifies worst-case load items & locations (FMEA → CPPs/CQAs).
Define “Load Families” and worst cases
Group products with similar heat-transfer behavior:
• Porous/Hard goods (textiles, instruments, filters).
• Liquids (vials/ampoules/media bottles—steam-air or water cascade).
• Rigid containers/sets (wrapped sets, trays).
For each family, qualify Min / Typical / Max loads.
Worst case is usually: densest pack, biggest mass, deepest core, long lumens, largest
bottle/fill, location near drain/door.
➢Instrumentation plan (Heat Penetration)
Thermocouples / Loggers
• Quantity: typically 12–36 per load config (size dependent).
• Placement principles (don’t touch walls; tie centrally in the item):
• Porous packs: deep core of the thickest pack; mid-height packs; near drain/door
side.
• Instrument trays/rigid sets: bottom center of trays; under dense metal masses; in
closed containers.
• Liquids: geometric center of largest containers (simulate product if needed), mid-
stack bottles, corner bottles; one at tray edge facing door; one near drain side.
• Lumens/tubing: PCDs or longest, narrowest lumen; TC tip at distal end.
• Sampling: 1 s (or ≤2 s) logging interval.
• Calibration: current certificates; verify ice-point or reference bath as a field check
Chemical & Biological Indicators
• CIs: outside (Class 1) and inside (Class 4/5/6) at representative positions.
• BIs (≥10⁶ G. stearothermophilus spores):
• Place at worst penetration points (match TC positions).
• For lumens, use lumen-PCDs with BI at the distal end.
• For liquids, BIs go between containers at cold zones (not inside drug product).
➢Exposure rule & stability band (critical to correct F₀)
• Hold starts only when the last load TC is within the stability band around setpoint (e.g.,
±0.5–1.0 °C) and remains stable for a defined period (e.g., 30–60 s).
• This prevents you from “counting” lethality before the cold spot is actually hot enough.
Execute PQ (per load configuration)
Run ≥3 consecutive cycles per configuration (Min/Typical/Max), ideally across different
shifts/operators.
For porous/hard goods
[Link] the load per SOP (validated spacing; photos).
[Link] TCs/BI/CI as mapped.
[Link]-vac pulses → come-up → exposure (e.g., 134 °C/3–5 min or 121 °C/≥18 min) → drying.
[Link] time to enter band (last TC) and hold.
[Link] cycle: read CI endpoints; incubate BIs; check for wet packs.
For liquids (steam-air / water-cascade)
[Link] slow exhaust and over-pressure control to prevent boil-over/breakage.
[Link] by load probes (not chamber only).
[Link] the largest volume/highest fill as worst case.
[Link] cycle: check for breakage, closure integrity (if applicable), no boil-over, labels intact.
Calculating lethality (F₀) at the cold spot
• Compute F₀ for every load TC; acceptance is assessed at the minimum F₀ (coldest
point).
• Use:

• Practical way: for each second (Δt):

L(t) = 10^{(T-121)/10},
• then sum L·Δt across exposure (and any lethal come-up).
• Target F₀ depends on your design (e.g., F₀ ≥ 18 for 12D at D121=1.5 min).
Tip: Include lethal contribution from late come-up if temperature > 100 °C and approaching
setpoint, but never start the official “hold” before the exposure rule is met.
Acceptance criteria (by load family)
Universal
• F₀@cold-spot ≥ target in every run.
• All BIs: no growth (positive controls must grow).
• All CIs: correct endpoints.
Porous/Hard
• No wet packs; post-drying RH/visual dryness acceptable.
• Load TCs uniform (no unexplained dips or spikes).
Liquids
• No boil-over/breakage; container closure integrity maintained (CCIT by method of choice
if in scope).
• Over-pressure profile adhered to; slow exhaust verified.
Statistics / Repeatability
• 3 runs consistent (time to band, F₀ minima, Max–Min during hold).
• Capability trending (min/avg/max F₀) ready for PPQ.
Documentation package (what auditors expect)

• PQ Protocol (scope, URS link, load families, maps, acceptance).

• Load maps (photos/diagrams) + TC/BI/CI positions (IDs, serials).
• Raw data (T/P traces, F₀ tables), BI incubation records, CI sheets.
• Deviations/CAPAs with impact assessment.
• PQ Report with conclusion and locked recipes (setpoints, holds, ramp/exhaust/dry).
• Updated SOPs (load building, indicator handling, parametric release checklist).
 Troubleshooting guide (typical PQ issues)
Symptom Likely cause Fix

Sensor touching metal/wall, Re-tie TC, if real cold zone, add

F₀ short at single TC
genuine cold zone near drain/door buffer time or adjust load spacing

Check steam dryness & traps,

Low dryness fraction,saturated
Multiple wet packs (porous) increase spacing, extend
drain, stacking too tight
drying/post-vac

Exhaust too fast, over-pressure Slow the exhaust, tune over-

Liquid breakage/boil-over
mismatch pressure, verify fill volumes

Add pre-vac pulse, use lumen PCD,

BI positives at distal lumen Insufficient air removal/penetration
re-map TC/BI placement

Re-check leak/BD, verify steam

Large Max–Min during hold Poor distribution, air ingress
traps/vents, reassess load layout
 Example 1:
Load type: Media bottles (500 mL) – Max load configuration.
Target: 12D kill of G. stearothermophilus (D121 = 1.5 min → F₀ ≥ 18).
Cycle recipe: Pre-vacuum pulses → come-up → 121 °C hold 30 min → slow exhaust → drying.
Instrumentation
• 20 thermocouples (TCs) across chamber & inside bottles.
• 10 biological indicators (10⁶ spores) placed at worst-case spots.
• Chemical indicators placed throughout load.
Results
• Equilibration time: 40 sec (limit = 60 sec).
• Uniformity: Max–Min spread during hold = 0.7 °C (limit = 1 °C).
• F₀ at coldest bottle: 22 min (≥18 min).
• BIs: all negative (no growth).
• CIs: all endpoints reached.
• Visual check: no breakage, no wet loads.
Conclusion: Cycle passes.
• Meets lethality requirement (F₀ ≥ 18).
• All indicators confirm sterility.
 Example 2:
Load type: Surgical textile packs – Max load, tightly stacked.
Target: 12D kill (G. stearothermophilus).
Cycle recipe: Pre-vacuum pulses → 121 °C hold 20 min → exhaust → drying.
Instrumentation
• 18 TCs across chamber, inside dense packs.
• 8 BIs placed at center of thickest packs and near drain.
• CIs placed throughout.
Results
• Equilibration time: 95 sec (limit = 60 sec).
• Uniformity: Max–Min spread = 1.8 °C (limit = 1 °C).
• F₀ at cold spot (drain-side pack): 14 min (<18 min).
• BIs: 2 positives (growth detected at cold spot).
• CIs: some incomplete color change.
• Visual check: 3 wet packs found.
Conclusion: Cycle fails.
• F₀ < required.
• BIs survived → sterility not assured.
• Root cause: load too dense, poor steam penetration, insufficient hold time.
• Corrective action: reduce load density, extend hold time to 30 min.
• Re-validation required

• In summary:
• At 121 °C, PASS requires: equilibration ≤60 s, uniformity ≤1 °C, F₀ ≥18, all BIs negative, no
wet packs.
• A FAIL occurs if cold spots lag, F₀ short, indicators fail, or wet packs appear
 Process Performance Qualification
• Process Performance Qualification (PPQ) = documented evidence that the validated
autoclave cycle (from PQ) can run consistently across multiple executions, with
different loads, operators, and shifts, under routine conditions.
• It confirms that the sterilization process is ready for commercial use and parametric
release.
PQ = “Can the cycle work?”
PPQ = “Can the cycle work consistently, in real-world routine use?”

Objectives of PPQ
• Demonstrate reproducibility: results repeatable across cycles.
• Show robustness: process holds even with routine variability (different operators, shifts,
load patterns).
• Collect statistical evidence: capability indices, trends.
• Provide a final qualification package for regulatory submission / QA approval.
Scope of PPQ
[Link] required
1. Common expectation: 3 consecutive successful runs per load configuration
(min/typical/max).
2. Some regulators may require more for high-risk products.
[Link] configurations
1. Minimum load: risks of superheating, too fast come-up.
2. Maximum load: densest, coldest load.
3. Typical load: what is most often run.
[Link] & Shifts
1. Runs should involve different operators.
2. Performed across different shifts (day/night) if possible.
[Link]
1. Thermocouples in worst-case positions (identified from PQ).
2. Biological Indicators (BIs) and Chemical Indicators (CIs).
3. Steam quality checks may be repeated in parallel.
Acceptance Criteria
• F₀ at cold spot ≥ target (e.g., ≥18 for 12D kill).
• All BIs negative (no growth), positive controls positive.
• All CIs endpoints (internal/external).
• Uniformity maintained (from PQ baseline).
• No wet packs (porous loads).
• No breakage/boil-over (liquids).
• Consistency across 3 runs (no large variations in F₀, equilibration time).
 PPQ Example A — Hard Goods
Goal: Demonstrate the validated porous load cycle is reproducible across 3 runs, different
shifts/operators.
Cycle (locked from PQ):
• Pre-vac: 3 pulses
• Exposure: 134 °C / 5 min
• Drying: 15 min
• Control: chamber probe + load rule (hold starts when last load TC enters band)
Load (Max configuration): 10 wrapped sets (perforated trays), photos & layout attached in SOP.
Monitoring:
• TCs (n=20) at worst penetration: bottom-center of dense sets, near drain/door, rear opposite inlet,
tray bottoms, one free-air reference.
• BIs (G. stearothermophilus ≥10⁶) co-located with worst TCs (n=10).
• CIs Class 1 external + Class 4/5 internal.
Acceptance (from PQ/URS):
• F₀@cold-spot ≥18 (12D overkill)
• All BIs: No growth; positive controls grow
• All CIs: Correct endpoints
• Uniformity during hold: Max–Min ≤1.0 °C
• Equilibration (last TC to band after reference): ≤60 s
• No wet packs Item Run 1 Run 2 Run 3 Acceptance
Equilibration time (s) 38 41 39 ≤ 60→ PASS
➢ Results (3 consecutive runs) Uniformity Max–Min
0.9 0.8 0.9 ≤ 1.0 → PASS
(°C)
Min F₀ among load TCs
22.1 21.8 22.4 ≥ 18 → PASS
(min)
BI results (n=10) All negative All negative All negative All negative → PASS
CI endpoints All correct All correct All correct PASS
Wet packs 0 0 0 0 → PASS
Alarms/deviations None None None —

Statistical snapshot (F₀ minima): mean 22.1, range 0.6, %CV 1.3% → stable & capable.
Conclusion: PPQ PASSED (Hard Goods). Lock recipe; maintain load map photos in SOP; carry
forward cold-spot TCs to CPV trending.
PPQ Example B — Liquids (Media Bottles)
Goal: Demonstrate reproducibility for slow-exhaust liquid cycle; protect containers (no boil-
over/breakage) while achieving lethality.
Cycle (locked from PQ):
• Exposure: 121 °C / 20 min (target F₀ ≥18)
• Control: Load probes (not chamber only)
• Exhaust: Slow; Over-pressure steam/air ramp matched to internal pressure
Load (Max configuration): 50 × 1 L media bottles, upright in perforated trays, validated
headspace/fill volume.
Monitoring:
• TCs (n=24): liquid center of top/middle/bottom-tray bottles (drain-side, door-side, center),
plus 4 free-air chamber positions.
• BIs (n=12): between bottles at predicted cold zones (drain-side, lower trays).
• CIs internal/external; visual for boil-over, breakage, label integrity.
Acceptance (from PQ/URS):
• F₀@cold-spot (liquid center) ≥18
• All BIs: No growth; positives grow
• All CIs: Endpoints correct
• No boil-over / no breakage; closures intact (CCIT if in scope)
• Uniform slow exhaust & over-pressure profile followed
Item Run 1 Run 2 Run 3 Acceptance
Equilibration to band
52 55 49 ≤ 60 → PASS
(s)
Min F₀ (liquid cold-spot) 19.4 19.1 19.6 ≥ 18 → PASS
BI results (n=12) All negative All negative All negative All negative → PASS
CI endpoints All correct All correct All correct PASS
Boil-over / breakage 0/0 0/0 0/0 0 → PASS
Closure integrity
Intact Intact Intact Intact → PASS
(visual)
Over-pressure profile Within limits Within limits Within limits PASS
Alarms/deviations None None None —

Statistical snapshot (F₀ minima): mean 19.37, range 0.5, %CV 1.3% → stable & capable.
Conclusion: PPQ PASSED (Liquids). Maintain exhaust/over-pressure setpoints; preserve tray/bottle
layout photos in SOP; trend cold-spot F₀ in CPV.
Ongoing Monitoring / Continued Process Verification (CPV)
What is CPV?
• Continued Process Verification (CPV), also called Ongoing Monitoring, is the stage of the
validation lifecycle that comes after PQ and PPQ.
• It is the way we prove continuously that the sterilization process is still working as
validated during routine, everyday use.
In short: PQ/PPQ shows the process works at a point in time; CPV shows the process
continues to work overtime.

Why CPV is important

• Sterility assurance: Patients must always receive sterile products, not just during
validation.
• Regulatory compliance: ISO 17665, EU GMP Annex 1, and FDA all expect evidence of
ongoing control.
• Risk management: Detect process drift (e.g., steam quality deterioration, leak issues)
before it becomes a failure.
• Support for parametric release: Product can be released based on process data instead
of waiting for sterility testing.
What to monitor in CPV
a) Every cycle (routine monitoring)
• Temperature, pressure, time profiles: Check against validated cycle recipe.
• F₀ at cold spot (if load probes are used): must meet or exceed target (e.g., ≥18 min for 12D
overkill).
• Chamber vs. drain correlation: confirms steam is saturated.
• Chemical indicators (CIs): placed outside/inside loads → must show correct endpoint.
• Biological indicators (BIs): used as per SOP (not every load, but at defined intervals or
requalifications).
b) Daily / Weekly checks
• Bowie–Dick test: proves air removal and steam penetration (done daily before first cycle).
• Leak test: proves chamber is tight, no air ingress.
• Visual checks: No wet packs for porous loads, no broken vials for liquids.
c) Monthly / Quarterly checks
• Steam quality testing:
• Dryness fraction ≥0.95.
• Superheat ≤ +25 °C above saturation.
• Non-condensable gases (NCGs) ≤ 3.0–3.5%.
• Maintenance inspections: steam traps, separators, gaskets.
• Trend analysis: Cold spot F₀, leak test results, Bowie–Dick outcomes.
d) Annually (or after changes)
• Full requalification: repeat PQ-type studies with thermocouples & BIs.
• Calibration: confirm all sensors, transmitters, recorders are in tolerance.
• Review deviations & CAPAs from the year.
• Change control: assess if modifications (utilities, load patterns, software) impact
validation.
Acceptance & Trending
• CPV is not only about “pass/fail” → it’s about trending.
• Example KPIs:
• Minimum F₀ per cycle (should stay ≥ target, e.g., ≥18).
• % of Bowie–Dick test failures.
• % of steam quality tests out of spec.
• Wet pack rate (should be 0).
If trends show drift, take action before a failure occurs.
Deliverables in CPV
• CPV Plan: defines what to monitor (parameters, frequency, responsibilities).
• Data collection system: charts, control records, electronic batch records.
• CPV Report (annual or periodic): shows trending, confirms process remains in control.
• Triggers for action: define Warning / Action limits (e.g., F₀ < 20 = warning; F₀ < 18 = action).
• Ongoing Monitoring / CPV for autoclaves = continuous proof that the sterilization process
remains effective and compliant. It includes per-cycle monitoring (F₀, T/P charts, CIs), routine
functional tests (Bowie–Dick, leak, steam quality), annual requalification, and trend analysis. It
ensures the autoclave remains in a validated state and supports parametric release.
Thank you