cGMP stands for Current Good Manufacturing Practice — the FDA regulations that make sure products like drugs, medical devices, food, and dietary supplements are consistently produced and controlled to quality standards. If you’ve seen the term on a label or in an audit and wondered what cGMP means, that’s the short version. This guide explains what cGMP is, how it differs from GMP, who has to follow it, its core principles, and why documentation sits at the center of it all.

What is cGMP?

cGMP is a system of regulations, enforced by the U.S. Food and Drug Administration, that assures the identity, strength, quality, and purity of manufactured products by requiring manufacturers to adequately control their operations. In plain terms: it’s the baseline set of rules that make sure what comes off the line is safe, consistent, and exactly what it’s supposed to be — every time. cGMP covers everything that affects product quality: facilities, equipment, materials, processes, people, and records.

cGMP vs GMP: what’s the difference?

GMP (Good Manufacturing Practice) is the general concept; cGMP adds one important word: “current.” The “c” signals that manufacturers must use systems and technologies that are up to date — you can’t rely on methods that were acceptable a decade ago if better, current practices now exist. In U.S. FDA usage the two are effectively the same requirement, with “current” emphasizing continuous improvement and modern controls. Outside the U.S., “GMP” is the more common term for the same idea. Practically: if you’re manufacturing for the U.S. market, you follow cGMP.

Who must follow cGMP?

cGMP applies across FDA-regulated manufacturing, each under its own regulations:

• Pharmaceuticals — 21 CFR Parts 210 and 211.
• Medical devices — historically 21 CFR Part 820 (the Quality System Regulation), now the Quality Management System Regulation (QMSR), which incorporates ISO 13485 and took effect 2 February 2026.
• Dietary supplements — 21 CFR Part 111.
• Food — 21 CFR Part 117 (current good manufacturing practice and preventive controls).
• Cosmetics and others — increasingly subject to cGMP-style expectations.

If your product is ingested, implanted, applied, or otherwise regulated by the FDA, some form of cGMP almost certainly applies to how you make it.

The core principles of cGMP

cGMP is often summarized around a handful of pillars — the things you must control to assure quality:

• Facilities and equipment — suitable, clean, maintained, and qualified for their purpose.
• People — trained, qualified, and clear on their responsibilities.
• Processes and procedures — defined, validated, approved, and followed consistently.
• Materials — identified, controlled, and traceable.
• Quality control — testing and checks that verify output meets specification (see quality assurance vs quality control).
• Documentation and records — complete, accurate, and retained, so everything is provable.

When something does go wrong, cGMP expects a disciplined response — investigation and corrective and preventive action (CAPA) — so the problem is fixed at its root, not just patched.

Why documentation is central to cGMP

There’s an old quality-industry saying: “if it isn’t documented, it didn’t happen.” cGMP runs on that principle. Controlled procedures, batch records, training records, equipment logs, and investigations are the evidence that you actually did what your quality system says. Weak or inconsistent documentation is one of the most common sources of FDA observations (the famous Form 483). This is why strong document control — version control, approvals, controlled distribution, and a complete audit trail — is the foundation of any cGMP-compliant operation.

How QMS software supports cGMP compliance

Meeting cGMP with paper and spreadsheets is possible but fragile — the documentation, training, and investigation records drift apart, and audit prep becomes a scramble. An eQMS keeps the cGMP essentials connected: controlled documents with 21 CFR Part 11 electronic signatures, training tied to document release, CAPA and investigations, and a complete audit trail — all in one system where a change in one place flows everywhere it should. That connected, provable control is exactly what an FDA investigator is looking for, and what TLM is built to give small-to-mid regulated manufacturers. For device teams, start with our medical device QMS buyer’s guide; to see cGMP-ready document control, training, and CAPA working together, book a demo.

Frequently asked questions

What does cGMP stand for?

cGMP stands for Current Good Manufacturing Practice. It’s the set of FDA regulations ensuring that products such as drugs, medical devices, food, and dietary supplements are consistently produced and controlled to quality standards. The ‘c’ for ‘current’ means manufacturers must use up-to-date systems and technologies.

What is the difference between GMP and cGMP?

GMP (Good Manufacturing Practice) is the general concept; cGMP adds ‘current,’ signaling that manufacturers must keep their methods and technologies up to date rather than relying on outdated practices. In U.S. FDA usage the two are effectively the same requirement, with ‘current’ emphasizing continuous improvement. Outside the U.S., ‘GMP’ is the more common term.

Is cGMP a law?

cGMP requirements are enforced by the FDA under federal regulations (for example 21 CFR Parts 210 and 211 for pharmaceuticals, and the device quality regulation for medical devices). Failing to meet cGMP can lead to FDA observations (Form 483), warning letters, and enforcement action, so while often called ‘practice,’ it carries the force of regulation.

Who has to follow cGMP?

FDA-regulated manufacturers: pharmaceutical companies (21 CFR 210/211), medical device makers (historically 21 CFR 820, now the QMSR incorporating ISO 13485), dietary supplement makers (21 CFR 111), food producers (21 CFR 117), and increasingly cosmetics. If a product is ingested, implanted, applied, or otherwise FDA-regulated, some form of cGMP applies to how it’s made.

How do you stay cGMP compliant?

Control the fundamentals — qualified facilities and equipment, trained people, validated processes, controlled materials, quality testing, and complete documentation — and respond to problems with disciplined CAPA. Because documentation is the evidence of compliance, most organizations rely on QMS software for controlled documents, Part 11 e-signatures, training tied to release, CAPA, and an audit trail.