The Compliance Backbone: How LIMS Software Automates Good Laboratory Practices (GLP)

Good Laboratory Practices (GLP) is not a rule for clinical diagnostic labs. FDA GLP, 21 CFR Part 58, covers nonclinical safety studies that support a research or marketing application.

Human clinical studies sit outside it. Clinical labs answer to CLIA instead. Toxicology labs, bioanalytical labs, and contract research labs do run under GLP. If you run one of those labs, paper logbooks and spreadsheets are your biggest audit risk.

This guide demonstrates how LIMS software enforces GLP by providing SOP control, an immutable audit trail, instrument lockouts, training gates, and a continuous chain of custody, ensuring compliance at each step.

Understanding the GLP Mandate (FDA 21 CFR Part 58)

The integrity of your data is the only currency that matters, so emphasizing data integrity fosters trust and confidence in your work.

What is GLP in a laboratory?

GLP stands for good laboratory practice. It is a US federal quality standard for nonclinical safety studies, written into 21 CFR Part 58. GLP sets how you plan, run, record, and archive a study. It exists so the FDA can trust the safety data you submit.

Which labs must follow GLP?

A laboratory adhering to GLP conducts nonclinical safety studies to support FDA applications. The trigger is the purpose of the study, not the type of lab. If the data backs a research or marketing permit for a regulated product, 21 CFR Part 58 applies.

These labs run GLP studies:

• Toxicology labs. GLP tox work is the largest category. It covers acute, subchronic, chronic, reproductive, and carcinogenicity studies.
• Preclinical safety labs. GLP preclinical studies test a drug, biologic, or device before it reaches human trials.
• Bioanalytical labs. A GLP bioanalytical lab measures test article concentrations in samples from a safety study.
• Contract research organizations. A CRO runs studies for a sponsor, and the sponsor still carries the regulatory risk.
• Medical device testing labs. Biocompatibility and safety testing for devices falls under Part 58.
• Food, color, and animal feed additive labs. Safety studies for additives sit in scope.
• Agrochemical and industrial chemical labs. These labs answer to EPA GLP under 40 CFR Part 160 and 40 CFR Part 792 rather than Part 58. The requirements track closely.

These labs do not:

• Clinical diagnostic labs. You test patient samples to inform care. CLIA governs your work, not GLP.
• Clinical trial sites and central labs. Human studies are subject to Good Clinical Practice.
• Discovery and exploratory research labs. Screening and mechanism work sits outside Part 58 until the results support a submission.
• Manufacturing QC labs. Release and stability testing falls under GMP.

One facility can sit on both lists. A CRO can run a GLP toxicology study in one suite and non-GLP screening work in the next. What changes is the study, so the controls have to switch on per study. That is the problem a LIMS solves, and the five pillars below show how.

Who is accountable under 21 CFR Part 58

Part 58 names three parties, and an inspector will look for all three.

The study director owns one study. Section 58.33 names one person per study. That person approves the protocol, confirms the team follows it, documents anything that threatens data integrity, and signs off the final report. One study, one director.

Testing facility management resources the study. Under 58.31, management appoints the study director, confirms the QAU exists, characterizes the test and control articles, and supplies trained people and qualified equipment on schedule. It also holds the records that prove the training happened.

The quality assurance unit checks the other two. Section 58.35 keeps the QAU separate from the people running the study. The QAU holds the master schedule, inspects each study at intervals, and reports to management and the study director at least monthly. FDA inspectors do not read those reports, though they will check that the QAU writes them.

Each role relies on records, and LIMS helps you stay audit-ready, giving you confidence in your compliance during inspections.

The Pain Point:

Manual GLP compliance relies on paper records, increasing the risk of lost or illegible files, which can lead to non-compliance and failed audits, emphasizing the need for digital solutions.

A missing binder during an inspection can trigger a finding of non-compliance. Furthermore, manual entries are susceptible to legibility issues. An auditor who cannot read a technician’s handwriting rejects the data. The result no longer counts.

GLP vs GMP vs GCP

Regime	What it governs	Which labs
GLP — 21 CFR Part 58	Nonclinical safety studies that support an FDA application	Toxicology, preclinical, bioanalytical, and contract research labs
GMP — 21 CFR Parts 210 and 211	How a regulated product is made, tested, and released	Manufacturing QC, release testing, and stability labs
GCP — 21 CFR Parts 50, 56, and 312	Clinical trials in human subjects	Trial sites, central labs, and labs that analyze trial samples

GLP, GMP, and GCP are not interchangeable, and one company can meet all three as a product moves from lab to trial to market.

Pillar 1: Enforcing Standard Operating Procedures (SOPs)

The Standard Operating Procedure (SOP) is the playbook for any regulated lab. In manual environments, there is often a disconnect between the written procedure and the actual bench work. Bridging this gap is essential for adhering to good laboratory practice guidelines.

LIMS technology solves this by transforming the SOP from a reference document into an active control mechanism.

From static SOPs to enforced GLP practices.

In a manual lab, SOPs are paper documents stored in binders that staff should read. Often, these binders gather dust while technicians work from memory. This reliance on memory leads to “procedural drift.” Over time, small shortcuts become habits, leading to inconsistent execution across different staff members.

How a LIMS enforces your SOPs

In a LIMS, SOPs are digitized workflows guiding technicians step-by-step, such as initiating sample analysis, with the software preventing progression until each step is completed and signed off, ensuring consistent adherence.

• This digital enforcement ensures that every technician performs the test the same way, every single time. It eliminates variability.
• If a protocol requires a 30-minute incubation, the LIMS can start a timer. It will physically prevent the user from entering results until that time has elapsed.

Key Benefits of LIMS-driven SOPs include:

• Process Adherence: Users cannot proceed without completing every step and filling in all mandatory fields.
• Version Control: Automatically updates protocols so staff never use obsolete or expired document versions.
• Deviation Management: Any departure triggers mandatory user justification and immediate supervisor review for approval.
• Standardization: Enforces GLP requirements consistently across every department

Pillar 2: Data Integrity and The Audit Trail (ALCOA+)

Data integrity is the primary focus of modern regulatory inspections. A paper record accepts any change you make to it. Regulators know that.

Digital lab systems like LIMS provide a higher level of security and transparency that paper cannot match. They are essential for meeting Good Clinical Laboratory Practice Guidelines (GCLP).

Data integrity and ALCOA+ under GLP

ALCOA names five attributes. Your data must be attributable, legible, contemporaneous, original, and accurate. ALCOA+ adds four more: complete, consistent, enduring, and available.

Part 58 never uses these words. FDA and MHRA data integrity guidance does, and inspectors apply them. Meet all nine, and your records deliver:

• Preventing manipulation and eliminating data gaps
• Ensuring full traceability throughout all workflows
• Enabling total transparency and audit preparedness
• Safeguarding patient safety through reliable data
• Strengthening regulatory compliance and building trust
• Reducing operational risks and human errors

How a LIMS protects the audit trail.

• Automatic Data Capture: Integrating instruments directly with LIMS eliminates transcription errors (Accuracy). For instance, when an HPLC or mass spectrometer sends data directly to the LIMS, there is no chance for a typo. The data remains exactly as the instrument generated it.
• Immutable audit trails: The LIMS records four things on every entry: who made it, when, to the second, what changed, and why. Nobody overwrites a record. A change writes a new version and leaves the original in place. It satisfies the “Original” and “Attributable” requirements without any extra effort from the user.

The LIMS Advantage for ALCOA+ includes:

• Attributable: Every action carries the unique user ID of the person who performed it.
• Legible: Electronic records are always readable, solving the issue of poor handwriting.
• Contemporaneous: The system timestamps entries instantly; data cannot be backdated.
• Original: The electronic file is preserved in its raw format, protected from tampering.
• Accurate: Automated calculations remove the risk of human math errors.
• Complete: Mandatory fields ensure no metadata or critical context is ever missing.
• Consistent: Standardized workflows enforce the same data sequence and format every time.
• Enduring: Records are stored on long-term media that remain accessible for decades.
• Available: Data can be retrieved and reviewed immediately during inspections or audits.

Good laboratory practice examples: an SOP in action

Here is one weighing step from a GLP toxicology study, run under a digital SOP.

1. Open the procedure. The technician selects the study task. The LIMS loads the current approved SOP version and confirms the technician’s training record covers it.
2. Check the balance. The LIMS confirms the balance calibration is in date. If it is not, the balance does not appear in the list.
3. Record the weight. The balance sends the value straight to the LIMS. A result outside the tolerance range stops the step and asks for a reason.
4. Sign and lock. A second qualified analyst reviews and signs. The audit trail records both users, the timestamp, and the SOP version used.

Pillar 3: Instrument and Reagent Management

A valid test requires valid resources. If the instrument balance was uncalibrated or the reagent had expired, the results are a documented deviation your study director must assess, which can invalidate the result. Managing these resources on Excel sheets is prone to oversight. A busy technician might miss a calibration date in the rush to finish a study.

Preventing the Use of Non-Compliant Resources:

GLP requires strict maintenance of equipment and traceability of reagents. Labs must prove that the specific instrument used was fit for purpose on that specific day. Good clinical laboratory practices also emphasize this stringent resource control to ensure patient safety in clinical trials.

How LIMS Guarantees Compliance:

• Instrument Lockout: The LIMS tracks calibration schedules. If a balance or HPLC is past its calibration date, the system locks it out. The software prevents the user from selecting it for a study. This “hard stop” makes it impossible to use non-compliant equipment.
• Reagent Traceability: The LIMS tracks lot numbers and expiration dates. It warns or blocks users from using expired chemicals. This feature prevents the costly invalidation of studies. You will never again have to repeat a week of work because a buffer expired halfway through.

Resource Management Features in LIMS include:

• Automated Alerts: Lab managers receive notifications before maintenance is due.
• Inventory Tracking: Real-time visibility into stock levels prevents shortages.
• Usage Logs: A complete digital history of which instruments touched which samples.
• Vendor Compliance: Links reagents to their Certificates of Analysis (CoA) automatically.

GLP audit readiness

An FDA GLP inspection is not a paperwork review. Inspectors run two kinds of visits: routine surveillance of the facility, and a directed audit of one study. In a directed audit, the inspector picks a number in your final report and traces it back to the raw data behind it. If the trail breaks, the study is in question.

Expect requests for these records:

• the master schedule
• the protocol and every amendment
• the SOPs in force on the day the work happened
• training records for every person who touched the study
• equipment maintenance and calibration histories
• test article characterization and accountability records

Observations arrive on a Form FDA 483.

A LIMS turns that request list into a search. Every record carries the study it belongs to, the person who created it, and the timestamp. You pull the SOP version in force on March 14, not the current one. You show a training record and its expiry date beside the result it authorized.

A LIMS does not make you compliant, and your QAU still runs the program. It removes the week of binder hunting that used to sit between the request and the answer.

Pillar 4: Personnel Training and Competency

Even the best equipment fails in untrained hands. Regulatory bodies demand proof that the people performing the work are qualified to do so. Keeping track of training records for dozens of staff members and hundreds of assays is a logistical nightmare for many labs.

Ensuring Only Qualified Staff Perform Tasks:

FDA regulations mandate that only trained personnel conduct specific GLP activities. An expired training certificate is a common and avoidable audit finding. For labs following good clinical laboratory practice guidelines, ensuring staff competency is critical for patient data reliability.

How LIMS Guarantees Compliance:

The system maintains a digital training matrix. It links user profiles to specific test methods and standard operating procedures. If a technician’s certification for a specific assay has expired, the LIMS permissions will automatically restrict them. They cannot perform that test until retraining is documented.

• This “competency gate” protects the lab from liability. It ensures that no unauthorized personnel can ever generate data for a regulated study.

LIMS Support for Personnel Management includes:

• Proactive Notifications: Staff are emailed reminders to renew certifications before they expire.
• Digital Sign-offs: Users can electronically sign that they have read and understood the new SOPs.
• Training History: Maintains a centralized, searchable training history for every employee that is instantly retrievable.
• Role-Based Access: Restricts critical approval privileges strictly to authorized leadership roles.

GLP training and certification requirements

Who needs it? Section 58.29 covers everyone who conducts a study or supervises the work. That means bench analysts, study directors, QAU staff, archivists, and animal care technicians.

GLP training is not a one-time induction. Each person needs training for each method they run, and the record has to stay current.

What the record must show. Part 58 requires management to maintain an updated summary of training and experience, along with a job description for each individual.

In practice, an inspector wants four things per person: the SOPs and methods they are qualified on, the date each qualification was granted, who assessed it, and when it expires. Read-and-understood sign-offs on revised SOPs count as training records too.

What a GLP certificate actually certifies. This is where most labs slip. The FDA does not certify or accredit GLP labs. It inspects them.

No FDA-issued GLP certification exists. What you can hold is one of three other things: a GLP course certificate for an individual, a third-party assessment against Part 58 that some bodies offer alongside ISO/IEC 17025 accreditation, or a statement of GLP compliance from a national monitoring authority in an OECD MAD country.

Calling your lab GLP certified without naming which one invites a question you do not want at inspection.

A LIMS closes the loop. It links each person’s qualifications to the tests they can start, and it locks the rest.

Pillar 5: Chain of Custody and Sample Tracking

In a GLP study, the specimen is the evidence. If you cannot prove which test system it came from and who has handled it since, you have no study. Part 58 expects a documented history for every test article and specimen, from receipt to disposal.

The complete history of a specimen

Part 58 never uses the phrase chain of custody. It asks for the same thing under three headings. Identify every test system and specimen.

Record each handling event as it happens. Archive the records when the study closes—Miss one and the trail breaks.

Paper breaks it in predictable places. A technician writes the transfer time at the end of the shift instead of the moment.

A freezer excursion goes into a separate logbook that nobody links back to the specimen. A tube label smudges, and someone rewrites it from memory.

Each gap looks small on its own. Together they are what an inspector finds when tracing a result back to source.

How a LIMS keeps the chain of custody unbroken

A LIMS records the movement, not the memory of it. Every scan writes a row: which specimen, which person, which location, and the time to the second. The record is created at the point of handling, so the timestamp is the event rather than a reconstruction of it. When an inspector asks where a specimen sat between March 14 and April 2, you answer with a query.

Chain of custody features in a LIMS include:

• Barcode or RFID scanning. Removes hand-keyed IDs and the mix-ups that follow.
• Location tracking. Records the freezer, shelf, and rack position of every specimen.
• Freeze-thaw counts. Logs each removal from storage, so you can judge whether the specimen still supports evaluation.
• Retention and disposal records. Ties disposal to the retention period the study requires, and records who authorized it.
• Archive handover. Passes the record set to your named archivist under 58.190 without a manual handoff.

Conclusion: From compliance defense to quality assurance

A LIMS does not make your lab GLP compliant. Your study director, your management, and your QAU do that. What a LIMS changes is how much of the work depends on someone remembering.

Paper puts the control after the fact. You run the study, you check the records, then you find the gap. A LIMS puts the control at the moment of the action.

The SOP will not advance. The uncalibrated balance does not appear. The untrained analyst cannot start the test. The record is written once, at the bench.

That shift is what an inspector sees. You stop being a lab that can explain its records and become a lab whose records explain themselves. The five pillars above map to the findings a Form FDA 483 tends to cite. Close them at the point of work, and there is less to defend later.

Frequently Asked Questions

Can you automate GLP compliance management?

You can automate the enforcement, not the judgment. A LIMS applies the SOP, the calibration check, and the training gate on every task without anyone remembering to. Deciding what the SOP says, and whether a deviation matters, stays with your study director and QAU.

What GLP guidance does the FDA publish?

The binding text is 21 CFR Part 58. Alongside it, the FDA issues guidance documents and the Bioresearch Monitoring compliance program manuals that its investigators follow. Guidance shows how the agency reads the rule. Only the regulation itself carries legal force.

What are the benefits of good laboratory practices?

Reliable safety data, an audit trail an inspector can follow, fewer repeated studies, and a submission that holds up under review. The practical benefit is narrower than it sounds. You stop losing weeks to reconstructing records you should have captured once.