Good Distribution Practices (GDP) are the regulatory framework guaranteeing drug integrity along the distribution chain, from manufacturer to pharmacy. For an Italian intermediate distributor, GDP is not a booklet of good intentions: it’s the regulatory reference for regional wholesale distribution authorisation, AIFA (Italian Medicines Agency) inspections, and the contractual requirements pharmaceutical companies place on their wholesalers.
In Italy, GDP operational guidelines are published by AIFA in coherence with European guidelines (EU 2013/C 343/01, updated in subsequent years). Inspections are conducted by AIFA’s Inspection Office, with typical cadence of once every 3-5 years for each authorised site. Identified non-conformities can range from “minor” (improvement recommendation) to “major” (corrective action request with formal plan) up to “critical” (potential authorisation suspension).
A note for non-Italian readers: this article describes Italian regulatory specifics (AIFA’s role, Italian audit cadence, Italian inspection report formats). The underlying GDP framework derives from EU 2013/C 343/01 and is largely transferable to other EU markets with country-specific authority and procedural differences.
A GDP audit going wrong is not an “administrative” event manageable after the fact: it’s an operational risk that can stop the warehouse and cut distributor revenue for weeks. Yet — a pattern we see across Italian DIF clients — the audit is often prepared at the last minute, in reactive mode, with predictably non-excellent results.
This article addresses operationally the AIFA GDP audit for an intermediate distributor: what the inspector checks, where non-conformities typically concentrate, what checklist to have ready, and how fleet planning and tracking tools can significantly reduce audit risk.
The GDP perimeter for an Italian intermediate distributor
Italian GDP covers nine main areas. For each, the inspector verifies documentation, processes, operational evidence.
Area 1 — Quality Management System (QMS). The distributor must have a documented Quality Manual, standard operating procedures (SOPs) for each critical process, a system for managing deviations and corrective/preventive actions (CAPA), a personnel training plan with traceable evidence. It’s the base.
Area 2 — Personnel. The distributor must have a formally appointed Distribution Manager with adequate qualification (pharmacy degree or related disciplines). Operational staff must be GDP-trained with documented periodic cadence. Roles and responsibilities must be clear in the organisational chart.
Area 3 — Premises and equipment. Warehouses must be structurally suitable (security, controlled access, separate areas for different products), with validated temperature monitoring systems. Equipment (refrigerators, freezers, thermal mapping systems) must be qualified and calibrated periodically.
Area 4 — Documentation. Every operation must be tracked: receiving, storage, picking, order preparation, shipping, return, disposal. Documentation must be retained for a defined period (typically 5 years) and must be accessible in case of audit.
Area 5 — Operations. Procedures must cover all critical flows: goods receipt from manufacturers, lot and expiry management, correct picking, cold chain management, controlled substances management, returns management (including ASSINDE — Italian disposal consortium for expired/withdrawn drugs), disposal of expired or withdrawn products. Each process must have documented SOPs and trained operators.
Area 6 — Complaints, returns, suspected counterfeits and recalls. The distributor must have formal procedures to manage pharmacy complaints, product returns, suspected counterfeits (also connected to FMD serialisation), and — sensitive point — product recalls from AIFA or the manufacturer. The ability to trace a specific lot in rapid times (maximum 24 hours) is one of the key requirements.
Area 7 — Outsourced activities. If the distributor subcontracts logistics activities (transport, warehouse, critical IT), they must formally qualify and monitor external suppliers. Qualification includes verification of supplier authorisations, documented quality agreements, periodic audits.
Area 8 — Self-inspections. The distributor must conduct periodic self-inspections of their GDP system, with defined cadence (typically annual) and with documented improvement plan on findings.
Area 9 — Transport. It’s the area we will focus on in greater detail in the next sections, because it’s the specific domain of intermediate distributors: controlled-temperature transport, transporter qualification, vehicle thermal mapping, temperature deviation management.
The Transport area: where the intermediate distributor typically falls
Of the nine areas, the one most frequently producing findings on intermediate distributors is the Transport area. It’s the operational heart of DIF activity, and it’s also the one where regulatory expectations are most stringent relative to the typical sector automation level.
Four sub-areas where most frequent findings concentrate.
Sub-area 1 — Vehicle thermal mapping
Every refrigerated vehicle used for drug distribution must be thermally qualified: a mapping test demonstrating that, under real usage conditions (maximum load, summer and winter external temperatures, typical stops, repeated door openings), all cargo compartment points maintain temperature within required ranges (typically 2-8°C for normal lines, tighter ranges for specific specialty lines).
Mapping must be redone:
- Periodically (typically every 12-24 months, per distributor’s SOP)
- After significant vehicle modifications (refrigeration system change, structural repairs)
- In case of recurring deviations detected by data loggers
Typical AIFA audit findings on this sub-area:
- Thermal mappings performed but not under “worst case” conditions (e.g. only in spring conditions)
- Missing mapping protocol documentation
- Mappings not updated after vehicle modifications
- Mappings conducted on a fleet sub-sample and applied “by analogy” to other vehicles, without documented justification
Sub-area 2 — Continuous temperature monitoring
During transport, each refrigerated vehicle must have active temperature data loggers recording continuously, in a validated and traceable manner. Data must be retrieved on depot return, archived and available in case of audit. Deviations (out of range) must be identified, classified, managed per SOP.
Typical findings:
- Data loggers present but not GAMP/GxP validated
- Lack of formal procedures for temperature deviation management
- Deviations detected but not documented or analysed
- Discontinuity in recording (e.g. data logger turned off during stops)
- Lack of integration between temperature data and delivery data (POD)
On this last point, modern fleet tracking systems — including OptivoTrack — integrate continuous cargo compartment temperature into the digital POD flow: for each delivery the “snapshot” of the thermal profile is available, automatically associated with the delivered lot. It’s a documentation level that significantly reduces audit risk compared to the data-logger-plus-manual-download model.
Sub-area 3 — Qualification of (third-party) transporters
If the distributor subcontracts part of transport to third parties (couriers, specialised carriers), they must formally qualify them. Qualification includes:
- Verification of transporter authorisations (drug transport authorisation if foreseen, ATP certifications for refrigerated if applicable)
- Signed Quality Agreement with the transporter
- Documented procedures for transporter deviation management
- Periodic audits at the transporter
Typical findings:
- Transporters used without formal qualification
- Absent or obsolete Quality Agreements
- Transporter audits declared but not documented
- Lack of transporter deviation management (e.g. delay, cold chain break) in the distributor’s CAPA system
Sub-area 4 — Lot-by-lot traceability
In case of product recall, the distributor must be able to identify in 24 hours all pharmacies to which a specific lot was delivered. It sounds elementary, but on legacy management systems complete traceability (lot → shipment → POD signed by pharmacy) often requires intensive manual activity.
Typical findings:
- Traceability present but with extraction times beyond 24 hours
- Misalignment between warehouse (lot out) and POD (lot delivered to that pharmacy)
- Lack of evidence of the actually delivered lot in case of exchanges between products of the same code but different lots
- Recall procedures simulated but not realistically tested (mock recall)
Digital POD with lot capture at delivery — widespread practice on modern systems — solves most of these problems. Digital POD for DIF is not just operational efficiency: it’s a compliance asset.
The operational checklist: what to have ready before the audit
Based on AIFA audit patterns we see in the sector, here is the operational checklist an intermediate distributor should have ready 4-6 weeks before an announced audit (or, better, permanently).
System documentation (always up to date)
- Quality Manual
- List of active SOPs (with version, date, distribution)
- Organisational chart with named responsibilities
- Register of deviations and CAPAs open/closed in the last 24 months
- Personnel training plan and records (last 24 months)
- Self-inspection reports and improvement plan
Premises and equipment
- List of critical equipment (refrigerators, freezers, data loggers, thermal mapping system)
- Updated calibration certificates
- Warehouse thermal mapping reports (critical locations)
- Emergency procedure (e.g. power interruption, temperature alarm)
Vehicles and transport
- Complete vehicle list with relative certificates (ATP if applicable)
- Thermal mapping report for each vehicle (worst case condition)
- Last quarter data logger records (sample)
- Temperature deviation management procedure
- Quality Agreement with third-party transporters
- Transporter audit records
Traceability
- Practical demonstration of lot traceability procedure (mock recall): “Hypothesising a recall of lot X of product Y, we identify the pharmacies to which it was delivered in the last 18 months”
- Target time for mock recall: < 4 hours (well below regulatory 24 hours)
Controlled substances (if applicable)
- Controlled substances entry/exit register (obviously always updated by law)
- “No partial” delivery procedure
- Controlled substances deposit security (keys, access, cameras)
Complaints and recalls
- Pharmacy complaints register last 24 months with average management time
- Product recall procedure (with recent test)
- Suspected counterfeit procedure
On a fleet of 20 vehicles and a typical warehouse, collecting all this documentation requires 80-120 person-hours of a diligent quality manager. On a distributor organised on an ongoing basis, it’s a tidying-up activity, not a construction one.
Frequent errors AIFA detects (and which can be prevented)
On patterns seen on the market and on AIFA Inspectorate annual reports, seven recurring errors producing findings:
Error 1 — Thermal mapping not in worst case. Mapping was done in “easy” conditions (e.g. late spring, average load). The inspector verifies the summer or winter situation: the mapping is not significant.
Error 2 — Data loggers not GAMP/GxP validated. Sensors work but are not validated by pharma standards. The inspector doesn’t accept them as evidence.
Error 3 — Deviations detected but not managed. The system detects an out-of-range temperature but the quality manager doesn’t analyse it, doesn’t document it, doesn’t open CAPA.
Error 4 — “Informal” transporter qualification. The transporter is verbally qualified, but the Quality Agreement is obsolete or absent, and there are no documented audits.
Error 5 — Personnel training declared but not traceable. Personnel “have been trained” but there are no signed records, learning test evidence, refresh plans.
Error 6 — Mock recall never seriously executed. The recall procedure exists on paper but nobody has ever tested it realistically. When the inspector requests a mock recall, times are far from 24 hours.
Error 7 — Opaque subcontracts. Subcontracted logistics activities (couriers, external warehouse) are not qualified, monitored, integrated in the distributor’s quality system.
How technological tools reduce audit risk
Three technological components, integrated into the distributor’s operational processes, significantly reduce GDP finding risk.
Fleet tracking with validated temperature data. A telematics system integrating GPS, engine data and — for refrigerated vehicles — GxP-validated temperature sensors, automatically feeds the audit dossier with structured, traceable, exportable data. It drastically reduces audit preparation time and eliminates some of the most frequent errors (e.g. recording discontinuity, non-validated data loggers).
Digital POD with lot capture. The driver app scanning the drug code at delivery to the pharmacy automatically produces lot-by-lot traceability. In case of recall, extraction of involved pharmacies requires minutes, not hours.
Planning system integrated with quality. When the delivery planning system is integrated with the quality workflow (deviations, CAPA, training records), the distributor operates with a single system instead of separate silos. Audit evidence becomes automatic output of operations.
For Optivo’s DIF clients, the OptivoRoute + OptivoTrack + driver app combination naturally integrates these three components. The effect on audit preparation time, on sector reports, is significant: typically moves from 100-150 person-hours of “intense” preparation to 30-50 person-hours of “refinement” on a dossier that is already ready as automatic output of daily operations.
Frequently asked questions
How often does AIFA audit an intermediate distributor?
Typical cadence is one inspection visit every 3-5 years for each authorised warehouse site. Extraordinary inspections can however be foreseen in case of specific complaints, non-conformity reports, significant events (complex recalls, suspected counterfeits). In the coming years — with full FMD/DataMatrix regime arriving in 2027 — it is likely that inspection activity in this area will intensify.
How long does an AIFA inspection last?
Typically 2-3 days of on-site presence, plus previous time for documentation review and subsequent time for report drafting. On sites of particular complexity (e.g. with specialty lines, ATMP, significant controlled substances management) the inspection can extend to a week.
What happens if I receive a “major” or “critical” finding?
A “major” finding requires a formal corrective action plan (CAPA) with defined times for resolution, and typically a subsequent verification by AIFA. A “critical” finding can involve suspension of distribution authorisation until non-conformities are resolved. It’s a rare scenario but with immediate operational impact — warehouse stop, revenue cut.
How do you simulate an audit before the real one?
The working model is the “mock audit” conducted by a qualified external consultant (typically a regulatory affairs consultant with pharma experience) applying the AIFA checklist critically. The mock audit typically costs €5,000-15,000 depending on site complexity and identifies gaps before the real inspector does. ROI is high: a single avoided “major” finding is worth far more than the mock cost.
Is Italian DIF “GDP compliant” on average?
On AIFA reporting of recent years, most Italian intermediate distributors operate in substantial GDP conformity. Most frequent findings are in transport and traceability areas, more than in basic processes. Compliance level tends to be higher on large players (Comifar, QFarma, Alliance Healthcare) with more structured quality systems, and variable on regional independents where discipline can significantly depend on investment in quality personnel and technological tools.
In summary
AIFA GDP audit is one of the most impactful regulatory events for an Italian intermediate pharmaceutical distributor: a visit every 3-5 years evaluating nine areas of the quality system, with consequences ranging from improvement recommendations to potential distribution authorisation suspension.
The Transport area — vehicle thermal mapping, continuous temperature monitoring, third-party transporter qualification, lot-by-lot traceability — is where findings most frequently fall on intermediate distributors. Seven recurring errors (mapping not in worst case, non-validated data loggers, unmanaged deviations, opaque subcontracts, untraceable training, never-tested mock recall, informal transporter qualification) are preventable with system discipline.
Modern technological tools — fleet tracking with validated temperature, digital POD with lot capture, planning system integrated with quality workflow — reduce audit risk at the root, because they automatically feed the compliance dossier with structured, traceable, exportable data. On a structured distributor, audit preparation goes from 100-150 person-hours of “construction” to 30-50 person-hours of “refinement” on dossiers already ready as operational output.
If you want to understand how your current fleet tracking, digital POD and planning system can automatically feed the GDP dossier, and where your most likely gaps are in case of imminent AIFA audit, talk to our team. A targeted analysis of your operational processes and current systems identifies the first 3-5 critical gaps to close before the audit.