Complete Custody and Control: Why Tissue Banks Are Bringing Sterilization In-House

The moment a tissue bank hands an allograft shipment to a third-party carrier bound for a gamma irradiation facility — it surrenders something it cannot buy back: continuous custody. The product leaves a controlled environment built to exacting regulatory and accreditation standards, enters a shared-use industrial facility managed under a different quality system, and returns days later with documentation that affirms dose delivery but cannot reconstruct everything that happened in between. That gap is the custody problem, and it is not theoretical. It is a structural feature of the way most tissue establishments currently approach terminal sterilization.

The industry has tolerated this structure because gamma irradiation is effective, well-characterized, and deeply embedded in allograft processing workflows. But the framework that permitted broad outsourcing — regulatory, accreditation, and operational — is becoming more demanding, not less. Tissue banks that have built their quality systems around third-party sterilization are now reexamining whether that model serves them.

The Regulatory Obligation Does Not Transfer

When a tissue bank contracts with a third-party gamma irradiation facility, it does not transfer regulatory accountability. FDA's Current Good Tissue Practice regulations (21 CFR Part 1271) place responsibility for process controls squarely with the tissue establishment. A tissue bank that outsources terminal sterilization remains the responsible party for validating that the sterilization process achieves the intended SAL, for confirming that its suppliers operate under acceptable quality systems, and for ensuring that outsourced activities are controlled through documented supplier qualification and ongoing monitoring.

That obligation is not satisfied by receiving a certificate of irradiation. CGTP requires tissue establishments to maintain procedures for all steps in processing, including steps performed by third parties. The documentation of those procedures, the evidence of supplier qualification, and the records of each sterilization event must reside within the tissue bank's quality system — or be immediately retrievable through formal contractual access. In practice, the documentation architecture required to properly manage a third-party sterilization relationship is often underestimated until an FDA inspection surfaces the gaps.

AATB Standards: Tracking, Quarantine, and Validation

The American Association of Tissue Banks 15th edition Standards, effective January 2025, codify expectations that have been tightening for several revision cycles. Section E1.100 establishes tracking requirements for all allografts from recovery through processing, storage, and distribution. E5.820 extends traceability requirements through distribution. Quarantine controls under E3.100 require that allografts not released for distribution remain segregated and controlled — a requirement that becomes materially more complex when product is in transit to or from an external facility.

The sterilization validation requirements in the E2.800 series establish that processes must be validated to demonstrate achievement of a specified SAL, that validation documentation must be maintained, and that changes to processing parameters trigger revalidation. These requirements apply whether sterilization is performed in-house or through a supplier. When sterilization is outsourced, the tissue bank is responsible for ensuring the supplier's validation documentation meets AATB standards — and that the tissue bank itself can produce that documentation on demand.

The 15th edition's tracking and traceability requirements create an implicit challenge for outsourced sterilization: every hour a product is outside the tissue bank's direct observation is an hour that must be accounted for through records the tissue bank does not itself generate. Chain-of-custody documentation, temperature monitoring during transport, time-in-transit records, and condition-on-receipt verification all become components of the traceability file for each lot — documentation that must bridge two organizational quality systems and survive audit scrutiny.

What Outsourcing Actually Introduces

The operational risks of third-party sterilization are concrete and accumulating — not hypothetical edge cases but structural features of the model. Scheduling dependency is the most immediate: irradiation capacity at commercial facilities is allocated across a broad customer base, and tissue banks compete for cycle time with medical device manufacturers, pharmaceutical companies, and other tissue establishments. When irradiation scheduling is disrupted — by capacity constraints, facility maintenance, or logistical delays — processing timelines extend and inventory management becomes reactive.

Transport logistics introduce a different category of risk. Allografts in transit are subject to handling conditions the tissue bank cannot directly monitor. Temperature excursions, physical impact, and custody transfers between carriers all create potential for damage or condition changes that may not be detectable on receipt. Documentation of transport conditions relies on the accuracy and completeness of records generated by parties outside the tissue bank's quality system.

Irradiation dose variability — within regulatory limits but across the acceptable range — can produce differential biological effects on allograft tissue. The concern is not dose inadequacy but dose heterogeneity across a product load and the cumulative effect of repeat exposure on tissue properties. Research published in peer-reviewed literature has documented measurable changes in collagen cross-linking, tensile strength, and cellular architecture following gamma irradiation at doses required for terminal sterilization. These effects are dose-dependent and cumulative, and their magnitude varies with dose delivery precision. This topic is examined in detail in our earlier analysis of irradiation and allograft biological damage.

Shared-facility cross-contamination potential is a lower-probability but non-trivial risk. Commercial gamma irradiation facilities process a heterogeneous product mix. Facility SOPs govern product segregation, but the tissue bank's visibility into actual practice is limited to audit access and supplier qualification documentation — not direct observation.

The In-House Model: Custody as Architecture

In-house VHP sterilization changes the structural logic of the problem — not by eliminating the regulatory and accreditation obligations, but by internalizing them. Sterilization occurs within the tissue bank's own facility, under its own quality system, with its own personnel, using its own validated equipment. The product never leaves. Custody is unbroken from donor recovery through processing, sterilization, final packaging, and release.

That architecture eliminates the documentation burden of managing a third-party sterilization supplier. There is no supplier qualification file to maintain for an external irradiator, no chain-of-custody gap to bridge with transport records, and no scheduling dependency on an external facility. The sterilization cycle is run when the tissue bank's own processing workflow calls for it, documented within the tissue bank's own QMS, and retrievable as a component of the product's complete manufacturing record.

The regulatory posture changes accordingly. CGTP's process control requirements are satisfied by the tissue bank's own validated procedures. AATB's traceability requirements are met by records that never leave the quality system. Sterilization validation documentation is held internally and updated through the tissue bank's change control process.

SteriFlex: Infrastructure Without the Facility Requirements

A recurring objection to in-house VHP sterilization has been infrastructure — the assumption that a terminal sterilization method capable of meeting SAL 10⁻⁶ requirements demands capital infrastructure that a tissue bank cannot reasonably accommodate. That assumption does not survive contact with current VHP system design.

The SteriFlex platform was developed specifically for deployment within existing regulated processing environments. It is modular, configurable to the spatial and workflow constraints of tissue processing facilities, and commissioned using the same IQ/OQ/PQ structure that tissue banks already apply to their processing equipment. There is no radiation shielding requirement — VHP is a chemical sterilization method, not a radiation method. There is no NRC licensing requirement, no regulatory obligation specific to radiation source possession or use, and no infrastructure footprint associated with a radiation-producing device. FDA's January 2024 reclassification of VHP to Established Category A resolved the primary regulatory uncertainty that had limited VHP adoption — placing it alongside steam, EtO, and irradiation as a recognized terminal sterilization method with an established scientific evidence base.

The physical deployment of a VHP system within a tissue processing facility is, in practice, a commissioning project rather than a construction project. The regulatory implications of adding a validated sterilization process to an existing facility are managed through the tissue bank's existing change control process — not through a facility modification that requires independent regulatory notification.

Quality System Integration

**VHP sterilization documentation is structurally compatible with the quality frameworks tissue banks already operate.** ISO 22441:2022 — the international standard governing VHP process development and validation — is built on the same IQ/OQ/PQ architecture that governs equipment qualification in AATB-accredited facilities. Biological indicator selection, challenge organism D-value characterization, cycle parameter development, and performance qualification using biological indicators all follow a validation logic that is immediately recognizable to tissue bank quality personnel familiar with AATB Standards and CGTP.

The batch record structure for a VHP sterilization cycle integrates into existing product lot documentation without requiring a separate quality subsystem. Cycle parameters, biological indicator results, parametric release criteria, and operator attestation are documented on forms that follow the same format as other critical processing records. AATB auditors reviewing sterilization documentation encounter a structure consistent with the broader quality system — not an external document set with its own organizational logic.

The consequence of this compatibility is that the transition to in-house VHP does not require rebuilding a quality system — it requires extending one. The validation package for a new sterilization process is a capital project, not an operational disruption. Once validated and commissioned, VHP sterilization operates as an integrated processing step, governed by the same quality oversight that governs every other step in the workflow.

Positioning in an Environment of Increasing Procurement Scrutiny

**Hospital procurement has become more sophisticated about allograft processing methodology** in the period since centralized value analysis committee structures became standard at most health systems. Processing methodology — how tissue is recovered, processed, tested, and sterilized — is increasingly a visible element of procurement evaluation, not a background technical specification. Tissue banks that can articulate a clear, unambiguous processing chain have a meaningful advantage in environments where procurement asks process-related questions as part of supplier qualification.

The phrase "processed and sterilized under continuous custody and control" describes something a tissue bank with in-house VHP sterilization can state accurately and document completely. It is a factual characterization of a processing architecture — not a marketing claim. For procurement committees evaluating allografts from multiple suppliers with similar clinical profiles, that characterization is relevant, verifiable, and increasingly valued. Tissue banks that retain third-party sterilization cannot make a parallel statement — they can document chain-of-custody, and AATB requires them to, but they cannot claim custody was unbroken. That structural distinction is real and auditable.

FAQ

**Does FDA CGTP hold tissue banks responsible for sterilization even when outsourced?**

Yes. 21 CFR Part 1271 places accountability for process controls — including terminal sterilization — with the tissue establishment, regardless of whether sterilization is performed internally or by a third-party contractor. A tissue bank that outsources sterilization remains responsible for qualifying the supplier, confirming process validation, establishing contractual access to documentation, and maintaining evidence of ongoing supplier control within its own quality system. Receiving a certificate of irradiation satisfies none of those obligations independently.

**What documentation is required to demonstrate custody continuity under AATB Standards?**

The AATB 15th edition Standards require tracking records from recovery through distribution. For allografts that transit a third-party sterilization facility, this means chain-of-custody documentation covering the entire out-of-facility period — carrier records, temperature monitoring, time-in-transit data, and condition-on-receipt verification. Each record must reside within or be immediately accessible through the tissue bank's quality system. AATB auditors assess the completeness and traceability of those records as part of accreditation review.

**What infrastructure does in-house VHP require compared to gamma irradiation?**

Gamma irradiation requires no equipment at the tissue bank — it is a service provided externally, which is precisely the source of the custody problem. In-house VHP requires installation of a validated system within the tissue bank's facility: equipment qualification (IQ/OQ/PQ), process validation using biological indicators, and integration into the facility's utility and environmental monitoring infrastructure. It does not require radiation shielding, NRC licensing, or construction modifications specific to radiation source management. The regulatory pathway is a qualified equipment and validated process — familiar territory for tissue banks that already operate other validated processing equipment.

**Can VHP sterilization be validated to the same SAL as gamma irradiation?**

Yes. VHP terminal sterilization is validated to SAL 10⁻⁶ — the same target applied to gamma irradiation and all other terminal sterilization methods recognized by FDA. The validation methodology is specified in ISO 22441:2022 and uses Geobacillus stearothermophilus biological indicators with characterized D-values specific to VHP exposure conditions. The SAL requirement is method-agnostic; what differs between methods is the physical and chemical mechanism of kill, not the regulatory performance target.

**How does in-house VHP affect a tissue bank's AATB accreditation process?**

Adding an in-house sterilization capability is a change to processing operations, and AATB requires that such changes be managed through the tissue bank's change control process. Depending on scope, AATB may conduct a focused review or address the new capability at the next scheduled accreditation audit. Sterilization validation documentation — process development records, IQ/OQ/PQ reports, biological indicator data, routine monitoring procedures — must be available for auditor review. Because VHP validation follows the same IQ/OQ/PQ structure as other processing equipment, the documentation format is immediately recognizable. The accreditation question is not whether VHP is acceptable — it is whether the tissue bank's validation and quality documentation satisfy the E2.800 series requirements.